Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft
File:                     8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft (raw, json)
Hash identifier:          eoS8rBxXgjUvD4on2KTbxTZj8iaD3vJcd4vPbPHusVg=
Subject key identifier:   EA:61:74:1B:30:9F:24:F3:02:3D:1E:6A:81:81:9D:71:BC:90:AE:FA
Authority key identifier: 80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6
Certificate issuer:       /CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6
Certificate serial:       54DBD5C5A1C9A577CA287FA809E17956BDA2CFC4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 04:54:54 +0000
Manifest this update:     Tue 12 May 2026 04:49:54 +0000
Manifest next update:     Wed 13 May 2026 05:26:54 +0000
Files and hashes:         1: AS139994.roa (hash: yvMW+tHCsBkuY1gG/yGlJ6JOSC3lCz//Xfli/4HGudE=)
                          2: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl (hash: ooAUdUzudjGMeMvijsCsZHU9q1ypH8kpPP2+2MnAH0M=)
                          3: AS24203.roa (hash: elsc0fS7A3LxkWGHoyme7eZUKOvhFf04i/z5CF+hz8c=)
                          4: AS17885.roa (hash: QDIkXwtnGbligvAEMFVpJlik2NMuLqD9yutNqqC9tvo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl
                          rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 05:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:db:d5:c5:a1:c9:a5:77:ca:28:7f:a8:09:e1:79:56:bd:a2:cf:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6
        Validity
            Not Before: May 12 04:49:54 2026 GMT
            Not After : May 13 05:26:54 2026 GMT
        Subject: CN=EA61741B309F24F3023D1E6A81819D71BC90AEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:52:10:3c:f8:72:30:c6:c5:87:2a:44:c0:a4:
                    42:63:9b:b7:1d:fb:80:3d:ff:37:c3:93:17:57:94:
                    0e:d7:4e:f5:3e:e1:be:fd:f0:fa:19:a9:d9:4b:65:
                    cd:ed:84:72:fa:75:f5:22:fa:41:34:5c:d4:5b:fb:
                    bc:50:15:a5:34:2b:b5:fe:88:88:39:db:78:b0:9a:
                    d4:15:56:f6:25:53:e9:c6:c5:40:36:16:97:bf:4a:
                    36:e0:c9:a8:78:d1:cb:87:c4:3f:b7:a5:ec:65:04:
                    76:5a:96:dc:96:1e:50:aa:6c:51:2a:90:1d:10:06:
                    b9:6e:8e:a0:f0:bd:e9:31:cb:9d:71:72:a3:4f:80:
                    27:cc:59:5f:3d:f2:c1:7f:5a:07:30:e6:0e:21:b2:
                    7a:2f:9e:21:03:75:31:14:4a:cb:b7:28:17:72:12:
                    18:93:53:7d:f3:50:28:48:49:44:20:43:96:fc:31:
                    66:32:e4:68:b3:d2:78:6a:69:ee:00:a0:75:46:c5:
                    c3:c4:3b:b0:38:68:ae:d4:7c:15:a6:c7:34:20:79:
                    21:3a:84:05:ba:cd:46:43:50:f6:e7:22:2c:d6:9a:
                    18:1a:92:7e:71:2a:14:1a:57:4c:9b:ff:2c:71:cc:
                    9b:78:b9:f7:c4:45:4e:88:a2:3f:7c:e2:53:ef:6f:
                    9a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:61:74:1B:30:9F:24:F3:02:3D:1E:6A:81:81:9D:71:BC:90:AE:FA
            X509v3 Authority Key Identifier:
                keyid:80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:0b:9a:a7:b0:95:7c:6e:e5:3b:a6:cf:dc:e7:39:b8:74:10:
         7f:34:25:a0:bc:17:33:2c:96:7e:65:75:07:d7:bd:27:b8:80:
         af:07:0b:4a:0c:cf:3b:72:28:4d:f2:43:fa:cb:83:34:6f:1c:
         af:71:b1:31:b7:75:93:fb:e8:06:3c:5b:b6:47:b5:3e:19:e6:
         66:08:3a:7c:b1:02:3d:e9:92:bf:51:c3:f9:ac:72:c3:23:fe:
         f4:02:c1:b2:98:f5:68:33:e6:c0:3b:93:8b:64:fd:03:85:97:
         2c:8a:5f:79:3f:ff:e0:28:7f:97:43:4d:f7:a0:6b:54:23:00:
         c6:92:a3:bd:10:be:47:d6:8a:cc:0d:6f:8a:2a:85:9f:25:19:
         1b:23:47:15:26:a2:10:d3:f2:12:a6:42:4b:43:19:99:64:b6:
         c2:a6:de:b7:03:9c:93:1e:9a:ce:ca:5e:df:a2:62:81:18:8c:
         25:7b:54:fe:ab:73:ff:6b:b0:97:80:75:e8:2d:b6:5e:9e:04:
         4f:ec:92:8b:27:9c:c4:95:59:f2:94:c5:1c:b1:f2:ab:e4:a1:
         67:ac:11:37:71:18:a8:b1:ae:f1:cd:db:ea:6d:44:c8:fd:23:
         be:8a:5c:c5:a0:41:be:5e:6c:6b:b6:e6:e3:32:c8:4c:c1:7e:
         92:ca:2f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:20:35 2026 by rpki-client