Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft
File:                     EBA1F4874C4867D2CAA214867052E9413088CD22.mft (raw, json)
Hash identifier:          EMZ50tsX8HZAxr1/4aDnGd8lIY/UtL1Qqp/gzwhEQM4=
Subject key identifier:   E1:39:A1:3C:39:F6:6F:35:FB:BD:C0:BD:EC:BA:8D:67:6F:46:85:D6
Authority key identifier: EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22
Certificate issuer:       /CN=EBA1F4874C4867D2CAA214867052E9413088CD22
Certificate serial:       7A2486514FB12EFA6668872D7B7E29DE4AAE8617
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 23:38:41 +0000
Manifest this update:     Thu 23 Jul 2026 23:33:41 +0000
Manifest next update:     Sat 25 Jul 2026 02:48:41 +0000
Files and hashes:         1: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: Rsj+zG8fTbANuQe+LowjpWqzpy4Nr2I6Rkz77sVkBRk=)
                          2: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: rkfIQLZH91MBngOR2XF3JSvb0x7kp9rSE9FoBc2wVuU=)
                          3: EBA1F4874C4867D2CAA214867052E9413088CD22.crl (hash: LNBjPJfAnoUZRIo4AnAdvgFVFO1a/7EWjVbmcrBT7Us=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl
                          rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:24:86:51:4f:b1:2e:fa:66:68:87:2d:7b:7e:29:de:4a:ae:86:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBA1F4874C4867D2CAA214867052E9413088CD22
        Validity
            Not Before: Jul 23 23:33:41 2026 GMT
            Not After : Jul 25 02:48:41 2026 GMT
        Subject: CN=E139A13C39F66F35FBBDC0BDECBA8D676F4685D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:13:9d:19:0a:b1:55:b4:99:b3:13:f5:0d:
                    ee:c6:54:26:ac:e9:ea:d5:aa:7e:30:53:e2:64:cc:
                    f1:11:4f:a2:aa:e2:59:97:42:b8:a1:92:2f:cc:9f:
                    73:d6:e8:f4:f0:ff:05:23:e0:88:c4:80:a9:75:87:
                    ac:cf:71:83:1e:2e:0a:35:43:8c:3b:b8:4a:96:88:
                    12:6e:ec:b2:14:ee:c2:27:41:79:cf:10:5f:fd:51:
                    88:39:7f:86:4c:64:34:f8:09:45:4d:2f:f3:ce:44:
                    0a:c0:f3:04:cb:dd:e6:ba:54:fb:cd:e8:a4:ee:56:
                    25:a2:02:6a:86:37:8e:72:f9:2e:f7:7f:99:80:42:
                    29:9d:90:66:12:ff:f0:0f:4b:01:b5:3a:18:31:19:
                    ca:66:47:f3:99:99:83:4b:28:92:eb:9a:5f:e5:b0:
                    a2:b3:2e:a3:24:01:c7:55:05:2e:68:c6:cf:c9:8a:
                    fe:df:cb:77:8c:7b:fd:b7:b7:5b:8c:e5:74:6d:b1:
                    4c:40:59:b5:f2:4b:29:c0:14:a1:8e:2a:67:e4:2b:
                    15:73:21:7f:d3:07:ed:3f:31:ae:8f:05:a3:3e:68:
                    92:58:c8:a0:f2:7a:5f:40:64:8e:7e:2e:90:39:7b:
                    64:12:01:20:d7:ab:f1:be:0d:1f:da:35:78:b2:95:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:39:A1:3C:39:F6:6F:35:FB:BD:C0:BD:EC:BA:8D:67:6F:46:85:D6
            X509v3 Authority Key Identifier:
                keyid:EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:84:25:93:7a:24:45:5d:4a:58:a2:1e:a3:0d:c5:58:f7:03:
         da:26:b6:73:2e:39:96:c7:cf:48:b7:9c:de:c7:87:e7:d7:b3:
         f1:bf:a8:24:bd:b6:14:0e:35:a7:b9:b7:e3:66:38:dc:44:b6:
         bd:70:1c:1e:48:b8:5c:47:f0:4a:5e:96:c1:a3:7a:64:60:fb:
         cf:1a:74:88:03:86:29:10:b8:fc:98:a9:53:94:83:c4:89:4d:
         8d:7b:6f:4d:7a:49:95:5d:9f:dd:22:ed:8c:17:3a:57:83:6f:
         1d:f2:8d:ec:25:89:09:8e:b6:9f:46:26:43:90:c4:51:5c:89:
         37:c9:38:e4:1c:4d:69:24:d0:f6:0e:83:a8:b9:8d:45:b2:ee:
         cf:5a:2d:c7:4b:ec:9e:fe:74:44:06:b4:9d:46:ea:95:56:f0:
         e2:e4:94:3d:f6:6a:85:65:9b:e5:5a:0a:a6:0f:b0:0f:cf:68:
         8c:62:03:e2:02:43:c5:96:e1:bd:ea:76:49:73:98:d7:cc:1d:
         cd:5a:9d:62:25:2b:40:34:46:32:77:8b:84:74:67:8e:d6:01:
         72:17:69:c1:74:c8:28:5b:eb:c7:71:e6:d1:e4:32:1b:cd:73:
         90:dc:e6:97:48:0f:a2:9f:43:6d:f4:7e:b6:58:54:6b:33:b8:
         af:a0:0b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:45 2026 by rpki-client