Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft
File:                     12099D13750CE0704F5D87C255E4B056E703B28D.mft (raw, json)
Hash identifier:          hFcaGMg3kbMa+CL0fp1qacNyCDoCQd3bMdVmGhvP5Xc=
Subject key identifier:   CE:94:7A:FF:F4:6E:D0:CA:36:E2:CE:CC:C4:05:8B:49:B7:27:84:4F
Authority key identifier: 12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D
Certificate issuer:       /CN=12099D13750CE0704F5D87C255E4B056E703B28D
Certificate serial:       369E242A45353B17FA771999A4CADD4479C8C404
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft
Manifest number:          B8
Signing time:             Wed 16 Sep 2026 19:43:27 +0000
Manifest this update:     Wed 16 Sep 2026 19:38:27 +0000
Manifest next update:     Thu 17 Sep 2026 20:25:27 +0000
Files and hashes:         1: 3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa (hash: guj2wYIy2OeBYkQ4ioJGOVZvTeDH758uPYwCniNJbeE=)
                          2: 12099D13750CE0704F5D87C255E4B056E703B28D.crl (hash: 2KbJCwNtajuZspDhnRfyfTcl6Y1Y8CHUgH9+ju2Uwrg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl
                          rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 20:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9e:24:2a:45:35:3b:17:fa:77:19:99:a4:ca:dd:44:79:c8:c4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12099D13750CE0704F5D87C255E4B056E703B28D
        Validity
            Not Before: Sep 16 19:38:27 2026 GMT
            Not After : Sep 17 20:25:27 2026 GMT
        Subject: CN=CE947AFFF46ED0CA36E2CECCC4058B49B727844F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2c:0f:a2:62:d9:a9:40:ba:50:45:f9:f8:e6:
                    0f:3e:8f:d4:38:15:97:a9:c6:b4:c1:f5:fc:27:f6:
                    b9:23:63:dc:98:d4:18:fc:6b:09:49:20:23:41:11:
                    2b:3b:72:23:83:f5:9e:d5:37:9e:c5:05:6d:8c:0e:
                    c5:4e:1e:00:23:b4:b9:0a:5b:38:0c:45:7e:68:84:
                    41:77:ae:a3:e4:a0:02:06:81:ee:c8:8e:1e:e1:0d:
                    7c:c4:13:34:c9:ef:f0:4d:6a:14:ba:20:bd:92:5a:
                    17:bd:99:30:27:51:c0:0c:8b:63:63:e6:83:8c:44:
                    86:56:be:ec:dc:01:2c:5c:19:79:14:f2:ca:a7:39:
                    52:36:c9:5b:74:9d:ea:20:50:67:c4:d1:a8:2b:8b:
                    4a:5c:22:af:8c:a4:4a:9b:46:f3:5f:0b:e8:55:87:
                    b4:71:a2:76:e1:c4:c2:95:2b:39:f6:cf:df:c1:89:
                    90:a8:87:0c:b7:21:d7:70:0e:41:b5:e0:e4:3d:fc:
                    26:cd:94:c7:61:c8:1c:01:b6:6f:6e:81:61:d0:c0:
                    43:a0:d1:4a:ee:bb:65:1c:c3:79:be:03:8c:9b:2c:
                    d1:6d:ba:f5:0a:9b:24:55:dc:cf:95:f1:94:c6:ec:
                    09:aa:8f:85:ce:b6:41:ce:18:f4:ff:f9:33:c4:eb:
                    27:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:94:7A:FF:F4:6E:D0:CA:36:E2:CE:CC:C4:05:8B:49:B7:27:84:4F
            X509v3 Authority Key Identifier:
                keyid:12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7b:09:0d:2c:89:41:f4:2f:9c:86:92:b3:dc:b3:01:9f:82:
         90:5a:3d:93:ce:3b:72:90:f7:e4:8a:32:44:76:94:38:03:1b:
         af:76:83:4a:02:13:8e:48:a5:1f:12:21:cd:46:b8:a5:b7:de:
         a0:1b:fd:f9:e0:52:8c:a4:08:99:81:04:01:89:bc:39:68:a6:
         51:63:e8:15:5f:67:5d:dd:0e:37:e7:50:00:ea:85:e3:61:7c:
         86:17:d6:92:37:f6:3b:43:64:ab:8c:54:9a:ce:e1:02:a6:c2:
         63:2d:1c:d9:e0:2b:9d:63:43:ed:48:1a:b8:f6:40:e4:c5:29:
         2a:09:57:e3:4e:ca:0c:07:70:dd:a7:06:07:55:bb:79:95:d1:
         18:fe:a7:0f:a8:88:7f:b8:ef:31:5b:bd:14:3b:c2:8d:18:40:
         10:dd:25:2b:d0:3b:3b:78:91:c6:d8:43:42:78:75:0d:2e:6e:
         b9:2d:90:21:f6:9e:bd:06:07:e3:b0:65:7d:9b:90:9a:86:e2:
         f9:c1:34:f6:a5:36:94:f5:c9:bb:bf:7a:58:5c:2f:22:77:7f:
         74:96:de:68:41:e3:4b:75:7d:d9:29:61:a5:89:f8:03:78:1f:
         fb:06:50:ff:34:32:79:48:56:b6:fb:e3:e8:19:64:cb:78:12:
         de:d0:ac:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:54:13 2026 by rpki-client