Manifest

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
File:                     9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft (raw, json)
Hash identifier:          ppoG6N2d/OlGmhYR10tY9WyHb7yfJn4zlNMVZPFceUI=
Subject key identifier:   17:45:2E:4D:15:A4:C0:2A:E0:EF:12:1F:91:7E:85:3C:37:37:8C:31
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Certificate issuer:       /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial:       75F444BB3C2EAD1EA1046FD028E8B1B3322D2639
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
Manifest number:          04A5
Signing time:             Mon 06 Apr 2026 03:36:27 +0000
Manifest this update:     Mon 06 Apr 2026 03:31:27 +0000
Manifest next update:     Tue 07 Apr 2026 06:55:27 +0000
Files and hashes:         1: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (hash: wZpa/GAw/+LZ/5VD3LkDlyxUo6eY0mnlaZ6P5jMgauk=)
                          2: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (hash: Chrj9m4BrE2U2pfcWlFNBSg+oO8sOSxTQ6ekpt4BV7I=)
                          3: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (hash: XBT+G1DQ9/F6v2XQZcRxw+M4rvuykMlUtUtQD6DlGXU=)
                          4: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl (hash: j4YtSfkC1rI+nElph9/sdLNAIrgokCCLLjoVlvC6TYU=)
                          5: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (hash: jS7uDPReOddZwVCAwtZ435utMhttXzVf5ZdMVbhKurY=)
                          6: 3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (hash: VzgTFP3K3ygUqjqoPkC7s7tjeyqTHVnjgq3zWGYCRKg=)
                          7: 3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (hash: SPGV8cz23OXVtY1/WBtsxbxXhYFhmyQwGc0AQ879Tzo=)
                          8: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (hash: tEG9JFKiDdsjMGlGAtGF9ff7/fO0QNV3vFqHY+f6qAc=)
                          9: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (hash: Ndg1bmsRuBSL7CF5QQzZOGIFLYIHMSUM05PGM6gpt7I=)
                          10: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (hash: f/uHdRx9VZqoZk3nqfnUiYoyLo18xCMnrIDjbbMrTto=)
                          11: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (hash: EWyx31GnzeEa34YdlCfOKBBLtKjLerW7tETk3ztfEgw=)
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
                          rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 Apr 2026 06:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f4:44:bb:3c:2e:ad:1e:a1:04:6f:d0:28:e8:b1:b3:32:2d:26:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
        Validity
            Not Before: Apr  6 03:31:27 2026 GMT
            Not After : Apr  7 06:55:27 2026 GMT
        Subject: CN=17452E4D15A4C02AE0EF121F917E853C37378C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:8b:e9:62:b5:6b:20:b7:77:b0:92:fb:8d:
                    ad:f4:f1:34:40:c0:56:14:78:b0:42:8b:86:0a:29:
                    56:33:1e:af:5e:83:09:2a:db:1c:70:6e:f9:75:5f:
                    d7:f3:70:47:d8:62:25:78:13:61:ce:db:4e:b4:c8:
                    f3:ff:28:2f:10:f1:9b:2a:26:1b:3e:1d:a6:46:a4:
                    9b:9c:6e:c6:5b:5c:e0:62:06:fc:6d:dc:73:e9:3e:
                    fb:ff:3f:39:cf:ed:a1:16:de:c8:c0:18:2c:ab:8a:
                    02:4c:8a:da:bf:2a:9f:e8:af:ae:a5:64:05:a3:4c:
                    32:1e:34:78:3c:da:29:32:ab:ee:c0:ca:0c:d4:13:
                    bd:13:37:77:61:8c:6c:0f:a8:3d:6a:d0:9a:d7:d5:
                    a6:5b:54:a5:94:7b:f1:5a:9c:ab:36:49:c1:58:8b:
                    6e:05:58:06:11:79:89:e1:14:f3:b1:77:a2:be:2e:
                    4e:e9:bd:09:51:a2:ce:74:f4:68:38:f1:e8:76:10:
                    a1:69:14:e1:0c:0c:35:4e:ee:1e:eb:79:02:40:29:
                    96:91:21:3f:ce:bf:68:8c:13:c3:c6:2c:45:c7:dd:
                    64:94:74:c1:be:3c:39:9f:50:13:f6:04:16:f3:48:
                    e1:f7:65:d3:93:b2:1a:b0:8d:95:11:dd:ef:7a:86:
                    c2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:45:2E:4D:15:A4:C0:2A:E0:EF:12:1F:91:7E:85:3C:37:37:8C:31
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:25:34:c1:4d:da:46:a9:b5:03:28:8c:0b:02:f1:12:aa:3b:
         4f:57:4f:39:21:5a:f1:9b:b5:7a:f1:a8:f1:de:22:ca:db:c2:
         3a:a2:f2:8d:25:cd:22:96:df:26:ef:d6:fc:1f:a1:f0:70:ca:
         de:c5:c0:6d:32:80:97:5c:be:33:33:58:9c:ee:5b:65:be:c0:
         cb:38:41:6f:9d:de:a4:d1:e6:d9:10:96:d4:5a:a2:20:60:35:
         5d:22:28:e6:17:ac:f8:8f:48:25:91:46:c9:57:74:97:80:d8:
         41:0f:0a:43:be:62:38:00:8f:1b:05:af:d1:3e:41:8d:f4:ba:
         e5:d8:4b:a6:5e:8f:0d:54:62:e5:af:53:51:87:e0:ba:77:06:
         91:73:98:dc:c9:22:34:cb:26:7c:65:a0:63:1a:0d:cf:7a:01:
         89:9a:88:15:f8:8a:eb:f4:d8:b1:3b:09:90:ab:59:91:09:88:
         69:93:df:82:7a:88:84:2e:c2:c8:60:66:e3:e6:68:a6:6d:bf:
         ee:7f:e1:1a:5f:d0:c9:27:f2:6b:5f:f0:97:c8:6c:73:30:fc:
         87:39:76:a1:09:aa:28:d4:14:66:5e:62:cb:c6:b2:1e:6e:0d:
         38:f1:9f:9c:8e:66:6e:cd:f4:45:3b:90:0e:aa:57:c2:cf:c8:
         07:9b:a7:ec
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUdfREuzwurR6hBG/QKOixszItJjkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjFDMzMwMDAwMTEwLwYDVQQFEyg5Q0YwNUU3MDI0
RDRBNDg3RTBCNzlFMkY1NzUyNUJGMzQ1REI1M0VDMB4XDTI2MDQwNjAzMzEyN1oX
DTI2MDQwNzA2NTUyN1owMzExMC8GA1UEAxMoMTc0NTJFNEQxNUE0QzAyQUUwRUYx
MjFGOTE3RTg1M0MzNzM3OEMzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMj0i+litWsgt3ewkvuNrfTxNEDAVhR4sEKLhgopVjMer16DCSrbHHBu+XVf
1/NwR9hiJXgTYc7bTrTI8/8oLxDxmyomGz4dpkakm5xuxltc4GIG/G3cc+k++/8/
Oc/toRbeyMAYLKuKAkyK2r8qn+ivrqVkBaNMMh40eDzaKTKr7sDKDNQTvRM3d2GM
bA+oPWrQmtfVpltUpZR78VqcqzZJwViLbgVYBhF5ieEU87F3or4uTum9CVGiznT0
aDjx6HYQoWkU4QwMNU7uHut5AkAplpEhP86/aIwTw8YsRcfdZJR0wb48OZ9QE/YE
FvNI4fdl05OyGrCNlRHd73qGwoMCAwEAAaOCAfkwggH1MB0GA1UdDgQWBBQXRS5N
FaTAKuDvEh+RfoU8NzeMMTAfBgNVHSMEGDAWgBSc8F5wJNSkh+C3ni9XUlvzRdtT
7DAOBgNVHQ8BAf8EBAMCB4AwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9yc3lu
Yy5ycC5raS9yZXBvL21pc2FrYWlvLzAvOUNGMDVFNzAyNEQ0QTQ4N0UwQjc5RTJG
NTc1MjVCRjM0NURCNTNFQy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2
MTFFMkJCNDY4RjdDNzJGRDFGRjIvblBCZWNDVFVwSWZndDU0dlYxSmI4MFhiVS13
LmNlcjBsBggrBgEFBQcBCwRgMF4wXAYIKwYBBQUHMAuGUHJzeW5jOi8vcnN5bmMu
cnAua2kvcmVwby9taXNha2Fpby8wLzlDRjA1RTcwMjRENEE0ODdFMEI3OUUyRjU3
NTI1QkYzNDVEQjUzRUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQG
MASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTJTTBTdpGqbUDKIwLAvESqjtPV085
IVrxm7V68ajx3iLK28I6ovKNJc0ilt8m79b8H6HwcMrexcBtMoCXXL4zM1ic7ltl
vsDLOEFvnd6k0ebZEJbUWqIgYDVdIijmF6z4j0glkUbJV3SXgNhBDwpDvmI4AI8b
Ba/RPkGN9Lrl2EumXo8NVGLlr1NRh+C6dwaRc5jcySI0yyZ8ZaBjGg3PegGJmogV
+Irr9NixOwmQq1mRCYhpk9+CeoiELsLIYGbj5mimbb/uf+EaX9DJJ/JrX/CXyGxz
MPyHOXahCaoo1BRmXmLLxrIebg048Z+cjmZuzfRFO5AOqlfCz8gHm6fs
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:51:51 2026 by rpki-client