Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
File:                     E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft (raw, json)
Hash identifier:          SsYhGA2TffnGkCe77yzZXtrGwSkp29K3g1F4mfLrYeA=
Subject key identifier:   07:C6:0C:4F:3C:60:57:A5:70:E1:77:3F:F2:C8:06:97:E0:1B:A8:35
Authority key identifier: E4:91:6A:38:F9:28:B0:49:A7:53:3C:B4:FE:25:B8:FA:9D:96:DF:74
Certificate issuer:       /CN=E4916A38F928B049A7533CB4FE25B8FA9D96DF74
Certificate serial:       385F5BF26D82A7D7652B864BB1FFF16793539A8B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 04:08:47 +0000
Manifest this update:     Tue 12 May 2026 04:03:47 +0000
Manifest next update:     Wed 13 May 2026 05:04:47 +0000
Files and hashes:         1: 3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (hash: LV3eS8DWx/O74oQ0CzVazcwm3a7uu6GLraOIjVHVQ5o=)
                          2: E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl (hash: oYw/pEWfNpilvHV6xw/nXoghj9Of/VkbipwlLTNFdaQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl
                          rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 05:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5f:5b:f2:6d:82:a7:d7:65:2b:86:4b:b1:ff:f1:67:93:53:9a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4916A38F928B049A7533CB4FE25B8FA9D96DF74
        Validity
            Not Before: May 12 04:03:47 2026 GMT
            Not After : May 13 05:04:47 2026 GMT
        Subject: CN=07C60C4F3C6057A570E1773FF2C80697E01BA835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:7b:d5:94:d4:46:f3:97:9f:1d:2a:02:a6:
                    e9:91:7a:1c:c9:8f:42:70:5c:1c:5b:3c:ff:97:1b:
                    15:35:82:87:4b:8b:7c:78:c0:01:4c:d1:1b:ba:cc:
                    37:ab:e8:2d:d2:3b:da:a9:cb:eb:85:6b:36:d1:6e:
                    a6:37:a5:a6:cf:4c:f6:98:a2:0e:0b:8f:4b:b4:ad:
                    73:db:ec:a6:ee:0c:d7:06:8a:8a:e2:45:bc:f1:53:
                    6e:63:ff:c6:c8:2a:bc:29:8c:49:f9:7b:fe:3e:57:
                    41:28:2c:e4:f1:60:b9:fb:d3:cb:6a:d5:cf:23:d1:
                    c4:01:31:9c:8f:ed:7e:25:13:4f:cd:2d:0e:2c:0a:
                    92:3b:d4:67:e8:93:97:dc:78:5e:54:76:fd:2a:8a:
                    36:24:ae:8f:6e:08:a2:ae:cb:31:f4:3c:22:12:4e:
                    83:5d:dd:05:53:a8:92:4e:05:ed:fa:a3:c4:a7:c2:
                    8f:15:ee:09:ff:88:b0:b6:fa:24:a0:1a:cf:cd:b5:
                    f0:ba:d4:98:27:0d:14:ec:20:32:3d:52:07:33:36:
                    c0:28:d5:cd:d4:c6:6e:aa:7f:fb:a5:c9:97:ca:31:
                    37:51:6a:05:04:f8:56:06:32:2a:5a:2c:ac:d7:38:
                    20:b3:00:08:34:8e:f4:93:9b:ac:e0:11:3e:7b:1e:
                    a8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C6:0C:4F:3C:60:57:A5:70:E1:77:3F:F2:C8:06:97:E0:1B:A8:35
            X509v3 Authority Key Identifier:
                keyid:E4:91:6A:38:F9:28:B0:49:A7:53:3C:B4:FE:25:B8:FA:9D:96:DF:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:74:d8:e8:6b:e2:58:70:c3:3c:03:eb:38:45:4f:f9:61:8a:
         d8:97:f9:9d:d7:0a:28:86:71:0c:78:8d:d3:6d:2f:3b:6f:3d:
         e8:17:8d:21:39:2f:83:da:86:f8:53:1e:ec:7e:40:2b:b7:71:
         e4:da:fe:3a:3f:fb:a1:72:3e:8f:68:da:5e:13:9d:87:fe:bf:
         5e:bc:9e:78:09:b0:e4:a1:7d:47:ba:6b:d5:7a:a4:7d:ea:fc:
         b0:3c:e0:d3:97:92:35:b1:cb:4b:f2:6d:08:57:2f:25:9c:ef:
         c1:46:cb:e0:0d:d6:78:0e:5c:17:4d:b2:4a:5b:5d:bb:36:a3:
         0b:d0:fa:53:48:58:74:23:a7:e6:d1:de:d1:09:eb:c9:4e:48:
         89:53:f7:5b:04:59:a6:04:24:f7:7a:88:92:9d:76:47:2c:8d:
         95:11:5b:37:36:5b:d6:3b:e4:a8:27:a0:12:8d:14:ad:82:32:
         d2:66:33:4a:85:77:60:4c:d9:44:73:18:4b:42:3f:df:cf:6a:
         fd:24:44:24:a9:46:63:c5:09:37:6b:0e:e8:30:dd:44:8b:ea:
         9a:44:1b:82:75:8c:2a:c8:f5:26:0a:7c:47:fd:61:3f:26:11:
         cd:b2:62:ba:5c:bf:de:ad:a2:46:6c:1a:15:66:c4:76:75:f1:
         9e:43:06:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:20:13 2026 by rpki-client