Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft
File:                     AEBADFA06D76BE480430EDC8D27F4BE636880149.mft (raw, json)
Hash identifier:          vMyAkhAdq5FuAbDy1XLfJKmjfD8Arskj914UhfOyqXM=
Subject key identifier:   FE:3A:C2:58:44:B4:62:02:18:51:F5:25:BA:1E:71:1B:C5:25:8A:07
Authority key identifier: AE:BA:DF:A0:6D:76:BE:48:04:30:ED:C8:D2:7F:4B:E6:36:88:01:49
Certificate issuer:       /CN=AEBADFA06D76BE480430EDC8D27F4BE636880149
Certificate serial:       1FCFBC69E2B947FC2FEE4684A492C41D34ADEAFC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft
Manifest number:          B9
Signing time:             Wed 16 Sep 2026 23:17:46 +0000
Manifest this update:     Wed 16 Sep 2026 23:12:46 +0000
Manifest next update:     Fri 18 Sep 2026 02:24:46 +0000
Files and hashes:         1: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: aC5Jcybn/WcmcwFTZT+cimtZCI1Cj8w+b53oH5W6Fw4=)
                          2: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: nG5fCmE925uHgYNeygfmhhegb7zX/kDvlyw/SCpRN+I=)
                          3: AEBADFA06D76BE480430EDC8D27F4BE636880149.crl (hash: BFJ9rqDoYoEL4qs4ynpqqL0Qd6uKbUnBZNhnBhn713I=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.crl
                          rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cf:bc:69:e2:b9:47:fc:2f:ee:46:84:a4:92:c4:1d:34:ad:ea:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEBADFA06D76BE480430EDC8D27F4BE636880149
        Validity
            Not Before: Sep 16 23:12:46 2026 GMT
            Not After : Sep 18 02:24:46 2026 GMT
        Subject: CN=FE3AC25844B462021851F525BA1E711BC5258A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:98:ab:61:f7:97:c2:9f:8b:e5:32:c0:21:a9:
                    d4:97:20:28:51:b9:07:a3:34:b6:27:d0:00:29:72:
                    71:5a:62:32:b4:f9:67:cf:9d:e0:13:41:1f:74:35:
                    15:f9:4f:bb:c1:1e:93:ae:6c:85:26:bf:ff:3d:a7:
                    2c:4c:a2:92:20:63:71:d0:80:74:5d:59:16:40:05:
                    a8:80:67:79:cd:d0:4d:4c:a3:51:05:73:ef:2f:92:
                    cc:01:66:32:cb:e6:ee:61:cc:4c:51:22:61:7c:35:
                    86:b0:36:85:8f:6c:aa:c7:55:9e:d7:30:11:1e:a3:
                    fb:03:a9:0f:17:d5:de:4a:0d:f9:44:76:b4:52:50:
                    d2:3d:7f:64:9f:08:87:ed:c3:3b:00:60:2e:80:f7:
                    10:ec:82:c7:19:48:b9:18:28:19:be:b6:9f:a3:33:
                    3c:d7:d1:06:c5:c7:33:bd:de:86:be:c3:ce:d9:d8:
                    64:92:c5:b7:fd:63:24:ac:ae:82:30:95:56:15:c1:
                    88:71:67:a6:7a:88:1d:43:59:cb:d5:f6:50:4c:93:
                    ae:27:33:60:bb:b1:ff:49:23:11:a4:23:f3:70:b6:
                    30:7a:26:68:2f:b7:36:8f:27:19:57:e7:9d:d4:6b:
                    4d:c3:de:da:0c:ed:5b:31:2a:b6:21:fa:ba:41:22:
                    65:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3A:C2:58:44:B4:62:02:18:51:F5:25:BA:1E:71:1B:C5:25:8A:07
            X509v3 Authority Key Identifier:
                keyid:AE:BA:DF:A0:6D:76:BE:48:04:30:ED:C8:D2:7F:4B:E6:36:88:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:8e:b2:2b:a6:49:9f:2a:30:17:25:16:ca:b7:7e:94:01:73:
         bd:2d:04:fd:d6:1f:6b:d3:e4:09:70:87:41:f1:f4:be:80:52:
         c9:ff:57:e1:01:16:fd:7b:f2:05:da:05:fc:68:b9:14:cb:6f:
         45:03:55:e9:d7:0b:f1:a2:b1:7d:d2:0e:46:e5:c4:43:8d:6d:
         c0:07:e8:ca:45:0b:56:b0:2b:95:a8:b0:89:5f:0c:d6:8a:85:
         13:12:f4:93:e0:27:f6:5f:e2:f7:78:d9:de:64:be:3e:54:d8:
         4f:45:63:63:f4:08:5c:60:89:ec:4c:84:d5:9e:2d:28:f2:1c:
         c7:3c:d2:3d:25:a2:89:42:95:f5:57:8d:ea:14:63:24:03:06:
         18:8a:80:17:fe:f2:86:76:fb:1c:a2:49:14:45:f6:fc:4a:79:
         4d:56:94:26:51:7a:3e:85:e6:7c:da:48:64:ee:07:c7:7c:91:
         95:bc:08:89:b1:ed:a1:aa:f4:25:f5:4b:b1:85:a7:26:03:54:
         59:2f:ad:6c:7a:a0:74:dd:55:9b:78:6d:23:aa:05:b7:cb:f5:
         96:59:92:25:48:83:a7:19:be:4c:46:2d:01:6c:ac:a2:59:b5:
         f5:31:2d:42:f8:5a:e8:b0:54:d7:59:a4:fa:a0:e6:87:d7:07:
         e8:50:11:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:20:14 2026 by rpki-client