Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
File:                     B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft (raw, json)
Hash identifier:          oKDGV5BBOKNc5l2KYl/F3l8Y6jmF5GiKzd/K7OTSxgw=
Subject key identifier:   56:CE:9F:EF:F9:65:0F:CE:27:D5:04:1C:03:0E:57:8D:FE:5E:A8:7E
Authority key identifier: B6:F1:A0:42:F5:8F:D7:73:EC:6B:72:21:47:01:56:F5:EB:D0:CE:45
Certificate issuer:       /CN=B6F1A042F58FD773EC6B7221470156F5EBD0CE45
Certificate serial:       17FB8CCF15EC6B3936031A4CC37DAF55D708C8A5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
Manifest number:          C3
Signing time:             Wed 23 Sep 2026 21:22:31 +0000
Manifest this update:     Wed 23 Sep 2026 21:17:31 +0000
Manifest next update:     Thu 24 Sep 2026 22:51:31 +0000
Files and hashes:         1: B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl (hash: hb9C/HIWxSWKfOLxPlrPmD5NKCxuAuQrGlQyZHsxID4=)
                          2: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: FM7P4A6GhMRCdFWVFylFnVzysNCeJktD7lQb8mDxaKs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl
                          rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 22:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fb:8c:cf:15:ec:6b:39:36:03:1a:4c:c3:7d:af:55:d7:08:c8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1A042F58FD773EC6B7221470156F5EBD0CE45
        Validity
            Not Before: Sep 23 21:17:31 2026 GMT
            Not After : Sep 24 22:51:31 2026 GMT
        Subject: CN=56CE9FEFF9650FCE27D5041C030E578DFE5EA87E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c3:31:22:ac:84:8f:e9:93:e0:09:62:18:01:
                    0d:e8:50:e7:55:a3:8e:f8:a9:74:e1:65:5f:92:e0:
                    bf:db:d6:e9:a2:12:93:1b:61:b1:1f:3d:74:c9:df:
                    21:e8:af:c4:1b:60:bd:42:fa:de:8c:dd:5a:5d:01:
                    98:ae:ca:08:6d:b2:9a:63:2e:1e:61:2b:ee:e3:e1:
                    4e:35:4d:94:56:85:03:c0:64:c1:6e:e5:df:5d:4a:
                    7d:61:30:6e:09:0c:75:d5:92:2e:6f:47:3d:5b:0d:
                    0d:f8:e7:5d:97:92:30:29:3f:3d:b7:ff:16:87:75:
                    cd:67:c4:d9:6c:c6:46:a1:5d:5d:23:b0:a5:0d:91:
                    bb:d3:c4:73:5b:dc:b4:a2:7c:58:f3:25:f8:67:31:
                    ae:0d:e0:85:77:3b:b5:17:57:38:38:88:1c:11:80:
                    09:cf:ad:ca:64:6d:c7:4e:07:c6:ef:25:d0:e9:ce:
                    3e:6d:c4:24:f2:48:83:0f:8c:c7:7f:d9:7c:5c:de:
                    8f:da:4b:e4:5e:7a:b3:3f:bf:ae:00:01:a0:26:35:
                    94:f0:8a:49:38:29:3a:df:01:e6:8a:6a:c7:91:2f:
                    94:f4:c8:e0:72:40:e4:c6:e0:55:1e:79:81:7f:fc:
                    a2:ec:76:6e:40:8f:61:57:7f:b3:95:1e:3f:26:f8:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CE:9F:EF:F9:65:0F:CE:27:D5:04:1C:03:0E:57:8D:FE:5E:A8:7E
            X509v3 Authority Key Identifier:
                keyid:B6:F1:A0:42:F5:8F:D7:73:EC:6B:72:21:47:01:56:F5:EB:D0:CE:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:00:7e:58:99:d8:49:26:ec:cf:7c:de:b3:2d:00:26:17:11:
         5a:9f:58:4c:a7:b4:f8:a9:2a:17:ab:4c:ac:5a:3e:bb:4c:d3:
         e5:72:97:2c:00:d0:db:6f:61:ab:22:c2:f8:3a:84:10:52:ed:
         b2:c4:bc:cc:8e:a0:c1:e4:48:81:46:84:e9:a3:f8:e6:93:c7:
         5b:72:ee:cb:26:33:4b:05:44:b1:ec:b9:5d:a4:e5:58:a1:e0:
         ba:c2:74:dc:8d:51:41:71:42:70:e5:b7:8d:d4:a4:2d:86:9b:
         98:1b:fd:d5:54:0d:9f:f4:93:6d:a0:32:a3:8b:c5:57:1d:ef:
         e8:99:c9:47:0a:08:ab:a4:7e:5d:d0:c2:93:26:2a:3e:12:4d:
         7a:8e:4c:38:ec:91:a7:17:65:1d:61:b8:e9:bd:3d:0c:6d:45:
         ad:4e:99:7b:e7:5a:4e:c4:31:52:94:21:4f:03:8c:b4:66:79:
         61:b5:e2:f0:01:f6:91:d6:f9:4c:f1:45:45:5c:55:27:53:48:
         cc:60:be:0f:e9:79:e5:0e:18:72:50:12:5a:cb:59:68:e4:83:
         50:e5:23:5b:18:9b:28:74:87:7c:97:50:8b:dd:5f:df:be:44:
         ea:ed:7f:46:41:5b:05:85:4b:94:43:ed:10:14:1d:e2:b4:98:
         9e:fd:93:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:28:28 2026 by rpki-client