Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft
File:                     9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft (raw, json)
Hash identifier:          qXXb4a7eW92FlcTtGn18xqirUzI+qWaf/jMK4Psv8uE=
Subject key identifier:   14:9A:21:44:D9:DA:B3:A1:30:49:C3:64:7D:D0:3C:8F:3F:65:73:A9
Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4
Certificate issuer:       /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
Certificate serial:       1B62DEC85A8E7BEE1B9FFF35F38733EAC6BB83
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft
Manifest number:          9A
Signing time:             Tue 25 Aug 2026 00:38:03 +0000
Manifest this update:     Tue 25 Aug 2026 00:33:03 +0000
Manifest next update:     Wed 26 Aug 2026 03:15:03 +0000
Files and hashes:         1: 3130332e332e3231322e302f32322d3232203d3e203338313439.roa (hash: L+jEfJ+TYr8U2lsRIwq0B2JrZizijZUOAoo1oHmW+1s=)
                          2: 3230322e3135322e3230302e302f32342d3234203d3e203633383539.roa (hash: 9UdGVYlr2BpuU278InwTpLs2aULPcIQvnjKIhkcrwaU=)
                          3: 3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa (hash: xIMJNAAfJUu4Zk7eKaIYdIfnGIAy47WR2He8EYWfO1w=)
                          4: 3230322e3135322e3230312e302f32342d3234203d3e203633383539.roa (hash: Kr9n+dToJ4+otMGr8yT+9Vb2SsgZx8Pi5NiSfTBJmck=)
                          5: 3230322e3135322e3139372e302f32342d3234203d3e203633383539.roa (hash: NlqJ6u6BebCxJ7bsse0gRH5h6BQukMf2w3tldo1PwRQ=)
                          6: 3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa (hash: poZZqr8m1p0SwLGi1vxWI2MfuVBlouoArnZ43zLWj7A=)
                          7: 3230322e3135322e3139322e302f32342d3234203d3e203633383539.roa (hash: XTetGunxO/9Wc2TDz5SU0JnFYRa4/o3IkFSSAxHr8JI=)
                          8: 3230322e3135322e3230352e302f32342d3234203d3e203633383539.roa (hash: 3F7kj8HCI8p6ltHGhgDwoLn+Flb6Nk9tbs0IPGWDTJ8=)
                          9: 3230322e3135322e3139362e302f32342d3234203d3e203633383539.roa (hash: IiX5vZYV34MLgOX/GRxuakpCz+OmnJUby0rObSh/dR0=)
                          10: 3130332e332e3231332e302f32342d3234203d3e203338313439.roa (hash: 4HkIjmLq+65ZiJXFH/gsCmpX9OJtzZO2CDLQtviREzo=)
                          11: 3230322e3135322e3139332e302f32342d3234203d3e203633383539.roa (hash: 8xUt88GWo5Lh7HpcZIOQiiNvwVYn6c3qls4txEwd5Aw=)
                          12: 3230322e3135322e3139392e302f32342d3234203d3e203633383539.roa (hash: Dl92bN4KroHhoU6iZvn5AO9/ktEfnB98FdoOajolvAY=)
                          13: 3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa (hash: I54kfkk6hYbr7mBDfS6anco7Wej9QeAnBCITEhtkyWw=)
                          14: 3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa (hash: 9ukbLf5qQb1rXyNwLc+GXHdfVwvyPUN+V3xFvkC1PU8=)
                          15: 3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa (hash: ZN11kMbpQEiQxZkCv4YoKpVbtM+I8QNVgn3BqfSzPFM=)
                          16: 3130332e332e3231342e302f32342d3234203d3e20313431313436.roa (hash: tuXz1WBHQLGtpa6jqBSO+zM+s1veNX1L+r9GJ7yl5zg=)
                          17: 3130332e332e3231352e302f32342d3234203d3e20313331373435.roa (hash: XaXM0IZAp2Bc9rsMp3qaCo1vpdeZ4S8GCWtFW/rI5A0=)
                          18: 3230322e3135322e3139322e302f32302d3230203d3e203633383539.roa (hash: OA3ZBLGnXRs5yEnHCOfQPyg4orZ7KQmbwDe09LqHOqQ=)
                          19: 3135302e3132392e3138382e302f32342d3234203d3e203338313439.roa (hash: w/PsVCApcUAa6104ArDi8nWFzKFMWrenwPIw7wDcwKQ=)
                          20: 3230322e3135322e3230332e302f32342d3234203d3e203633383539.roa (hash: C04D24vDTd3hbDV5iXxREwC6uGNthkwKxlbfLdfXE1E=)
                          21: 3130332e332e3231322e302f32342d3234203d3e203338313439.roa (hash: kD6oNGgLKqH7iqk+24uVETlxN5nYgl4ztpk81F99Ka8=)
                          22: 3230322e3135322e3230342e302f32342d3234203d3e203633383539.roa (hash: K/9h13JeRi4nBdzHJKHwIX/OSCZT4xPejmG3KMLGGPE=)
                          23: 3230322e3135322e3230372e302f32342d3234203d3e203633383539.roa (hash: nS2kYK0reE2AsGKi7EPWuF7aJpnOGuNLNpN/XmzL+PQ=)
                          24: 9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl (hash: QxYAta1R1AoVXDlc9L/GK7/cp0MoOhpwe87X9sqJoT8=)
                          25: 3135302e3132392e3139312e302f32342d3234203d3e203338313439.roa (hash: 45CN9yoUG6RuKCQ3eV8UKAqFsZNc0HLFA8m6Fw2raWM=)
                          26: 3135302e3132392e3139302e302f32342d3234203d3e203338313439.roa (hash: gMQgWusyiUC65OlKKV0eHqi5N3ooCMrLBVB02a5Ibb8=)
                          27: 3230322e3135322e3139352e302f32342d3234203d3e203633383539.roa (hash: 85ocWH/CGllr8ECiudr/CN5VLg2ydbZ+Y4D2UVzB/yE=)
                          28: 3135302e3132392e3138382e302f32322d3232203d3e203338313439.roa (hash: 8kSvXezcYEeTv4auRNNy4r2sFerV1LWNU23uvmXlnSM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl
                          rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:62:de:c8:5a:8e:7b:ee:1b:9f:ff:35:f3:87:33:ea:c6:bb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
        Validity
            Not Before: Aug 25 00:33:03 2026 GMT
            Not After : Aug 26 03:15:03 2026 GMT
        Subject: CN=149A2144D9DAB3A13049C3647DD03C8F3F6573A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e1:0d:52:4d:4f:fc:6c:23:b0:2c:f6:cb:0b:
                    69:b4:e6:4f:80:bd:93:6a:c7:91:56:09:67:e8:76:
                    4b:dd:f6:b1:86:c2:0c:4b:f4:f4:3d:55:d8:cf:c9:
                    4c:80:67:2e:d7:a4:81:87:99:14:82:9a:c4:9e:9c:
                    95:53:3f:38:17:01:ed:1f:6a:41:52:10:e0:8d:02:
                    69:21:8f:60:84:f7:66:86:d9:6a:8f:e4:c0:56:8f:
                    a2:6d:0b:3d:29:73:be:c5:84:f2:35:9a:55:8b:3b:
                    6f:21:52:80:7d:cb:40:a3:8a:86:2a:a7:60:e9:43:
                    bf:11:03:ba:c5:ea:31:52:6b:28:48:c5:07:12:7e:
                    58:fe:0e:c9:03:ff:e6:0d:0f:8d:b9:ed:55:c0:cf:
                    5f:59:f3:c7:40:66:7a:e2:10:37:d4:77:99:43:02:
                    02:dd:6c:e9:ee:ec:de:57:06:73:4c:7d:48:5f:2c:
                    6e:d6:0a:df:57:74:8b:99:ec:ce:af:29:3f:38:b7:
                    ce:05:ed:2c:1d:16:a2:0e:e0:8d:73:62:c0:02:ed:
                    14:52:21:fa:91:e2:30:9d:be:a0:0f:56:ad:cd:5b:
                    f6:7d:65:96:a1:b4:11:95:1e:e0:23:cd:0e:da:34:
                    48:a8:27:19:28:e7:b6:8a:f0:21:40:fe:cd:ca:52:
                    87:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9A:21:44:D9:DA:B3:A1:30:49:C3:64:7D:D0:3C:8F:3F:65:73:A9
            X509v3 Authority Key Identifier:
                keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c5:9c:c4:cd:1a:80:16:8f:a6:8d:d6:ee:d6:d3:18:d6:23:
         60:5e:79:b1:fc:35:8b:f2:69:1a:1b:49:5b:38:28:1c:30:e8:
         c9:5f:f3:2b:0f:d2:29:20:40:df:3b:a6:95:09:3a:4c:e9:61:
         03:db:e1:a0:a2:b0:3f:0d:4a:71:7c:4f:d0:2c:28:bb:e0:18:
         ba:b2:65:2b:b6:eb:70:f3:14:60:d8:6c:c5:39:e9:54:67:c2:
         57:a6:fa:3a:25:e5:1c:8e:e0:ba:5a:43:d2:a5:7c:37:56:d3:
         6a:83:85:9d:12:7c:59:36:64:9b:86:fe:e9:96:b2:79:c3:a5:
         97:39:6a:ba:c1:27:ff:71:8f:7b:ac:e8:5c:b9:a8:e9:73:ed:
         d9:d6:3a:ef:48:6d:ec:cf:ff:2c:4c:8a:bb:1a:ad:37:e1:f6:
         d9:8f:72:cb:25:bd:7b:a6:37:44:16:da:e9:8c:fc:22:97:0a:
         1f:dc:8e:2b:ad:2b:02:2b:65:e2:6e:55:86:9f:ef:f2:28:d2:
         30:73:d0:ff:72:b0:be:b9:fb:e2:5c:95:cf:c9:bb:44:75:8e:
         6b:8f:a0:dc:0c:5a:bb:f5:15:7b:10:63:3b:08:d9:7b:65:cb:
         45:b6:78:10:6f:0c:ca:b3:96:2d:97:a7:2a:30:fc:ee:27:6f:
         4a:6d:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:18:44 2026 by rpki-client