Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft
File:                     9796934CE983E32FE16AC8EC0968FB6FF0339712.mft (raw, json)
Hash identifier:          Nrf7u284uy4hAR8FsDSTYMMMN2E9qBLicGGd4DCiYQA=
Subject key identifier:   B9:D7:9B:8E:1A:EF:2C:BF:E4:17:2C:F2:13:AE:A0:63:B0:5C:58:28
Authority key identifier: 97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12
Certificate issuer:       /CN=9796934CE983E32FE16AC8EC0968FB6FF0339712
Certificate serial:       670843613C972040C4722B9529C85D2804224241
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft
Manifest number:          B9
Signing time:             Thu 17 Sep 2026 10:31:36 +0000
Manifest this update:     Thu 17 Sep 2026 10:26:36 +0000
Manifest next update:     Fri 18 Sep 2026 13:59:36 +0000
Files and hashes:         1: 3130332e39302e32362e302f32342d3234203d3e203633343937.roa (hash: yEBegNseO4WhgSgnMf0UD1P9unzjG8GGfBUDaVupNxw=)
                          2: 3130332e39302e32342e302f32342d3234203d3e20313332363733.roa (hash: rNgJ1hrCOEzVkRLQiZgbFHzGeuIdRSxk2VHfwHrqS1k=)
                          3: 3130332e3235302e3139392e302f32342d3234203d3e203633343937.roa (hash: 90gI7sKaQLOikXOS30SwmXL0rMP42rJQ2sx3CKH87jQ=)
                          4: 3130332e3233322e3234302e302f32342d3234203d3e203633343937.roa (hash: TDOsoHO/HMJ3+M/IDdZkOYM5yQ6eYeDxjPpemNYDfKc=)
                          5: 3130332e39302e32372e302f32342d3234203d3e20313332363733.roa (hash: gEjgmPi52YAqYyRKLzVAHY/tcddAmwneB2Joo9b5lCU=)
                          6: 3130332e39302e32352e302f32342d3234203d3e203633343937.roa (hash: y59gW5BEgEi3F+rl6LRjNXAc9apuX+ON4CV36/Ae45k=)
                          7: 3130332e3233322e3234322e302f32342d3234203d3e203633343937.roa (hash: CyXCnh6Eu/KCDGsGPBvecfzZa94iTRYuLOf5EOeQnK4=)
                          8: 3130332e3233322e3234322e302f32332d3233203d3e203633343937.roa (hash: UWBZ8HDVUh8vSiS9fwmZD70vxv5kj8iLpVqFbVQF6Ag=)
                          9: 9796934CE983E32FE16AC8EC0968FB6FF0339712.crl (hash: SI1mFdw9w5JvtXhQuNt9+i5V06tafuPwERzVH8e5jhM=)
                          10: 3130332e3233322e3234332e302f32342d3234203d3e203633343937.roa (hash: dKhNn6GJjJO6VU2o0VhUMT3uGr0zEWCIpRqbnuOjsu4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl
                          rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:08:43:61:3c:97:20:40:c4:72:2b:95:29:c8:5d:28:04:22:42:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9796934CE983E32FE16AC8EC0968FB6FF0339712
        Validity
            Not Before: Sep 17 10:26:36 2026 GMT
            Not After : Sep 18 13:59:36 2026 GMT
        Subject: CN=B9D79B8E1AEF2CBFE4172CF213AEA063B05C5828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ae:3c:5a:68:81:ca:46:02:fd:ae:31:ad:93:
                    51:f6:68:10:61:59:82:4d:15:bb:03:4c:6e:9f:69:
                    99:5f:6a:a3:ba:8e:ae:b9:62:4a:1e:e2:ba:26:da:
                    a2:f0:68:ba:e3:6e:b3:9e:95:41:68:65:44:71:22:
                    02:5d:fd:29:c1:f5:6b:3b:45:d2:bc:02:95:b9:f3:
                    21:6e:72:74:9d:56:2a:87:01:c0:ad:64:d2:ba:eb:
                    0e:7f:cf:45:27:bc:20:bb:b1:ca:5b:b3:9a:36:bc:
                    70:fd:14:a1:3e:57:a6:a6:6f:f3:f9:ca:ca:7b:c8:
                    52:ae:70:1e:bf:87:b4:92:40:90:b8:08:e5:84:35:
                    6d:88:da:72:32:b4:75:40:c2:69:1e:4a:b2:13:71:
                    13:96:82:2d:3f:61:0b:b8:4f:97:b9:ff:29:e7:ff:
                    5c:2d:d8:5b:1c:77:60:b6:89:38:3d:c6:48:a2:9e:
                    2a:00:f7:22:dc:70:f7:e4:42:3e:20:5d:fb:bf:1d:
                    a8:80:a7:ff:5c:9a:ca:12:dd:74:87:a9:96:bb:34:
                    ff:5b:b1:58:84:a5:32:7f:8f:0f:b9:a0:fc:06:15:
                    d3:8d:83:cd:ac:98:93:eb:00:67:9c:1f:9f:b5:ef:
                    21:ef:bc:cc:a9:2e:2f:af:90:c4:93:4b:aa:d6:e6:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D7:9B:8E:1A:EF:2C:BF:E4:17:2C:F2:13:AE:A0:63:B0:5C:58:28
            X509v3 Authority Key Identifier:
                keyid:97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f6:0f:81:d8:05:20:2e:ef:e0:c5:36:14:1b:55:d0:70:b6:
         da:0f:70:1f:4e:1f:d3:f3:c5:80:a8:ac:f5:1e:e5:9b:a6:a8:
         13:a2:61:25:30:bb:03:4f:8b:d8:94:26:ad:65:5d:74:1b:b0:
         61:0b:e1:80:79:c1:0b:a5:74:7a:b4:8e:7c:dc:2c:fb:d9:04:
         2d:15:a8:4a:33:60:9f:5c:d6:59:e0:5c:53:20:b9:65:ff:95:
         d6:cd:d8:52:e0:f8:1d:6b:68:12:e5:94:08:81:45:9d:8a:1d:
         1c:f1:90:1a:59:8d:f6:15:e1:82:14:6f:28:a7:7b:fe:89:5b:
         a0:6d:e5:f2:1d:71:e5:67:71:99:0d:bb:fe:0f:3e:4e:c9:fe:
         db:c7:5e:4f:6b:dd:16:1d:d8:14:46:4e:0e:85:be:c6:e0:f5:
         c0:3e:fc:bd:d9:84:6e:90:7a:88:65:26:1e:a8:ed:1f:d3:24:
         38:f5:ca:62:51:6a:06:16:38:38:07:bc:d4:5a:e4:8e:d7:ec:
         6d:ec:fb:a3:57:c5:90:81:36:71:cc:6e:5e:4d:39:05:7d:ca:
         3a:ba:bd:ac:ec:d4:de:20:41:3e:1e:b6:35:9d:28:05:14:8c:
         0d:0f:24:85:79:27:9e:0e:75:37:e9:a2:5d:af:2d:7d:e4:79:
         90:11:25:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 13:51:29 2026 by rpki-client