Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft
File:                     EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft (raw, json)
Hash identifier:          QBsFojoXBkPH6AaJra11d3okeonAdiwnLuI4q6juv5M=
Subject key identifier:   54:5A:6F:FC:6B:42:F2:4F:0E:F1:9A:C5:64:87:3A:9F:0C:82:3F:5B
Authority key identifier: EF:BC:69:85:9D:4C:E7:D4:7B:71:A9:D2:30:22:FD:EA:93:DF:1A:02
Certificate issuer:       /CN=EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02
Certificate serial:       36761361CBC3CF7A60AC477C60144737A9594B8C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft
Manifest number:          A5
Signing time:             Thu 03 Sep 2026 06:05:14 +0000
Manifest this update:     Thu 03 Sep 2026 06:00:14 +0000
Manifest next update:     Fri 04 Sep 2026 09:03:14 +0000
Files and hashes:         1: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: wEHPqNpq5E7BaSWEXPsPlsqnHz7+5ItTw/UwUrelTsw=)
                          2: EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl (hash: 74FHHUJnSBc+a1MJLVNCxhCkPclhW36URnDUrGzEorQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl
                          rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 09:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:76:13:61:cb:c3:cf:7a:60:ac:47:7c:60:14:47:37:a9:59:4b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02
        Validity
            Not Before: Sep  3 06:00:14 2026 GMT
            Not After : Sep  4 09:03:14 2026 GMT
        Subject: CN=545A6FFC6B42F24F0EF19AC564873A9F0C823F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:50:bb:70:d9:a8:29:db:d0:8f:f9:5a:e3:
                    7d:46:dd:a5:cf:0c:dc:8d:d5:a8:e3:f0:c6:8e:08:
                    b0:d6:db:f2:cf:93:20:60:d2:fa:bd:dd:50:df:53:
                    99:79:86:bf:d6:01:0f:d2:41:c3:e9:3d:02:be:cf:
                    f3:5a:0f:09:26:7c:b7:f2:99:e1:76:58:90:66:9c:
                    98:ba:81:a4:46:4d:64:84:09:a4:2d:1f:e3:70:9f:
                    bf:b4:a3:13:ee:2c:2d:62:4f:bc:af:a3:78:0c:2a:
                    2c:d2:06:6e:e2:28:b6:02:4b:d9:ca:cb:29:db:33:
                    7a:ac:db:fd:d9:a4:b2:40:f3:c9:56:4c:36:3e:e5:
                    e6:be:79:7c:5b:b2:0e:fb:3b:fd:95:d5:d0:ab:38:
                    87:be:e2:cd:93:a1:14:00:6c:83:29:46:81:63:4d:
                    ba:b2:55:74:15:14:bd:1a:f6:32:5e:21:f4:43:ec:
                    26:f2:12:d7:7c:c4:a0:7a:84:0c:c7:e1:20:f8:57:
                    c7:ec:67:f7:3a:fe:b6:cc:34:25:29:f5:a8:ab:fb:
                    cf:08:24:48:d5:b0:ca:0e:8e:c0:ce:7c:ea:42:1e:
                    e5:54:93:b6:7f:07:36:56:5d:76:ad:a8:e1:63:e8:
                    78:ae:d9:8b:3f:07:8b:a4:78:5e:ec:a1:6d:1f:34:
                    65:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5A:6F:FC:6B:42:F2:4F:0E:F1:9A:C5:64:87:3A:9F:0C:82:3F:5B
            X509v3 Authority Key Identifier:
                keyid:EF:BC:69:85:9D:4C:E7:D4:7B:71:A9:D2:30:22:FD:EA:93:DF:1A:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:61:42:5f:17:66:32:40:e6:92:1b:12:63:6e:27:38:b8:65:
         31:f5:8f:5c:87:ae:21:89:f2:fa:17:16:ac:70:e4:85:aa:08:
         42:fe:02:1a:93:77:97:ff:a7:5c:e5:61:2b:ef:ff:ec:e7:ee:
         fb:df:38:9f:b1:60:85:03:45:11:42:ff:bf:bb:e7:c6:4c:d1:
         b9:b4:cb:6f:92:90:e5:2a:be:9e:38:0d:29:15:3b:a1:d4:8a:
         35:c4:3c:1e:00:19:3c:0e:fa:45:b7:a7:f1:13:07:0b:bb:50:
         17:3b:11:4f:c8:88:75:72:34:8b:ae:41:08:e7:2c:08:ae:57:
         cf:df:d7:85:30:b8:7b:9a:d9:eb:a1:a5:c1:b7:19:1c:27:1a:
         7e:7b:e7:68:cb:32:60:f7:74:99:a1:cb:70:1d:be:34:fd:83:
         cf:36:df:92:75:82:8f:f5:1b:79:b7:91:11:5d:45:ea:7a:b4:
         4c:d5:0c:bf:39:b9:77:7f:11:b7:ea:81:55:2a:e8:14:fb:ce:
         ea:55:0d:97:b7:a2:e0:bb:da:fb:e1:a1:a0:fe:50:37:5c:4c:
         1b:14:8f:31:d8:b8:a3:8f:33:54:47:a6:8e:df:17:ce:ae:85:
         b7:d0:d1:fc:d2:08:1a:69:eb:f3:ed:4d:a5:7a:99:ac:d2:29:
         6e:ee:72:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:37:41 2026 by rpki-client