Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
File:                     B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft (raw, json)
Hash identifier:          Riv8RyEeJV24fHYLJInNF4CQJd3ffTMjgbKVVSB/HnM=
Subject key identifier:   67:1A:30:36:E8:80:D5:69:BB:96:AA:DD:C1:5D:8A:06:C4:88:97:A7
Authority key identifier: B1:5D:91:00:DC:8B:30:29:A0:16:F5:09:C7:D3:DB:B1:84:80:5A:A1
Certificate issuer:       /CN=B15D9100DC8B3029A016F509C7D3DBB184805AA1
Certificate serial:       1997177616B3EDB8C168DBA69FB14EC203FD7B24
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
Manifest number:          B8
Signing time:             Wed 16 Sep 2026 14:42:14 +0000
Manifest this update:     Wed 16 Sep 2026 14:37:14 +0000
Manifest next update:     Thu 17 Sep 2026 17:56:14 +0000
Files and hashes:         1: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: hdJk3P7tUKxgaAbM7WQzserDmvKDtOC0Ipsv3OLAf5g=)
                          2: B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl (hash: g4rfxlPU3l4Dz/YCGJM8/eP+l97v8rfdtA3HP9pouZk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl
                          rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 17:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:97:17:76:16:b3:ed:b8:c1:68:db:a6:9f:b1:4e:c2:03:fd:7b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B15D9100DC8B3029A016F509C7D3DBB184805AA1
        Validity
            Not Before: Sep 16 14:37:14 2026 GMT
            Not After : Sep 17 17:56:14 2026 GMT
        Subject: CN=671A3036E880D569BB96AADDC15D8A06C48897A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:25:32:c6:0f:b1:24:f1:bf:68:5e:7f:13:2d:
                    a0:01:be:50:1d:39:1f:ff:bb:56:0b:87:79:01:d2:
                    10:ef:e3:c5:a3:a3:57:41:11:4a:c7:9b:ce:c8:0b:
                    6e:d8:77:5d:e2:2c:21:bc:de:a4:bc:f4:f1:aa:f2:
                    cf:ce:54:5c:9e:b1:d3:da:3d:e2:1b:14:3c:d6:74:
                    7e:a8:e6:71:fa:99:09:be:86:c8:84:61:0f:35:f6:
                    ef:7e:a7:10:c5:8f:b5:77:d6:3d:7e:fb:23:d2:fa:
                    67:1a:59:8f:67:a4:04:0d:ec:b9:b9:fa:31:6b:3c:
                    a4:8a:dd:a4:4c:31:c5:43:63:70:d7:8b:38:85:a1:
                    f9:58:1f:c3:34:dc:5e:a9:ab:f8:96:91:5e:06:a2:
                    de:da:97:e9:dc:2f:3a:57:28:43:ef:04:75:da:1c:
                    87:54:9d:40:dd:cc:1f:c7:91:c0:9c:d4:55:83:a1:
                    b8:b5:2f:d3:e7:3c:d4:89:3c:82:dc:33:5e:f2:31:
                    d0:79:7d:fd:03:43:bb:a3:fc:ac:54:fc:cf:3b:46:
                    a8:5f:71:22:aa:77:ff:3f:f3:ee:2e:ff:81:78:70:
                    1d:03:7a:31:dd:e3:50:79:7c:85:8f:3e:36:b6:4d:
                    f4:3e:ee:93:be:6e:da:e9:3c:fd:4f:a2:c6:fe:3b:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1A:30:36:E8:80:D5:69:BB:96:AA:DD:C1:5D:8A:06:C4:88:97:A7
            X509v3 Authority Key Identifier:
                keyid:B1:5D:91:00:DC:8B:30:29:A0:16:F5:09:C7:D3:DB:B1:84:80:5A:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b2:1c:18:5e:50:f6:e6:84:b2:00:57:d0:dd:4e:11:7e:3d:
         39:d8:95:cf:a3:51:9b:22:fc:65:09:90:03:92:b8:9f:11:ac:
         68:d1:18:5a:49:b6:e7:11:e9:24:ab:0e:12:bb:cc:e4:c1:10:
         8f:e3:0b:91:12:15:62:99:2f:48:d0:5a:2a:fc:cc:6e:b7:60:
         72:c4:b5:3b:34:41:e5:e7:27:0f:85:20:33:72:65:04:8b:9f:
         25:88:58:29:92:bf:9a:68:69:73:d5:54:28:d7:16:28:57:97:
         15:a4:95:ba:58:d9:1a:06:93:c2:26:ca:ac:30:60:8a:a4:68:
         67:5f:00:68:d8:42:9f:e3:3d:4c:ea:f0:a2:d1:3d:9a:b4:3d:
         ec:8c:f3:fc:c3:c8:87:7c:2d:cb:60:58:de:dd:41:1a:3a:7a:
         50:ce:fc:93:66:d2:ae:f9:f5:a2:40:ec:dd:c2:43:a0:96:c4:
         1d:c5:c8:04:10:7a:8f:50:6d:8c:37:76:53:d7:25:b7:3b:21:
         60:96:96:79:f9:96:b7:cb:3c:9a:89:a8:88:58:56:a4:2d:ce:
         9b:6d:8a:48:16:a4:ab:3b:d5:68:0e:60:4b:3b:37:1b:1c:70:
         30:c8:b7:f5:66:26:22:b8:fd:77:2a:f8:4f:d4:2b:d2:c7:74:
         d7:77:0f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:46:15 2026 by rpki-client