Manifest

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
File:                     9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft (raw, json)
Hash identifier:          dXgSQ2V258Bx18g649SKJgtDt43vd2cM4ynNOJsBFI8=
Subject key identifier:   20:7F:8A:11:A9:42:50:CD:82:7C:7D:66:5D:B3:67:23:11:4E:0E:C2
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Certificate issuer:       /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial:       3968821EADE0302343366BD57E9D4D0441438D55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
Manifest number:          03C6
Signing time:             Thu 23 Oct 2025 16:58:32 +0000
Manifest this update:     Thu 23 Oct 2025 16:53:32 +0000
Manifest next update:     Fri 24 Oct 2025 19:22:32 +0000
Files and hashes:         1: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (hash: jS7uDPReOddZwVCAwtZ435utMhttXzVf5ZdMVbhKurY=)
                          2: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (hash: XBT+G1DQ9/F6v2XQZcRxw+M4rvuykMlUtUtQD6DlGXU=)
                          3: 3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (hash: SPGV8cz23OXVtY1/WBtsxbxXhYFhmyQwGc0AQ879Tzo=)
                          4: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (hash: Ndg1bmsRuBSL7CF5QQzZOGIFLYIHMSUM05PGM6gpt7I=)
                          5: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl (hash: +HTT0WsemNtCABdS9j98nVNr8n93BnPTcgpP/7affRY=)
                          6: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (hash: tEG9JFKiDdsjMGlGAtGF9ff7/fO0QNV3vFqHY+f6qAc=)
                          7: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (hash: Chrj9m4BrE2U2pfcWlFNBSg+oO8sOSxTQ6ekpt4BV7I=)
                          8: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (hash: wZpa/GAw/+LZ/5VD3LkDlyxUo6eY0mnlaZ6P5jMgauk=)
                          9: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (hash: EWyx31GnzeEa34YdlCfOKBBLtKjLerW7tETk3ztfEgw=)
                          10: 3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (hash: VzgTFP3K3ygUqjqoPkC7s7tjeyqTHVnjgq3zWGYCRKg=)
                          11: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (hash: f/uHdRx9VZqoZk3nqfnUiYoyLo18xCMnrIDjbbMrTto=)
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
                          rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 19:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:68:82:1e:ad:e0:30:23:43:36:6b:d5:7e:9d:4d:04:41:43:8d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
        Validity
            Not Before: Oct 23 16:53:32 2025 GMT
            Not After : Oct 24 19:22:32 2025 GMT
        Subject: CN=207F8A11A94250CD827C7D665DB36723114E0EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2d:ea:28:4d:fd:93:01:44:0d:52:71:52:4f:
                    1f:2c:95:28:33:b5:33:f7:4f:37:00:2f:e4:c6:46:
                    35:66:e2:b6:2b:38:b0:36:90:c6:61:95:da:2e:b4:
                    e9:31:6a:d1:15:89:71:e4:a9:d8:86:65:1f:bc:71:
                    e3:0e:0e:25:71:5f:3e:65:de:2b:8f:16:4c:21:14:
                    36:fe:f0:ad:36:28:6c:d3:ec:19:33:a1:4b:90:13:
                    91:e3:5c:70:7e:1d:b2:14:02:2e:df:19:8f:2e:c3:
                    72:6b:ee:5f:4c:c7:01:50:62:e7:83:fb:6f:11:93:
                    38:3c:d3:0e:d6:5a:21:01:c2:87:a8:1d:0f:a9:07:
                    58:25:a5:e9:f9:1a:14:5d:cb:e6:37:6e:c1:97:78:
                    8f:e3:72:ea:41:e1:08:ad:e8:92:5c:01:89:d6:28:
                    93:f9:c1:09:1e:a0:1b:68:04:69:e4:06:01:14:62:
                    3d:51:20:f2:61:9e:b8:aa:e3:d2:7e:46:53:7d:aa:
                    b7:f8:a5:eb:4d:b4:e3:ea:ce:c8:6c:de:c6:53:17:
                    8f:17:c8:2c:59:06:41:e7:92:8d:84:da:02:c1:06:
                    11:8d:6f:82:78:08:5d:ad:fb:66:c7:f3:fa:8a:7d:
                    98:34:16:25:ab:81:92:2c:21:f4:de:09:06:a3:46:
                    5a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7F:8A:11:A9:42:50:CD:82:7C:7D:66:5D:B3:67:23:11:4E:0E:C2
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:35:47:c7:94:b7:91:bc:72:23:66:c3:0f:c6:a2:d5:51:32:
         98:92:d1:ba:9b:4b:6d:90:c6:1a:63:7e:be:dc:29:80:c2:ab:
         9a:97:91:0c:ee:89:60:f5:20:0c:ab:5f:88:26:1e:9c:3e:46:
         64:be:7e:e3:67:e4:d4:84:8c:69:67:5a:f3:a2:cc:60:7b:43:
         8c:bb:72:01:fe:0d:53:9f:08:33:20:8b:cf:a3:ad:af:42:de:
         25:0a:46:fb:0c:19:75:d6:05:a3:f3:0d:cc:00:a0:75:72:30:
         11:7d:b7:de:d0:97:02:3f:67:1f:71:05:ec:5f:81:32:3b:b1:
         37:44:7f:18:70:d2:f4:69:64:e3:fc:70:75:78:ef:67:fd:a3:
         8e:ff:be:e6:5f:56:7e:fa:84:91:1b:38:5f:75:16:8e:d7:05:
         93:64:e5:52:f9:5a:03:f4:f1:a0:4f:e4:dd:71:0b:d1:f4:b9:
         28:e7:d3:04:12:98:71:3b:2f:d4:11:3d:7a:d4:e3:b0:30:22:
         21:56:96:50:8f:61:0e:3d:42:70:ef:d6:5b:70:03:02:dc:c4:
         34:f1:ea:70:2f:3a:7c:39:b8:a8:cd:34:15:64:48:07:4d:07:
         b9:90:79:ee:c7:9e:d1:65:ab:ca:2a:f7:62:f1:72:ed:ab:ca:
         87:85:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 23:59:23 2025 by rpki-client