Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft
File:                     F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft (raw, json)
Hash identifier:          muptuI5C3GLjbwL3JdwdG4cQZUTFXF64YQS3JfTExHc=
Subject key identifier:   E9:BB:8B:77:73:76:6C:EF:67:1D:86:CB:85:2A:F7:93:9B:5B:53:C0
Authority key identifier: F9:48:11:DC:C5:10:1F:1C:C6:26:4D:69:1A:7E:2F:EE:8D:88:67:8A
Certificate issuer:       /CN=F94811DCC5101F1CC6264D691A7E2FEE8D88678A
Certificate serial:       0F4A7159BE70D026C2AB02DC05E6C19D2B9B9B5B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft
Manifest number:          BA
Signing time:             Thu 17 Sep 2026 03:02:14 +0000
Manifest this update:     Thu 17 Sep 2026 02:57:14 +0000
Manifest next update:     Fri 18 Sep 2026 06:51:14 +0000
Files and hashes:         1: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: 5uk1HERYDmQXBZLbJ/kJf/ZrrSlNSnryrEUcrC7gRb0=)
                          2: F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl (hash: be6fvmDxGXCmbT/M4CUsyT8GF4lyd0hCAFtS5YCWSt8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl
                          rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 04:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:4a:71:59:be:70:d0:26:c2:ab:02:dc:05:e6:c1:9d:2b:9b:9b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F94811DCC5101F1CC6264D691A7E2FEE8D88678A
        Validity
            Not Before: Sep 17 02:57:14 2026 GMT
            Not After : Sep 18 06:51:14 2026 GMT
        Subject: CN=E9BB8B7773766CEF671D86CB852AF7939B5B53C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:72:81:33:cc:44:a1:41:6c:41:e0:cf:0e:15:
                    f8:42:8a:1c:fc:7b:57:d2:28:dc:29:8c:39:9d:cf:
                    3a:0e:d3:0b:e6:83:32:f1:81:42:8d:64:cb:9a:fc:
                    e3:08:ff:35:e2:ff:f1:ea:3c:f8:85:53:16:5c:41:
                    c7:87:cd:a1:fc:90:34:26:31:50:6d:00:11:df:ee:
                    94:bd:e3:ad:e8:26:a4:2a:9d:28:a4:86:59:cb:7d:
                    b0:4b:bb:8e:93:54:79:fb:ad:42:67:1f:f3:eb:de:
                    67:f2:8c:b1:f0:95:3d:1f:69:d9:b9:6f:0a:ef:f9:
                    dd:74:16:81:08:85:39:4e:93:b3:ad:6d:38:ec:c0:
                    4c:d3:e5:e1:e3:d9:c2:74:0a:2e:2a:ff:e2:c8:47:
                    d3:dc:0d:c8:db:be:db:c2:8f:dc:71:af:c3:b2:20:
                    dc:ce:39:cd:81:17:b0:8c:6c:16:4a:91:5d:9e:a6:
                    bf:b3:61:a1:62:a5:2d:48:a5:34:a0:eb:42:87:ee:
                    83:12:53:bc:f2:94:1e:b8:ae:fe:e5:77:db:28:91:
                    c8:47:c6:b1:b2:75:cc:e0:ba:c5:e6:06:8f:ef:86:
                    65:39:1c:35:30:2e:8c:fe:5a:7f:99:ff:96:45:bf:
                    c3:0f:47:6c:f4:ea:df:be:6b:44:db:eb:e7:01:92:
                    f6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BB:8B:77:73:76:6C:EF:67:1D:86:CB:85:2A:F7:93:9B:5B:53:C0
            X509v3 Authority Key Identifier:
                keyid:F9:48:11:DC:C5:10:1F:1C:C6:26:4D:69:1A:7E:2F:EE:8D:88:67:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7a:5a:18:3c:71:d0:09:37:0c:50:9e:b6:55:67:5c:43:45:
         56:74:a7:53:0c:19:a2:97:fa:7a:e2:ae:8f:f7:e5:42:4e:95:
         01:a0:11:46:a1:b2:0c:ab:47:62:e1:9e:51:da:eb:87:72:4e:
         ac:ce:3a:7f:5f:82:1a:35:6a:73:ba:08:92:c7:91:b9:96:a7:
         a2:7a:81:85:30:b4:fc:e6:f4:d6:ab:ae:ee:a2:47:cd:a9:9e:
         1a:69:69:4b:b3:b9:ea:b0:db:cc:81:67:ce:f5:2f:8a:b0:74:
         1f:85:73:c2:97:f2:51:72:5b:63:e2:ae:41:19:90:95:4c:3f:
         ba:a1:b4:38:e0:b9:b5:d2:08:78:b3:23:b0:ca:76:69:b9:07:
         44:68:7a:a1:9a:11:df:e3:b6:f6:14:28:c5:c4:01:a5:33:6e:
         9c:38:9d:85:30:53:10:36:70:a2:14:38:f6:bb:fc:63:5f:ad:
         40:3a:b4:1c:5a:5a:6d:31:ed:71:88:7d:e0:c3:8a:d0:e6:0e:
         46:f3:dd:a6:f4:85:a1:5b:72:02:65:15:2f:3c:d2:ba:3f:9c:
         57:38:63:5d:75:8b:53:ea:9c:38:7f:06:44:29:12:e1:9e:ec:
         18:81:11:7d:70:30:7c:06:e9:74:71:f2:44:70:a5:84:f5:c1:
         17:32:46:8e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUD0pxWb5w0CbCqwLcBebBnSubm1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk0ODExRENDNTEwMUYxQ0M2MjY0RDY5MUE3RTJGRUU4
RDg4Njc4QTAeFw0yNjA5MTcwMjU3MTRaFw0yNjA5MTgwNjUxMTRaMDMxMTAvBgNV
BAMTKEU5QkI4Qjc3NzM3NjZDRUY2NzFEODZDQjg1MkFGNzkzOUI1QjUzQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFcoEzzEShQWxB4M8OFfhCihz8
e1fSKNwpjDmdzzoO0wvmgzLxgUKNZMua/OMI/zXi//HqPPiFUxZcQceHzaH8kDQm
MVBtABHf7pS9463oJqQqnSikhlnLfbBLu46TVHn7rUJnH/Pr3mfyjLHwlT0fadm5
bwrv+d10FoEIhTlOk7OtbTjswEzT5eHj2cJ0Ci4q/+LIR9PcDcjbvtvCj9xxr8Oy
INzOOc2BF7CMbBZKkV2epr+zYaFipS1IpTSg60KH7oMSU7zylB64rv7ld9sokchH
xrGydczgusXmBo/vhmU5HDUwLoz+Wn+Z/5ZFv8MPR2z06t++a0Tb6+cBkvYJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6buLd3N2bO9nHYbLhSr3k5tbU8AwHwYDVR0j
BBgwFoAU+UgR3MUQHxzGJk1pGn4v7o2IZ4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDc1MGE2NTEtMWExYS00NTAxLWE4YmMtOTU5MWUxMTA5YTI3LzAvRjk0ODExREND
NTEwMUYxQ0M2MjY0RDY5MUE3RTJGRUU4RDg4Njc4QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOTQ4MTFEQ0M1MTAxRjFDQzYyNjRENjkxQTdFMkZFRThEODg2
NzhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4
YmMtOTU5MWUxMTA5YTI3LzAvRjk0ODExRENDNTEwMUYxQ0M2MjY0RDY5MUE3RTJG
RUU4RDg4Njc4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFl6Whg8cdAJNwxQnrZVZ1xDRVZ0p1MMGaKX
+nriro/35UJOlQGgEUahsgyrR2LhnlHa64dyTqzOOn9fgho1anO6CJLHkbmWp6J6
gYUwtPzm9Narru6iR82pnhppaUuzueqw28yBZ871L4qwdB+Fc8KX8lFyW2PirkEZ
kJVMP7qhtDjgubXSCHizI7DKdmm5B0RoeqGaEd/jtvYUKMXEAaUzbpw4nYUwUxA2
cKIUOPa7/GNfrUA6tBxaWm0x7XGIfeDDitDmDkbz3ab0haFbcgJlFS880ro/nFc4
Y111i1PqnDh/BkQpEuGe7BiBEX1wMHwG6XRx8kRwpYT1wRcyRo4=
-----END CERTIFICATE-----
Generated at Thu Sep 17 09:29:59 2026 by rpki-client