Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft
File:                     E87EEEAA35D76955AEB555F946ED794035B56B72.mft (raw, json)
Hash identifier:          l9q6uXH8UGypKJ84VRFFxX/b80Tu+/wcVRWeIQXXefA=
Subject key identifier:   A1:73:4C:63:FC:6D:97:58:82:AF:2E:1C:09:FA:B9:EF:D1:1B:15:B4
Authority key identifier: E8:7E:EE:AA:35:D7:69:55:AE:B5:55:F9:46:ED:79:40:35:B5:6B:72
Certificate issuer:       /CN=E87EEEAA35D76955AEB555F946ED794035B56B72
Certificate serial:       343446A3AABFE3CFA40F92B135B76B048A0F5ACE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E87EEEAA35D76955AEB555F946ED794035B56B72.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft
Manifest number:          C8
Signing time:             Tue 29 Sep 2026 11:23:19 +0000
Manifest this update:     Tue 29 Sep 2026 11:18:19 +0000
Manifest next update:     Wed 30 Sep 2026 11:28:19 +0000
Files and hashes:         1: 3130332e3234392e31382e302f32332d3234203d3e20313530323036.roa (hash: 23cNk898TX6KCtmP7qTej4qkKvszzgnklZmFVcKo/dk=)
                          2: E87EEEAA35D76955AEB555F946ED794035B56B72.crl (hash: Dx3oxULuE6mtc+O0geWaq7EEgXgdjbz6m4j2KZGVeNk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.crl
                          rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E87EEEAA35D76955AEB555F946ED794035B56B72.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:34:46:a3:aa:bf:e3:cf:a4:0f:92:b1:35:b7:6b:04:8a:0f:5a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E87EEEAA35D76955AEB555F946ED794035B56B72
        Validity
            Not Before: Sep 29 11:18:19 2026 GMT
            Not After : Sep 30 11:28:19 2026 GMT
        Subject: CN=A1734C63FC6D975882AF2E1C09FAB9EFD11B15B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a1:93:1e:0d:4f:67:16:3f:a2:6e:4b:0b:b3:
                    d8:09:b8:aa:d1:50:73:19:b6:6c:de:48:b1:b3:0d:
                    07:db:60:e5:1f:93:f2:ae:68:ff:ab:b7:7d:9c:82:
                    b0:aa:3c:5e:2d:2b:0c:ed:b6:0e:33:cb:b7:a2:4a:
                    9f:bd:f1:39:05:10:e3:6b:9e:bc:6f:7d:94:60:db:
                    b3:58:92:8c:e8:5f:78:ad:b3:1c:55:09:e4:1c:2f:
                    42:78:b9:51:ca:7e:75:e5:70:31:77:f0:c0:b2:a7:
                    ff:cb:2e:0c:f3:df:cc:aa:8b:81:4e:5e:e4:0d:52:
                    74:6b:a3:15:90:c5:21:30:be:b9:7f:be:d2:41:82:
                    48:10:b2:1f:f8:92:35:d9:0e:bd:14:78:46:8d:34:
                    8f:85:3c:f6:52:64:94:3d:90:b8:29:2d:56:ce:16:
                    29:b3:74:2c:20:44:4d:51:77:d7:bf:12:f2:c7:db:
                    bf:7d:4e:1b:17:12:4d:45:96:d7:bd:09:9c:68:b0:
                    3c:0f:3e:60:f3:2a:32:90:a2:4a:23:21:2f:61:09:
                    6f:51:e5:0c:39:8c:87:24:6f:cb:ba:67:50:ec:f5:
                    25:f7:27:4b:ae:4a:23:11:43:b4:97:62:f1:27:ab:
                    cb:49:3d:3d:4d:b6:ca:7f:a6:8f:08:a2:0c:40:7e:
                    6d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:73:4C:63:FC:6D:97:58:82:AF:2E:1C:09:FA:B9:EF:D1:1B:15:B4
            X509v3 Authority Key Identifier:
                keyid:E8:7E:EE:AA:35:D7:69:55:AE:B5:55:F9:46:ED:79:40:35:B5:6B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E87EEEAA35D76955AEB555F946ED794035B56B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:6c:a4:d2:3d:2d:ae:49:dd:df:92:2c:d8:f2:52:1b:da:a4:
         c1:48:06:37:0b:24:c9:9b:6e:cb:ab:18:e9:e6:ec:65:a6:fb:
         50:77:1d:2d:9b:bf:98:26:ac:d0:f0:23:ea:98:65:fa:b3:1d:
         0c:06:2f:6a:9d:aa:11:5d:99:8a:a3:3c:8b:86:97:79:b8:3f:
         19:36:85:1f:fa:43:bb:7b:8d:62:aa:01:49:6a:82:e4:80:68:
         aa:fc:4d:e7:9c:7d:5f:b5:f0:74:01:51:58:ad:6b:99:07:d8:
         0d:db:5d:b5:f9:b6:70:dd:e5:9d:fb:bd:20:9c:22:35:ab:9f:
         ac:94:e3:9b:3f:32:36:34:f9:c7:04:b2:d2:19:b9:29:ca:9c:
         cd:54:e5:75:5c:db:81:93:24:0f:24:12:2d:dd:78:f9:21:f1:
         92:bf:ca:ac:04:8f:6d:86:17:e0:ea:70:9f:bc:97:2d:5e:2e:
         bd:77:e9:01:ed:e7:78:8c:71:4f:35:72:1d:05:f2:35:81:f4:
         a3:b4:5c:0a:24:92:b1:e1:1e:c8:8e:cc:a8:a3:81:e7:d0:df:
         74:7c:89:8e:f8:8e:89:90:f0:4d:d6:b2:da:75:46:3f:3c:89:
         a9:b3:01:71:36:01:8c:5c:82:cc:e9:aa:80:e6:81:d9:bd:b8:
         83:81:35:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:35:50 2026 by rpki-client