Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
File:                     95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft (raw, json)
Hash identifier:          TShOHdgMtT6UcL+k2DKrpGLuabJXA/93Y4eOv30+rag=
Subject key identifier:   AF:95:B4:FB:90:5D:9C:AE:F7:E0:DC:62:6F:48:0A:03:2E:9A:04:6C
Authority key identifier: 95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36
Certificate issuer:       /CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36
Certificate serial:       3CCD5797923E729CA182FCFB0729583C13CADA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
Manifest number:          B9
Signing time:             Thu 17 Sep 2026 10:06:05 +0000
Manifest this update:     Thu 17 Sep 2026 10:01:05 +0000
Manifest next update:     Fri 18 Sep 2026 12:50:05 +0000
Files and hashes:         1: 95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl (hash: fvbQz8SaKLImSIYpUWLU/8YRY4i8MEs1P1FXyr4xoeI=)
                          2: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: 0J9oKNbFkC4ek4+yIhYejI4HBbjKDbQ0B3Yfg4Dgqy4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl
                          rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cd:57:97:92:3e:72:9c:a1:82:fc:fb:07:29:58:3c:13:ca:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36
        Validity
            Not Before: Sep 17 10:01:05 2026 GMT
            Not After : Sep 18 12:50:05 2026 GMT
        Subject: CN=AF95B4FB905D9CAEF7E0DC626F480A032E9A046C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:29:38:c4:1d:6a:b6:7b:a2:3a:c4:33:cb:a1:
                    79:a7:0a:56:53:46:48:00:50:08:5b:f4:0f:bf:b5:
                    5b:aa:fa:06:1a:26:c3:f8:36:c1:7d:52:75:cb:8a:
                    e8:c6:f2:ee:fd:58:20:e1:06:01:5c:72:dc:eb:d7:
                    26:85:ae:f2:6f:a2:a9:dc:6c:8a:88:c5:77:2f:ad:
                    db:b5:be:68:23:41:a9:c1:2f:4f:3d:42:3e:1e:9a:
                    ee:30:2c:cd:3f:d4:e3:79:46:95:21:58:d3:80:06:
                    e2:1e:ec:13:b4:23:66:f9:17:88:cf:3c:99:92:ce:
                    6f:6c:ee:0d:bd:da:2a:ad:ba:55:a5:ff:ab:57:89:
                    82:f1:77:ed:6e:22:c1:88:6a:d1:bc:32:cc:00:e6:
                    d3:b8:81:c5:07:8a:1f:57:c2:61:18:e7:8c:8b:2f:
                    1f:08:72:b2:39:34:ee:02:1d:e7:f5:fa:db:73:68:
                    cf:40:39:91:c8:2c:4e:61:5f:e8:26:6b:01:93:f4:
                    53:25:4a:9a:4b:66:2a:0c:49:ba:69:4f:f7:c4:df:
                    67:59:23:c9:ec:d4:b8:ea:a3:5f:e4:00:d7:9a:db:
                    5c:2f:fa:d9:65:b0:29:7c:4b:33:ab:b3:79:f5:15:
                    3a:3e:7b:48:ec:6e:e1:cd:5a:27:fe:9e:83:8b:0a:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:95:B4:FB:90:5D:9C:AE:F7:E0:DC:62:6F:48:0A:03:2E:9A:04:6C
            X509v3 Authority Key Identifier:
                keyid:95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b2:51:df:cb:8e:da:df:2c:12:04:fd:8a:c4:d8:f6:f0:98:
         e5:62:f3:86:37:3a:bd:39:58:de:fc:8d:9d:73:ad:e5:9e:b7:
         1d:1a:a1:73:ee:63:6a:45:fd:ea:ac:e2:ec:62:c5:31:23:a9:
         6d:66:bd:11:7e:61:cc:1c:0b:5b:2b:d6:72:2c:a2:f6:11:00:
         09:9b:ea:bf:59:e1:bf:74:ae:f5:c3:1c:3b:fb:e4:7f:90:e6:
         06:6b:76:be:ff:58:6d:1a:58:17:f5:42:f6:7e:a3:af:55:af:
         a6:46:5b:5b:6e:10:de:a9:4a:7b:01:05:e7:9e:ff:e2:f6:dc:
         81:33:78:5c:c1:be:a9:7b:a5:e7:6c:19:4b:f0:ba:f6:05:54:
         f2:31:54:69:a6:ca:9f:cd:89:6c:51:8b:8d:d1:60:63:40:63:
         0d:78:63:98:33:1b:93:f2:11:6d:e0:6a:a9:2b:bb:42:c2:02:
         93:c0:35:3d:d2:b4:6f:fb:0e:60:d8:29:3a:98:a0:0c:07:8d:
         9f:fc:ce:fc:47:77:00:e6:d8:a8:47:78:ca:e5:12:c0:12:ed:
         12:fa:7c:2e:d2:6f:e4:f6:ff:80:30:78:0e:9a:63:f9:27:ea:
         37:a3:9b:98:b9:aa:63:b6:6a:48:7f:13:06:4c:45:3a:b3:83:
         b2:02:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:39:40 2026 by rpki-client