Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
File:                     B8A1A7850FE4606645CDB993613F0326921CB0E7.mft (raw, json)
Hash identifier:          E9gS14nuz+HgsRtT+0J7ChP2Hj0am1BltlQ8WIZUFDA=
Subject key identifier:   B8:97:39:1E:E7:EA:21:A6:95:8D:F9:B5:A9:64:93:4D:3F:66:DC:5A
Authority key identifier: B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
Certificate issuer:       /CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Certificate serial:       69CC15AA36259A6766B825AA7943F0AA5CB77785
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
Manifest number:          C6
Signing time:             Thu 24 Sep 2026 14:59:26 +0000
Manifest this update:     Thu 24 Sep 2026 14:54:26 +0000
Manifest next update:     Fri 25 Sep 2026 15:48:26 +0000
Files and hashes:         1: B8A1A7850FE4606645CDB993613F0326921CB0E7.crl (hash: G2XAzs9eMvpUZ3AALmn9RzhpuJmptstyosh54Jk6Cnk=)
                          2: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: UhpUzSIid4nElP2BrBkQKHrGQ01clvXoVE30CFaDI7E=)
                          3: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: JkqcF39siQEpLVJW2gQ2ytUcN1jCjiFbN20NnLblPt0=)
                          4: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: zaokcuHNDzcmimcaKDVhoGvkO70knqdLhKxQi56iB3c=)
                          5: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: IL+cf5Jp1UTXtxNmsZx0/FmjnEqHri/lduufwa4pgNw=)
                          6: 3130332e31302e36302e302f32342d3234203d3e203535363538.roa (hash: WPTgJgBZn9zU0LYC1z2CqvjiQ+vcOey/7diMUlVA1oM=)
                          7: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: TpopNA8dhMYp5nMtSS2yNBcol8TPklO5YRMrK3mUgQk=)
                          8: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: Z1LJzpos2TJA/rbCpeFoVSV3AuCvaZXzL6M2aKFZMOk=)
                          9: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: TmgfY35J3ejv4aaplxSsjZ2AmeTrspanURzc+GyKlb0=)
                          10: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: SiBmCSNab1clT6/WlGKKBm87r7qICCyQWuy3c9GEFKc=)
                          11: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: OL7tge3S2rADVt1ySDrlxO2bvMqBatfPuoG5qc2eXPc=)
                          12: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: +GuHf2Sf8fgzz63MUl6JUjs+OpYd+b5d1QqlS8U/zLw=)
                          13: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: yPQoyk2IWcVDeL52Wegfblo5RoA0TlgF1Qqwyri7gis=)
                          14: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: uVgnnU99/HNYyepOYAKO/nZDDx5ugki74GZP91MH9r4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
                          rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 10:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cc:15:aa:36:25:9a:67:66:b8:25:aa:79:43:f0:aa:5c:b7:77:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
        Validity
            Not Before: Sep 24 14:54:26 2026 GMT
            Not After : Sep 25 15:48:26 2026 GMT
        Subject: CN=B897391EE7EA21A6958DF9B5A964934D3F66DC5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:0b:6a:f3:fb:13:37:ac:86:ad:5a:7c:0c:
                    b3:3c:e1:10:f6:2a:75:d1:46:0d:c7:98:f9:44:1a:
                    7c:22:c9:16:3d:34:e4:ab:0a:7f:c2:64:32:0f:ee:
                    bb:b6:ac:72:94:f2:c5:47:e7:47:fb:8e:40:91:38:
                    13:da:dc:d3:33:4e:ab:4b:c9:2f:94:bb:31:5c:c8:
                    bb:1c:6d:f0:66:34:49:c5:87:b2:eb:48:ad:a7:71:
                    c8:45:59:e3:08:4d:58:54:b9:02:e1:86:f7:88:88:
                    78:00:40:bc:c0:7c:ed:06:bd:b1:7c:02:66:79:6d:
                    55:f8:f2:f0:bb:c5:49:29:d9:37:15:90:08:04:a2:
                    20:e9:31:20:a1:f7:bf:62:19:fa:66:d5:5a:3d:8b:
                    d1:2f:fd:72:da:e4:0b:68:f4:97:c4:24:b1:26:8f:
                    c8:fc:9e:dd:74:97:da:90:1e:3d:54:7f:b5:86:a3:
                    94:44:fa:0f:c1:99:96:d6:39:56:2e:07:33:b5:d7:
                    f8:ff:d1:98:9a:c8:60:0a:71:9a:c1:25:5b:53:6a:
                    ef:6f:75:0d:68:2b:b3:6e:11:29:1f:c5:82:8c:a0:
                    38:b1:ad:ba:e8:9c:05:f4:39:a0:7f:64:be:30:e2:
                    f6:ca:7a:5c:91:5a:2e:08:1b:c3:ab:46:71:fc:19:
                    2a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:97:39:1E:E7:EA:21:A6:95:8D:F9:B5:A9:64:93:4D:3F:66:DC:5A
            X509v3 Authority Key Identifier:
                keyid:B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f4:43:62:a4:b3:3e:9e:d7:8c:38:54:51:b3:7d:c6:75:13:
         95:62:ea:80:1a:98:b8:25:64:c9:3e:70:71:ff:67:91:c1:cd:
         7b:d9:f6:ad:9a:06:68:08:41:06:78:ca:99:94:02:13:a6:e5:
         51:f9:7c:9a:6b:9c:28:41:3f:22:a1:be:a7:50:d0:02:5b:c6:
         20:a0:e7:9a:a5:57:37:1a:f4:22:36:17:2e:1c:d5:95:c0:49:
         a2:4d:b1:6e:0a:67:2f:9f:a0:74:e7:bd:81:9b:1c:db:5f:b8:
         46:f0:54:24:3d:47:66:46:9f:bf:37:17:67:e4:1b:8a:9e:6d:
         93:9a:f2:96:cb:2d:3e:60:79:d9:74:f6:62:f3:01:ab:57:47:
         e3:a1:46:f6:1c:ca:77:cf:10:37:54:cb:84:85:e1:ad:6b:93:
         15:7b:0c:c1:24:0d:cd:ad:b9:71:52:42:e6:15:0e:8f:65:ae:
         ba:13:85:ba:d3:ea:d3:2a:db:82:aa:87:ab:91:4b:8c:2a:a5:
         8e:ed:63:8e:7b:e9:ad:9d:85:6d:1c:bb:97:02:e7:89:f3:a2:
         46:01:40:24:41:51:91:6a:37:9b:67:85:05:2f:9e:10:9e:d4:
         67:be:e9:e7:3d:83:72:fd:50:f8:c1:0f:63:c0:4a:81:51:4e:
         32:53:49:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:41:39 2026 by rpki-client