Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft
File:                     98E2D88430E0F6BCECDC35B8596FF471265D238B.mft (raw, json)
Hash identifier:          jiBmzBOkFMfFYeC2VawK0dSMhuIv7WNzcg9C28vgS/Q=
Subject key identifier:   76:2D:F3:7E:9C:58:38:32:75:D6:83:08:69:75:07:FA:1A:36:E2:0A
Authority key identifier: 98:E2:D8:84:30:E0:F6:BC:EC:DC:35:B8:59:6F:F4:71:26:5D:23:8B
Certificate issuer:       /CN=98E2D88430E0F6BCECDC35B8596FF471265D238B
Certificate serial:       35934E41219A30563BC65179D62F9915FDEA6A1E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft
Manifest number:          B9
Signing time:             Thu 17 Sep 2026 10:36:45 +0000
Manifest this update:     Thu 17 Sep 2026 10:31:45 +0000
Manifest next update:     Fri 18 Sep 2026 13:15:45 +0000
Files and hashes:         1: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: H29DiGXAuolahNiG0w85WM8CZEw5FJ4zYtAOWOwpwGM=)
                          2: 98E2D88430E0F6BCECDC35B8596FF471265D238B.crl (hash: AdgRIdIDmbifztOCE9uJ8lsc12ukYQz3gcPkd/KU0UI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.crl
                          rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:93:4e:41:21:9a:30:56:3b:c6:51:79:d6:2f:99:15:fd:ea:6a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98E2D88430E0F6BCECDC35B8596FF471265D238B
        Validity
            Not Before: Sep 17 10:31:45 2026 GMT
            Not After : Sep 18 13:15:45 2026 GMT
        Subject: CN=762DF37E9C58383275D68308697507FA1A36E20A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:38:be:80:bd:a5:c6:81:cd:d5:13:1a:c4:d7:
                    2e:9e:c1:39:92:52:99:9e:16:8f:2a:49:a3:24:b4:
                    ce:c3:b3:11:61:d5:a5:8d:80:d5:7e:45:e5:85:09:
                    86:7b:fd:10:31:88:20:27:67:34:8f:24:1d:37:cf:
                    7c:e2:66:81:15:39:5a:ec:b0:58:b0:06:5c:ce:39:
                    c4:50:95:a3:04:e4:00:20:c8:27:5f:ae:5f:1c:5a:
                    ef:2f:e9:3b:41:c7:51:66:3c:25:f3:a0:21:0d:12:
                    66:11:4d:fe:2b:b6:c6:6f:c1:b6:7c:2d:4e:fc:eb:
                    fe:e9:16:e4:6b:45:5e:30:83:fa:2e:b8:69:72:ef:
                    77:4e:fd:49:62:58:6e:81:99:71:20:90:d6:3e:d1:
                    74:4a:71:f9:c5:bb:1b:92:af:15:0a:06:c9:b7:c8:
                    79:a7:16:69:5c:36:9a:0c:1a:41:cd:3a:aa:af:df:
                    41:5c:34:2d:cd:4a:f2:22:69:96:64:a7:d1:2e:a2:
                    5d:e5:a5:64:12:7e:d0:2d:ef:07:ef:dc:a1:a5:28:
                    c6:2f:f3:58:65:81:1a:f6:35:6e:a4:f1:f5:fa:b7:
                    71:36:32:0a:9a:32:7f:5e:0d:1e:2c:a9:c3:fd:75:
                    7f:ec:a9:b0:59:67:cb:d6:2b:63:29:50:73:3b:e2:
                    7a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2D:F3:7E:9C:58:38:32:75:D6:83:08:69:75:07:FA:1A:36:E2:0A
            X509v3 Authority Key Identifier:
                keyid:98:E2:D8:84:30:E0:F6:BC:EC:DC:35:B8:59:6F:F4:71:26:5D:23:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:9f:7c:30:0c:7b:88:98:da:6c:ae:37:1c:1c:c4:44:4a:d6:
         12:a7:40:36:bb:86:4f:b4:71:93:42:9e:98:3b:55:32:ad:8c:
         a1:9a:c7:4b:27:de:ef:c3:77:50:33:88:48:93:8e:24:9d:f9:
         4e:fd:f9:b5:e1:f0:4f:42:0a:bc:80:fe:3f:28:87:7c:c1:fa:
         ec:52:79:e8:be:ad:18:85:de:3c:22:ac:65:71:5e:c9:c3:42:
         31:69:3e:4c:90:e1:b8:16:23:2d:c0:bc:6c:f3:0c:82:6f:64:
         2e:f8:90:c6:39:70:e4:45:06:ef:75:b3:aa:37:21:ab:7d:ff:
         06:43:c8:b8:c6:1b:f8:f1:ab:15:42:07:11:9d:89:ef:da:a4:
         36:05:5c:d4:15:3f:a6:16:4b:82:d9:9a:dd:6c:f4:3d:74:b0:
         89:f2:72:da:e5:48:3d:05:bf:26:33:d2:d6:a0:31:73:71:fd:
         cf:03:42:01:37:57:65:0e:be:bb:5a:d9:61:42:80:0d:53:40:
         50:58:35:0d:dc:4e:1c:b7:50:20:bd:7d:32:b2:83:8c:c1:66:
         ff:32:b2:18:c6:8d:38:10:b7:c0:77:c4:84:00:1b:cd:7f:69:
         d2:d6:2d:89:99:6b:0e:1b:1c:fe:b2:bc:4e:26:dd:b8:00:34:
         d3:9e:38:52
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNZNOQSGaMFY7xlF51i+ZFf3qah4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThFMkQ4ODQzMEUwRjZCQ0VDREMzNUI4NTk2RkY0NzEy
NjVEMjM4QjAeFw0yNjA5MTcxMDMxNDVaFw0yNjA5MTgxMzE1NDVaMDMxMTAvBgNV
BAMTKDc2MkRGMzdFOUM1ODM4MzI3NUQ2ODMwODY5NzUwN0ZBMUEzNkUyMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOL6AvaXGgc3VExrE1y6ewTmS
UpmeFo8qSaMktM7DsxFh1aWNgNV+ReWFCYZ7/RAxiCAnZzSPJB03z3ziZoEVOVrs
sFiwBlzOOcRQlaME5AAgyCdfrl8cWu8v6TtBx1FmPCXzoCENEmYRTf4rtsZvwbZ8
LU786/7pFuRrRV4wg/ouuGly73dO/UliWG6BmXEgkNY+0XRKcfnFuxuSrxUKBsm3
yHmnFmlcNpoMGkHNOqqv30FcNC3NSvIiaZZkp9Euol3lpWQSftAt7wfv3KGlKMYv
81hlgRr2NW6k8fX6t3E2MgqaMn9eDR4sqcP9dX/sqbBZZ8vWK2MpUHM74npTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdi3zfpxYODJ11oMIaXUH+ho24gowHwYDVR0j
BBgwFoAUmOLYhDDg9rzs3DW4WW/0cSZdI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTg5YTA2NjEtMzFlZS00OWEyLWFlOWYtZjZkNTczYTE3ZGY3LzAvOThFMkQ4ODQz
MEUwRjZCQ0VDREMzNUI4NTk2RkY0NzEyNjVEMjM4Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85OEUyRDg4NDMwRTBGNkJDRUNEQzM1Qjg1OTZGRjQ3MTI2NUQy
MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl
OWYtZjZkNTczYTE3ZGY3LzAvOThFMkQ4ODQzMEUwRjZCQ0VDREMzNUI4NTk2RkY0
NzEyNjVEMjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH+ffDAMe4iY2myuNxwcxERK1hKnQDa7hk+0
cZNCnpg7VTKtjKGax0sn3u/Dd1AziEiTjiSd+U79+bXh8E9CCryA/j8oh3zB+uxS
eei+rRiF3jwirGVxXsnDQjFpPkyQ4bgWIy3AvGzzDIJvZC74kMY5cORFBu91s6o3
Iat9/wZDyLjGG/jxqxVCBxGdie/apDYFXNQVP6YWS4LZmt1s9D10sInyctrlSD0F
vyYz0tagMXNx/c8DQgE3V2UOvrta2WFCgA1TQFBYNQ3cThy3UCC9fTKyg4zBZv8y
shjGjTgQt8B3xIQAG81/adLWLYmZaw4bHP6yvE4m3bgANNOeOFI=
-----END CERTIFICATE-----
Generated at Thu Sep 17 13:59:31 2026 by rpki-client