Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/9F6CD463AF90E46AF9F4F3579338A83988879D90.mft
File:                     9F6CD463AF90E46AF9F4F3579338A83988879D90.mft (raw, json)
Hash identifier:          oKo/zWXPflaQnCIbL2nXpoDdwbIkpBhBvl8JeHKD53Q=
Subject key identifier:   A1:FB:21:8C:16:84:6A:65:28:B8:D6:7D:77:92:D3:4B:DE:10:0B:6D
Authority key identifier: 9F:6C:D4:63:AF:90:E4:6A:F9:F4:F3:57:93:38:A8:39:88:87:9D:90
Certificate issuer:       /CN=9F6CD463AF90E46AF9F4F3579338A83988879D90
Certificate serial:       6BEE0CA57E8106A54CE56DCFC84207772A1B009F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F6CD463AF90E46AF9F4F3579338A83988879D90.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/9F6CD463AF90E46AF9F4F3579338A83988879D90.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 15:30:05 +0000
Manifest this update:     Tue 12 May 2026 15:25:05 +0000
Manifest next update:     Wed 13 May 2026 18:12:05 +0000
Files and hashes:         1: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: ily/GpbYlUVPUCNaO1XHbCDBJd/eJkDnlTWFTYGWQOE=)
                          2: 9F6CD463AF90E46AF9F4F3579338A83988879D90.crl (hash: /iqzPxOp1qzQdqwGIXPaAo8470/7zHuCGgSqBzp7HWc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/9F6CD463AF90E46AF9F4F3579338A83988879D90.crl
                          rsync://rpki-rsync.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/9F6CD463AF90E46AF9F4F3579338A83988879D90.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F6CD463AF90E46AF9F4F3579338A83988879D90.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ee:0c:a5:7e:81:06:a5:4c:e5:6d:cf:c8:42:07:77:2a:1b:00:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F6CD463AF90E46AF9F4F3579338A83988879D90
        Validity
            Not Before: May 12 15:25:05 2026 GMT
            Not After : May 13 18:12:05 2026 GMT
        Subject: CN=A1FB218C16846A6528B8D67D7792D34BDE100B6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:04:0c:f7:23:31:1a:20:27:5a:a7:8d:3b:
                    56:d9:24:87:12:49:a5:02:9a:ff:af:fd:2d:5f:d2:
                    81:cc:28:73:70:76:e3:d8:72:a2:d3:e4:fb:95:52:
                    d5:8d:23:7f:64:c7:7b:5f:39:bf:9e:2e:fd:ef:42:
                    1b:f9:dd:80:09:71:95:e8:e8:03:aa:58:09:13:0f:
                    1d:e0:90:5e:73:ed:82:49:08:b5:07:dc:29:f9:a9:
                    cc:ad:97:43:b1:17:04:ce:5a:b3:24:1e:3f:41:a5:
                    3f:6c:6a:20:88:84:ec:06:6c:4a:f8:34:86:6f:4e:
                    6a:bf:82:61:a7:91:b6:ca:d3:25:25:fc:b1:41:ec:
                    4c:a2:8e:8d:d4:23:79:c8:13:ce:c2:ef:b8:6b:45:
                    2c:5a:80:eb:f7:2a:d4:dd:3b:eb:e3:e9:ee:e3:de:
                    2f:56:98:cd:99:7e:0c:e4:40:33:af:6b:19:00:78:
                    4e:18:7f:2f:39:48:58:7a:28:99:85:c5:79:18:5c:
                    be:d1:d1:c2:2f:3b:38:2c:89:66:1a:2a:1f:f7:85:
                    e3:a9:f4:93:6b:3d:da:1b:0c:3c:b3:d8:59:60:66:
                    3c:c8:39:ed:1f:ad:55:91:74:5e:d6:e4:d4:c6:c5:
                    a4:99:c7:61:8d:17:ad:3b:c2:30:e5:36:83:f0:19:
                    22:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FB:21:8C:16:84:6A:65:28:B8:D6:7D:77:92:D3:4B:DE:10:0B:6D
            X509v3 Authority Key Identifier:
                keyid:9F:6C:D4:63:AF:90:E4:6A:F9:F4:F3:57:93:38:A8:39:88:87:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/9F6CD463AF90E46AF9F4F3579338A83988879D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F6CD463AF90E46AF9F4F3579338A83988879D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/9F6CD463AF90E46AF9F4F3579338A83988879D90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3b:15:38:ca:d2:a1:e7:ff:67:9b:68:47:b5:5e:6d:bc:07:
         61:4c:b1:f2:1f:45:84:2b:47:b9:7f:7c:f8:b8:ea:5e:3b:2a:
         33:8a:6f:4d:30:51:ba:72:a9:4f:00:23:55:d5:14:b3:2c:86:
         5f:f5:f6:bf:07:5a:b2:89:c2:c9:71:90:3a:6f:e6:25:32:f6:
         7c:b8:6a:80:23:47:2f:77:0c:e4:72:c8:05:d1:70:48:ec:13:
         10:6f:83:6c:ca:25:4a:f5:07:b4:a0:66:ca:ca:d6:24:e3:f0:
         f9:da:80:81:89:ef:af:9a:c8:9c:1d:1d:9d:fa:b1:bc:c1:e1:
         f8:07:22:41:ea:e6:7c:69:12:6c:d0:95:92:46:c1:9a:c1:a1:
         40:01:11:30:e9:38:e5:a9:b8:f2:ce:38:0d:bc:9a:0f:8e:dd:
         b9:1e:74:a0:11:a5:80:10:5d:52:14:e0:1c:76:fb:4c:44:06:
         a8:b4:0b:83:4f:51:86:85:e8:50:0a:d5:33:bc:22:32:6a:6f:
         ee:df:47:6e:f9:91:77:bd:8b:af:b8:3e:73:3a:b4:f0:c6:f9:
         59:69:ca:6e:7a:b8:eb:4e:d3:39:f1:97:05:fb:84:d4:a9:5e:
         f3:d7:d0:2a:ce:a7:36:69:79:be:fb:7a:63:90:b5:27:32:54:
         4e:2f:9a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:19:27 2026 by rpki-client