Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
File:                     B8A1A7850FE4606645CDB993613F0326921CB0E7.mft (raw, json)
Hash identifier:          1XGwv1lWFnn/gRDlzkWQLOFIjTK2765esE98BQPvvbY=
Subject key identifier:   C5:78:11:D5:B3:C0:CF:68:38:B6:0E:83:EA:F0:B1:36:B7:44:DE:0F
Authority key identifier: B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
Certificate issuer:       /CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Certificate serial:       5A8C1C31BB177AE7B2984345B3B0FDC32AB90097
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
Manifest number:          C9
Signing time:             Sat 26 Sep 2026 22:12:37 +0000
Manifest this update:     Sat 26 Sep 2026 22:07:37 +0000
Manifest next update:     Mon 28 Sep 2026 00:59:37 +0000
Files and hashes:         1: B8A1A7850FE4606645CDB993613F0326921CB0E7.crl (hash: qXvDrB8oSjCZrsf+LXzGzbx09kybRHrDr77o6yvAHxU=)
                          2: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: SiBmCSNab1clT6/WlGKKBm87r7qICCyQWuy3c9GEFKc=)
                          3: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: JkqcF39siQEpLVJW2gQ2ytUcN1jCjiFbN20NnLblPt0=)
                          4: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: IL+cf5Jp1UTXtxNmsZx0/FmjnEqHri/lduufwa4pgNw=)
                          5: 3130332e31302e36302e302f32342d3234203d3e203535363538.roa (hash: WPTgJgBZn9zU0LYC1z2CqvjiQ+vcOey/7diMUlVA1oM=)
                          6: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: uVgnnU99/HNYyepOYAKO/nZDDx5ugki74GZP91MH9r4=)
                          7: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: TmgfY35J3ejv4aaplxSsjZ2AmeTrspanURzc+GyKlb0=)
                          8: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: OL7tge3S2rADVt1ySDrlxO2bvMqBatfPuoG5qc2eXPc=)
                          9: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: UhpUzSIid4nElP2BrBkQKHrGQ01clvXoVE30CFaDI7E=)
                          10: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: Z1LJzpos2TJA/rbCpeFoVSV3AuCvaZXzL6M2aKFZMOk=)
                          11: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: zaokcuHNDzcmimcaKDVhoGvkO70knqdLhKxQi56iB3c=)
                          12: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: TpopNA8dhMYp5nMtSS2yNBcol8TPklO5YRMrK3mUgQk=)
                          13: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: +GuHf2Sf8fgzz63MUl6JUjs+OpYd+b5d1QqlS8U/zLw=)
                          14: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: yPQoyk2IWcVDeL52Wegfblo5RoA0TlgF1Qqwyri7gis=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
                          rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 12:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8c:1c:31:bb:17:7a:e7:b2:98:43:45:b3:b0:fd:c3:2a:b9:00:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
        Validity
            Not Before: Sep 26 22:07:37 2026 GMT
            Not After : Sep 28 00:59:37 2026 GMT
        Subject: CN=C57811D5B3C0CF6838B60E83EAF0B136B744DE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:88:cc:0a:28:09:e4:3f:8d:0f:6a:a0:f7:
                    d0:3e:54:58:d9:01:eb:da:61:cd:6e:e3:1d:3f:57:
                    cd:36:80:f2:bf:69:4f:1d:77:bb:ae:3c:bc:78:ca:
                    70:67:c9:14:ee:5b:42:e5:e0:b6:d2:55:03:43:75:
                    7b:d6:c5:d3:87:70:7a:dc:09:4b:12:95:c1:88:51:
                    c2:e8:bc:09:f3:c7:de:f6:f0:90:e7:95:d8:11:15:
                    d0:62:4d:5a:7d:f1:58:40:8d:a8:6b:78:27:22:4e:
                    8a:05:64:a3:d1:9e:92:c6:5c:71:46:f1:9a:6a:cf:
                    88:28:f4:f8:7b:e9:3b:99:d3:9f:c5:04:6d:23:9b:
                    bd:19:ea:bc:c2:fc:0b:2c:d0:f2:e4:04:c7:5d:21:
                    da:dd:6d:06:84:e4:d8:8e:96:3e:75:39:7b:e6:1f:
                    13:36:ef:bc:9a:e7:f4:9c:4e:99:8c:37:2d:90:4b:
                    cb:96:4f:fe:7f:b9:9e:6a:a8:c8:c8:31:ce:b0:4a:
                    4f:b9:86:3d:ac:23:79:d7:76:3e:48:06:fd:e1:61:
                    52:9b:09:d2:80:10:73:0b:e1:31:39:d5:35:eb:01:
                    d2:8a:0e:90:8c:8a:6a:04:2e:62:e1:f5:54:41:5c:
                    25:e1:f5:37:b7:1c:d6:aa:d7:a5:9f:f8:4b:7f:98:
                    44:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:78:11:D5:B3:C0:CF:68:38:B6:0E:83:EA:F0:B1:36:B7:44:DE:0F
            X509v3 Authority Key Identifier:
                keyid:B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:21:1d:ca:9c:bc:30:47:ec:34:c8:b8:3c:65:f6:a9:ad:c5:
         31:a2:78:73:a9:e8:c7:1a:02:0b:ed:b9:11:5f:c5:93:24:88:
         af:88:9e:5f:95:8a:7e:e6:17:bd:8c:2c:cc:e0:76:dc:2f:ea:
         94:e3:3e:74:d3:6e:aa:7a:c2:44:69:52:dd:d1:d0:6e:09:c9:
         6c:96:f9:30:d6:e8:2b:c0:87:4a:45:54:6e:cc:63:7f:96:90:
         b4:5b:b0:4a:70:5f:29:45:8e:ef:58:e6:60:97:c5:74:a9:c6:
         1b:70:12:39:05:a7:18:e6:98:cb:f4:85:6e:7f:86:85:66:e8:
         9b:bc:b5:3c:4b:1f:07:8c:1b:de:36:76:9d:28:eb:da:21:55:
         87:33:3f:19:5c:1d:29:35:89:80:ca:91:56:e8:68:6c:e6:81:
         9e:0b:a2:ed:26:7b:5d:a1:05:fb:e3:86:0f:a1:a6:1c:be:ed:
         4c:14:f4:27:fa:24:f2:57:fa:6c:5d:f4:80:f2:46:38:32:d7:
         1e:80:aa:45:54:94:cd:ac:37:2d:c8:5a:5b:53:ff:48:11:cf:
         01:31:1c:04:57:6e:44:08:83:c8:99:18:34:8c:8a:75:3d:98:
         6a:3f:71:54:d3:ff:eb:47:c1:da:a5:91:75:ed:58:63:cf:b5:
         b8:f2:0e:67
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWowcMbsXeueymENFs7D9wyq5AJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhBMUE3ODUwRkU0NjA2NjQ1Q0RCOTkzNjEzRjAzMjY5
MjFDQjBFNzAeFw0yNjA5MjYyMjA3MzdaFw0yNjA5MjgwMDU5MzdaMDMxMTAvBgNV
BAMTKEM1NzgxMUQ1QjNDMENGNjgzOEI2MEU4M0VBRjBCMTM2Qjc0NERFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUx4jMCigJ5D+ND2qg99A+VFjZ
AevaYc1u4x0/V802gPK/aU8dd7uuPLx4ynBnyRTuW0Ll4LbSVQNDdXvWxdOHcHrc
CUsSlcGIUcLovAnzx9728JDnldgRFdBiTVp98VhAjahreCciTooFZKPRnpLGXHFG
8Zpqz4go9Ph76TuZ05/FBG0jm70Z6rzC/Ass0PLkBMddIdrdbQaE5NiOlj51OXvm
HxM277ya5/ScTpmMNy2QS8uWT/5/uZ5qqMjIMc6wSk+5hj2sI3nXdj5IBv3hYVKb
CdKAEHML4TE51TXrAdKKDpCMimoELmLh9VRBXCXh9Te3HNaq16Wf+Et/mEQJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxXgR1bPAz2g4tg6D6vCxNrdE3g8wHwYDVR0j
BBgwFoAUuKGnhQ/kYGZFzbmTYT8DJpIcsOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWI0ZTE5NWUtMTJkZS00YzNjLTkzZTUtNTIyZWU1NDAxOGQ2LzAvQjhBMUE3ODUw
RkU0NjA2NjQ1Q0RCOTkzNjEzRjAzMjY5MjFDQjBFNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9COEExQTc4NTBGRTQ2MDY2NDVDREI5OTM2MTNGMDMyNjkyMUNC
MEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI0ZTE5NWUtMTJkZS00YzNjLTkz
ZTUtNTIyZWU1NDAxOGQ2LzAvQjhBMUE3ODUwRkU0NjA2NjQ1Q0RCOTkzNjEzRjAz
MjY5MjFDQjBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABQhHcqcvDBH7DTIuDxl9qmtxTGieHOp6Mca
AgvtuRFfxZMkiK+Inl+Vin7mF72MLMzgdtwv6pTjPnTTbqp6wkRpUt3R0G4JyWyW
+TDW6CvAh0pFVG7MY3+WkLRbsEpwXylFju9Y5mCXxXSpxhtwEjkFpxjmmMv0hW5/
hoVm6Ju8tTxLHweMG942dp0o69ohVYczPxlcHSk1iYDKkVboaGzmgZ4Lou0me12h
Bfvjhg+hphy+7UwU9Cf6JPJX+mxd9IDyRjgy1x6AqkVUlM2sNy3IWltT/0gRzwEx
HARXbkQIg8iZGDSMinU9mGo/cVTT/+tHwdqlkXXtWGPPtbjyDmc=
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:32:13 2026 by rpki-client