Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft
File:                     0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft (raw, json)
Hash identifier:          zXeAMk993YWK5ZAXpSZw6RSfZ3dfP7v9xKu1ibHYYx4=
Subject key identifier:   F4:75:E8:C2:BC:24:E3:67:FB:1E:87:5F:98:C2:3B:DD:BB:83:5D:8F
Authority key identifier: 0E:0E:BB:BA:7E:22:C8:5B:34:73:A0:13:CF:DD:32:12:54:D5:68:AC
Certificate issuer:       /CN=0E0EBBBA7E22C85B3473A013CFDD321254D568AC
Certificate serial:       1B80A44F76DBE860F3D268A25DB9055BE21651D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft
Manifest number:          F8
Signing time:             Wed 04 Nov 2026 07:53:09 +0000
Manifest this update:     Wed 04 Nov 2026 07:48:09 +0000
Manifest next update:     Thu 05 Nov 2026 10:48:09 +0000
Files and hashes:         1: 0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl (hash: nlktJPbBQpITLnPvh3KY35Cz366R/NJq/ogPeG+z5HU=)
                          2: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: GvfJPx0m84FZdwqXoN6lWJ86xXd2jONGdjvxcJWy97o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl
                          rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 10:48:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:80:a4:4f:76:db:e8:60:f3:d2:68:a2:5d:b9:05:5b:e2:16:51:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E0EBBBA7E22C85B3473A013CFDD321254D568AC
        Validity
            Not Before: Nov  4 07:48:09 2026 GMT
            Not After : Nov  5 10:48:09 2026 GMT
        Subject: CN=F475E8C2BC24E367FB1E875F98C23BDDBB835D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:00:21:1b:e4:7c:a6:a5:40:8c:f9:d4:c3:1c:
                    59:2f:68:e6:46:9c:ef:0d:f8:7f:a6:73:9b:2d:ef:
                    53:e3:1d:11:c0:c0:22:e4:a1:06:79:01:ee:49:d5:
                    de:2f:0c:34:de:44:5d:47:2e:18:0b:a4:84:3b:33:
                    37:6c:f9:d0:41:68:2e:36:98:02:90:9f:ee:b1:90:
                    e5:7a:44:76:69:9b:c5:d8:2d:9e:c5:d0:2f:f9:b1:
                    e3:79:9a:90:01:11:f3:63:33:6b:13:ea:09:60:4c:
                    51:f3:e0:b0:d2:3c:a4:0f:ca:dd:83:69:74:b3:b3:
                    e3:4a:e3:3c:99:b9:38:e3:2b:f4:fc:1c:f1:6e:a7:
                    10:67:f0:d2:7f:8f:94:b6:2c:76:80:29:ce:09:ff:
                    0e:c9:ec:70:b7:d4:fb:f8:ac:13:25:49:d8:75:08:
                    b9:5a:7f:d1:59:e1:6b:b4:17:02:06:71:7b:58:41:
                    26:78:e6:bd:00:ce:56:70:5e:3c:ef:59:3a:be:4b:
                    73:b1:bc:09:31:33:cc:f4:26:47:67:e8:23:69:a1:
                    2e:57:6a:7b:25:1b:f6:1c:fc:55:95:ff:54:ef:e8:
                    93:9b:17:73:8d:8f:80:58:62:78:20:63:c9:87:bf:
                    77:69:3d:86:7e:b0:2f:a8:67:7a:92:e7:1e:3e:9b:
                    af:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:75:E8:C2:BC:24:E3:67:FB:1E:87:5F:98:C2:3B:DD:BB:83:5D:8F
            X509v3 Authority Key Identifier:
                keyid:0E:0E:BB:BA:7E:22:C8:5B:34:73:A0:13:CF:DD:32:12:54:D5:68:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4b:16:7f:30:52:d3:32:27:e1:40:53:38:7d:f3:21:d5:6c:
         82:ce:37:95:0a:c9:ed:40:fe:59:59:52:ad:18:84:d4:36:bf:
         60:31:3b:a8:7f:5c:ef:0b:96:20:39:19:f8:b7:68:b5:a3:5c:
         0b:5e:20:11:35:44:dd:34:57:4a:40:a8:72:e6:89:54:c8:cd:
         e5:45:e3:c6:19:64:6f:8b:85:f4:c1:36:92:a7:82:eb:78:57:
         94:4a:e5:73:3b:8f:fa:e9:2e:6c:cf:b0:03:ab:15:28:57:e6:
         04:ad:ea:6b:7f:24:58:ce:57:76:f3:55:f7:15:a3:42:c9:1d:
         b1:9d:9b:a5:d2:73:18:0e:e8:e6:95:ac:d0:b7:05:7c:e5:59:
         bd:51:5d:84:1e:3c:3f:80:f6:24:1e:02:9b:2c:27:a8:9b:b8:
         67:a0:1d:25:84:f2:d0:65:3f:10:bc:e4:7f:fc:a5:89:88:8b:
         fc:73:39:27:5a:52:63:58:59:d5:65:16:2e:7d:fa:a7:53:39:
         82:8f:da:4b:23:b9:34:a9:5c:ed:cf:05:de:61:95:fb:3a:89:
         62:b3:d6:99:a3:ea:fe:e4:68:24:a9:22:46:f9:21:0c:d5:86:
         52:61:10:91:7e:d5:3e:41:79:7e:54:6c:e8:26:fb:77:12:9c:
         ba:de:ca:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:47:55 2026 by rpki-client