Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft
File:                     9DE0710D199DAE298457CA63B91BD20C03F148B9.mft (raw, json)
Hash identifier:          sW+8Hgxa5BzMRNyeTTQAKRfOEL1dkqONQvOaVUa95T8=
Subject key identifier:   46:43:80:47:AA:A0:1C:F5:0E:D9:62:37:8D:A0:0B:2A:BD:59:96:EC
Authority key identifier: 9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9
Certificate issuer:       /CN=9DE0710D199DAE298457CA63B91BD20C03F148B9
Certificate serial:       06C60F573A5715B83337B5366A266E08C45701A1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft
Manifest number:          C4
Signing time:             Fri 25 Sep 2026 18:53:56 +0000
Manifest this update:     Fri 25 Sep 2026 18:48:56 +0000
Manifest next update:     Sat 26 Sep 2026 18:59:56 +0000
Files and hashes:         1: 9DE0710D199DAE298457CA63B91BD20C03F148B9.crl (hash: 2zbvNjzIiFGNGI55Wv+NeGfvWfNE7MPHn0PWDIFqGrg=)
                          2: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: Wixcu+2ilRcFPig7lum9EHWYiNT3uxWOphv6H0Og4uE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl
                          rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 17:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c6:0f:57:3a:57:15:b8:33:37:b5:36:6a:26:6e:08:c4:57:01:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DE0710D199DAE298457CA63B91BD20C03F148B9
        Validity
            Not Before: Sep 25 18:48:56 2026 GMT
            Not After : Sep 26 18:59:56 2026 GMT
        Subject: CN=46438047AAA01CF50ED962378DA00B2ABD5996EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:91:2c:da:0c:9b:4b:31:fc:0c:e8:ed:19:
                    49:df:60:bd:d0:2a:f6:7e:f3:8c:25:ea:13:7a:32:
                    9c:26:5f:00:f3:ce:04:06:9d:98:75:cf:51:51:f7:
                    9c:80:1c:33:0e:02:ae:f6:ba:42:0e:0f:d3:03:ab:
                    e4:de:f5:0c:d8:89:2b:b0:42:4a:7e:a1:87:0c:59:
                    4e:b5:72:2b:23:2f:77:93:92:5c:d4:f1:d2:91:41:
                    40:63:5a:ae:49:b5:7d:78:5b:14:54:69:ca:d7:f8:
                    b7:26:3e:53:9f:55:68:c5:47:e9:95:f6:af:bd:5a:
                    4d:2f:c7:64:d1:42:f2:0a:6e:cf:47:58:6d:5f:aa:
                    e3:b4:4b:79:31:99:8a:2e:00:64:e5:8f:05:5f:9c:
                    7b:f9:5d:2d:38:5a:7f:72:38:a2:8d:ab:dc:d8:4a:
                    32:1f:d0:b3:20:5d:87:89:a9:ab:fa:5d:78:aa:51:
                    42:4c:03:7f:71:e2:6d:05:6e:a4:1a:a1:ec:d3:96:
                    09:c7:db:1c:12:07:04:8f:5f:ea:79:c7:3c:dc:f1:
                    eb:96:b3:15:05:2b:78:13:ba:2c:9c:0b:44:07:e6:
                    31:8e:7d:75:d1:ae:58:0b:d8:ed:47:ec:d2:a6:01:
                    45:ce:24:53:be:6e:6c:f0:98:ce:49:f4:6a:93:0c:
                    b6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:43:80:47:AA:A0:1C:F5:0E:D9:62:37:8D:A0:0B:2A:BD:59:96:EC
            X509v3 Authority Key Identifier:
                keyid:9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3b:4a:33:d9:60:2f:18:7c:15:2f:fa:aa:c0:2b:47:0f:7e:
         33:a0:60:55:0f:ab:39:2b:34:fc:9d:b6:23:69:f7:a5:a9:d8:
         ea:3c:9c:dc:d8:98:1c:81:5c:e1:f1:32:8e:ae:03:d3:a4:0b:
         6f:41:81:49:56:04:65:99:83:b6:f1:da:b6:e9:b7:e5:0d:91:
         af:51:2c:fa:55:58:08:90:d6:4f:93:9c:b3:c4:ea:6c:94:9c:
         be:fe:8e:d5:70:64:08:c5:ad:a9:9e:8a:c3:a9:3d:77:9a:c9:
         38:1f:2f:98:33:13:95:fb:51:19:ce:5a:bb:b3:c6:a4:04:fd:
         a9:9f:66:12:07:d3:65:b5:15:21:6d:e4:34:1f:66:54:8e:3d:
         32:a9:cc:f7:b6:b0:15:cd:79:14:83:f0:1f:47:e4:70:72:47:
         df:ff:79:f8:d2:a3:c0:f4:92:c9:6a:76:7d:ec:3f:17:d0:ed:
         6b:64:69:49:72:17:16:c9:fb:5e:7e:6b:60:81:7e:b1:82:d0:
         ac:53:91:3f:0b:68:7a:50:e0:b1:8e:fc:1b:b8:34:ca:3e:f8:
         f6:85:3e:88:3f:d0:65:4e:f7:b7:78:df:4c:35:cd:98:1a:18:
         1c:0a:09:6c:41:4b:86:e0:30:12:eb:4d:ea:e3:84:1d:2a:0b:
         a1:7a:5c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:49:10 2026 by rpki-client