Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft
File:                     E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft (raw, json)
Hash identifier:          G3YBwlYVGGfCmCYx1Ze4wY/jQtUnlyVviJcGcWfGgsQ=
Subject key identifier:   02:34:36:2A:E1:72:7E:05:1B:3E:64:D3:2F:56:DC:FF:82:DD:B0:A2
Authority key identifier: E8:A9:34:26:8F:45:DA:8A:6A:43:32:96:81:F0:D4:FE:AE:CF:F5:BC
Certificate issuer:       /CN=E8A934268F45DA8A6A43329681F0D4FEAECFF5BC
Certificate serial:       32D894F35C15276001AA5B5A9A10A80DD2621535
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 20:26:31 +0000
Manifest this update:     Mon 20 Jul 2026 20:21:31 +0000
Manifest next update:     Tue 21 Jul 2026 23:06:31 +0000
Files and hashes:         1: E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.crl (hash: Az0wQ9XZiNMTERx+599MK4QICS0GBFK02ygVddbpQ/M=)
                          2: 3130332e37382e35312e302f32342d3234203d3e20313530323536.roa (hash: PIufH5O182sP9pVKKuDwELYzvTT1F4q43CMzZkbvVHc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.crl
                          rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 23:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d8:94:f3:5c:15:27:60:01:aa:5b:5a:9a:10:a8:0d:d2:62:15:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8A934268F45DA8A6A43329681F0D4FEAECFF5BC
        Validity
            Not Before: Jul 20 20:21:31 2026 GMT
            Not After : Jul 21 23:06:31 2026 GMT
        Subject: CN=0234362AE1727E051B3E64D32F56DCFF82DDB0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:96:27:7f:4c:0c:92:40:ad:9c:17:0c:64:b1:
                    f3:64:f1:22:88:f6:f7:59:6a:af:fc:54:f5:e4:f6:
                    38:02:7d:8c:d7:8f:0e:23:02:c8:9c:8c:d0:3e:37:
                    28:0b:af:aa:cc:4b:31:69:ba:58:d1:df:af:de:68:
                    27:10:68:04:bd:49:82:d3:9c:12:59:5d:40:bf:4b:
                    eb:cb:f9:61:de:97:14:50:00:a2:f5:4b:84:b1:cd:
                    5d:5f:fe:b2:eb:a3:fb:4b:dc:59:82:1d:73:12:3e:
                    8f:0b:2a:e8:ed:43:70:40:09:cf:01:f9:8c:5f:e8:
                    11:76:ca:28:e1:fd:99:c1:22:1e:cd:40:fb:7e:45:
                    8e:f9:c4:14:91:99:16:bb:20:3b:fa:0c:51:33:37:
                    bc:97:55:69:85:8c:fc:59:6c:bb:a3:4c:fb:af:08:
                    37:13:0b:aa:69:eb:fd:9e:34:7c:dc:db:d3:06:ec:
                    02:6d:cc:18:49:d2:9f:58:2d:e2:1d:cb:1a:eb:33:
                    fd:2e:f8:32:bd:11:ee:e2:c6:08:d9:f8:9c:86:29:
                    72:ff:0c:81:b8:52:2f:53:71:6b:8a:5c:5f:2f:68:
                    60:50:91:e2:b3:03:51:1c:68:6f:b2:93:e7:a9:82:
                    0f:0b:22:f4:81:7f:56:c5:a9:5c:40:f2:10:80:f2:
                    f0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:34:36:2A:E1:72:7E:05:1B:3E:64:D3:2F:56:DC:FF:82:DD:B0:A2
            X509v3 Authority Key Identifier:
                keyid:E8:A9:34:26:8F:45:DA:8A:6A:43:32:96:81:F0:D4:FE:AE:CF:F5:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:51:fc:6c:54:68:28:de:ea:c6:bb:af:d1:09:69:66:df:ea:
         6f:f8:85:16:93:f5:17:48:3c:01:a2:11:51:75:36:a8:d7:fc:
         4f:cb:1a:cb:6c:9c:3b:b8:99:1e:ed:92:b5:20:2b:42:1d:b3:
         cb:2a:56:08:ec:ab:3f:37:c1:e8:7f:55:02:d2:d6:09:a7:5b:
         7a:9c:5c:8a:db:40:25:25:3b:4a:8d:28:45:09:eb:e2:01:7c:
         19:7d:2f:be:9b:f5:f5:e1:90:87:c6:1b:a4:f5:b6:b5:39:38:
         eb:99:6d:05:d9:3d:c7:91:00:de:2d:5d:c0:3f:e3:fb:ea:04:
         52:0e:35:8f:ac:ae:50:60:9e:f7:8c:85:78:de:27:5f:47:b6:
         10:22:e4:2f:6c:0f:57:56:9d:8c:03:b3:96:18:67:24:26:00:
         bf:be:21:28:25:07:27:22:e0:f1:62:1e:2f:94:89:7b:b0:09:
         00:62:39:97:4f:07:11:6e:c7:98:94:9f:e9:8c:16:2b:84:37:
         48:7c:17:4f:ee:4a:ec:8e:f7:55:fb:53:75:01:97:f9:09:29:
         12:5a:df:98:e4:d5:0d:e0:4d:a7:39:ba:54:5d:48:b1:70:9c:
         50:7c:6f:5f:cf:d5:d2:7b:9c:54:32:cf:b9:6f:5e:a7:69:73:
         3a:67:b7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:58:39 2026 by rpki-client