Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/B7926E7A4D53D7DF9BD1F1891336892629B6E570.mft
File:                     B7926E7A4D53D7DF9BD1F1891336892629B6E570.mft (raw, json)
Hash identifier:          x6mX5Pnpyv8N1D3W01b6puDPGurLpVboYkglYAyeq+M=
Subject key identifier:   79:FB:A1:39:49:9D:84:FA:E0:E1:D8:56:4D:6D:8A:31:BA:1E:60:4A
Authority key identifier: B7:92:6E:7A:4D:53:D7:DF:9B:D1:F1:89:13:36:89:26:29:B6:E5:70
Certificate issuer:       /CN=B7926E7A4D53D7DF9BD1F1891336892629B6E570
Certificate serial:       3F7D0DC606416833CBB5307B04DA928746C616E2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B7926E7A4D53D7DF9BD1F1891336892629B6E570.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/B7926E7A4D53D7DF9BD1F1891336892629B6E570.mft
Manifest number:          C1
Signing time:             Thu 24 Sep 2026 17:57:57 +0000
Manifest this update:     Thu 24 Sep 2026 17:52:57 +0000
Manifest next update:     Fri 25 Sep 2026 21:41:57 +0000
Files and hashes:         1: B7926E7A4D53D7DF9BD1F1891336892629B6E570.crl (hash: PNK3erQPfW2aNCko8fj35HR3zxBvaEZ9c5d73Lvjn+c=)
                          2: 3135372e36362e3139302e302f32342d3234203d3e20313532373533.roa (hash: LRimm2UIR4zO6mAhZpLczcEvPytU2fthmY2JYekRDZs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/B7926E7A4D53D7DF9BD1F1891336892629B6E570.crl
                          rsync://rpki-rsync.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/B7926E7A4D53D7DF9BD1F1891336892629B6E570.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B7926E7A4D53D7DF9BD1F1891336892629B6E570.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 11:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7d:0d:c6:06:41:68:33:cb:b5:30:7b:04:da:92:87:46:c6:16:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7926E7A4D53D7DF9BD1F1891336892629B6E570
        Validity
            Not Before: Sep 24 17:52:57 2026 GMT
            Not After : Sep 25 21:41:57 2026 GMT
        Subject: CN=79FBA139499D84FAE0E1D8564D6D8A31BA1E604A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:5e:fe:b8:fc:6a:28:f2:16:2f:30:bd:e9:
                    44:5e:0d:f1:6d:9f:0e:02:05:9f:4b:72:02:fa:e0:
                    b0:e8:3f:9b:b6:4c:7c:f3:d9:b4:e7:37:ce:9e:c2:
                    01:7d:76:3d:15:ab:c3:b0:35:33:08:92:1c:a7:12:
                    cd:d5:51:2f:6f:25:2e:19:72:a1:33:c0:ce:b4:5e:
                    60:33:0e:03:10:bf:ee:b3:e1:9a:e8:89:9a:ed:76:
                    28:8b:ab:f5:2f:12:78:d7:8e:66:9f:67:62:9c:72:
                    a9:79:bd:66:f6:ea:ce:d2:0f:c2:3e:e7:8d:dd:3e:
                    47:02:db:14:9a:e2:c7:c9:cf:d5:9c:ea:42:2e:51:
                    8f:ac:5b:e4:91:fe:71:23:cc:49:a6:86:7c:3c:f5:
                    da:fc:a1:4d:8c:e8:25:57:13:7f:4b:ef:89:9e:87:
                    50:e7:04:f7:4a:de:86:40:a8:92:b7:fe:ee:64:1d:
                    62:cb:50:ab:be:30:ec:2d:58:81:7a:ee:04:66:fe:
                    ec:3d:7b:0c:5a:65:22:1e:8a:e5:5d:4d:7b:26:5d:
                    2c:2c:0d:31:16:c3:9a:09:76:85:50:5f:6a:b8:88:
                    b3:ab:53:7c:68:10:a7:7d:f1:76:e8:fd:c2:ce:80:
                    96:15:2b:d4:8c:5e:4b:62:72:4d:58:9e:55:67:ea:
                    70:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FB:A1:39:49:9D:84:FA:E0:E1:D8:56:4D:6D:8A:31:BA:1E:60:4A
            X509v3 Authority Key Identifier:
                keyid:B7:92:6E:7A:4D:53:D7:DF:9B:D1:F1:89:13:36:89:26:29:B6:E5:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/B7926E7A4D53D7DF9BD1F1891336892629B6E570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B7926E7A4D53D7DF9BD1F1891336892629B6E570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/B7926E7A4D53D7DF9BD1F1891336892629B6E570.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9c:bd:83:5c:29:a5:d9:82:37:04:ac:c9:76:86:40:dd:ca:
         1a:39:ab:9d:74:0e:16:ae:4b:e4:72:ba:7a:07:64:c2:bf:74:
         83:bb:01:a2:89:da:cd:de:19:76:ef:29:45:d5:f3:eb:3d:37:
         64:03:c5:09:e3:4c:3c:5f:8a:ec:d4:10:0a:50:87:5f:de:6a:
         54:d0:e1:fc:ec:cf:ca:70:3a:ff:f3:ec:06:9e:9f:03:d9:76:
         5b:37:de:d9:4b:ec:a7:57:54:a6:1b:39:43:46:de:51:53:95:
         cc:bd:ef:b2:ea:9c:4e:c2:d7:34:ca:f9:f1:c2:f8:74:74:96:
         fd:14:1c:25:19:45:1d:52:be:4b:d8:ae:98:46:46:77:d8:0a:
         46:1f:12:de:91:75:88:de:d1:7b:f7:d5:12:ff:87:d0:fd:d2:
         9f:73:b8:1c:fc:a7:09:40:2a:6e:d5:96:79:06:bf:e6:b2:f2:
         f2:a7:8c:32:43:a4:04:89:5d:57:4e:02:c9:9f:df:85:73:db:
         c4:71:8e:ef:4f:5c:8e:43:9c:8d:42:2d:a1:a6:62:02:21:ac:
         c2:9f:fd:6c:42:5d:38:27:86:9d:dc:b2:1d:75:4d:be:45:ac:
         98:e6:c9:d6:f1:d4:eb:46:98:b1:3b:89:df:85:33:59:37:33:
         23:41:2d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:24:55 2026 by rpki-client