Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft
File:                     EA4DA064E912527194F47FF125954E84B6DBA21A.mft (raw, json)
Hash identifier:          RcHpltEKN8g0uJEMQFQ7uSeY5BCGkHOjDQPuRuPfczw=
Subject key identifier:   B1:67:2C:82:72:DC:14:90:3F:7F:80:9B:5D:17:BE:16:21:9B:AB:34
Authority key identifier: EA:4D:A0:64:E9:12:52:71:94:F4:7F:F1:25:95:4E:84:B6:DB:A2:1A
Certificate issuer:       /CN=EA4DA064E912527194F47FF125954E84B6DBA21A
Certificate serial:       3FD41A91FBFEE727FE85609737D5539F47D3CC36
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4DA064E912527194F47FF125954E84B6DBA21A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 23:47:59 +0000
Manifest this update:     Tue 12 May 2026 23:42:59 +0000
Manifest next update:     Thu 14 May 2026 01:49:59 +0000
Files and hashes:         1: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: 1s8nntsKiBFp7djfBzyRktp4RKhegiMqm5VcmIqavUQ=)
                          2: EA4DA064E912527194F47FF125954E84B6DBA21A.crl (hash: 5aVtm/iQce8C0QzhTVZ6Xn5mR6J7vIa0zxHzLF0AC3Q=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.crl
                          rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4DA064E912527194F47FF125954E84B6DBA21A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d4:1a:91:fb:fe:e7:27:fe:85:60:97:37:d5:53:9f:47:d3:cc:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4DA064E912527194F47FF125954E84B6DBA21A
        Validity
            Not Before: May 12 23:42:59 2026 GMT
            Not After : May 14 01:49:59 2026 GMT
        Subject: CN=B1672C8272DC14903F7F809B5D17BE16219BAB34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:02:23:6e:15:b5:40:c5:2d:1b:c1:88:6d:82:
                    5d:0a:e2:60:ef:f9:2a:c2:3b:6c:72:42:83:80:ff:
                    6b:72:fc:24:cf:ba:6a:05:b8:63:d8:67:0a:e3:84:
                    d7:c5:77:0e:eb:26:7b:c2:af:8e:03:96:9a:b6:19:
                    e2:fd:e8:45:c5:84:8c:ba:93:5a:06:08:26:8e:6f:
                    b9:c3:a4:3f:c0:0a:12:05:7a:54:a1:62:7b:71:16:
                    c3:8b:85:8c:8f:32:ac:98:de:7b:a5:5f:de:ea:f3:
                    fe:ee:69:8a:4d:53:da:0f:62:52:c8:30:24:33:ae:
                    6c:ea:43:1b:c0:0b:a5:25:15:cd:2a:c5:64:94:44:
                    46:88:f0:30:f0:4a:ff:e0:b4:dd:8c:c3:1b:0b:29:
                    1c:bf:22:15:4a:58:07:37:e2:4a:3f:c3:b1:10:c6:
                    5e:ab:e9:bf:05:7f:cd:eb:60:75:c1:40:49:3e:f2:
                    6a:7c:05:92:a7:36:9f:c7:de:4b:93:23:49:c8:79:
                    c0:a8:68:47:b6:4b:59:59:ad:69:1b:8f:cc:31:88:
                    8c:71:67:d8:82:73:f5:05:cd:b2:f4:bc:bc:e6:a0:
                    e5:47:94:84:76:76:e5:e9:7c:16:e7:69:b7:76:a3:
                    a8:ce:34:ec:18:68:88:ea:ec:3a:f3:ac:3e:ab:cf:
                    84:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:67:2C:82:72:DC:14:90:3F:7F:80:9B:5D:17:BE:16:21:9B:AB:34
            X509v3 Authority Key Identifier:
                keyid:EA:4D:A0:64:E9:12:52:71:94:F4:7F:F1:25:95:4E:84:B6:DB:A2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4DA064E912527194F47FF125954E84B6DBA21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/EA4DA064E912527194F47FF125954E84B6DBA21A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:dc:78:cc:05:70:f9:aa:2d:be:9b:79:55:03:8d:e3:90:e3:
         f4:32:92:aa:1a:ab:6a:f3:3f:88:96:ad:ba:dd:9c:9c:78:6e:
         fc:55:e7:e1:82:3b:86:2b:19:b3:1f:43:03:6f:0e:5f:8f:62:
         1d:9d:58:e4:6e:08:88:a2:ca:39:45:14:17:ee:bd:67:2a:6f:
         e3:d4:bd:2e:a7:1c:e8:98:98:42:b5:dd:48:f7:e7:26:4c:87:
         f4:70:ef:1a:2e:b6:f2:18:a0:50:38:4f:df:09:bf:89:f8:e6:
         c2:7d:57:08:32:f6:29:5b:3c:b7:ac:f0:5f:6c:0b:af:1f:b3:
         c2:d1:4b:01:d8:58:cd:da:7f:71:4a:53:57:96:9a:e8:1e:4b:
         fb:0d:0c:77:84:c7:27:49:c6:34:da:47:ed:74:a9:e0:9d:e9:
         f5:25:c4:08:ba:71:c0:19:98:32:6c:86:9c:29:df:91:ec:de:
         8e:93:fe:75:34:62:45:3b:74:4c:13:c2:28:59:55:0c:db:ef:
         e8:4f:81:df:96:00:24:7f:bc:a9:c3:2c:c1:ca:da:92:60:89:
         81:c7:9b:fe:0c:62:fd:22:5a:96:23:3f:75:e3:5f:02:72:02:
         89:ba:56:c1:70:5c:ed:f2:18:5e:d7:1e:c6:3b:8e:ea:fd:14:
         d2:3e:e2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:50 2026 by rpki-client