Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
File:                     CB0A606FD0642E68B5212AE751953E0B9A92959F.mft (raw, json)
Hash identifier:          355LuvG90rP07hAUypGijpEZqGx+GJnzmOrkM8+KafQ=
Subject key identifier:   2D:6A:EF:BC:D8:52:6E:82:B7:78:0D:1E:BA:20:17:C5:C6:36:48:6A
Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
Certificate issuer:       /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Certificate serial:       7631C46AC63D927A1AC538EC6D77E764DB123A26
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
Manifest number:          B9
Signing time:             Thu 17 Sep 2026 09:20:08 +0000
Manifest this update:     Thu 17 Sep 2026 09:15:08 +0000
Manifest next update:     Fri 18 Sep 2026 13:13:08 +0000
Files and hashes:         1: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: 2cmHQI8Ii2ZFNygrFMRrShrlpj0r3MxaKMXRFrpSYWY=)
                          2: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: 38tHcC/t7dfxoKy3b2Q3TXm2WXDZWbTD7Vr8HTgP8Ys=)
                          3: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: W5LcKD4qmyridtk0HHxoc6aUkig5ncs0tdqV8KTXwMk=)
                          4: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: oXW42mmGQUgoWkxhSR0n+zgivDmIH7l+dG/1UKZo3a4=)
                          5: CB0A606FD0642E68B5212AE751953E0B9A92959F.crl (hash: M0piV9zwJBRbuX4bN0EJpTn2vvtu5Sv0Wb5iJuSjWNY=)
                          6: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: J+BYXWntjVPciAkV8uAI34vToZOhTHZAVg1OfJSHksA=)
                          7: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: /7ofNppVXJF7mFM2WeV7e0wu+6LZLrIveqoSX8uAT6s=)
                          8: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: pwtW5wr69XSa+qZr3l0EvDhYLbCZs1lpWX5AfsziilE=)
                          9: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: c+MUV7F3nnYwWrux4q4qrlxJQ1ToGP6qwbUAs1FDJW0=)
                          10: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: fRTHSzlS/kkerP4SjyexReRSZRyzRj6VQ2sAHATlKhQ=)
                          11: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: 2M+FnZ1ZBmMQrnhoHJr000wngHRS8OoEKdb0quE5URw=)
                          12: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: ywl7AR88MYiWygarcTKtVBDK6lhCOvMO3Qakyf62g7s=)
                          13: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: Z9BOHD/0KrdQ2ipOJFVWwYLdiKLHdOuinxG+lCgyfSU=)
                          14: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: wcqHrqI3rqZ/cg1ulVOK7tcT1pphG3X5jdB33VoSub8=)
                          15: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: SV66tcdcW0NqPU/aqR6DolEDFMy8zRwKuiBnvzj6cUg=)
                          16: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: pmR02dkQafQv6lkZHXLfGyWNIfCNGG5yyCQI8aG1kiY=)
                          17: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: zvyBHXFbCbQNnOHxvObPOxxpHvAaypqH5xRId3rVWNo=)
                          18: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: YBmRyy3cm/KALp/wtAif41lJP/42XGDuyciPr2frXjE=)
                          19: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: NngQ0IQfUPOCY/8TWuIA/cVIqSFiTXs2casQNFQDWbs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
                          rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:31:c4:6a:c6:3d:92:7a:1a:c5:38:ec:6d:77:e7:64:db:12:3a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
        Validity
            Not Before: Sep 17 09:15:08 2026 GMT
            Not After : Sep 18 13:13:08 2026 GMT
        Subject: CN=2D6AEFBCD8526E82B7780D1EBA2017C5C636486A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:bc:1d:21:ce:95:23:97:f2:73:59:bb:b2:
                    c6:95:94:e3:e9:5b:a0:6f:b6:d9:b1:5f:47:73:28:
                    c7:2a:90:16:87:cc:ab:e3:66:ec:6c:7f:d4:cc:59:
                    6c:f3:bc:19:b6:d3:1b:53:a5:c0:73:7d:32:9b:6d:
                    00:21:54:6c:9b:56:6c:5d:67:79:13:ad:d7:0c:53:
                    cb:58:f9:45:0d:80:fa:13:22:20:38:72:ac:6e:5c:
                    7c:2d:1a:f5:aa:24:58:de:15:47:f4:f1:ec:c6:ae:
                    75:6e:b4:2e:a3:48:84:eb:73:c8:5e:dc:a5:16:73:
                    06:6e:20:2e:2d:ac:8e:0d:6e:cb:e1:ea:60:28:90:
                    cd:88:19:16:d5:c2:ba:cd:3a:a9:dc:0a:36:7b:84:
                    69:de:fa:1e:9b:09:7e:f5:7d:03:1c:88:22:89:45:
                    85:67:00:0b:bd:0b:74:f5:d4:72:e6:c3:d9:9f:83:
                    25:b6:27:71:31:d8:84:a8:9f:d3:26:ed:ae:54:e8:
                    14:7c:f1:e7:b2:f1:03:11:32:a4:0b:fb:bf:78:6f:
                    03:fd:34:ec:19:24:4f:39:e2:10:d5:03:b0:6d:3b:
                    36:bd:22:f4:d6:1b:39:90:2b:1d:d4:bf:d0:85:26:
                    c5:b0:b6:07:1f:67:e4:a9:1e:f8:a6:e7:cb:f3:72:
                    13:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6A:EF:BC:D8:52:6E:82:B7:78:0D:1E:BA:20:17:C5:C6:36:48:6A
            X509v3 Authority Key Identifier:
                keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:0c:e3:9d:0b:8e:88:5c:cf:75:32:2e:dc:b6:6e:c5:fe:cd:
         45:f1:f0:7b:18:ba:d1:f0:4d:d9:7a:02:9f:98:83:21:df:37:
         e1:58:d3:43:88:07:01:e1:06:ee:fd:9d:88:b1:ec:26:ae:97:
         3f:2f:42:12:42:af:3e:ad:13:e2:98:43:72:cd:7f:38:42:88:
         2e:6c:73:2e:cf:7e:71:d9:26:41:98:99:05:fe:f1:95:9d:d8:
         cc:cc:ae:0b:5d:00:bd:f8:23:67:de:a4:a3:dc:b0:4d:db:e2:
         14:ec:7f:73:c5:7d:f3:2a:b2:a0:4e:dc:e7:c2:9d:a4:8c:55:
         21:0f:ec:f7:a2:e1:6a:88:1e:03:a7:e5:3a:a1:e7:0c:a3:e0:
         3a:74:c6:2d:22:58:6c:06:91:1a:4b:d7:ad:a8:70:ed:72:51:
         ef:99:ce:61:9f:3e:93:87:60:03:6e:bc:f3:48:39:c9:15:ce:
         a7:ab:60:8c:e9:10:59:a8:20:cf:d2:85:9e:ac:b5:af:6b:f2:
         89:44:d3:da:8b:25:b2:7b:69:7f:bf:0d:2d:e6:5f:fa:c5:06:
         e1:3f:ce:35:ee:2c:cc:1e:a0:2b:92:1a:57:a7:f0:c7:ea:88:
         d7:41:e3:90:09:28:2a:49:d2:4e:c3:4b:ae:15:87:94:b4:b9:
         9b:5e:61:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:44:35 2026 by rpki-client