Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
File:                     9635F0724E9717C889D5604679E31DA89F807CC1.mft (raw, json)
Hash identifier:          I/vEMbX1lpBJW1esxChce3kHd5JlBJkiYQZspVJxp24=
Subject key identifier:   2B:69:91:AB:C3:F4:CE:A1:AC:14:8C:D1:47:3E:22:67:47:BF:30:7F
Authority key identifier: 96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1
Certificate issuer:       /CN=9635F0724E9717C889D5604679E31DA89F807CC1
Certificate serial:       490C2885CB12E2F0930583F22EAC81C61577AC1E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 21:08:34 +0000
Manifest this update:     Tue 12 May 2026 21:03:34 +0000
Manifest next update:     Wed 13 May 2026 22:35:34 +0000
Files and hashes:         1: 3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa (hash: XboM/GVCHUPVqpn45N0upXfql+dI6DpgJ/Slav4V/kE=)
                          2: 9635F0724E9717C889D5604679E31DA89F807CC1.crl (hash: o7G/HZ0TNI/Ef21ges2gMOHDmafrD2J2U4afk+tmuLs=)
                          3: 3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa (hash: 8TsJDUFf5xwZJs6EgPJxyciB9/EWUhvPgtxe1fcDLMI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl
                          rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0c:28:85:cb:12:e2:f0:93:05:83:f2:2e:ac:81:c6:15:77:ac:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9635F0724E9717C889D5604679E31DA89F807CC1
        Validity
            Not Before: May 12 21:03:34 2026 GMT
            Not After : May 13 22:35:34 2026 GMT
        Subject: CN=2B6991ABC3F4CEA1AC148CD1473E226747BF307F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:f3:63:3a:b1:a2:a9:cd:de:cc:e0:8c:e8:
                    24:3a:99:93:ad:5b:a4:a3:c0:53:da:d4:c0:32:99:
                    e1:22:c9:c1:19:87:cd:80:02:e5:20:6c:97:10:ba:
                    20:99:0b:fb:a4:b6:8e:60:52:83:05:8f:81:8c:ca:
                    2a:a5:95:4d:5a:98:95:a5:91:5a:0c:19:cf:98:1c:
                    70:cf:70:a8:21:fb:e3:0a:b0:c3:c5:fc:52:6f:21:
                    97:e0:06:c8:bb:54:cd:68:f6:05:94:e7:96:38:06:
                    eb:ee:c7:82:76:32:4e:bc:8e:d8:c1:3a:1e:24:52:
                    21:8b:32:d3:b5:ec:c2:ab:06:63:68:9d:d2:f8:b4:
                    6a:d9:62:20:8e:15:06:8a:8e:a9:73:4b:d5:f3:94:
                    6a:74:05:75:a4:80:bc:44:4c:84:38:0c:b3:c0:f4:
                    03:80:fb:35:67:cc:ca:d9:20:cf:96:39:ec:df:22:
                    c9:17:1d:78:2e:4c:3a:a0:87:3a:66:57:eb:ec:0a:
                    4c:47:b9:0b:1b:e1:e1:6d:91:2c:fc:86:77:73:b5:
                    89:ec:c1:cc:39:73:8c:26:10:17:6f:49:ae:17:a2:
                    c7:35:36:38:c2:70:0d:8f:16:00:af:2b:2f:84:45:
                    c4:77:21:4b:ce:66:09:42:f9:ae:93:36:72:1f:b4:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:69:91:AB:C3:F4:CE:A1:AC:14:8C:D1:47:3E:22:67:47:BF:30:7F
            X509v3 Authority Key Identifier:
                keyid:96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ce:53:e8:44:16:6f:97:ba:8b:56:89:70:71:67:a8:dc:67:
         03:50:f1:4a:e8:77:c0:ef:9d:aa:c4:0e:98:25:12:1c:0d:4b:
         98:40:55:b7:3d:29:d6:23:da:b3:f5:9f:3c:4e:89:44:41:e0:
         18:50:f9:a5:c1:2b:d1:73:2a:6d:a4:01:6a:3c:e9:c7:8b:b2:
         87:5c:e5:45:9e:bc:39:bd:54:2d:a6:b7:a9:8e:d1:03:7c:15:
         59:e4:0a:2f:e8:8c:ab:20:2a:de:3a:fb:0b:90:e3:4a:48:cd:
         9e:76:00:46:64:2e:20:d8:84:16:72:02:76:a2:3c:43:12:6b:
         25:de:5c:3c:bb:54:c6:7d:41:c1:05:03:01:ee:6e:ce:ca:e0:
         57:05:73:2e:36:11:bc:37:74:f7:5c:bd:f8:42:6c:1d:d0:f1:
         45:12:52:ec:7c:f0:90:52:80:27:1e:f6:86:28:b0:6f:0b:99:
         f0:7f:76:70:4b:81:47:20:e8:d9:e8:01:be:cb:bf:4c:f0:0d:
         25:f4:86:98:7e:c1:b5:fa:e3:0d:49:e8:88:24:4c:1f:4c:5f:
         4c:81:a6:5d:d1:ed:b2:d7:3e:ac:1f:02:63:1c:c4:d9:00:66:
         7a:f0:a7:ec:13:fd:ac:f2:95:04:8b:8d:db:1e:9f:ce:95:a2:
         a7:cd:dc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:50 2026 by rpki-client