Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft
File:                     E87EEEAA35D76955AEB555F946ED794035B56B72.mft (raw, json)
Hash identifier:          WvJLnn75x3O5VarAzZt9T/QNmTHjGtXh3KlXhL6Mmro=
Subject key identifier:   90:DB:19:41:11:15:BE:14:32:3F:FB:1A:97:30:0C:5C:87:96:5E:3D
Authority key identifier: E8:7E:EE:AA:35:D7:69:55:AE:B5:55:F9:46:ED:79:40:35:B5:6B:72
Certificate issuer:       /CN=E87EEEAA35D76955AEB555F946ED794035B56B72
Certificate serial:       275547BE4CE2C5D9E94C87228FD0612862BB60B3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E87EEEAA35D76955AEB555F946ED794035B56B72.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 22:00:04 +0000
Manifest this update:     Tue 12 May 2026 21:55:04 +0000
Manifest next update:     Wed 13 May 2026 23:38:04 +0000
Files and hashes:         1: 3130332e3234392e31382e302f32332d3234203d3e20313530323036.roa (hash: 23cNk898TX6KCtmP7qTej4qkKvszzgnklZmFVcKo/dk=)
                          2: E87EEEAA35D76955AEB555F946ED794035B56B72.crl (hash: O7h9dJvhVZnS9nPtq429g8PdiLTHLo/+1heOeUOtjZM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.crl
                          rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E87EEEAA35D76955AEB555F946ED794035B56B72.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:55:47:be:4c:e2:c5:d9:e9:4c:87:22:8f:d0:61:28:62:bb:60:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E87EEEAA35D76955AEB555F946ED794035B56B72
        Validity
            Not Before: May 12 21:55:04 2026 GMT
            Not After : May 13 23:38:04 2026 GMT
        Subject: CN=90DB19411115BE14323FFB1A97300C5C87965E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:f2:c0:b0:72:73:6e:24:bf:82:9f:29:5e:
                    a3:3a:29:d1:8d:4c:80:6b:3d:3e:da:bb:f3:da:55:
                    2c:31:57:80:51:b2:0d:a7:5d:9b:98:8f:cd:4a:36:
                    3a:1b:67:b0:8d:fa:9e:1f:6d:ed:22:79:a7:99:81:
                    22:10:45:41:67:0e:64:5e:29:cc:f7:8d:2d:91:ab:
                    c3:e4:58:44:e6:62:2b:b7:c7:57:ab:ce:8c:73:af:
                    58:53:75:f6:8a:9e:eb:0d:0d:52:70:59:b6:79:36:
                    72:67:80:54:3a:2f:b3:27:60:2b:9d:3a:00:19:d8:
                    34:e2:1d:11:e2:8d:8f:06:f0:32:d2:0f:04:6b:4a:
                    ee:63:5e:3c:5f:f5:79:de:12:2d:5d:7b:a9:95:2a:
                    f7:57:9f:53:35:70:48:b2:b4:e1:3a:aa:e9:08:75:
                    88:a1:80:fe:c0:df:55:1d:7d:bf:2a:6c:49:89:1b:
                    d5:c2:83:60:c4:2e:35:2a:40:c2:cb:59:af:db:e6:
                    f2:98:97:3f:ce:3b:6f:48:3a:29:61:5a:d8:30:1e:
                    4f:fc:62:fa:a6:06:87:d4:5e:0a:b1:f8:80:ac:8f:
                    e6:26:c4:0c:d4:7d:31:53:3a:69:c3:6b:a3:30:41:
                    d6:2d:55:9a:13:b5:2b:94:cb:71:cd:cf:a7:be:52:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DB:19:41:11:15:BE:14:32:3F:FB:1A:97:30:0C:5C:87:96:5E:3D
            X509v3 Authority Key Identifier:
                keyid:E8:7E:EE:AA:35:D7:69:55:AE:B5:55:F9:46:ED:79:40:35:B5:6B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E87EEEAA35D76955AEB555F946ED794035B56B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ab:3c:50:6f:6a:38:cd:c7:e5:0a:81:20:20:78:a7:36:7a:
         e6:35:fd:f5:e6:c2:9f:0c:2b:bf:27:3e:a6:21:d7:c5:e2:fc:
         3f:93:72:87:95:af:e8:7b:7d:95:71:01:db:be:d4:f7:b0:7e:
         35:55:6c:18:22:7b:22:02:a0:ed:f7:c6:d9:c5:2a:6e:72:fe:
         c2:5b:29:b0:44:7d:8f:c1:8d:42:d7:34:15:b5:39:99:cf:dd:
         fd:20:58:56:49:bd:94:7a:32:60:77:cb:2f:36:ae:6f:57:05:
         dc:a7:ae:d2:b5:1f:db:80:43:ae:5b:f0:5d:1d:06:36:ec:41:
         13:c3:91:ad:2c:20:db:f1:32:51:c3:64:9f:ec:4e:68:28:27:
         18:81:90:c7:50:a0:27:4f:12:d4:2d:74:f5:4a:56:eb:e9:c3:
         57:8e:0a:53:a8:c2:e3:94:24:d1:42:53:42:e2:72:0b:86:44:
         60:25:59:68:ce:02:df:8a:90:54:44:87:ae:3c:a3:e8:8f:7c:
         60:63:81:95:72:79:c9:c7:45:97:4b:fa:7f:9e:6f:75:7a:ce:
         18:e2:54:a5:03:d7:27:5e:5a:1d:d1:9a:4a:c8:b1:9e:1f:b3:
         9b:91:24:3a:3a:9d:03:7c:12:94:15:7e:53:44:b6:c8:94:86:
         bf:c6:22:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:16 2026 by rpki-client