Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft
File:                     E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft (raw, json)
Hash identifier:          v069DqBTtHeVO/uPza/dMTKwuN1+PHCsLrwP1gwAsUw=
Subject key identifier:   A9:E1:C3:03:70:98:EA:B8:45:31:4F:DE:DD:C8:04:24:21:04:87:94
Authority key identifier: E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6
Certificate issuer:       /CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6
Certificate serial:       6372A0038137354A1A4A84E3769B2704666E4617
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft
Manifest number:          2B
Signing time:             Wed 03 Jun 2026 01:26:27 +0000
Manifest this update:     Wed 03 Jun 2026 01:21:27 +0000
Manifest next update:     Thu 04 Jun 2026 04:59:27 +0000
Files and hashes:         1: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: /pHfUH1NlBnMVG+9w4rBpFljBqBGm2WJrHAQRZot61U=)
                          2: E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl (hash: xNuL52XmwaQNigfTw5KLdlJTxKTv5+EC0fNBzEeRI4g=)
                          3: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: 7Kp38WdKSSiLKliiaFpY9zvvkr9TIBcqJ58D1X388bM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl
                          rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:72:a0:03:81:37:35:4a:1a:4a:84:e3:76:9b:27:04:66:6e:46:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6
        Validity
            Not Before: Jun  3 01:21:27 2026 GMT
            Not After : Jun  4 04:59:27 2026 GMT
        Subject: CN=A9E1C3037098EAB845314FDEDDC8042421048794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:1d:ff:d5:73:c2:bf:ed:a2:67:a7:f0:7f:
                    58:e4:22:ea:c8:bd:d5:41:9f:72:49:ee:d8:0b:f1:
                    52:9a:a1:4f:30:d4:db:44:9f:34:12:67:e0:5c:2e:
                    58:ba:10:62:7f:36:de:88:76:df:12:82:61:31:55:
                    d3:d9:e3:4e:82:5c:0b:0e:c6:37:a5:b8:3e:c6:8d:
                    e4:1b:d8:bb:0c:07:d6:f2:c9:4e:2e:4c:18:78:0e:
                    f8:f5:66:17:e5:6a:dd:e6:aa:f3:2d:2f:7c:f5:f8:
                    e0:56:a6:9b:c1:fb:75:75:bc:ae:7b:94:e7:5a:69:
                    09:c5:70:55:77:9e:b8:14:fc:36:25:83:d8:37:1e:
                    5f:64:f4:d7:62:eb:80:da:42:fd:79:55:fd:9b:59:
                    75:95:0d:34:e1:9d:0d:11:ad:06:9c:44:e1:33:45:
                    0b:a0:02:20:43:cc:0e:83:48:f1:4e:c0:56:62:04:
                    b9:12:6e:6d:10:6d:5a:58:17:71:b7:a0:4f:aa:a8:
                    7f:b5:84:77:a1:2c:c1:bd:aa:03:d2:43:5e:14:7f:
                    fa:ea:8a:c1:b4:35:66:1f:01:0f:a5:a2:f3:17:b7:
                    53:bd:45:c3:23:fa:a3:e5:1a:37:0f:7d:bd:33:2b:
                    ac:1b:8d:e9:69:3c:a0:d7:2b:9b:10:cc:b3:8c:15:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E1:C3:03:70:98:EA:B8:45:31:4F:DE:DD:C8:04:24:21:04:87:94
            X509v3 Authority Key Identifier:
                keyid:E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ca:0d:36:b9:7e:76:4e:9b:39:77:a5:73:90:9d:df:91:8a:
         58:69:f9:90:b3:d3:83:c8:03:55:57:c6:73:ff:a1:29:7a:b3:
         d6:93:5e:32:7e:37:ee:15:5d:db:13:d6:34:de:f5:2e:68:22:
         fc:5c:a8:9a:d1:9d:8d:1e:dd:fb:16:75:4d:be:4e:df:8b:e2:
         69:72:f5:65:a0:11:f0:50:e4:e8:0e:90:69:49:c4:21:60:c0:
         98:9e:13:b0:c6:16:17:ca:17:e4:96:89:a1:aa:be:f8:da:2b:
         31:98:50:f3:c0:24:a1:00:f4:3e:0d:01:49:2b:ce:7b:a8:e0:
         14:71:f9:46:d4:0b:e6:a7:20:51:bb:e7:96:3e:66:35:cc:35:
         1e:d5:ab:58:78:de:72:79:fe:f9:25:39:de:46:4e:e7:d0:c5:
         5a:d5:c1:1b:d1:54:59:64:34:04:27:34:0f:94:2f:53:21:8d:
         b6:63:5c:b4:87:24:42:30:26:cc:7c:f4:7e:f7:d2:c4:54:54:
         d3:12:b8:db:9e:e2:c6:28:8b:eb:f3:e8:17:36:0d:1c:00:79:
         d7:36:24:d0:95:26:0e:a8:6e:6a:c7:e3:81:b9:7d:9b:2c:a7:
         21:b4:e9:f4:e3:90:3e:81:5e:ad:29:c2:4f:3f:f1:63:9d:6a:
         46:06:18:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:47:02 2026 by rpki-client