Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.mft
File:                     EAE046BFFB08A27729B8D486164C8C1E280C169E.mft (raw, json)
Hash identifier:          jJ5F7E/pV4x9jPB+m6upDX10ant7/KXY2G3+Y2+R+vU=
Subject key identifier:   51:69:65:63:A3:DD:25:2A:D0:0E:2F:2C:B1:36:06:7B:AC:3E:B4:5B
Authority key identifier: EA:E0:46:BF:FB:08:A2:77:29:B8:D4:86:16:4C:8C:1E:28:0C:16:9E
Certificate issuer:       /CN=EAE046BFFB08A27729B8D486164C8C1E280C169E
Certificate serial:       08FCCEE11D4D9DE83AAD9AD7155ED010AC6DC6EB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE046BFFB08A27729B8D486164C8C1E280C169E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.mft
Manifest number:          CA
Signing time:             Tue 29 Sep 2026 00:04:40 +0000
Manifest this update:     Mon 28 Sep 2026 23:59:40 +0000
Manifest next update:     Wed 30 Sep 2026 03:32:40 +0000
Files and hashes:         1: EAE046BFFB08A27729B8D486164C8C1E280C169E.crl (hash: WJihSIFQyVQtWmN4s9CYin421PHk7rgskM/o7akruxw=)
                          2: 3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa (hash: We8sRw23ra0s7ummEVmNto7+y6Pn15K3D/+wd4Omz9o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.crl
                          rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE046BFFB08A27729B8D486164C8C1E280C169E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:fc:ce:e1:1d:4d:9d:e8:3a:ad:9a:d7:15:5e:d0:10:ac:6d:c6:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE046BFFB08A27729B8D486164C8C1E280C169E
        Validity
            Not Before: Sep 28 23:59:40 2026 GMT
            Not After : Sep 30 03:32:40 2026 GMT
        Subject: CN=51696563A3DD252AD00E2F2CB136067BAC3EB45B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:f4:69:e1:97:4b:e3:61:e1:4e:4f:91:80:
                    9b:e8:8e:4f:9c:ea:54:56:40:87:ec:ee:aa:9b:5c:
                    76:9a:a2:f4:21:63:54:70:79:54:6a:ce:dd:3d:ca:
                    92:74:93:da:8d:13:fd:18:3a:0a:1a:70:74:e5:2a:
                    53:d1:98:c4:b3:c6:b5:ba:b4:a9:7b:26:2e:89:4d:
                    e4:86:7f:26:4a:0e:89:93:e9:7b:ed:ee:b5:0b:70:
                    65:f7:a6:18:ad:da:20:97:e1:86:d7:d0:57:a7:0a:
                    4d:ef:15:fd:20:43:39:8f:a0:9f:e4:2a:a0:74:47:
                    e4:36:8a:63:e2:e4:61:9e:e5:63:55:e2:7b:85:b3:
                    71:52:9b:5e:91:a8:25:a3:73:3b:9e:18:ef:26:5a:
                    4b:38:3f:13:1e:d3:4b:0c:29:70:19:35:d6:da:a8:
                    da:4e:a7:a6:0a:27:8c:37:2c:54:06:45:02:48:b8:
                    69:62:36:ec:c9:1f:9c:a5:02:51:ee:75:c9:39:48:
                    2e:c0:d9:e5:91:c0:2d:34:4d:b4:07:9c:c9:57:a1:
                    33:5f:fc:b1:3f:8f:a2:1a:a2:68:c5:b1:96:dc:5a:
                    1c:52:4c:8d:f7:08:2c:c6:4d:0b:42:84:a1:b2:7d:
                    7e:a5:3f:de:f9:f1:7c:34:23:b2:bc:c2:b8:df:42:
                    5d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:69:65:63:A3:DD:25:2A:D0:0E:2F:2C:B1:36:06:7B:AC:3E:B4:5B
            X509v3 Authority Key Identifier:
                keyid:EA:E0:46:BF:FB:08:A2:77:29:B8:D4:86:16:4C:8C:1E:28:0C:16:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE046BFFB08A27729B8D486164C8C1E280C169E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b2:a7:4e:02:1f:11:47:68:33:be:86:e2:af:96:0d:c5:c6:
         af:48:9d:4f:3f:1d:01:7f:85:3a:96:74:fe:38:92:dc:8b:64:
         81:c3:f8:e4:ce:85:ea:de:53:5a:9a:d1:4f:e3:dd:4f:4c:d5:
         98:8b:d4:8c:a1:fe:f7:31:a2:c9:dc:1e:8a:84:fe:53:6f:7b:
         63:26:ac:f5:a5:38:f1:00:80:4c:b7:3c:f4:9b:55:9e:28:84:
         47:3b:f5:7c:fd:b5:e3:b3:4b:b2:86:31:5b:b5:25:ea:73:80:
         19:ab:2c:f7:42:08:41:68:ce:07:20:0f:d2:8d:30:30:f2:81:
         a3:2d:7d:97:e3:f7:2c:85:d9:59:48:58:8a:4c:83:9a:d6:96:
         e8:b5:22:41:25:47:55:80:6a:a4:f9:4a:03:c7:bd:00:7f:97:
         b1:11:73:e7:03:90:d2:c2:63:3f:f7:fe:cd:1f:63:06:55:75:
         00:d9:c9:a7:06:15:29:1d:19:e4:35:28:c8:22:52:18:e7:dc:
         97:d6:9c:6f:39:72:3e:73:df:5c:39:93:6f:00:dc:f5:b8:55:
         ae:0f:fc:a5:e1:0f:2e:57:64:1e:0f:30:76:0b:52:f7:88:13:
         e5:a0:9f:55:d0:48:ce:44:cc:d5:3a:50:14:19:4d:6d:95:49:
         4a:7e:1a:dd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCPzO4R1Nneg6rZrXFV7QEKxtxuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFFMDQ2QkZGQjA4QTI3NzI5QjhENDg2MTY0QzhDMUUy
ODBDMTY5RTAeFw0yNjA5MjgyMzU5NDBaFw0yNjA5MzAwMzMyNDBaMDMxMTAvBgNV
BAMTKDUxNjk2NTYzQTNERDI1MkFEMDBFMkYyQ0IxMzYwNjdCQUMzRUI0NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3PfRp4ZdL42HhTk+RgJvojk+c
6lRWQIfs7qqbXHaaovQhY1RweVRqzt09ypJ0k9qNE/0YOgoacHTlKlPRmMSzxrW6
tKl7Ji6JTeSGfyZKDomT6Xvt7rULcGX3phit2iCX4YbX0FenCk3vFf0gQzmPoJ/k
KqB0R+Q2imPi5GGe5WNV4nuFs3FSm16RqCWjczueGO8mWks4PxMe00sMKXAZNdba
qNpOp6YKJ4w3LFQGRQJIuGliNuzJH5ylAlHudck5SC7A2eWRwC00TbQHnMlXoTNf
/LE/j6IaomjFsZbcWhxSTI33CCzGTQtChKGyfX6lP9758Xw0I7K8wrjfQl3/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUWllY6PdJSrQDi8ssTYGe6w+tFswHwYDVR0j
BBgwFoAU6uBGv/sIoncpuNSGFkyMHigMFp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzEwOTA1NzMtNmFkMy00ZTYzLThhZjQtOGEyZDU4MmFhMGNkLzAvRUFFMDQ2QkZG
QjA4QTI3NzI5QjhENDg2MTY0QzhDMUUyODBDMTY5RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQUUwNDZCRkZCMDhBMjc3MjlCOEQ0ODYxNjRDOEMxRTI4MEMx
NjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzEwOTA1NzMtNmFkMy00ZTYzLThh
ZjQtOGEyZDU4MmFhMGNkLzAvRUFFMDQ2QkZGQjA4QTI3NzI5QjhENDg2MTY0QzhD
MUUyODBDMTY5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKyyp04CHxFHaDO+huKvlg3Fxq9InU8/HQF/
hTqWdP44ktyLZIHD+OTOhereU1qa0U/j3U9M1ZiL1Iyh/vcxosncHoqE/lNve2Mm
rPWlOPEAgEy3PPSbVZ4ohEc79Xz9teOzS7KGMVu1JepzgBmrLPdCCEFozgcgD9KN
MDDygaMtfZfj9yyF2VlIWIpMg5rWlui1IkElR1WAaqT5SgPHvQB/l7ERc+cDkNLC
Yz/3/s0fYwZVdQDZyacGFSkdGeQ1KMgiUhjn3JfWnG85cj5z31w5k28A3PW4Va4P
/KXhDy5XZB4PMHYLUveIE+Wgn1XQSM5EzNU6UBQZTW2VSUp+Gt0=
-----END CERTIFICATE-----
Generated at Tue Sep 29 06:54:30 2026 by rpki-client