Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft
File:                     8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft (raw, json)
Hash identifier:          UFrn3HQz7SI7m91U8cLYLw/YL0GCBEOeSKaWE8zskP0=
Subject key identifier:   09:F2:8C:DC:E4:4F:D3:1D:6A:41:C0:4A:65:F3:5D:16:E0:5E:A9:53
Authority key identifier: 80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6
Certificate issuer:       /CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6
Certificate serial:       30D2A63DC5D757CA59DE1DF5CD13EF70279E06A7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft
Manifest number:          C1
Signing time:             Thu 24 Sep 2026 05:42:47 +0000
Manifest this update:     Thu 24 Sep 2026 05:37:47 +0000
Manifest next update:     Fri 25 Sep 2026 07:30:47 +0000
Files and hashes:         1: AS139994.roa (hash: yvMW+tHCsBkuY1gG/yGlJ6JOSC3lCz//Xfli/4HGudE=)
                          2: AS24203.roa (hash: elsc0fS7A3LxkWGHoyme7eZUKOvhFf04i/z5CF+hz8c=)
                          3: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl (hash: WFY4X1bJ/7jzd/8j/IqCzQcWtHPfGRtSFc2XqWF6U6Q=)
                          4: AS17885.roa (hash: QDIkXwtnGbligvAEMFVpJlik2NMuLqD9yutNqqC9tvo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl
                          rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 05:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d2:a6:3d:c5:d7:57:ca:59:de:1d:f5:cd:13:ef:70:27:9e:06:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6
        Validity
            Not Before: Sep 24 05:37:47 2026 GMT
            Not After : Sep 25 07:30:47 2026 GMT
        Subject: CN=09F28CDCE44FD31D6A41C04A65F35D16E05EA953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:37:d3:16:fc:83:0f:f8:16:00:0a:e6:1f:fc:
                    66:15:c8:ca:35:b9:55:73:b5:34:07:11:51:64:f5:
                    9f:08:a9:21:3b:78:ae:7b:18:57:e6:5a:41:19:de:
                    ff:c1:6d:f8:f0:15:17:ca:0b:96:66:aa:f5:eb:99:
                    7b:99:3d:e5:52:d5:31:e9:d0:9e:82:07:ef:2e:01:
                    48:07:fc:b5:25:af:0b:51:07:5f:c3:67:f5:6f:05:
                    3e:94:20:f7:ff:32:47:a7:2a:11:d7:80:f7:75:ee:
                    20:05:0e:cd:d4:3a:3d:95:b0:36:b6:45:59:ee:53:
                    06:de:d2:a3:72:2a:fc:7f:91:ba:6e:45:31:71:37:
                    93:37:7d:d4:2a:1a:47:6c:5d:fb:1a:2b:34:ab:61:
                    e2:68:58:a0:13:fb:95:a4:56:b1:b9:ab:4e:2f:19:
                    ff:f8:84:cc:e3:2a:cc:03:95:1f:be:dd:19:ea:a5:
                    52:0e:88:ec:5a:34:e3:29:cf:94:61:6f:d9:d0:19:
                    2a:ed:22:af:bd:4c:a5:0f:ee:42:53:75:ff:53:80:
                    18:f1:03:55:71:2f:e6:ed:0d:ac:6a:c6:0c:55:2f:
                    c3:ee:04:af:84:f0:ea:81:94:21:b4:9d:69:6b:99:
                    35:7c:dc:72:a6:35:c4:7e:7a:c6:ae:02:cc:8c:9d:
                    12:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F2:8C:DC:E4:4F:D3:1D:6A:41:C0:4A:65:F3:5D:16:E0:5E:A9:53
            X509v3 Authority Key Identifier:
                keyid:80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:3f:11:66:15:75:19:b9:39:53:a5:4d:4f:3f:2c:5b:bd:1a:
         79:46:5a:b8:18:3f:5c:5d:36:16:64:74:9a:56:d9:fe:d1:63:
         cc:4b:06:de:ef:0f:84:76:23:ff:bf:a8:c8:7f:92:36:6f:23:
         73:c4:de:eb:08:07:2a:8c:ee:2e:6a:e5:ab:3f:d1:8b:08:d5:
         8d:5e:8f:a3:90:96:08:6e:76:55:aa:ec:4a:41:7b:1d:d5:28:
         5c:c2:93:74:6f:2d:97:4c:91:4f:e4:49:15:e8:23:e9:41:91:
         b3:4e:74:ef:ba:2c:25:7e:e9:76:0c:bd:0a:d4:ec:5a:ce:56:
         f2:80:25:6f:17:a0:77:c7:84:01:cb:90:53:75:b7:17:0b:ff:
         d3:e4:05:36:72:09:98:3d:d7:bd:27:c0:60:e5:6f:f0:34:7c:
         b6:4d:80:39:59:91:ed:24:9c:4d:2b:f3:b1:b7:cf:17:eb:fb:
         3b:69:bb:15:2f:46:4d:74:17:5c:ed:ce:23:21:fa:84:6a:31:
         ee:68:58:00:21:0d:62:15:1d:9c:b7:b4:fc:22:35:43:d4:5a:
         dd:d2:d3:97:79:97:17:e0:c7:04:29:5e:be:52:df:ea:b9:8e:
         0d:1b:95:27:d5:39:61:f1:41:8b:9d:09:3a:93:7b:1e:72:f4:
         13:e3:3a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:15:23 2026 by rpki-client