Manifest

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
File:                     9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft (raw, json)
Hash identifier:          ZtXVTimBzUHJd2dm8FBfkIF9sEsqN9GHoOAXt1YBCfk=
Subject key identifier:   02:1D:F7:A0:A1:88:73:DE:24:51:6F:EF:2A:29:C1:4F:8F:86:08:CB
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Certificate issuer:       /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial:       53370FD8C17800800E55FC01062346E4A2337A81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
Manifest number:          03BD
Signing time:             Sun 19 Oct 2025 22:28:31 +0000
Manifest this update:     Sun 19 Oct 2025 22:23:31 +0000
Manifest next update:     Tue 21 Oct 2025 00:56:31 +0000
Files and hashes:         1: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (hash: tEG9JFKiDdsjMGlGAtGF9ff7/fO0QNV3vFqHY+f6qAc=)
                          2: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (hash: Ndg1bmsRuBSL7CF5QQzZOGIFLYIHMSUM05PGM6gpt7I=)
                          3: 3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (hash: SPGV8cz23OXVtY1/WBtsxbxXhYFhmyQwGc0AQ879Tzo=)
                          4: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (hash: Chrj9m4BrE2U2pfcWlFNBSg+oO8sOSxTQ6ekpt4BV7I=)
                          5: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (hash: jS7uDPReOddZwVCAwtZ435utMhttXzVf5ZdMVbhKurY=)
                          6: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (hash: f/uHdRx9VZqoZk3nqfnUiYoyLo18xCMnrIDjbbMrTto=)
                          7: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl (hash: Iis0L2h4hioD7pIxujvR6coYmu5rZ+BE0mawlqy+SRE=)
                          8: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (hash: wZpa/GAw/+LZ/5VD3LkDlyxUo6eY0mnlaZ6P5jMgauk=)
                          9: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (hash: XBT+G1DQ9/F6v2XQZcRxw+M4rvuykMlUtUtQD6DlGXU=)
                          10: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (hash: EWyx31GnzeEa34YdlCfOKBBLtKjLerW7tETk3ztfEgw=)
                          11: 3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (hash: VzgTFP3K3ygUqjqoPkC7s7tjeyqTHVnjgq3zWGYCRKg=)
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
                          rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 00:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:37:0f:d8:c1:78:00:80:0e:55:fc:01:06:23:46:e4:a2:33:7a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
        Validity
            Not Before: Oct 19 22:23:31 2025 GMT
            Not After : Oct 21 00:56:31 2025 GMT
        Subject: CN=021DF7A0A18873DE24516FEF2A29C14F8F8608CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:39:ae:32:78:46:97:07:d2:79:2b:a1:76:6c:
                    73:0e:3c:a5:be:22:a8:34:b0:48:52:6f:6e:dd:6e:
                    d3:13:58:06:53:0a:f8:f8:94:07:53:50:63:ad:f2:
                    0e:d0:e1:09:17:d3:23:47:72:ea:c1:6a:9a:65:a1:
                    d6:55:31:ac:b1:e6:68:17:64:17:b5:e4:0d:d5:01:
                    59:83:20:82:16:f0:47:b0:87:22:ec:98:09:b1:77:
                    e0:7a:56:5e:a8:27:da:27:42:32:ea:d3:a0:86:d6:
                    2a:e3:d6:6d:90:df:2c:bf:fa:80:3f:1c:30:35:50:
                    25:82:8b:1b:85:da:ab:28:8f:6d:f2:b9:52:f6:12:
                    90:b1:04:2f:a2:43:89:69:89:70:6a:81:e4:6e:31:
                    b3:1c:2e:fe:54:9f:eb:09:1b:de:4d:0e:b4:06:d5:
                    3f:5a:d0:fa:6c:a1:48:a8:da:fc:db:68:d1:f5:27:
                    d7:44:0c:31:4e:15:30:b7:f1:80:fd:f2:4c:89:a6:
                    ff:92:58:31:a9:65:9d:e1:e8:09:99:50:4c:61:a1:
                    a6:25:93:8a:12:51:36:c3:b8:b1:80:49:97:7c:3d:
                    2f:68:48:06:e8:7f:36:33:e3:f7:96:e9:5a:99:38:
                    c4:5e:f1:6e:ad:3e:7c:68:bb:e7:1f:c9:34:31:7b:
                    94:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1D:F7:A0:A1:88:73:DE:24:51:6F:EF:2A:29:C1:4F:8F:86:08:CB
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:78:72:69:49:8b:a7:4b:ef:be:6e:d9:c0:07:8c:ee:3e:63:
         fb:3a:b3:c5:6f:26:0d:f7:f9:d5:48:c1:f1:66:b3:1a:a9:4f:
         d7:c6:b9:65:9f:23:55:e0:90:b0:51:db:54:68:dd:b6:57:67:
         59:16:93:05:1d:0b:17:48:63:71:8f:b2:b9:01:9e:28:b0:07:
         50:8c:8c:2a:c4:71:f5:c0:6f:ec:05:74:45:45:15:90:3d:7c:
         a5:a1:51:a6:96:bf:8d:63:3a:1a:03:6e:bc:c6:2a:ed:85:da:
         f5:8f:04:49:29:a5:09:13:23:f7:3d:83:41:2d:f6:fb:bf:7a:
         c2:eb:6d:e8:83:fc:ff:6a:0b:f0:81:f4:f6:bf:b9:b6:11:2f:
         af:53:bc:a7:9f:24:d0:93:98:ee:e0:ad:e0:2c:0c:1d:69:d6:
         2d:31:13:96:62:d2:cf:69:c1:1f:e1:1c:fe:31:79:5f:c6:d7:
         16:96:7c:60:64:07:8a:8a:1c:3a:55:ef:23:dc:03:7e:73:d1:
         20:9a:cc:83:c1:ef:a9:94:ec:e7:71:0e:f3:c2:55:36:69:07:
         56:1b:18:c9:65:88:e0:1e:32:cb:f8:f4:83:9e:a8:9e:be:0a:
         85:f2:8b:1f:cb:52:56:47:29:32:70:ef:90:06:6a:35:a2:86:
         39:c5:b4:5b
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUUzcP2MF4AIAOVfwBBiNG5KIzeoEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjFDMzMwMDAwMTEwLwYDVQQFEyg5Q0YwNUU3MDI0
RDRBNDg3RTBCNzlFMkY1NzUyNUJGMzQ1REI1M0VDMB4XDTI1MTAxOTIyMjMzMVoX
DTI1MTAyMTAwNTYzMVowMzExMC8GA1UEAxMoMDIxREY3QTBBMTg4NzNERTI0NTE2
RkVGMkEyOUMxNEY4Rjg2MDhDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI45rjJ4RpcH0nkroXZscw48pb4iqDSwSFJvbt1u0xNYBlMK+PiUB1NQY63y
DtDhCRfTI0dy6sFqmmWh1lUxrLHmaBdkF7XkDdUBWYMgghbwR7CHIuyYCbF34HpW
Xqgn2idCMurToIbWKuPWbZDfLL/6gD8cMDVQJYKLG4XaqyiPbfK5UvYSkLEEL6JD
iWmJcGqB5G4xsxwu/lSf6wkb3k0OtAbVP1rQ+myhSKja/Nto0fUn10QMMU4VMLfx
gP3yTImm/5JYMallneHoCZlQTGGhpiWTihJRNsO4sYBJl3w9L2hIBuh/NjPj95bp
Wpk4xF7xbq0+fGi75x/JNDF7lNcCAwEAAaOCAfkwggH1MB0GA1UdDgQWBBQCHfeg
oYhz3iRRb+8qKcFPj4YIyzAfBgNVHSMEGDAWgBSc8F5wJNSkh+C3ni9XUlvzRdtT
7DAOBgNVHQ8BAf8EBAMCB4AwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9yc3lu
Yy5ycC5raS9yZXBvL21pc2FrYWlvLzAvOUNGMDVFNzAyNEQ0QTQ4N0UwQjc5RTJG
NTc1MjVCRjM0NURCNTNFQy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2
MTFFMkJCNDY4RjdDNzJGRDFGRjIvblBCZWNDVFVwSWZndDU0dlYxSmI4MFhiVS13
LmNlcjBsBggrBgEFBQcBCwRgMF4wXAYIKwYBBQUHMAuGUHJzeW5jOi8vcnN5bmMu
cnAua2kvcmVwby9taXNha2Fpby8wLzlDRjA1RTcwMjRENEE0ODdFMEI3OUUyRjU3
NTI1QkYzNDVEQjUzRUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQG
MASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBheHJpSYunS+++btnAB4zuPmP7OrPF
byYN9/nVSMHxZrMaqU/XxrllnyNV4JCwUdtUaN22V2dZFpMFHQsXSGNxj7K5AZ4o
sAdQjIwqxHH1wG/sBXRFRRWQPXyloVGmlr+NYzoaA268xirthdr1jwRJKaUJEyP3
PYNBLfb7v3rC623og/z/agvwgfT2v7m2ES+vU7ynnyTQk5ju4K3gLAwdadYtMROW
YtLPacEf4Rz+MXlfxtcWlnxgZAeKihw6Ve8j3AN+c9EgmsyDwe+plOzncQ7zwlU2
aQdWGxjJZYjgHjLL+PSDnqievgqF8osfy1JWRykycO+QBmo1ooY5xbRb
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:25:57 2025 by rpki-client