Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft
File:                     0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft (raw, json)
Hash identifier:          iPB4aX0i2r/8/6pkjkWKW87vdK8ommPZjLyncUqx1WI=
Subject key identifier:   88:34:58:E2:11:DF:23:2B:E9:F6:11:96:41:41:34:34:8A:E8:F4:98
Authority key identifier: 0E:0E:BB:BA:7E:22:C8:5B:34:73:A0:13:CF:DD:32:12:54:D5:68:AC
Certificate issuer:       /CN=0E0EBBBA7E22C85B3473A013CFDD321254D568AC
Certificate serial:       4F6F804A3F38830572D6911F8B374446A7E94E86
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft
Manifest number:          0106
Signing time:             Sat 14 Nov 2026 20:09:50 +0000
Manifest this update:     Sat 14 Nov 2026 20:04:50 +0000
Manifest next update:     Sun 15 Nov 2026 21:38:50 +0000
Files and hashes:         1: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: GvfJPx0m84FZdwqXoN6lWJ86xXd2jONGdjvxcJWy97o=)
                          2: 0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl (hash: 06R6tsL4nKxW9oW6yl6Us+shwg7ZLDSYi3s+SMMASxo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl
                          rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 21:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6f:80:4a:3f:38:83:05:72:d6:91:1f:8b:37:44:46:a7:e9:4e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E0EBBBA7E22C85B3473A013CFDD321254D568AC
        Validity
            Not Before: Nov 14 20:04:50 2026 GMT
            Not After : Nov 15 21:38:50 2026 GMT
        Subject: CN=883458E211DF232BE9F61196414134348AE8F498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:be:33:6a:fd:e8:f5:ac:e1:10:76:29:b3:
                    af:15:3f:ff:a8:6b:c3:45:26:fc:2e:73:b3:14:f1:
                    b2:3d:90:34:46:1b:28:98:37:6b:61:2d:7e:e9:09:
                    27:30:80:be:18:c5:53:c4:b0:f6:63:be:a5:17:9f:
                    e5:51:2d:80:9e:08:34:6e:b0:2f:25:1d:e1:86:d2:
                    ed:5d:96:19:6b:62:8b:b5:3e:84:2a:dd:ba:d7:ff:
                    71:65:da:ee:e3:d1:c8:68:ae:2b:91:ef:60:1d:f9:
                    7d:8c:cd:78:47:a0:df:dc:97:90:e6:84:04:6c:fb:
                    eb:87:d7:04:dd:32:fc:50:47:4f:92:31:a5:7c:c5:
                    20:f0:1b:0b:44:46:5f:72:bc:cd:75:e0:3d:1e:d1:
                    21:db:96:36:74:b2:b2:44:a7:9f:b2:24:68:24:8a:
                    91:44:15:87:6c:14:f5:15:c1:cf:c6:4e:b1:bf:f8:
                    9f:6f:97:b4:12:33:14:11:3c:46:f4:09:e3:9b:1b:
                    54:30:90:72:cf:88:94:54:46:7b:ec:30:df:7d:92:
                    02:51:32:c0:33:aa:d0:3f:ab:37:a8:eb:81:70:e0:
                    12:7a:f8:c4:62:a7:71:8d:e0:87:52:00:2e:7a:6c:
                    ef:16:9d:c5:7a:ea:f4:bb:03:9c:28:47:b8:17:f8:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:34:58:E2:11:DF:23:2B:E9:F6:11:96:41:41:34:34:8A:E8:F4:98
            X509v3 Authority Key Identifier:
                keyid:0E:0E:BB:BA:7E:22:C8:5B:34:73:A0:13:CF:DD:32:12:54:D5:68:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c6:df:bf:73:01:69:da:e9:81:cc:2d:c5:ff:1d:8e:00:11:
         32:ff:fc:61:9e:3f:20:b5:1b:4d:b7:e5:71:8f:df:e2:20:63:
         93:37:ea:6b:18:45:d9:24:9e:90:36:4f:67:a1:8c:45:3a:19:
         b7:0e:fa:64:b9:6a:4f:1c:47:be:a0:27:36:83:e7:4b:b7:98:
         0f:5d:48:b0:69:b0:cf:f0:7d:82:c3:3c:fc:60:8e:ec:9c:e9:
         0a:01:17:04:f5:a9:b9:20:a0:ff:88:dd:79:a5:6d:f4:25:ed:
         91:8c:cc:c8:25:20:22:04:b8:0e:db:a2:ef:20:a6:b5:96:65:
         e0:85:ba:da:2e:3c:ef:4e:ec:01:d9:67:c7:f3:91:2e:49:8d:
         78:3a:6b:78:dc:80:66:05:76:43:a7:36:6b:58:71:8c:2d:03:
         b5:3b:53:5f:48:ea:43:5b:20:29:d3:29:4d:a0:4b:4e:00:3e:
         cb:20:73:7d:60:29:c7:4e:d5:a8:6b:0c:c8:90:67:01:11:37:
         a5:9a:62:e8:18:8a:52:0a:4a:45:ea:6e:5b:9c:ff:b7:d7:52:
         40:36:11:35:6a:95:ae:c3:01:24:ae:88:c5:a9:88:3c:37:21:
         cc:ad:63:27:dc:c0:d9:b4:9b:dc:5c:01:51:18:6f:10:a1:dc:
         84:5a:19:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:28:18 2026 by rpki-client