Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft
File:                     7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft (raw, json)
Hash identifier:          ZDThPn51mlyPB7Ht9P+62v7zz2m68ivTy7waJaVAFTA=
Subject key identifier:   FA:AA:6B:6F:10:5D:32:9F:26:6C:49:C8:41:F5:41:B9:60:44:E6:A8
Authority key identifier: 7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB
Certificate issuer:       /CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB
Certificate serial:       7E55ABCD2069A5E2B90A8E97793B6B9367ECFF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 05:10:29 +0000
Manifest this update:     Tue 12 May 2026 05:05:29 +0000
Manifest next update:     Wed 13 May 2026 07:16:29 +0000
Files and hashes:         1: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: AIYdaIbMpam2H+bkm3BZmX9wAdJuWZLGtRtTWiUJB3w=)
                          2: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl (hash: T0UHBDVgeWYfAJyCcHr5hcBgDpCvl/3/bFoH1DfnYs8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl
                          rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:16:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:55:ab:cd:20:69:a5:e2:b9:0a:8e:97:79:3b:6b:93:67:ec:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB
        Validity
            Not Before: May 12 05:05:29 2026 GMT
            Not After : May 13 07:16:29 2026 GMT
        Subject: CN=FAAA6B6F105D329F266C49C841F541B96044E6A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f6:78:87:e8:72:d7:4f:61:3e:b3:cb:f0:ac:
                    61:a9:d4:78:fa:54:dd:75:47:86:34:a9:ac:79:2b:
                    81:ab:cc:dc:aa:57:e3:ba:ea:7d:25:54:4c:b8:91:
                    70:a2:c1:e9:f3:e3:0a:98:06:9a:ab:16:e9:ca:68:
                    29:14:08:7b:68:7e:b0:c8:4a:b8:be:23:08:91:9a:
                    f5:04:56:0c:d0:ba:b2:0b:40:42:79:98:ff:27:84:
                    56:4b:08:d1:63:47:6b:9e:7e:01:05:58:fe:9e:c5:
                    04:58:fa:4e:e3:69:6b:ee:1e:40:88:a0:a4:b4:04:
                    0d:37:ae:75:41:a2:7b:ad:fc:e7:21:ae:4a:d9:1b:
                    cb:74:40:8e:8a:2f:e6:3c:d1:fa:30:c0:d1:e1:a7:
                    eb:42:cb:a3:32:0b:c1:00:60:fb:a1:e2:8a:bd:04:
                    97:35:ff:29:6b:df:4a:61:41:08:8c:d5:5d:80:b8:
                    00:ca:1e:a7:7a:58:5b:75:fb:da:bf:9f:9d:f4:f8:
                    60:75:3d:11:b4:a0:c9:c8:e5:4f:99:72:66:95:78:
                    58:49:8e:0c:f6:76:e1:39:03:ee:44:d2:2c:b3:19:
                    fd:a9:2e:3e:88:fb:e2:c1:a9:a1:3e:72:01:71:a3:
                    38:cc:1b:55:d5:38:c0:15:62:d2:c5:96:1b:be:5e:
                    45:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AA:6B:6F:10:5D:32:9F:26:6C:49:C8:41:F5:41:B9:60:44:E6:A8
            X509v3 Authority Key Identifier:
                keyid:7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:8c:0b:b8:d8:e7:80:63:52:8e:f3:c7:12:8f:4b:a2:13:b4:
         af:71:08:e5:67:01:f2:63:8b:73:81:d0:a5:50:9f:b0:e8:d6:
         8f:4c:ca:88:06:d8:63:44:af:e0:9c:4a:7e:4c:16:41:d6:bc:
         99:9f:d4:fd:d6:b5:d2:c4:a6:e7:54:61:2c:f5:83:a3:7e:4a:
         37:02:5b:9f:58:44:da:0c:b5:ba:21:cd:45:62:be:5a:7f:9a:
         c2:22:c9:1f:e8:d8:f9:fa:8e:a0:8d:34:09:20:f4:01:77:0e:
         4f:8a:da:c2:d3:e4:ca:4b:41:0c:c6:b0:8a:32:b0:76:6f:b5:
         fe:71:69:26:a8:76:80:f2:91:4b:e6:9b:83:32:a0:b7:f8:37:
         41:b6:5c:92:de:b2:29:f8:0c:c8:8b:be:9d:8f:2b:dd:1d:91:
         89:23:f1:27:9f:56:e5:86:7a:6c:d6:3d:20:4a:54:a7:bf:df:
         2a:9f:19:83:55:82:39:a2:28:02:fe:e0:83:25:d2:cb:6c:5c:
         d3:bb:28:71:c0:3a:bd:00:2f:3a:00:8d:61:f9:14:64:f2:ca:
         ae:0d:0f:f2:79:60:99:28:c1:21:e6:cd:5d:21:61:6d:95:51:
         fe:09:93:35:85:54:a2:d3:c9:ae:13:69:c4:f9:db:d8:98:3e:
         aa:23:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:47:45 2026 by rpki-client