Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
File:                     BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft (raw, json)
Hash identifier:          JuTyNf2RiB8xXWvAQXYU0ADB0B0Yy1Yw8xFc7nEhC1c=
Subject key identifier:   72:82:AB:60:E9:1E:DB:38:00:67:4E:B5:9E:1A:56:31:49:2C:C0:99
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Certificate issuer:       /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial:       384F7E0A2E3CC7FC3918308DF878D7749DDF38CB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
Manifest number:          B9
Signing time:             Thu 17 Sep 2026 10:21:22 +0000
Manifest this update:     Thu 17 Sep 2026 10:16:22 +0000
Manifest next update:     Fri 18 Sep 2026 10:32:22 +0000
Files and hashes:         1: 34352e3132362e35362e302f32342d3234203d3e20313332363437.roa (hash: 51eavTWPFrNxa8bjSHcdJ8vtzC1mzLQPZlm9M3COLDU=)
                          2: 3130332e31392e3137362e302f32322d3234203d3e20313332363437.roa (hash: u6hQoPKoHiVtYDbwuT9Uz8f5A+6L4NtjJ2yTHSMpD0s=)
                          3: 323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa (hash: c/+B9i/CScu7h8jGuv1JRMe6ArsSJVjID5tIfBJTEZE=)
                          4: 323430323a656538303a3137363a3a2f34382d3438203d3e20313332363437.roa (hash: /o29HECkwJutgVmG0I5lSxBVN20fSE9q8Dt9mr1Ct3U=)
                          5: 3130332e31392e3137372e302f32342d3234203d3e20313332363437.roa (hash: Tm/UNBU0RZeScJfXS8SuxK9KL1FxgoN/n8Ti+/I4iaM=)
                          6: 3130332e31392e3137382e302f32332d3234203d3e20313332363437.roa (hash: H4QyDpAYJgb2cSZHnPV/4PL7jlc0wOLp4dMIreHw0fQ=)
                          7: 3130332e31392e3137362e302f32332d3234203d3e20313332363437.roa (hash: SrggenrhOddxkHmFx2q+pbw4/0dGiORptPNzRQuuHtg=)
                          8: 3130332e31392e3137382e302f32342d3234203d3e20313332363437.roa (hash: AWDTDU1uK2yBZAsT7txzvxIXXk3Q8Vz2Xvi0KaFLsOk=)
                          9: 34352e3132362e35362e302f32332d3234203d3e20313332363437.roa (hash: BC4anIQ+a9WUEuTcYN68YGrrV6yunSX3tOj+gke3HOM=)
                          10: BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl (hash: RMm4E/a1/wxiXX2H9IHZcYYIMmpg3zBK5+RhMe9Kzks=)
                          11: 323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa (hash: 3tV7ePWEh+EaJKm0cDZuNy9PmGNGDZkDyBgahcmdLds=)
                          12: 323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa (hash: W4Y/Jl2Uo2TA6PRaW+Lr7qZLcsDrqBIfU1uczmpPuG4=)
                          13: 34352e3132362e35372e302f32342d3234203d3e20313332363437.roa (hash: fBsZSMatjucO+T7+pnQaQszpCsK34WTaNL1x8+auaVA=)
                          14: 323430323a656538303a643a3a2f34382d3438203d3e20313332363437.roa (hash: Sm4mr8PZqNPV9oAJvZYba4Nbo01h5qyGSwF7hDwYhaE=)
                          15: 323430323a656538303a623a3a2f34382d3438203d3e20313332363437.roa (hash: atskKnHk5T0oqegQKA+HINuV5pfMQiIduF8R7Q4ZG+c=)
                          16: 323430323a656538303a3a2f33322d3438203d3e20313332363437.roa (hash: PfU7mv6IN/K07oNWG+0wCm4fLi1KFnoKFqJbJk9QcX4=)
                          17: 323430323a656538303a3a2f34382d3438203d3e20313332363437.roa (hash: d2p1pz6iSVKmhRvc7KcXU5ZyLMfCL4gLganI40S2YnI=)
                          18: 323430323a656538303a35383a3a2f34382d3438203d3e20313332363437.roa (hash: e+Gw3YTY2+X+FfuH6e/RIS9HElWcKHLwAE2PQqgXfvw=)
                          19: 3130332e31392e3137362e302f32342d3234203d3e20313332363437.roa (hash: Q3RsZBk5q9tyrBDMlbDRl2T3DfnBOVkpF/7xiffBucI=)
                          20: 34352e3132362e35392e302f32342d3234203d3e20313332363437.roa (hash: qArl8RBpNQGv7NW/pHMi5u7s8FPFuQtE+K0tYbKrjHU=)
                          21: 3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa (hash: GF5sw5TIyMg/HEZpyvFvO1rBAEJgs3CpQYQY8RN9uRY=)
                          22: 34352e3132362e35382e302f32342d3234203d3e20313332363437.roa (hash: 22qOI7kA6d3/l7AQiyRyGMcKna9TfZu2inXLqY/VILw=)
                          23: 34352e3132362e35382e302f32332d3234203d3e20313332363437.roa (hash: elFR1hwQeXN8BTtaNU77MnFeZSQYNz4QlrPnRy3FSWk=)
                          24: 34352e3132362e35362e302f32322d3234203d3e20313332363437.roa (hash: 8tz20JsrCmWJ12URHbvfs5cYxrQj1byexdS6hWPseS4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
                          rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4f:7e:0a:2e:3c:c7:fc:39:18:30:8d:f8:78:d7:74:9d:df:38:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
        Validity
            Not Before: Sep 17 10:16:22 2026 GMT
            Not After : Sep 18 10:32:22 2026 GMT
        Subject: CN=7282AB60E91EDB3800674EB59E1A5631492CC099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:1f:3c:8a:0a:3f:c9:ff:65:88:1e:29:af:
                    bf:26:0f:79:34:8a:fa:89:20:4b:28:dd:17:17:d3:
                    ad:c9:e4:e6:f0:6e:8d:de:ca:bf:61:3e:78:f7:80:
                    96:5a:d1:e3:51:5d:94:25:16:b3:5c:24:ac:d3:cd:
                    8a:36:74:0a:cf:80:88:16:5e:90:ed:2e:44:b2:e5:
                    6c:69:32:69:5d:7f:14:e2:a2:bb:04:78:1b:d2:1b:
                    31:9c:0a:af:45:5c:cc:9f:a9:d6:f5:0f:58:fc:cf:
                    30:42:18:a9:79:5c:57:98:c7:ca:02:18:8e:a4:82:
                    7d:69:3d:a6:cd:10:9f:cf:65:c8:1b:f8:f0:d9:56:
                    43:61:48:90:48:dd:a1:a8:1e:de:76:25:4e:25:0e:
                    ad:53:41:dd:35:db:5c:63:33:83:f9:3e:9c:e4:6f:
                    5f:9a:fb:8c:6c:e3:dd:58:14:f9:16:c6:d0:4a:71:
                    e3:0f:07:3f:3a:5f:3e:fd:05:c9:c3:b0:fc:54:6e:
                    71:b8:14:35:78:2a:3b:9d:02:c3:30:34:0f:5b:ff:
                    02:cc:b6:f1:29:d9:e9:fa:6f:ec:7f:09:a1:3f:93:
                    35:da:58:1f:08:63:b1:10:25:3d:d6:31:5f:d8:28:
                    a8:51:4e:72:91:19:ad:39:b3:3d:d0:2f:c5:0a:de:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:82:AB:60:E9:1E:DB:38:00:67:4E:B5:9E:1A:56:31:49:2C:C0:99
            X509v3 Authority Key Identifier:
                keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8f:9e:b4:65:17:fe:bf:17:af:4d:66:ce:b1:e1:4d:25:cd:
         7b:b4:e6:c9:f2:54:70:3f:a3:ee:fb:d1:a0:1e:78:4a:13:d7:
         34:44:40:72:28:ac:c0:8e:f5:52:f0:62:e2:55:ce:4c:c2:a7:
         86:b2:5e:f9:f7:cd:ea:a3:e5:26:53:a7:41:7c:57:d0:58:70:
         6d:49:0e:e0:92:80:c5:5e:4c:81:6d:32:db:69:e4:c5:e0:3e:
         14:7e:c1:58:89:8a:0f:1d:f9:08:6b:c6:9b:1d:49:eb:62:ab:
         5b:3c:3a:7d:f7:15:3f:23:45:cf:00:b5:3b:39:aa:18:44:bd:
         6e:67:60:9f:0b:b8:44:f3:e8:7b:60:28:ba:67:57:69:14:ff:
         43:bc:21:e9:d6:d7:18:ba:2e:bb:33:88:8e:bf:58:a3:07:8e:
         f6:7a:f9:36:03:5f:93:e9:a9:30:90:ad:27:0c:98:3e:b8:5e:
         5d:2c:ac:cd:29:e1:8c:8e:d2:7f:9a:88:4c:ca:b9:fc:d0:31:
         1d:ee:6f:6e:77:53:b7:b5:32:c2:fd:4d:1c:59:33:e7:e3:72:
         84:84:39:16:b2:e9:7b:f7:8c:69:96:f4:de:e8:3a:a3:b3:bd:
         3c:0e:ea:23:9e:7c:c0:47:47:8b:6d:54:e9:01:95:15:7c:a6:
         4d:d4:d8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:39:29 2026 by rpki-client