Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
File:                     BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft (raw, json)
Hash identifier:          kOcPCfjuv/lo3pR9qnO85zLjuffx4oR1i15tCJ1aX0M=
Subject key identifier:   69:8B:2A:B3:12:D4:F7:D4:A8:D9:9A:F7:AB:9E:79:B8:FA:D1:68:3F
Authority key identifier: BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8
Certificate issuer:       /CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8
Certificate serial:       4CB5AC32265FA9B08AB6EAD55685805E6B40787F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
Manifest number:          B9
Signing time:             Wed 16 Sep 2026 23:12:38 +0000
Manifest this update:     Wed 16 Sep 2026 23:07:38 +0000
Manifest next update:     Fri 18 Sep 2026 02:05:38 +0000
Files and hashes:         1: 3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (hash: AyU9dLRn2+0UVwta95ZZWn0+Wvuscs96qo1E0XirAYM=)
                          2: 3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa (hash: m1k0AK6mRy+Mwv1J09v+vjwtPbeYTImxk1I5pN2FqiY=)
                          3: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (hash: W7n2JDD5ivxhi/6nEhgqfo99pkm7Hn+CBH17uMHEOxU=)
                          4: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl (hash: 0ytyz1jAyLEpsSf8XHk0DE3dJBiu1kB66weDNqiV/O8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl
                          rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:05:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b5:ac:32:26:5f:a9:b0:8a:b6:ea:d5:56:85:80:5e:6b:40:78:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8
        Validity
            Not Before: Sep 16 23:07:38 2026 GMT
            Not After : Sep 18 02:05:38 2026 GMT
        Subject: CN=698B2AB312D4F7D4A8D99AF7AB9E79B8FAD1683F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:dd:13:e6:21:44:37:1d:a7:17:a8:a5:9f:
                    a0:95:16:9e:6d:65:d7:cb:84:3c:9f:59:78:db:76:
                    48:89:bb:00:bf:15:af:65:0e:55:9e:37:97:73:87:
                    13:14:81:11:83:31:f3:e1:17:1e:2f:0a:1d:03:13:
                    ec:eb:01:13:1d:5f:f0:99:31:ef:d0:90:ea:c2:fd:
                    51:95:a3:af:1a:7e:01:0f:d9:85:e8:fb:93:59:20:
                    8c:e1:82:6f:74:27:d6:97:19:d2:09:7a:4b:55:c1:
                    b0:df:01:d2:c0:09:60:75:fd:e0:08:79:5c:06:1e:
                    f0:a6:28:ce:ec:37:04:5e:8a:e7:86:d3:51:dc:37:
                    4c:04:ce:03:5c:12:f8:60:21:43:f7:6f:85:6e:14:
                    40:02:83:12:22:a5:69:22:ea:5a:63:2d:7e:94:64:
                    87:21:72:1b:71:66:29:f7:b9:2d:1b:d4:d0:76:41:
                    cb:5f:af:5f:cb:82:41:b2:a0:f6:d0:f4:16:5d:3b:
                    33:6a:99:8f:ba:3e:c7:60:4a:e0:cb:bb:62:4e:6e:
                    61:88:be:4d:43:34:48:ed:8b:de:90:ba:19:02:80:
                    b5:ed:5c:07:af:0d:48:88:25:42:7e:45:b4:d4:b2:
                    81:d2:46:77:48:0e:7d:9f:2d:45:e3:80:93:15:7d:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8B:2A:B3:12:D4:F7:D4:A8:D9:9A:F7:AB:9E:79:B8:FA:D1:68:3F
            X509v3 Authority Key Identifier:
                keyid:BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6a:bc:b8:91:8e:aa:08:10:02:e9:87:7e:f0:ff:d6:e8:5f:
         fc:ad:9f:ea:0c:f1:78:76:11:6a:b5:ab:4f:48:30:95:0e:4f:
         97:b3:96:8c:55:94:05:fa:e9:d4:0c:40:d8:23:f5:d0:8a:57:
         d8:95:94:00:23:5f:65:9e:4a:27:f7:08:ed:ec:55:e8:bf:61:
         83:d1:5d:f3:72:b2:31:60:11:46:c1:f8:c9:db:b9:c7:00:6c:
         55:b0:85:a9:c3:c9:6f:b0:2f:cd:b8:0b:5d:65:13:f3:f2:18:
         2e:d1:67:b2:7f:53:67:cb:7e:25:f9:98:e4:0a:1b:ca:cc:a0:
         5b:24:8f:e5:36:a7:e0:89:1a:87:78:ac:ea:be:0e:fb:0a:c1:
         e0:5c:a3:66:ec:00:b4:90:88:47:a5:4b:2a:a3:1d:69:c2:8d:
         a5:a9:03:b6:74:ba:47:9d:34:b6:09:5e:cb:40:0e:8b:cf:a9:
         c3:e8:8a:ff:f1:95:ed:35:bd:f7:a2:93:9a:cb:b3:d3:7f:62:
         34:e7:80:9a:55:49:15:36:cf:a7:e5:a9:7e:69:8b:86:95:45:
         46:b9:43:ae:f8:08:e1:72:ce:f9:de:c4:16:8d:0b:f2:be:8e:
         d6:50:be:49:a2:1e:84:37:08:f7:ae:eb:1f:e3:8e:6a:20:34:
         68:4c:60:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 08:25:15 2026 by rpki-client