Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft
File:                     9B2D9946FF043D1081C26FD38F0817310077BFC7.mft (raw, json)
Hash identifier:          p1gjfyKawBfERwfCTHngeqX1SBurN54cnGtEt3cvbx0=
Subject key identifier:   1C:FC:2C:16:1C:A8:B1:5C:84:70:E3:A9:34:C4:94:F4:4D:31:0B:82
Authority key identifier: 9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7
Certificate issuer:       /CN=9B2D9946FF043D1081C26FD38F0817310077BFC7
Certificate serial:       6F00A6572E1F14DAA8FA107E3F85C6A2EDAF3BEE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft
Manifest number:          0106
Signing time:             Sat 14 Nov 2026 17:41:46 +0000
Manifest this update:     Sat 14 Nov 2026 17:36:46 +0000
Manifest next update:     Sun 15 Nov 2026 19:28:46 +0000
Files and hashes:         1: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: oePR/73r7MSIzHQUks2lMsK7CVUF0CNaDFGyG/xqYVQ=)
                          2: 9B2D9946FF043D1081C26FD38F0817310077BFC7.crl (hash: Xaf/oHg7EjejbuzYiL76EU4F6UiqFJb9Mbg/vfENBk0=)
                          3: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: nWvsjEg3FhCbHhiH6HxunuDCxB9lgrvkKOpoSSa7E9Q=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl
                          rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 18:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:00:a6:57:2e:1f:14:da:a8:fa:10:7e:3f:85:c6:a2:ed:af:3b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B2D9946FF043D1081C26FD38F0817310077BFC7
        Validity
            Not Before: Nov 14 17:36:46 2026 GMT
            Not After : Nov 15 19:28:46 2026 GMT
        Subject: CN=1CFC2C161CA8B15C8470E3A934C494F44D310B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:c4:2f:0f:59:08:50:70:84:98:5e:da:e4:
                    62:fd:bc:e5:b0:a0:53:36:8f:96:f5:d5:19:32:6e:
                    b8:33:1e:0e:88:49:67:ce:dc:32:5e:95:1b:50:95:
                    16:3d:34:e5:c7:27:e7:a4:01:05:71:02:c0:4c:c7:
                    99:f5:52:68:a5:0a:d9:72:de:85:34:5d:97:c8:f6:
                    82:70:c2:51:7c:45:04:e7:20:8b:30:02:9f:04:80:
                    60:d6:94:a8:00:9e:53:7f:c9:46:e6:35:aa:0b:15:
                    65:9d:36:f6:cf:74:57:59:1b:05:3a:fc:93:e5:69:
                    de:1e:f8:74:60:b8:84:85:52:2c:69:eb:c7:b1:ec:
                    52:05:98:aa:ac:7b:6e:ce:c1:31:a8:6b:ab:6a:4a:
                    2c:90:76:da:cf:b0:98:1a:5f:02:e0:70:54:e1:94:
                    72:af:8a:58:1c:f3:4d:55:15:11:13:2e:ac:fd:83:
                    bb:74:4c:ff:ef:5e:a7:19:60:6d:05:3c:27:c9:d0:
                    af:6f:9b:3d:55:9a:45:86:cb:35:29:7d:c3:1b:ec:
                    b2:ed:2a:ea:87:f0:5e:9f:33:14:02:64:f4:fe:04:
                    85:6c:45:1b:dc:14:79:59:4a:7f:ac:cb:08:66:e4:
                    a6:10:84:4f:13:a1:e7:65:98:bf:1d:95:ff:bd:e7:
                    f0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FC:2C:16:1C:A8:B1:5C:84:70:E3:A9:34:C4:94:F4:4D:31:0B:82
            X509v3 Authority Key Identifier:
                keyid:9B:2D:99:46:FF:04:3D:10:81:C2:6F:D3:8F:08:17:31:00:77:BF:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/9B2D9946FF043D1081C26FD38F0817310077BFC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:44:3c:59:88:11:73:a0:ff:4f:b5:0d:f2:77:64:da:c1:6a:
         7c:98:cc:ea:44:b3:0f:0f:ce:08:8b:86:61:c6:6e:27:bf:50:
         73:87:5a:a7:76:93:57:63:54:41:91:a4:3e:6e:dd:07:a1:76:
         7f:13:0a:6f:66:72:b6:22:73:5a:66:29:06:fe:e3:cd:c6:2a:
         ce:b1:62:91:bb:fd:c1:1c:10:a8:1a:77:c5:36:88:7b:82:03:
         5a:ea:e6:6b:bb:c2:2e:85:1f:95:ee:73:92:dd:1c:35:b4:7d:
         86:ed:a3:a6:87:b0:6a:1e:8a:50:c2:80:dc:da:b0:2e:82:8a:
         05:1f:24:e6:68:d4:20:8c:b5:70:85:79:fb:41:80:91:d4:0f:
         13:cf:42:be:a8:ee:b5:c8:52:75:cb:b8:f5:c5:a9:b1:76:52:
         d6:a4:3b:65:94:fc:f7:4b:c6:f2:f2:40:74:e2:2c:12:ba:af:
         df:40:d6:46:9b:e7:f5:c7:61:ce:70:86:ef:24:f5:4b:65:8f:
         4f:6e:13:52:2b:06:59:00:30:b8:37:79:c4:ba:22:a7:76:d7:
         db:07:2c:e9:bf:d3:97:7a:28:9b:bc:38:15:64:0a:5b:bc:22:
         bb:23:2e:14:e2:f9:7c:0b:be:fd:30:28:de:7c:bb:66:9c:bc:
         a2:0d:12:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:22:52 2026 by rpki-client