Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft
File:                     9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft (raw, json)
Hash identifier:          3wmCrKJ3IQTwSzVWXo9u+PhFVCzeCLdAOVVDeNSLGjc=
Subject key identifier:   99:F5:4A:E0:55:D2:33:33:4C:D3:DF:31:FA:72:78:8A:3D:F0:39:26
Authority key identifier: 93:76:CD:F3:D2:A4:4C:C4:17:64:F8:9F:68:FD:7E:41:30:EB:35:1C
Certificate issuer:       /CN=9376CDF3D2A44CC41764F89F68FD7E4130EB351C
Certificate serial:       036EE56F65A1211499B0F409A077092AFF59D037
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft
Manifest number:          0105
Signing time:             Sat 14 Nov 2026 07:28:35 +0000
Manifest this update:     Sat 14 Nov 2026 07:23:35 +0000
Manifest next update:     Sun 15 Nov 2026 11:23:35 +0000
Files and hashes:         1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: 1y2hMqgy1k18v9KwV+64AHSdurxHF23pHNvVVwGqp7s=)
                          2: 9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl (hash: wgBY9hKrimvdk52qkAzWH8fdtZy6W19QkwLkKsvY+/w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl
                          rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 11:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6e:e5:6f:65:a1:21:14:99:b0:f4:09:a0:77:09:2a:ff:59:d0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9376CDF3D2A44CC41764F89F68FD7E4130EB351C
        Validity
            Not Before: Nov 14 07:23:35 2026 GMT
            Not After : Nov 15 11:23:35 2026 GMT
        Subject: CN=99F54AE055D233334CD3DF31FA72788A3DF03926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a2:fa:59:f5:f5:cd:d3:b2:7f:8f:91:c8:d1:
                    f6:be:ad:b0:82:66:51:bb:1d:f0:32:66:58:53:18:
                    2b:38:e3:5f:26:04:c8:d3:6e:06:82:bf:5a:bd:40:
                    9f:97:cc:b5:5e:ee:9b:16:27:d1:f0:3b:ad:2c:de:
                    a8:35:b8:5a:e7:9e:ae:fe:e6:61:cf:52:c4:9a:4a:
                    21:9b:06:ce:73:09:f4:77:22:b0:ba:e6:0e:20:08:
                    a6:73:ee:50:3e:61:e0:d0:a3:a6:ff:a6:ca:ee:cf:
                    56:36:b4:ad:48:8a:ef:8f:95:cc:56:1f:4d:0f:5c:
                    77:fd:d1:a2:dd:0d:c0:68:f6:78:f9:23:39:f3:e9:
                    39:27:0b:37:b7:b4:26:1d:54:ba:8d:42:7b:60:9e:
                    11:b8:aa:e3:ae:06:de:f0:50:f0:cd:10:86:5a:7e:
                    c2:11:66:63:3f:8b:78:44:45:27:5e:c5:93:c7:d5:
                    56:7a:fb:01:f0:6c:eb:5e:ca:0a:46:8d:8b:95:23:
                    b6:1d:47:b6:64:66:18:7d:fe:c8:15:0d:98:b4:14:
                    9f:63:de:04:ce:63:af:b3:dc:0d:5f:bf:3d:8c:12:
                    95:6d:75:ae:e7:b8:b4:63:02:ec:30:80:43:b9:80:
                    ac:95:7e:0c:0c:8f:0e:95:39:ee:37:55:59:80:8c:
                    c6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F5:4A:E0:55:D2:33:33:4C:D3:DF:31:FA:72:78:8A:3D:F0:39:26
            X509v3 Authority Key Identifier:
                keyid:93:76:CD:F3:D2:A4:4C:C4:17:64:F8:9F:68:FD:7E:41:30:EB:35:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a5:13:bf:8f:6e:2d:84:30:bb:98:40:21:bf:fe:81:55:20:
         1e:fb:65:4f:4f:f2:2f:76:8a:c7:43:08:12:9f:1d:98:27:5e:
         72:96:5f:24:ac:a4:18:9e:1b:6f:04:27:4f:3a:ac:fc:3e:14:
         f9:99:3f:60:b4:c3:a9:0e:10:82:98:d2:89:05:cb:3c:87:cf:
         b3:7e:a6:69:ff:fb:63:27:cc:ed:93:17:90:a5:a2:7f:31:73:
         c2:92:af:0a:62:1b:60:7e:9f:bd:ea:2c:6f:a1:94:77:ff:0c:
         11:1c:12:ff:4c:f0:31:88:35:86:6c:50:3c:0a:08:05:22:d8:
         e6:1e:c0:37:0a:ef:bc:b9:44:e6:4f:19:4c:de:40:a5:34:dc:
         6b:ba:23:64:ff:a5:d9:73:fc:bd:88:ab:1a:be:0c:ed:53:36:
         ad:e1:0a:1e:92:6d:39:85:0f:e0:15:e2:27:fc:03:b0:22:60:
         5f:7e:f7:29:49:c9:d1:ce:df:96:6d:5a:2e:e4:01:42:01:8d:
         de:83:e1:01:43:f4:80:55:8e:7b:b6:9c:41:35:32:be:80:b8:
         34:77:98:cd:bb:c9:98:dd:88:bf:1b:01:e3:5c:4e:10:d2:bb:
         86:58:32:51:b1:8a:be:a0:8d:6c:9d:58:14:91:7f:61:1a:29:
         00:3c:aa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:34:57 2026 by rpki-client