Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
File:                     B68C761C821AA1629C9F6105D99B85E34433B478.mft (raw, json)
Hash identifier:          B5n1+0aLkTfcC8TJBXiyRL/I9pxhBjq5BLMnLJ2zEO4=
Subject key identifier:   64:9C:80:C9:D2:0A:7D:3C:19:C4:25:53:08:8A:D9:04:F2:8D:CB:8A
Authority key identifier: B6:8C:76:1C:82:1A:A1:62:9C:9F:61:05:D9:9B:85:E3:44:33:B4:78
Certificate issuer:       /CN=B68C761C821AA1629C9F6105D99B85E34433B478
Certificate serial:       722482F60A292B54FDAC443C4F08B85DEA90ED3A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
Manifest number:          B9
Signing time:             Wed 16 Sep 2026 22:57:20 +0000
Manifest this update:     Wed 16 Sep 2026 22:52:20 +0000
Manifest next update:     Fri 18 Sep 2026 01:10:20 +0000
Files and hashes:         1: B68C761C821AA1629C9F6105D99B85E34433B478.crl (hash: zRE9+uohinat+maytu+F4faE8ul939qCjr3c0kheGYw=)
                          2: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: eM4zTeT5x8zRTCedGRk54XligMqqPoDVVW+mAmQIEvQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.crl
                          rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 01:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:24:82:f6:0a:29:2b:54:fd:ac:44:3c:4f:08:b8:5d:ea:90:ed:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B68C761C821AA1629C9F6105D99B85E34433B478
        Validity
            Not Before: Sep 16 22:52:20 2026 GMT
            Not After : Sep 18 01:10:20 2026 GMT
        Subject: CN=649C80C9D20A7D3C19C42553088AD904F28DCB8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:69:95:ee:3b:e3:87:e7:a7:32:52:01:43:
                    4d:0d:95:a8:4c:5e:dc:fd:ac:92:c1:8a:68:f0:71:
                    ac:aa:ff:e0:bd:2a:44:89:98:3e:34:35:76:44:86:
                    4c:a0:62:cc:85:ef:77:81:63:d2:d1:09:cf:0b:6a:
                    1c:dc:fe:52:54:27:9c:ce:92:bb:54:c9:33:76:4a:
                    0a:f0:a7:31:99:49:2a:a4:b5:54:24:75:db:e1:bc:
                    e6:aa:f2:3d:34:94:1a:55:a3:3b:43:e1:da:b9:f9:
                    09:f3:ae:cf:b0:c2:c8:06:97:72:04:0e:2c:2b:bc:
                    c3:05:c0:5c:50:c2:e4:71:d4:3e:a7:64:2c:23:93:
                    76:3c:61:08:a2:13:d0:03:3e:bc:ec:f2:8d:40:d7:
                    a3:71:b0:4a:82:93:91:2e:28:09:6d:b6:37:c6:30:
                    27:8a:13:f6:83:b1:1d:14:01:92:75:c2:c1:c6:42:
                    c8:b5:91:51:23:5c:08:97:9d:f9:55:be:7b:b6:b9:
                    c3:79:d4:60:9c:32:9a:97:18:45:e0:28:12:ed:91:
                    25:e9:f6:7c:04:d0:d1:e1:cd:30:33:7e:ff:38:5e:
                    c1:e2:69:ce:19:d7:4a:9c:3a:b6:da:5f:77:b3:9b:
                    98:5e:77:78:a3:a9:3b:c4:c4:ef:e5:ae:ca:8d:84:
                    0b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9C:80:C9:D2:0A:7D:3C:19:C4:25:53:08:8A:D9:04:F2:8D:CB:8A
            X509v3 Authority Key Identifier:
                keyid:B6:8C:76:1C:82:1A:A1:62:9C:9F:61:05:D9:9B:85:E3:44:33:B4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e5:b5:a3:04:57:c3:4c:b8:1e:43:aa:be:b5:86:ef:16:ba:
         3c:c4:a1:84:d6:2b:5c:41:85:04:5c:64:62:b7:5e:4c:3b:f1:
         0d:99:9a:0b:82:f1:ed:b1:69:06:d1:21:43:92:fe:1b:61:80:
         db:26:17:b7:c7:88:cc:ec:66:c5:fb:20:fb:32:d3:d6:39:8c:
         ef:c9:12:5a:7a:58:8e:20:3e:fc:90:41:b7:29:df:fc:da:45:
         82:ba:2a:1e:5e:45:0d:d0:89:b3:0c:43:32:8e:8c:af:ac:8d:
         e9:a9:79:57:5e:9a:e8:bc:4c:3c:84:83:1e:b2:4d:82:65:09:
         27:0e:6b:e7:b3:c8:f3:8b:d0:de:02:a9:8b:cc:ee:24:27:82:
         e7:aa:8b:4c:31:2a:ba:64:cb:bd:0e:a5:da:f8:c3:bd:b3:60:
         c4:7b:10:ae:57:82:66:56:20:fc:22:6e:dc:d1:31:3f:9a:ac:
         34:a3:7a:f4:4f:60:6c:87:4b:6f:b8:e9:a4:19:b5:ee:e8:f3:
         e4:13:ab:cb:d6:46:4b:24:b4:b0:72:a2:f3:24:23:10:55:c4:
         8b:53:64:b1:a2:0b:a0:a8:71:00:ab:35:a2:03:a0:36:81:d6:
         fb:05:65:2e:19:15:48:82:49:1d:d2:5a:3b:f4:4c:a6:8f:75:
         33:ec:c0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:17:47 2026 by rpki-client