Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft
File:                     9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft (raw, json)
Hash identifier:          yZU0skuGhPdK1qAxb5bVTb4fMCDEqDf3A8BfAlKmVio=
Subject key identifier:   8C:2F:58:A2:7B:A8:CF:59:CB:5E:73:B0:09:94:BD:AC:55:C6:08:B6
Authority key identifier: 9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00
Certificate issuer:       /CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800
Certificate serial:       6625A4043E4DB9B1A84ACCBA8DBC9439790A186F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft
Manifest number:          0F
Signing time:             Wed 13 May 2026 02:46:42 +0000
Manifest this update:     Wed 13 May 2026 02:41:42 +0000
Manifest next update:     Thu 14 May 2026 06:30:42 +0000
Files and hashes:         1: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: WkzU0ifpIbp5OQ/6TDxMH+vwFG2tqv2mqNzHskMqmF0=)
                          2: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: 2N+TEQ769mQU4C1i4Rld3w1DT7X5Tq5lgzhroXjz5Hg=)
                          3: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl (hash: iv+Ld1nsvd+05S+wtrxYRAlVh6MRuKuhatb8/D3q85Y=)
                          4: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: J9RbUPOqUx6qGs/3TSnBbVnRso5umnmyOklAgJwt1Js=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl
                          rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:25:a4:04:3e:4d:b9:b1:a8:4a:cc:ba:8d:bc:94:39:79:0a:18:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800
        Validity
            Not Before: May 13 02:41:42 2026 GMT
            Not After : May 14 06:30:42 2026 GMT
        Subject: CN=8C2F58A27BA8CF59CB5E73B00994BDAC55C608B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:19:36:ab:34:4d:88:02:e6:21:37:9b:47:ef:
                    69:96:f6:8f:83:88:fa:dc:50:6c:d8:7f:aa:6a:c3:
                    93:1e:c1:17:ac:3c:5b:34:b9:ae:28:0b:e6:cd:30:
                    7a:3b:84:d3:c8:85:d2:4d:7a:3f:7e:42:7c:30:20:
                    e3:6f:af:71:7e:3e:3f:e6:a1:b1:46:1f:8d:4b:3e:
                    5a:12:ed:e9:4e:38:6c:a0:8f:2e:d1:94:eb:94:10:
                    41:bb:ab:9a:db:57:c8:b9:9c:9f:42:d9:0e:54:43:
                    12:38:4e:a6:62:b8:9d:7c:37:dc:55:94:0c:2a:29:
                    c2:40:e2:c8:2e:39:6d:32:73:83:d4:a1:a0:6e:b5:
                    a8:fb:a5:4e:f6:60:0c:80:aa:db:a9:3a:7c:99:b3:
                    a3:c9:51:92:f7:1e:b5:a8:33:0e:ae:ed:c3:4c:b2:
                    c0:02:7e:2f:37:d7:2b:b9:88:6d:3e:99:02:0f:64:
                    cb:c9:bb:61:4b:63:eb:ad:e5:07:0b:6c:59:a0:f7:
                    52:21:89:3a:28:d1:a4:37:37:70:0e:30:a8:35:42:
                    fe:c0:ef:f8:ef:11:07:c8:9b:f4:ba:de:91:44:d6:
                    59:95:62:d5:01:95:eb:56:e8:c2:eb:bb:ef:b1:8d:
                    ff:ac:c5:dc:9f:f7:7f:69:4b:bb:d6:9c:42:9d:cf:
                    ed:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2F:58:A2:7B:A8:CF:59:CB:5E:73:B0:09:94:BD:AC:55:C6:08:B6
            X509v3 Authority Key Identifier:
                keyid:9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:13:63:d8:23:9b:d1:3a:1a:a0:b9:7b:35:82:bd:0b:da:f1:
         20:14:d7:98:03:38:6c:8f:61:1a:64:f1:30:1f:55:0c:93:a4:
         4a:68:f3:1a:4f:dd:79:32:4a:2a:8e:02:60:21:e4:2d:27:b7:
         13:30:ce:89:cb:43:6c:62:b1:ee:7d:72:24:4a:9d:c7:c7:d3:
         de:ab:64:01:5c:71:e7:ec:ad:3f:81:b9:64:ad:9a:6e:69:50:
         94:67:55:eb:68:d2:07:2c:55:18:f2:62:cc:93:53:af:90:e6:
         95:40:4b:6a:3a:f3:7d:a3:3c:3a:8b:9e:27:15:dc:c3:94:82:
         d0:91:54:d5:c0:1f:9c:ec:df:9d:fd:eb:27:27:95:a4:16:0b:
         35:b8:f3:c5:15:b6:de:23:a2:6b:3c:4b:f0:7c:bf:51:7d:d7:
         cc:c7:d1:c1:30:ce:1a:4b:76:56:a7:38:83:8c:97:6c:e9:55:
         1d:fd:e7:2b:41:d8:23:be:a8:46:49:a9:b7:2f:73:cf:39:0c:
         c1:9a:6b:f6:26:21:58:68:ab:fb:45:d7:64:21:de:7b:62:54:
         bc:e5:01:f3:df:f0:6c:08:23:87:9c:85:40:fe:03:e4:22:fc:
         8d:4b:8f:8e:64:a4:c2:21:9b:fe:c1:74:d2:f2:78:08:da:d6:
         7d:01:9e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:52:51 2026 by rpki-client