Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft
File:                     EDE74DB94791A93866EC7291214CFE17A2E8847C.mft (raw, json)
Hash identifier:          4kd/95uzmpcSuJfZXUjJgC+kSIBG9J8SO5tZ1lxSOGs=
Subject key identifier:   DC:8D:0A:EF:4A:38:A1:5B:15:BE:3E:10:32:3A:33:69:49:BE:90:5E
Authority key identifier: ED:E7:4D:B9:47:91:A9:38:66:EC:72:91:21:4C:FE:17:A2:E8:84:7C
Certificate issuer:       /CN=EDE74DB94791A93866EC7291214CFE17A2E8847C
Certificate serial:       4F593F101D7804422B59547FE954C371A0BBD3FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft
Manifest number:          A4
Signing time:             Wed 02 Sep 2026 19:36:49 +0000
Manifest this update:     Wed 02 Sep 2026 19:31:49 +0000
Manifest next update:     Thu 03 Sep 2026 19:55:49 +0000
Files and hashes:         1: EDE74DB94791A93866EC7291214CFE17A2E8847C.crl (hash: RrSGgUlkdkfU9C0Bs3+R7aPkY0Q3/o7GKQwIIwx7vZE=)
                          2: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: 8iN/CyAnWulsiAeIh9OXGEEjvzE7Yu0Mej0akYbb1wk=)
                          3: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: 4l+iqPdBiSlCoKQVmREPhK2V683AQV+EJjvlxdf5bAw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.crl
                          rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 19:55:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:59:3f:10:1d:78:04:42:2b:59:54:7f:e9:54:c3:71:a0:bb:d3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE74DB94791A93866EC7291214CFE17A2E8847C
        Validity
            Not Before: Sep  2 19:31:49 2026 GMT
            Not After : Sep  3 19:55:49 2026 GMT
        Subject: CN=DC8D0AEF4A38A15B15BE3E10323A336949BE905E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9a:2e:da:a7:58:64:61:0c:75:e6:da:8d:aa:
                    9a:a3:9f:40:c3:c4:7c:da:37:dc:b7:1f:93:96:17:
                    88:30:fa:36:ca:83:14:78:3b:f4:58:87:60:59:6f:
                    eb:7e:f7:a2:ef:71:77:da:60:1e:f7:85:97:b6:f4:
                    93:19:7a:be:9d:98:90:26:f1:f5:e2:07:45:02:85:
                    61:b2:d7:10:e4:f0:6e:7a:ba:bf:4a:1e:57:b7:e5:
                    af:a4:79:61:37:40:f3:28:4d:47:ef:57:35:0d:b4:
                    01:36:73:21:33:6e:93:46:40:fb:8d:ed:6f:2a:a8:
                    42:30:55:d8:71:a0:e6:7d:bd:ca:2c:0d:00:68:af:
                    0d:69:58:97:17:16:77:97:82:c4:d0:52:f1:48:6e:
                    f9:eb:10:f6:58:bd:c5:1f:97:f5:26:77:bc:fc:c3:
                    a2:c4:4d:77:a6:44:f2:fb:d7:28:57:44:3c:03:01:
                    ee:14:c4:92:bc:9c:04:ad:d1:96:9b:19:72:ce:25:
                    90:76:d3:cf:c5:3e:a0:bc:73:7c:44:24:29:4f:3a:
                    fd:00:d8:4b:bb:53:1c:b6:a3:a6:ca:f1:31:ba:c4:
                    a0:09:90:72:de:f6:0e:6c:85:ce:41:36:d5:0b:58:
                    6f:b3:85:b9:9b:8b:fb:48:fa:f9:00:f6:de:86:01:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8D:0A:EF:4A:38:A1:5B:15:BE:3E:10:32:3A:33:69:49:BE:90:5E
            X509v3 Authority Key Identifier:
                keyid:ED:E7:4D:B9:47:91:A9:38:66:EC:72:91:21:4C:FE:17:A2:E8:84:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:8c:f3:dd:eb:ff:e5:13:76:65:c1:13:0b:aa:f8:f1:6a:0e:
         33:b4:27:23:dc:60:5b:85:3e:e9:d5:09:98:62:69:e6:c7:6e:
         dd:b0:9a:33:bd:56:a6:f9:cd:ca:08:bf:e8:33:83:bc:3f:da:
         db:fb:b8:e8:31:3d:db:d1:b4:dc:be:3c:1d:89:c5:5f:8e:a9:
         e0:bd:ac:0b:28:bf:e1:ae:46:af:ee:d3:de:99:c4:8a:47:0a:
         42:6f:42:b8:2a:2a:75:bf:b8:02:c8:e9:a2:58:87:28:e2:cd:
         a5:ca:69:a8:d6:a2:29:37:5e:59:86:37:87:b0:e7:48:c4:8f:
         46:6b:f3:16:f4:4f:c4:c2:d6:1f:45:66:86:10:c6:9c:7e:27:
         70:73:61:13:91:ae:dd:41:3e:cf:fb:0e:27:7f:f0:83:ed:51:
         d9:97:26:80:2f:d2:91:f2:82:08:1c:d6:cd:f0:ec:32:3c:be:
         f8:fd:8f:ee:f0:bd:36:c7:5d:03:7d:e8:8e:0b:65:77:cc:e6:
         14:d8:20:2f:ea:36:02:e1:a5:3e:33:03:47:29:3f:a5:33:41:
         6c:9a:05:a1:a3:83:4f:d7:b4:aa:9d:b1:27:9e:41:1b:30:c2:
         d3:33:ca:43:01:c2:83:03:39:7b:d4:b9:e2:2b:93:f7:67:f3:
         8a:67:17:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:29:10 2026 by rpki-client