Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft
File:                     489207A82A4F1A3B6758139186A867CE751999B7.mft (raw, json)
Hash identifier:          DFUFwGxjzVgaW0PdBDBtxJ7IbaAx1zd9XpPxNj3nd3U=
Subject key identifier:   16:F8:2B:F1:0F:17:0C:96:57:ED:12:D6:BE:4E:DA:F4:7D:63:9B:A3
Authority key identifier: 48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7
Certificate issuer:       /CN=489207A82A4F1A3B6758139186A867CE751999B7
Certificate serial:       7CF751762D80B6C4C57B87CC12FA62B606F63445
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft
Manifest number:          B9
Signing time:             Thu 17 Sep 2026 01:55:58 +0000
Manifest this update:     Thu 17 Sep 2026 01:50:58 +0000
Manifest next update:     Fri 18 Sep 2026 05:50:58 +0000
Files and hashes:         1: 489207A82A4F1A3B6758139186A867CE751999B7.crl (hash: YCR4MCWj4bXT68U/JT9CgW5aNTSPsOYwdeaDZDcntOc=)
                          2: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: FB472ElcOvg/ylc+xiayFIvGK9fHP8MxdL79QVbGvdA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl
                          rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 05:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f7:51:76:2d:80:b6:c4:c5:7b:87:cc:12:fa:62:b6:06:f6:34:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=489207A82A4F1A3B6758139186A867CE751999B7
        Validity
            Not Before: Sep 17 01:50:58 2026 GMT
            Not After : Sep 18 05:50:58 2026 GMT
        Subject: CN=16F82BF10F170C9657ED12D6BE4EDAF47D639BA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:51:ed:e7:97:65:f8:b5:4b:72:cb:44:93:e0:
                    6c:37:cd:9b:52:be:71:c2:e8:54:33:9e:a3:c4:b7:
                    e1:f2:c1:3d:e3:55:b6:a6:14:cb:23:39:b1:88:aa:
                    f1:87:23:bd:d1:62:79:0c:34:3a:9b:e1:cc:f0:e3:
                    58:9c:50:2e:e5:02:7a:4f:85:96:9c:e1:76:93:50:
                    a7:ad:ee:8c:fb:87:40:9d:14:b3:c9:8e:fb:12:68:
                    67:28:2e:5a:4e:78:25:43:53:b6:17:18:4d:f2:aa:
                    61:fc:f4:37:09:62:25:aa:ee:3b:cb:90:7a:42:4a:
                    7b:62:3f:3a:a0:fd:ae:f5:ac:b5:71:e1:12:9d:2b:
                    66:14:7d:58:6f:87:9e:c9:36:25:60:37:f5:58:56:
                    89:e0:36:8f:cb:ed:20:6b:49:a8:a2:3a:c3:a7:c2:
                    a0:00:eb:aa:5d:8f:db:9e:a2:0c:c5:61:52:3b:11:
                    9b:18:47:f4:33:ae:99:cb:b7:38:6c:d8:0a:93:49:
                    e8:a6:b9:36:bb:fd:b0:a0:6f:6b:8e:ef:2c:65:e3:
                    ab:57:09:47:e6:72:35:38:40:28:df:b2:f4:67:a2:
                    ee:f2:c9:8a:62:35:7a:fe:5a:b6:c0:6b:6a:0d:56:
                    75:63:b0:c1:04:bd:7e:a7:1e:52:6d:b5:8c:b3:03:
                    2a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F8:2B:F1:0F:17:0C:96:57:ED:12:D6:BE:4E:DA:F4:7D:63:9B:A3
            X509v3 Authority Key Identifier:
                keyid:48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:3d:a7:54:ba:fe:49:c9:19:7b:6e:ff:2a:1f:c2:0a:f8:72:
         0d:76:47:9e:a7:59:0f:15:a9:d6:d6:c9:33:ec:a2:86:7b:1c:
         cf:68:93:4a:f4:3c:78:0e:81:ac:fb:72:58:ea:0b:08:d1:34:
         f6:c9:6b:bf:a5:1b:6e:83:d2:ab:75:88:69:15:3b:49:46:dc:
         e5:41:a9:21:b4:25:af:de:7d:90:12:96:3b:04:71:35:bb:1d:
         bd:3b:b4:14:4b:05:43:17:8c:1c:93:49:07:4b:72:82:26:53:
         12:11:d4:9b:a6:1f:b0:94:de:02:e4:29:ec:38:b9:1b:6e:65:
         a6:6e:b5:78:8b:8c:f6:9d:83:a3:78:2d:a4:cc:c0:7c:de:02:
         ef:77:34:a9:e1:9c:9c:8a:f7:1e:78:41:d6:71:38:ef:3b:ed:
         b2:a1:9c:6b:95:0c:c9:b6:00:e2:ed:e3:59:de:95:dc:9b:6c:
         1a:0d:f2:2c:ac:d7:f3:16:3e:0d:4b:84:07:8f:75:16:66:81:
         4a:d4:93:90:cc:df:69:f8:d6:25:f0:8f:e5:f5:61:72:69:f3:
         71:44:7d:88:17:4c:dc:98:16:0d:69:2f:59:56:79:a0:40:ec:
         21:15:6f:5a:ee:cf:5f:26:9d:f2:6b:6a:c0:92:d4:47:a0:50:
         fa:c8:fd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:41:47 2026 by rpki-client