Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft
File:                     EE2943438815BD3AA204737348DB6D3884516325.mft (raw, json)
Hash identifier:          MElAKuoWSndyKVscU4fQA/xDW61WaQJhXC+NfIAu1wk=
Subject key identifier:   8F:BE:3E:4F:CD:6C:E5:7E:15:42:64:DB:D2:97:B5:8F:AC:A4:83:60
Authority key identifier: EE:29:43:43:88:15:BD:3A:A2:04:73:73:48:DB:6D:38:84:51:63:25
Certificate issuer:       /CN=EE2943438815BD3AA204737348DB6D3884516325
Certificate serial:       49A69B11F226BF0EF30355CB020D65937C9BB815
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft
Manifest number:          A6
Signing time:             Thu 03 Sep 2026 04:43:38 +0000
Manifest this update:     Thu 03 Sep 2026 04:38:38 +0000
Manifest next update:     Fri 04 Sep 2026 04:45:38 +0000
Files and hashes:         1: EE2943438815BD3AA204737348DB6D3884516325.crl (hash: yiQj2hUAiM17C/pGjZ39R885v2eBpdH8lnpc4VqkTmU=)
                          2: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: G3KzWHfdyRcChB//+h8vgfZ65TxUJCZuJOLl/yrV7ac=)
                          3: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: fq5M+dx6USCMFcMueBlB0OlQMgC40bRFl66f36qCgPM=)
                          4: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: QxVgQbc9bJ28BSqw5k+C3GSuIOfZW0NlgNTshO2WruQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.crl
                          rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 04:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a6:9b:11:f2:26:bf:0e:f3:03:55:cb:02:0d:65:93:7c:9b:b8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE2943438815BD3AA204737348DB6D3884516325
        Validity
            Not Before: Sep  3 04:38:38 2026 GMT
            Not After : Sep  4 04:45:38 2026 GMT
        Subject: CN=8FBE3E4FCD6CE57E154264DBD297B58FACA48360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cf:da:e4:95:df:7a:25:88:dd:e2:2a:50:11:
                    69:f2:54:bd:13:4c:85:f3:75:7d:67:2f:39:28:cd:
                    cd:0d:7d:e0:ec:c2:a9:fe:0d:17:d3:9d:3d:93:89:
                    7b:9d:91:d1:55:bc:0d:67:c9:2d:12:75:7b:5c:f6:
                    91:ce:a6:eb:a8:2b:6c:db:a6:17:0d:76:de:f7:65:
                    75:7c:17:c1:0d:95:a3:76:72:4a:63:24:5d:62:ee:
                    3b:6a:04:04:36:52:43:ec:a7:0b:56:2a:c1:1c:4e:
                    e8:50:80:00:53:22:72:4a:ce:94:22:4a:d2:4b:32:
                    a9:06:1e:41:d3:a8:2d:ca:fd:70:66:33:07:25:eb:
                    8f:7a:cf:4c:3c:22:f3:76:a6:6e:e6:a4:2c:38:09:
                    9b:79:6e:2f:93:3c:f3:54:72:b2:12:78:8f:7d:5d:
                    66:aa:07:42:65:01:8a:a7:bf:2d:39:55:7f:2b:21:
                    11:1a:0f:87:8b:fb:91:14:37:6a:c0:d4:f2:f5:83:
                    99:ea:b6:ed:1b:86:7b:3c:6f:6f:42:39:53:01:05:
                    7d:d8:dc:9d:4f:b8:b6:47:9d:5e:cd:b7:19:b1:e2:
                    8e:54:22:e3:bd:77:ee:b8:9e:8c:82:16:1f:43:e2:
                    e4:8e:30:ce:69:5d:4f:e9:6d:d8:fe:de:39:f7:f8:
                    91:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BE:3E:4F:CD:6C:E5:7E:15:42:64:DB:D2:97:B5:8F:AC:A4:83:60
            X509v3 Authority Key Identifier:
                keyid:EE:29:43:43:88:15:BD:3A:A2:04:73:73:48:DB:6D:38:84:51:63:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:86:4c:8e:62:7e:c5:01:23:c8:5b:86:92:a8:3a:37:e1:68:
         8a:30:1c:65:c6:3f:b2:cd:79:58:d3:17:48:9e:8d:28:f6:a9:
         e5:af:11:63:1d:8f:cf:fd:61:84:28:41:5d:51:22:e1:82:0f:
         b4:d7:1c:62:95:38:2b:6b:9d:ae:0c:fe:b5:7c:b1:5c:cf:07:
         b3:05:89:43:b2:d7:26:89:4c:3f:c4:ac:b4:ef:95:d0:ad:b3:
         f5:75:eb:f4:15:c8:46:b8:07:2f:78:41:ba:05:53:79:e1:9d:
         10:0b:8e:21:85:1c:80:c0:33:4c:a1:1a:8f:55:6c:ce:fb:c9:
         cb:6d:fe:a7:85:45:c0:af:93:ec:76:40:df:35:c5:5f:34:89:
         ec:76:af:a5:6b:7c:31:8c:c1:aa:41:c6:b6:98:ea:46:77:79:
         26:39:b8:77:2a:41:19:34:12:74:82:6e:79:a5:1b:6b:d5:e3:
         04:de:29:ab:75:04:d0:72:5a:05:06:53:d1:1c:04:4f:aa:1d:
         e3:93:ed:25:08:d3:06:ee:16:f3:d2:c2:18:38:5e:e8:fb:8e:
         7e:9d:d4:e2:f8:44:e5:18:33:44:e1:d8:04:0d:94:15:57:31:
         ea:c5:eb:37:60:3e:05:00:8e:73:30:b4:21:0c:f6:fc:ff:ee:
         e5:88:e2:72
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSaabEfImvw7zA1XLAg1lk3ybuBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUyOTQzNDM4ODE1QkQzQUEyMDQ3MzczNDhEQjZEMzg4
NDUxNjMyNTAeFw0yNjA5MDMwNDM4MzhaFw0yNjA5MDQwNDQ1MzhaMDMxMTAvBgNV
BAMTKDhGQkUzRTRGQ0Q2Q0U1N0UxNTQyNjREQkQyOTdCNThGQUNBNDgzNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvz9rkld96JYjd4ipQEWnyVL0T
TIXzdX1nLzkozc0NfeDswqn+DRfTnT2TiXudkdFVvA1nyS0SdXtc9pHOpuuoK2zb
phcNdt73ZXV8F8ENlaN2ckpjJF1i7jtqBAQ2UkPspwtWKsEcTuhQgABTInJKzpQi
StJLMqkGHkHTqC3K/XBmMwcl6496z0w8IvN2pm7mpCw4CZt5bi+TPPNUcrISeI99
XWaqB0JlAYqnvy05VX8rIREaD4eL+5EUN2rA1PL1g5nqtu0bhns8b29COVMBBX3Y
3J1PuLZHnV7Ntxmx4o5UIuO9d+64noyCFh9D4uSOMM5pXU/pbdj+3jn3+JGZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUj74+T81s5X4VQmTb0pe1j6ykg2AwHwYDVR0j
BBgwFoAU7ilDQ4gVvTqiBHNzSNttOIRRYyUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGQ3MDNiODAtMmU3OC00ZDExLWFiNzQtMDgwMTdlNDIyZDZlLzAvRUUyOTQzNDM4
ODE1QkQzQUEyMDQ3MzczNDhEQjZEMzg4NDUxNjMyNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRTI5NDM0Mzg4MTVCRDNBQTIwNDczNzM0OERCNkQzODg0NTE2
MzI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi
NzQtMDgwMTdlNDIyZDZlLzAvRUUyOTQzNDM4ODE1QkQzQUEyMDQ3MzczNDhEQjZE
Mzg4NDUxNjMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC2GTI5ifsUBI8hbhpKoOjfhaIowHGXGP7LN
eVjTF0iejSj2qeWvEWMdj8/9YYQoQV1RIuGCD7TXHGKVOCtrna4M/rV8sVzPB7MF
iUOy1yaJTD/ErLTvldCts/V16/QVyEa4By94QboFU3nhnRALjiGFHIDAM0yhGo9V
bM77yctt/qeFRcCvk+x2QN81xV80iex2r6VrfDGMwapBxraY6kZ3eSY5uHcqQRk0
EnSCbnmlG2vV4wTeKat1BNByWgUGU9EcBE+qHeOT7SUI0wbuFvPSwhg4Xuj7jn6d
1OL4ROUYM0Th2AQNlBVXMerF6zdgPgUAjnMwtCEM9vz/7uWI4nI=
-----END CERTIFICATE-----
Generated at Thu Sep 3 18:13:49 2026 by rpki-client