Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft
File:                     E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft (raw, json)
Hash identifier:          XmmzCzj8sPPSYWxDrlSOW19dFHq6Co/ncuPv8A01kyA=
Subject key identifier:   7F:27:85:22:7D:85:1C:4B:1C:DC:96:AA:82:4D:B9:A2:7F:BD:0C:31
Authority key identifier: E9:E6:27:1C:17:0F:0B:74:B9:7B:84:46:B0:7A:A5:AB:42:86:48:F1
Certificate issuer:       /CN=E9E6271C170F0B74B97B8446B07AA5AB428648F1
Certificate serial:       55E18F7D251AFAE579CA1AECC2FD85D3C8492870
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 18:28:49 +0000
Manifest this update:     Tue 12 May 2026 18:23:49 +0000
Manifest next update:     Wed 13 May 2026 21:59:49 +0000
Files and hashes:         1: 3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (hash: oUTlPe6tGlob4PSOrDICpszf8EfDI+Vj0wKtKJkAXJw=)
                          2: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (hash: wpAJDLUihNgZdkXIKLfMYOAsPAxxh17Ib2DtgmuX8UA=)
                          3: E9E6271C170F0B74B97B8446B07AA5AB428648F1.crl (hash: ief61eAotXfoSSxiijHdcu00NPhP2x3PXhb0a/cAjSU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.crl
                          rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e1:8f:7d:25:1a:fa:e5:79:ca:1a:ec:c2:fd:85:d3:c8:49:28:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9E6271C170F0B74B97B8446B07AA5AB428648F1
        Validity
            Not Before: May 12 18:23:49 2026 GMT
            Not After : May 13 21:59:49 2026 GMT
        Subject: CN=7F2785227D851C4B1CDC96AA824DB9A27FBD0C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e8:47:96:d4:1e:78:59:c5:36:85:e3:8b:58:
                    9d:e4:60:3d:47:de:0e:b9:b5:d9:35:d7:88:12:42:
                    41:a0:ea:9d:a8:fa:9f:d8:3f:50:0a:c2:23:c0:1f:
                    b2:be:b5:b9:ed:db:e4:3f:3f:ea:fa:d8:8e:6f:e8:
                    e3:fa:ee:e2:cb:fe:92:b2:91:ac:0c:75:71:a4:51:
                    67:8c:7d:03:19:5e:44:36:35:e9:2e:91:9c:22:ae:
                    a6:f7:a5:0e:96:ab:2a:fc:86:f8:4c:df:e8:a3:68:
                    a0:de:30:12:68:00:a9:fa:11:30:90:40:92:85:35:
                    88:20:ff:72:9f:10:35:ad:f7:fa:c4:80:8b:f1:11:
                    70:26:43:97:db:a0:58:09:c6:7a:bc:86:6f:eb:0c:
                    03:75:3d:9a:70:31:41:87:a4:2c:a8:b4:15:75:1c:
                    4a:c5:d4:82:49:ba:de:c0:1b:74:01:4a:a8:5e:e5:
                    b5:a9:ff:d1:b2:49:62:0d:b2:68:30:e0:ad:9c:01:
                    02:3a:7e:28:b7:45:fd:fd:74:12:eb:ec:a3:d9:a1:
                    ab:05:c0:27:34:4f:59:03:4c:b0:df:32:e8:03:70:
                    4e:ed:1d:0d:5f:49:27:40:e4:e2:6d:47:2f:58:6a:
                    9f:de:00:c7:8a:e1:30:15:bd:14:79:e3:86:b0:06:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:27:85:22:7D:85:1C:4B:1C:DC:96:AA:82:4D:B9:A2:7F:BD:0C:31
            X509v3 Authority Key Identifier:
                keyid:E9:E6:27:1C:17:0F:0B:74:B9:7B:84:46:B0:7A:A5:AB:42:86:48:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:42:0c:71:e8:f5:b2:33:d4:9d:19:60:32:b1:17:61:a4:db:
         ad:36:e9:01:5d:b0:7b:0c:1f:3c:ee:8c:6d:18:83:98:cb:1f:
         15:1a:1d:27:f9:bd:f0:1b:fd:3d:dc:fd:b4:24:0e:a5:0d:ef:
         25:1d:60:59:5d:36:31:79:09:1f:0b:86:6f:72:a0:29:ca:d6:
         22:69:6f:17:52:b3:43:3a:9d:89:88:d5:4d:90:e8:ed:d7:0b:
         ec:e9:7f:19:7d:9c:dc:36:20:c5:84:ea:ae:04:8c:79:dc:17:
         92:b9:3f:82:6a:80:e4:50:74:c4:9d:99:56:d3:b3:68:6f:48:
         bd:ce:d5:76:23:a9:8b:39:9c:10:d5:65:7b:6f:9c:48:4c:0c:
         12:ff:43:44:4c:f5:38:5b:a0:d6:b5:48:68:54:bc:bb:88:ed:
         59:fc:23:c3:bf:17:32:5c:70:fb:cc:e5:5a:2a:cf:91:97:1e:
         8d:7e:1d:bd:ae:56:6c:40:43:03:6b:e6:03:36:fa:f8:fa:7a:
         3f:01:ce:9e:b8:1b:3e:18:05:c1:48:27:ec:65:de:8c:e0:e9:
         4f:85:0d:6c:53:55:f9:dd:c9:8b:0c:5b:8e:d6:17:9a:c5:c4:
         88:4e:2a:93:e2:b2:df:aa:b5:5c:3c:43:67:42:f6:b1:bd:3e:
         b1:a7:c6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:15 2026 by rpki-client