Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
File:                     B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft (raw, json)
Hash identifier:          7xrOnt4Bt0LC+CNDrRFj8Bh6siqAsFzFjnGXcMy/dAA=
Subject key identifier:   A3:E2:36:C9:84:43:BC:2E:B2:65:CD:93:89:05:11:C2:02:E1:07:A8
Authority key identifier: B1:5D:91:00:DC:8B:30:29:A0:16:F5:09:C7:D3:DB:B1:84:80:5A:A1
Certificate issuer:       /CN=B15D9100DC8B3029A016F509C7D3DBB184805AA1
Certificate serial:       3AB5084B8B2F786DE0858853CD800FACAFC1EC38
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
Manifest number:          C1
Signing time:             Wed 23 Sep 2026 10:29:12 +0000
Manifest this update:     Wed 23 Sep 2026 10:24:12 +0000
Manifest next update:     Thu 24 Sep 2026 11:03:12 +0000
Files and hashes:         1: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: hdJk3P7tUKxgaAbM7WQzserDmvKDtOC0Ipsv3OLAf5g=)
                          2: B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl (hash: s1mh3c/qz8wYgTDPrLF9poo79eWN03rpsutmFipdis8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl
                          rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 11:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b5:08:4b:8b:2f:78:6d:e0:85:88:53:cd:80:0f:ac:af:c1:ec:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B15D9100DC8B3029A016F509C7D3DBB184805AA1
        Validity
            Not Before: Sep 23 10:24:12 2026 GMT
            Not After : Sep 24 11:03:12 2026 GMT
        Subject: CN=A3E236C98443BC2EB265CD93890511C202E107A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2b:cb:1a:ba:51:e2:99:a9:35:79:84:5c:76:
                    99:5e:cf:5f:5b:07:11:69:fa:28:08:e0:88:3f:78:
                    db:28:37:b0:cb:8d:5d:ba:26:6a:2e:fe:21:c4:e2:
                    5b:81:31:37:26:67:7e:1d:5f:0d:73:f9:f9:d8:ab:
                    57:59:93:7a:55:1f:79:f5:37:3e:ae:f7:b1:46:c9:
                    5b:8d:0d:eb:64:fc:1b:a8:c1:94:ae:b0:b7:df:fd:
                    bc:f2:04:2a:cd:ef:04:e9:71:3b:04:f4:03:e4:83:
                    ef:05:f8:26:ed:9d:cb:95:e1:27:92:23:7b:bf:04:
                    5e:00:43:68:6d:0f:0a:04:f8:de:fb:07:5a:69:82:
                    f5:fc:ae:3b:86:c1:56:08:4a:93:35:16:7b:74:b0:
                    9b:a1:79:81:fb:c1:aa:52:a5:cc:ce:0f:76:40:70:
                    3f:cf:7d:6c:b4:73:3f:d2:d8:63:8d:58:68:4c:ef:
                    d9:0c:a7:01:b7:60:bd:da:c7:83:ce:47:0a:1f:f5:
                    62:3d:32:35:54:44:e4:f9:0e:9a:a5:6b:e7:55:05:
                    14:21:28:02:ce:c4:a0:ca:ee:e5:38:1f:72:08:8f:
                    8a:41:69:85:fa:c6:de:54:df:b2:06:27:ae:8c:4e:
                    2a:d8:b9:fa:09:45:af:ea:c8:44:11:0f:71:1e:4a:
                    af:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E2:36:C9:84:43:BC:2E:B2:65:CD:93:89:05:11:C2:02:E1:07:A8
            X509v3 Authority Key Identifier:
                keyid:B1:5D:91:00:DC:8B:30:29:A0:16:F5:09:C7:D3:DB:B1:84:80:5A:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:69:8d:f1:93:a9:f9:c5:4b:a8:59:60:f9:6e:b1:6f:f7:cb:
         fd:63:0c:05:d6:b7:10:82:db:3f:33:69:06:b5:24:62:84:76:
         f5:47:19:d3:f7:aa:c9:77:6e:04:fc:13:de:98:95:61:32:85:
         14:01:5d:15:35:da:3d:fa:1b:b9:b0:92:0e:4d:8b:1b:53:92:
         66:2a:ae:e6:44:c7:6c:de:1a:4d:b2:b6:b4:10:0d:a6:60:6f:
         b8:cb:b3:73:c0:b5:c0:9c:ef:4c:10:80:a8:6d:2e:95:7a:54:
         1c:35:f3:34:42:c9:28:4c:c1:3b:b3:ac:43:7f:19:6e:6e:59:
         7d:74:41:c0:e4:3a:e4:51:8b:fa:2d:81:6d:ef:a6:1a:90:10:
         63:69:e4:e7:59:c6:b2:03:ce:84:35:5d:71:72:64:0d:80:4a:
         97:f4:38:49:6a:3f:09:df:2a:89:7f:3d:0c:ae:6b:91:89:3a:
         ae:22:c5:c1:1a:24:c6:5e:f8:45:bc:a8:e5:b2:aa:38:03:62:
         2d:fc:30:de:c6:11:93:f3:f4:84:cf:82:ae:98:87:8b:aa:eb:
         17:b4:82:6e:f5:9a:90:37:a4:60:df:92:9d:e9:1a:23:b4:10:
         27:de:5c:de:53:0a:d7:cc:fa:2f:47:1c:ec:10:5e:da:8d:b9:
         26:42:aa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:18:54 2026 by rpki-client