Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft
File:                     F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft (raw, json)
Hash identifier:          N89rBnzxdb7gvJnfSI4nHLg6Z+/pfeROwDyVZgye9CE=
Subject key identifier:   02:F7:60:85:AB:2E:D0:B0:8A:8D:72:76:A8:C9:C1:32:03:CC:54:E8
Authority key identifier: F1:A3:DA:B9:00:12:12:D9:FD:6F:84:63:04:9F:31:2D:72:7B:FF:2C
Certificate issuer:       /CN=F1A3DAB9001212D9FD6F8463049F312D727BFF2C
Certificate serial:       66FAB01F8A51FAE99EF0A9019E1227FB6E32204A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft
Manifest number:          B9
Signing time:             Thu 17 Sep 2026 07:27:41 +0000
Manifest this update:     Thu 17 Sep 2026 07:22:41 +0000
Manifest next update:     Fri 18 Sep 2026 08:23:41 +0000
Files and hashes:         1: F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl (hash: aJuq0zPBX9s/cZUhYV03E5CDETWIAgzNOYEukJPsLQk=)
                          2: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: rJ/og/iKUK3xac6RdgdlO70UvsZ6axJQZfH2pg1L5Gs=)
                          3: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: X3tra53AFKAkL1Puu4ERpsixqEIRbM+P2BtQPxdqKUw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl
                          rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 08:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fa:b0:1f:8a:51:fa:e9:9e:f0:a9:01:9e:12:27:fb:6e:32:20:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1A3DAB9001212D9FD6F8463049F312D727BFF2C
        Validity
            Not Before: Sep 17 07:22:41 2026 GMT
            Not After : Sep 18 08:23:41 2026 GMT
        Subject: CN=02F76085AB2ED0B08A8D7276A8C9C13203CC54E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1e:93:64:3f:42:e4:f9:dc:b3:08:59:e2:bb:
                    09:0b:cc:b0:db:ac:b6:1c:98:65:2d:dc:fa:3e:dc:
                    b4:69:ba:75:e7:56:22:f1:2e:ee:99:3e:b3:9f:41:
                    af:c0:74:da:97:2d:4d:6a:ca:8d:71:eb:1a:71:e1:
                    d0:7c:90:07:25:b1:20:7d:1c:b0:c9:6b:ca:58:42:
                    f5:c8:ab:71:aa:a6:65:18:fb:c5:b7:c9:b1:30:7a:
                    45:f1:a4:8c:fb:0f:59:ae:b2:45:e0:30:ff:2a:84:
                    3b:05:08:51:98:da:97:5f:63:74:56:30:65:84:95:
                    6a:bc:86:30:ab:be:28:51:ba:37:98:70:5e:63:16:
                    d9:b3:cf:fd:35:66:05:26:2c:55:cd:03:93:41:58:
                    d7:41:54:16:3e:70:79:2c:10:59:71:8d:75:a2:8b:
                    bb:2c:be:99:33:8d:02:cb:91:a7:74:4b:64:86:8c:
                    1e:05:e1:b1:2e:94:e6:b4:de:53:5b:dd:7e:f9:33:
                    4a:a4:99:76:b7:04:39:3f:45:05:ca:43:bb:2f:47:
                    6b:7b:12:c7:70:8f:30:53:3a:86:6a:62:f1:95:35:
                    63:e4:4f:ed:05:af:3a:e5:46:2d:d2:cc:ff:68:8a:
                    ce:0e:11:96:b6:f2:59:50:7a:5e:b9:fa:a8:02:f2:
                    66:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F7:60:85:AB:2E:D0:B0:8A:8D:72:76:A8:C9:C1:32:03:CC:54:E8
            X509v3 Authority Key Identifier:
                keyid:F1:A3:DA:B9:00:12:12:D9:FD:6F:84:63:04:9F:31:2D:72:7B:FF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:3a:53:89:ea:69:88:de:b8:9f:01:fb:ef:0d:68:c7:3c:c5:
         6d:3f:bb:05:14:36:4f:4f:81:6b:09:52:29:7e:d8:9d:92:45:
         0d:c7:d3:5c:ec:32:1d:f6:12:0d:04:c6:da:df:1f:41:60:7e:
         9f:72:9a:ce:42:17:08:18:fb:e6:4b:82:20:79:4b:11:e9:24:
         45:b2:14:3c:ae:6d:a1:77:15:22:85:a5:62:09:5c:d8:f3:d5:
         00:af:a7:8e:ab:00:34:c7:ce:42:6d:7c:93:ab:c6:a2:34:85:
         6a:4f:56:0c:6b:9d:9d:65:27:49:4b:75:3a:97:47:2d:60:e2:
         ce:11:fd:9c:48:94:91:15:ee:23:44:64:dd:bb:f1:ea:79:89:
         93:87:d9:f0:99:01:cd:ee:d1:c7:18:1b:65:81:31:0f:50:9c:
         f2:2c:be:43:10:be:d4:62:87:26:a8:f7:91:5d:43:96:7a:9e:
         e8:d9:fa:c3:a1:73:dc:16:b1:80:9b:22:4d:71:71:37:77:e2:
         13:dc:23:2a:ce:ef:4a:c9:9f:93:d4:4b:e0:c8:e8:3f:1b:17:
         44:26:c9:f0:4c:53:c3:88:34:7f:90:f8:28:0d:9e:7e:eb:8d:
         67:42:f5:46:0e:fe:77:b8:93:04:ca:21:eb:3e:16:d4:22:a7:
         14:76:08:fe
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZvqwH4pR+ume8KkBnhIn+24yIEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFBM0RBQjkwMDEyMTJEOUZENkY4NDYzMDQ5RjMxMkQ3
MjdCRkYyQzAeFw0yNjA5MTcwNzIyNDFaFw0yNjA5MTgwODIzNDFaMDMxMTAvBgNV
BAMTKDAyRjc2MDg1QUIyRUQwQjA4QThENzI3NkE4QzlDMTMyMDNDQzU0RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChHpNkP0Lk+dyzCFniuwkLzLDb
rLYcmGUt3Po+3LRpunXnViLxLu6ZPrOfQa/AdNqXLU1qyo1x6xpx4dB8kAclsSB9
HLDJa8pYQvXIq3GqpmUY+8W3ybEwekXxpIz7D1muskXgMP8qhDsFCFGY2pdfY3RW
MGWElWq8hjCrvihRujeYcF5jFtmzz/01ZgUmLFXNA5NBWNdBVBY+cHksEFlxjXWi
i7ssvpkzjQLLkad0S2SGjB4F4bEulOa03lNb3X75M0qkmXa3BDk/RQXKQ7svR2t7
EsdwjzBTOoZqYvGVNWPkT+0FrzrlRi3SzP9ois4OEZa28llQel65+qgC8mZ9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAvdghasu0LCKjXJ2qMnBMgPMVOgwHwYDVR0j
BBgwFoAU8aPauQASEtn9b4RjBJ8xLXJ7/ywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2NmMTcwNmItNmMxNy00Nzg2LWFiZDktNDdhMzg0NGRhOGY4LzAvRjFBM0RBQjkw
MDEyMTJEOUZENkY4NDYzMDQ5RjMxMkQ3MjdCRkYyQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMUEzREFCOTAwMTIxMkQ5RkQ2Rjg0NjMwNDlGMzEyRDcyN0JG
RjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NmMTcwNmItNmMxNy00Nzg2LWFi
ZDktNDdhMzg0NGRhOGY4LzAvRjFBM0RBQjkwMDEyMTJEOUZENkY4NDYzMDQ5RjMx
MkQ3MjdCRkYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABY6U4nqaYjeuJ8B++8NaMc8xW0/uwUUNk9P
gWsJUil+2J2SRQ3H01zsMh32Eg0ExtrfH0Fgfp9yms5CFwgY++ZLgiB5SxHpJEWy
FDyubaF3FSKFpWIJXNjz1QCvp46rADTHzkJtfJOrxqI0hWpPVgxrnZ1lJ0lLdTqX
Ry1g4s4R/ZxIlJEV7iNEZN278ep5iZOH2fCZAc3u0ccYG2WBMQ9QnPIsvkMQvtRi
hyao95FdQ5Z6nujZ+sOhc9wWsYCbIk1xcTd34hPcIyrO70rJn5PUS+DI6D8bF0Qm
yfBMU8OINH+Q+CgNnn7rjWdC9UYO/ne4kwTKIes+FtQipxR2CP4=
-----END CERTIFICATE-----
Generated at Thu Sep 17 14:13:16 2026 by rpki-client