Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
File:                     1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft (raw, json)
Hash identifier:          7F7DDW273wjxO+nBua5OhjKNIx2MiW1J9i9weVyApfI=
Subject key identifier:   5F:4B:82:A0:3D:7C:E2:87:AB:6E:35:A4:37:73:3A:F9:C3:C9:A1:FC
Authority key identifier: 12:24:F6:7F:FE:38:BC:EA:38:7E:2D:F3:E6:62:D6:F6:87:7F:63:46
Certificate issuer:       /CN=1224F67FFE38BCEA387E2DF3E662D6F6877F6346
Certificate serial:       75937B7167673EDCE0947C216105996A381F0A18
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
Manifest number:          B9
Signing time:             Thu 17 Sep 2026 02:16:19 +0000
Manifest this update:     Thu 17 Sep 2026 02:11:19 +0000
Manifest next update:     Fri 18 Sep 2026 05:33:19 +0000
Files and hashes:         1: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: XIXVE3WxFWnkjGptM8+qV7znYXNR6ug7ahxtLFcMw2U=)
                          2: 1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl (hash: kmeWxTSLLUDTTBmNRw0RshzAEBjt3xQ1J28yQqZEEzE=)
                          3: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: V6cyc1CcqyB7Bwt4/zuikRuoVLZO2D20sD1iOp+dhmw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl
                          rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 05:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:93:7b:71:67:67:3e:dc:e0:94:7c:21:61:05:99:6a:38:1f:0a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1224F67FFE38BCEA387E2DF3E662D6F6877F6346
        Validity
            Not Before: Sep 17 02:11:19 2026 GMT
            Not After : Sep 18 05:33:19 2026 GMT
        Subject: CN=5F4B82A03D7CE287AB6E35A437733AF9C3C9A1FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5b:3d:40:92:82:d4:4c:f6:52:53:4a:e5:2c:
                    b2:81:bd:de:29:e4:c0:ea:8b:ac:ae:37:da:fe:f6:
                    72:87:b1:b3:b3:01:83:a4:ef:95:49:f2:c4:0f:ea:
                    f9:58:58:b1:65:29:a3:0d:2a:7b:78:ee:9c:79:3a:
                    3f:4a:37:c9:c0:0d:99:cf:e4:38:75:f0:e2:ae:87:
                    cf:0e:3c:34:68:0e:22:c4:bb:eb:b2:7d:f8:69:33:
                    19:65:7c:a3:3e:17:8c:e5:28:a4:c0:c8:47:a6:74:
                    5e:bc:b0:40:b9:9e:a9:89:0b:75:f9:c6:c6:02:d6:
                    46:88:38:55:8f:2f:32:ed:85:c0:81:dd:d3:f4:6e:
                    cc:5d:1a:ca:16:34:2c:3a:f6:4f:1e:53:3a:14:f3:
                    44:9c:3d:90:f4:1b:6c:2a:a7:83:84:93:08:d0:8c:
                    cb:e1:70:5a:14:4a:e6:0b:32:b7:b3:a7:49:b2:a6:
                    b1:79:ef:b8:8f:ba:d1:be:fd:e0:b3:10:54:3f:84:
                    95:39:cf:ad:aa:00:b7:95:71:ec:e6:3a:53:85:58:
                    49:2d:d9:52:05:20:52:35:3b:92:e3:fb:af:87:62:
                    ed:0a:89:60:09:b7:be:db:ee:03:d3:fb:96:37:6a:
                    63:af:2c:76:57:d8:68:48:74:e5:f5:6d:2d:3b:75:
                    b9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4B:82:A0:3D:7C:E2:87:AB:6E:35:A4:37:73:3A:F9:C3:C9:A1:FC
            X509v3 Authority Key Identifier:
                keyid:12:24:F6:7F:FE:38:BC:EA:38:7E:2D:F3:E6:62:D6:F6:87:7F:63:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:24:f6:64:fc:71:1e:b9:0a:ba:af:75:89:6b:04:01:e8:2d:
         ac:b8:1c:62:1c:33:62:61:cf:7b:d5:06:a4:67:18:5a:c7:23:
         67:71:5f:05:e7:b6:51:b2:2d:05:cc:07:96:e9:b9:dd:5d:9a:
         77:57:45:b2:29:a3:ed:11:2d:b1:28:d6:f2:00:6f:6e:6b:91:
         b6:15:7a:2c:8d:5b:f8:d3:1a:3d:aa:c0:83:aa:0a:fd:b6:84:
         09:3c:23:b9:73:b1:80:13:c6:af:a7:35:1e:93:25:56:b7:58:
         a5:fa:bf:1c:63:a0:31:e5:59:53:69:c8:f9:3e:5b:22:d6:f4:
         08:41:f3:dd:a5:08:b9:7c:cd:ff:0c:4d:ba:de:63:c7:c0:41:
         56:f6:23:0d:5a:23:24:78:5e:73:5b:f1:99:b8:8a:33:51:c4:
         21:50:6a:b8:56:f1:a6:4e:bb:31:ef:2e:b4:24:e7:e8:c9:e7:
         16:98:e5:4f:c3:01:6d:94:e4:11:ea:4e:13:3a:ff:b6:cd:79:
         23:3d:6e:5e:c9:38:4e:c5:84:f6:d3:16:e2:06:7c:3a:56:0a:
         c0:d3:3a:37:6c:f8:f4:0b:de:fe:2d:2b:78:8c:4e:da:45:05:
         11:90:0c:bf:e1:3a:c2:26:63:ce:9f:c1:88:6b:a9:1f:db:63:
         b4:a1:4d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:58:29 2026 by rpki-client