Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
File:                     7BEEB290E9254E766A7D8C3B216F0785206617EF.mft (raw, json)
Hash identifier:          CFvWqpjxzNp9j6YTmEkT0NR5lSLpyEfkTxs1Qt523uc=
Subject key identifier:   90:23:96:41:C1:29:B1:06:7D:92:B1:FD:42:F3:97:FF:BF:64:56:FD
Authority key identifier: 7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF
Certificate issuer:       /CN=7BEEB290E9254E766A7D8C3B216F0785206617EF
Certificate serial:       2304FDA1526A133CDE79C2C2991D1540E6414F33
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
Manifest number:          B8
Signing time:             Thu 17 Sep 2026 09:20:12 +0000
Manifest this update:     Thu 17 Sep 2026 09:15:12 +0000
Manifest next update:     Fri 18 Sep 2026 12:43:12 +0000
Files and hashes:         1: 7BEEB290E9254E766A7D8C3B216F0785206617EF.crl (hash: ngcfkP9P7W/g1iAK4iOQMPTLUrAI7Ti9k+vnPL8WF/E=)
                          2: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: bW6EtF3Vlqjb0ua0UMwhPPX9SMPnrKmlHFzlUxuua+k=)
                          3: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: 3tpzoG5Hhn3R6GUMX6zsEklRDaeeeAfN54reFvu6a6c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl
                          rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 07:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:04:fd:a1:52:6a:13:3c:de:79:c2:c2:99:1d:15:40:e6:41:4f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BEEB290E9254E766A7D8C3B216F0785206617EF
        Validity
            Not Before: Sep 17 09:15:12 2026 GMT
            Not After : Sep 18 12:43:12 2026 GMT
        Subject: CN=90239641C129B1067D92B1FD42F397FFBF6456FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d6:93:f1:19:c5:b1:c6:de:c6:23:14:ed:24:
                    c9:9f:24:78:c3:de:2d:33:25:22:50:92:7d:8e:3c:
                    49:48:95:17:ea:b3:da:69:33:47:db:d4:36:df:01:
                    c3:f0:ad:36:5b:6a:e5:29:0e:9c:e1:21:82:89:42:
                    bf:f8:2e:1a:65:a7:49:ae:11:54:00:ff:96:36:41:
                    ab:70:8d:00:c9:61:fb:b8:33:bc:09:ec:f7:56:2d:
                    64:a1:06:e5:de:de:a6:9f:55:f8:40:8c:7d:b2:ba:
                    ce:ff:60:0e:6b:ec:48:c0:d7:a5:eb:3c:5d:23:d7:
                    17:f7:b9:26:73:06:36:bb:fe:10:10:28:78:2b:62:
                    17:e0:1d:90:2d:00:d9:c8:af:85:ac:5c:68:d8:30:
                    33:18:a1:d0:46:43:bb:db:fe:f9:cc:bf:ba:cd:0a:
                    08:9e:4c:8e:a7:dc:7d:34:9a:5d:45:6c:17:66:45:
                    78:e7:4a:2c:8f:29:21:b9:74:7f:ed:fc:a0:49:d7:
                    96:7d:bf:dc:cb:58:ac:44:c1:56:98:cc:d1:e8:2f:
                    1d:48:cc:97:09:91:92:40:b4:e0:11:8d:ff:ca:68:
                    fb:a6:d3:da:a1:16:7f:e9:48:88:40:c0:7a:27:73:
                    53:bc:67:8b:90:f5:8d:4d:6b:78:2f:25:6e:4c:ef:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:23:96:41:C1:29:B1:06:7D:92:B1:FD:42:F3:97:FF:BF:64:56:FD
            X509v3 Authority Key Identifier:
                keyid:7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:1a:55:b8:01:e8:03:f1:3f:ec:b1:4b:5c:0b:bc:d4:63:67:
         05:0e:74:17:d9:15:2c:54:83:f9:5e:70:f8:89:18:4d:30:c5:
         9d:dd:31:ba:d1:f2:e1:17:4e:08:d7:13:33:f0:06:b0:fc:0e:
         bb:26:38:c3:63:32:b2:3e:9f:a6:d6:00:da:f5:fb:4e:8d:87:
         86:c7:b7:a7:d8:b0:81:e1:1e:08:43:2e:77:6f:51:1e:cc:e9:
         00:61:00:80:0a:09:4e:60:89:18:93:e9:75:71:b0:dd:7b:a5:
         74:41:43:f6:e3:c7:73:07:24:bd:16:fb:7c:27:c2:ee:16:b1:
         8b:59:6f:a0:9f:0b:f2:78:cc:28:c1:eb:9e:df:bd:20:7a:36:
         70:fb:ff:de:39:c2:e0:45:79:2d:c4:c9:68:82:9d:06:6a:01:
         50:78:8e:dd:5b:e8:b5:17:62:67:5b:80:0f:8b:20:5e:89:f3:
         be:49:dd:21:78:6d:35:66:92:b1:96:50:8f:09:66:f7:86:73:
         41:c3:54:86:8a:a4:b5:bf:a7:23:31:dc:88:7f:7a:ab:c2:e8:
         1e:e0:a2:fe:51:f0:9d:66:5f:d1:5e:4f:10:12:b6:4b:88:eb:
         3a:8a:4b:16:b8:f1:7f:3e:d6:f1:cc:81:b8:6a:62:a6:2d:45:
         16:0f:13:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:41:51 2026 by rpki-client