Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft
File:                     8EE74284879D5768C14DFF59F408307443024F52.mft (raw, json)
Hash identifier:          Qzhhgbk2R1T/Qc9RR7iQpevW80cf5h2h1Os+BVY7bc0=
Subject key identifier:   13:25:31:BE:11:B9:49:CB:C4:C0:41:87:2E:28:4E:09:C3:D4:2B:A1
Authority key identifier: 8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52
Certificate issuer:       /CN=8EE74284879D5768C14DFF59F408307443024F52
Certificate serial:       14B9A291C9F8CD8311184129A749481DA7EADFEB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 06:16:59 +0000
Manifest this update:     Tue 12 May 2026 06:11:59 +0000
Manifest next update:     Wed 13 May 2026 08:28:59 +0000
Files and hashes:         1: 8EE74284879D5768C14DFF59F408307443024F52.crl (hash: uF1BivD9ntQ39XDxwb/s885GodErAAYUCoV9eQ2Re+I=)
                          2: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: qVGDGNhc8J+1zH3v5gLnqpqbccQ37nMtlVBvAtU2Qic=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl
                          rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b9:a2:91:c9:f8:cd:83:11:18:41:29:a7:49:48:1d:a7:ea:df:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE74284879D5768C14DFF59F408307443024F52
        Validity
            Not Before: May 12 06:11:59 2026 GMT
            Not After : May 13 08:28:59 2026 GMT
        Subject: CN=132531BE11B949CBC4C041872E284E09C3D42BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:54:c0:db:bb:e2:94:47:f9:22:39:e9:a8:
                    75:4a:8f:cb:47:8c:46:31:4f:e1:da:8d:78:76:a9:
                    fa:4f:91:85:48:b2:39:c2:e7:96:b1:06:33:b4:bd:
                    46:c1:1c:a4:d6:6d:cf:aa:b3:94:49:65:6a:90:0c:
                    8b:de:38:8a:c0:f1:58:aa:62:8d:05:cf:1f:18:4b:
                    3e:6f:8a:7e:82:fc:cd:73:1c:64:a7:09:de:2e:8d:
                    96:63:64:55:e7:49:a4:f7:94:eb:f0:b4:c7:ed:ca:
                    4a:86:ba:35:a6:0a:14:ea:cc:7d:d7:6c:0f:2a:49:
                    40:45:55:98:d7:2c:28:32:fa:48:ff:3a:8a:49:c3:
                    74:cc:c7:16:2c:b4:be:b2:5f:e2:ca:11:d9:46:a8:
                    d8:9a:c1:2c:3a:aa:5e:e4:7c:b1:69:84:4f:b0:5b:
                    8c:5b:fc:22:4c:72:16:29:ff:72:1c:86:28:67:c7:
                    48:fe:26:e3:58:42:79:48:58:77:cc:60:97:6c:26:
                    70:2c:9c:bf:bd:b6:87:16:3a:c9:40:80:7a:a0:a5:
                    29:ab:05:7d:11:07:2e:6b:78:e4:ab:8d:65:62:9d:
                    6a:15:1f:36:3b:90:56:86:92:33:f5:51:27:01:5d:
                    e8:2b:d7:6c:df:ff:a7:d7:83:88:65:c9:d6:34:4d:
                    37:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:25:31:BE:11:B9:49:CB:C4:C0:41:87:2E:28:4E:09:C3:D4:2B:A1
            X509v3 Authority Key Identifier:
                keyid:8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:79:61:15:0d:30:c1:78:4a:6b:04:cc:8b:3f:b2:71:00:39:
         26:35:6d:90:c2:1b:26:0b:67:10:97:83:26:ef:da:27:ee:f1:
         fb:61:9d:34:4b:22:87:6b:62:ac:55:57:e8:42:97:35:0e:9d:
         57:ac:1a:94:ea:6f:db:f4:77:e1:f0:b3:7f:c9:8a:ef:8a:a9:
         83:0f:66:a0:4a:4b:c5:1a:10:aa:09:c4:5b:35:9c:9b:30:4a:
         4a:67:c9:3c:cd:73:5f:d4:6c:ca:33:b1:85:1f:02:4e:26:8a:
         0a:f1:c6:44:89:33:4d:54:34:67:50:8f:91:2c:78:21:c5:80:
         d3:7f:fd:46:a8:bc:f2:5c:93:1b:21:96:d7:35:c6:cc:5e:10:
         28:52:45:7d:2b:7e:1b:d8:9e:a8:ae:8c:52:10:88:c5:59:52:
         12:ca:ad:e1:e6:ff:2d:93:e7:c8:fd:47:fc:01:d5:d4:3a:9a:
         46:2f:05:9d:de:3b:00:08:40:08:88:20:1f:6c:9c:95:8a:de:
         58:f6:3b:e2:07:8c:1d:0d:d0:c8:e4:b3:74:97:00:e3:97:f2:
         15:6a:bc:1e:d4:cf:54:9d:08:20:92:14:88:74:95:eb:23:f0:
         ee:6e:1d:40:f2:a8:ab:47:cd:80:f6:a5:54:31:65:08:b3:40:
         1d:84:c6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:28 2026 by rpki-client