Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft
File:                     8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft (raw, json)
Hash identifier:          iYVl7g9uTyRuH0FGXFggzl48mtQdrWVrNC1sEicY6Tk=
Subject key identifier:   F7:44:0C:35:B6:3A:A2:E2:63:B3:6D:DE:37:15:2F:DB:F2:D4:F0:D2
Authority key identifier: 8E:13:12:45:E3:8E:84:5B:E2:A2:18:F9:92:8E:AD:53:0F:FF:FE:AC
Certificate issuer:       /CN=8E131245E38E845BE2A218F9928EAD530FFFFEAC
Certificate serial:       54F2F1569D4BCBBA9A727823FCC15AE9F6EDAD98
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 04:55:29 +0000
Manifest this update:     Fri 24 Jul 2026 04:50:29 +0000
Manifest next update:     Sat 25 Jul 2026 06:58:29 +0000
Files and hashes:         1: 8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl (hash: aOR+MLmEIyj6VGUyO5OlLoGWU9a4pP79ojur3tm1ZSo=)
                          2: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (hash: fGKw2WFahFPpQMw21POO2xmihiDm+uI9kc4e8STtyBE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl
                          rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f2:f1:56:9d:4b:cb:ba:9a:72:78:23:fc:c1:5a:e9:f6:ed:ad:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E131245E38E845BE2A218F9928EAD530FFFFEAC
        Validity
            Not Before: Jul 24 04:50:29 2026 GMT
            Not After : Jul 25 06:58:29 2026 GMT
        Subject: CN=F7440C35B63AA2E263B36DDE37152FDBF2D4F0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:02:cc:bf:c2:0c:07:ca:a8:6d:81:5b:0e:
                    63:28:39:30:66:4c:6a:e4:4c:2b:54:71:9a:2c:09:
                    05:3c:77:ff:fe:d3:0a:bd:51:56:5e:2f:2b:cf:08:
                    91:27:4a:29:bf:91:e7:53:50:7a:f4:20:bc:94:b8:
                    cc:e3:c6:ba:2c:2a:d7:ee:ca:e0:3c:90:92:5d:23:
                    d4:6e:88:89:2f:19:54:69:61:de:b2:fa:93:91:34:
                    2f:a3:07:73:a9:5e:59:12:88:49:af:fa:9a:ca:b5:
                    fb:49:57:c3:57:2c:1f:49:cc:b7:33:3a:f3:07:47:
                    26:93:65:61:e8:87:a9:af:19:81:2a:77:bd:e9:4c:
                    52:b3:28:22:f4:bd:d2:17:89:12:63:4c:7b:13:18:
                    0c:f0:e4:27:70:08:83:e3:c8:96:9d:86:a7:56:00:
                    4b:db:81:4f:8c:ab:18:81:30:a8:e6:11:cb:e9:98:
                    d6:37:e1:4c:6e:5e:84:15:76:43:f3:f6:ad:1b:b4:
                    10:ea:6b:44:d1:6a:44:be:39:97:6b:46:e1:3e:83:
                    7e:f8:8c:0b:f0:2d:f0:19:8f:6b:42:78:45:ff:47:
                    ed:9f:80:67:47:2d:e4:23:c7:10:4d:a9:5a:a4:c1:
                    d0:b0:b9:e7:9f:fe:51:a9:af:71:61:91:a8:4f:52:
                    97:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:44:0C:35:B6:3A:A2:E2:63:B3:6D:DE:37:15:2F:DB:F2:D4:F0:D2
            X509v3 Authority Key Identifier:
                keyid:8E:13:12:45:E3:8E:84:5B:E2:A2:18:F9:92:8E:AD:53:0F:FF:FE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:7d:4a:98:3c:87:25:73:78:d5:4d:e0:b5:82:de:da:46:55:
         5e:a7:dc:74:36:e2:2c:1c:75:a5:e8:77:2a:00:ae:19:88:d6:
         b8:11:af:28:8b:74:40:c0:d7:e8:94:8c:ce:43:94:94:94:f4:
         04:d6:8c:a7:84:b2:40:60:ab:83:7f:fe:25:ba:de:7e:3f:67:
         93:1a:2b:5e:45:a6:dc:6a:d9:1e:bc:1f:7f:35:e0:6e:36:9f:
         a4:76:cc:10:77:78:47:bb:83:06:6a:66:09:bd:fa:94:e5:d9:
         2c:a4:46:7a:5a:0e:26:b5:f0:41:1c:bc:93:ad:7b:a8:00:be:
         9c:7a:ff:3b:93:06:ef:50:aa:b1:97:d8:0e:55:b3:a1:00:68:
         cf:74:01:5e:df:80:33:a6:42:ef:db:78:28:03:1f:d3:5f:4d:
         c6:02:3f:c9:28:fe:a0:bb:b6:c0:f9:3a:82:33:8b:d2:e4:86:
         64:47:50:7f:f0:82:ce:6b:bf:92:9e:28:d9:54:57:0b:a4:fe:
         bb:1a:28:59:8d:60:21:ad:5e:44:d1:7f:d0:80:4f:43:55:48:
         c5:68:d9:76:71:99:08:fe:a7:cc:45:02:8f:99:42:04:28:df:
         8c:ff:51:94:78:d2:7b:0b:89:e4:dc:85:0e:0f:cc:c1:ee:a2:
         1e:02:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:03:54 2026 by rpki-client