Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft
File:                     EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft (raw, json)
Hash identifier:          I9l2i8D4FnH90tXE5wINQdy1Ds5nRue/7RSjIiN/Z0U=
Subject key identifier:   0B:B7:E0:22:15:AB:66:E7:2F:B0:E2:03:C5:B5:97:66:7B:06:C1:86
Authority key identifier: EB:FE:4C:A9:15:14:CA:C6:1F:1B:83:53:4B:B1:58:D9:0B:DD:41:42
Certificate issuer:       /CN=EBFE4CA91514CAC61F1B83534BB158D90BDD4142
Certificate serial:       25B5D5EB188F03DC73C3D52945D9BDD90F1EAE9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft
Manifest number:          C4
Signing time:             Fri 25 Sep 2026 15:54:56 +0000
Manifest this update:     Fri 25 Sep 2026 15:49:56 +0000
Manifest next update:     Sat 26 Sep 2026 15:56:56 +0000
Files and hashes:         1: EBFE4CA91514CAC61F1B83534BB158D90BDD4142.crl (hash: emDz9TZKYhiK267JSRE+svQCK1QeuCOVStAYL3OHhro=)
                          2: 323030313a6466333a356334303a3a2f34382d3438203d3e20313431313236.roa (hash: hTFuMvwmOj1lUIuO6NPn3OHHpBVIbvNuSActpFl0hWE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.crl
                          rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 15:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b5:d5:eb:18:8f:03:dc:73:c3:d5:29:45:d9:bd:d9:0f:1e:ae:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBFE4CA91514CAC61F1B83534BB158D90BDD4142
        Validity
            Not Before: Sep 25 15:49:56 2026 GMT
            Not After : Sep 26 15:56:56 2026 GMT
        Subject: CN=0BB7E02215AB66E72FB0E203C5B597667B06C186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:82:98:a3:10:5b:ab:41:a4:64:e3:b1:37:a5:
                    98:02:b0:29:b9:dd:59:54:34:3a:76:43:4f:e0:b0:
                    0d:96:67:9c:09:52:27:36:b6:0e:31:1c:e8:27:f5:
                    81:25:c1:ba:f3:10:90:1c:36:76:58:f2:4d:57:03:
                    80:8b:bc:48:79:82:69:f8:65:d9:36:60:f1:19:43:
                    e6:50:02:8e:61:b1:bd:46:fa:74:4c:c3:24:67:e6:
                    5f:cb:70:0a:02:99:18:92:2d:09:e4:ab:b9:93:6d:
                    1c:36:c0:e8:ad:72:53:a0:03:1d:71:fe:27:dc:88:
                    f1:ab:c2:e8:32:7d:60:4a:d6:06:3d:fd:71:47:1b:
                    e0:58:e7:a2:0e:34:8c:2f:94:6b:4e:fd:72:8a:23:
                    35:cd:2c:63:a7:45:c7:80:e9:ae:07:73:06:59:39:
                    3a:0a:b8:49:ba:69:29:3d:9d:62:4d:35:de:70:9d:
                    42:ac:90:f9:29:bf:4d:2b:8c:a5:fa:86:40:2c:bf:
                    06:70:1d:fe:9d:f7:99:24:08:ec:9b:c4:4e:d1:2e:
                    c9:94:ec:2f:c3:a1:91:f9:7e:49:4e:39:fa:f2:7f:
                    dc:c7:02:55:52:d2:72:3e:9b:58:f1:cb:99:9f:05:
                    72:e1:f0:7e:a9:e3:09:31:96:b5:03:bc:0e:14:8f:
                    c6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B7:E0:22:15:AB:66:E7:2F:B0:E2:03:C5:B5:97:66:7B:06:C1:86
            X509v3 Authority Key Identifier:
                keyid:EB:FE:4C:A9:15:14:CA:C6:1F:1B:83:53:4B:B1:58:D9:0B:DD:41:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:71:1d:59:f5:2d:f5:c1:cc:66:96:50:c3:55:97:95:ef:db:
         7d:83:ff:4f:70:59:df:4c:61:e2:fd:0d:57:42:58:22:d4:99:
         eb:d6:5b:1e:a6:89:f5:0a:72:d1:f9:01:88:c7:0a:47:f2:44:
         8c:5a:7b:db:3a:78:56:0b:5c:ac:ac:b3:dc:63:4e:33:d7:8a:
         3a:12:96:15:ac:3d:2f:78:26:f4:99:2c:c6:5c:84:ed:4e:c1:
         2f:3c:d0:5f:53:98:ed:bb:da:8a:4a:30:21:88:19:41:16:96:
         c6:5d:c3:fb:87:e2:89:3a:52:bd:e6:24:cf:7c:15:e5:76:c6:
         1d:2d:b0:ff:0b:ee:4a:90:8b:02:42:d0:9a:52:ac:3c:6f:f4:
         eb:65:1e:c9:bb:f2:e6:8b:2b:c0:48:ac:a2:f5:82:a4:14:52:
         94:56:81:4b:01:ec:77:a3:89:f1:ee:b9:11:5f:ae:dc:0f:4b:
         b2:b2:40:53:b7:98:a8:02:b5:16:52:95:8a:fd:44:99:e5:5e:
         88:e8:32:f0:c9:e5:1a:e8:55:e8:43:24:12:6d:f2:87:32:96:
         ee:8d:39:7a:bb:d2:60:a1:5a:ef:68:f4:a1:68:a1:43:61:ff:
         4d:32:9a:a8:70:04:6d:5d:40:6f:a9:fa:ca:e3:04:d6:3e:6d:
         7f:b6:70:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:03:42 2026 by rpki-client