Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft
File:                     EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft (raw, json)
Hash identifier:          Ry3zu9nT5tCyLlNJQiWocWiK3r3qXT0lcvNUz3Nv/cw=
Subject key identifier:   8B:7B:F9:2B:7C:1D:19:B7:55:7D:D6:1D:7C:19:B5:D6:FF:43:BB:5E
Authority key identifier: EB:A9:D7:84:E9:CC:3F:2A:70:EB:52:69:76:A0:1F:48:F5:F5:29:51
Certificate issuer:       /CN=EBA9D784E9CC3F2A70EB526976A01F48F5F52951
Certificate serial:       62321D62379CBB9B98C915709B77CB76C001346F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft
Manifest number:          38
Signing time:             Thu 11 Jun 2026 23:40:13 +0000
Manifest this update:     Thu 11 Jun 2026 23:35:13 +0000
Manifest next update:     Sat 13 Jun 2026 00:05:13 +0000
Files and hashes:         1: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: v/BF9ieKxX28NjyPdn3fATuRAfuqobz/pNI/KB0vc9o=)
                          2: EBA9D784E9CC3F2A70EB526976A01F48F5F52951.crl (hash: llsKUP0dKrxoPA4B3b78y+K4NAyeAz29qOtKRlZmi5A=)
                          3: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: YX70OIsu7iTqiI3a5soFelDVlujYH0j+VtFdThdooz4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.crl
                          rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 00:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:32:1d:62:37:9c:bb:9b:98:c9:15:70:9b:77:cb:76:c0:01:34:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBA9D784E9CC3F2A70EB526976A01F48F5F52951
        Validity
            Not Before: Jun 11 23:35:13 2026 GMT
            Not After : Jun 13 00:05:13 2026 GMT
        Subject: CN=8B7BF92B7C1D19B7557DD61D7C19B5D6FF43BB5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:5f:48:7f:80:4b:2b:c9:3a:d4:a9:7e:97:
                    a1:bf:6b:37:36:c3:1c:b5:95:ac:02:07:1c:93:ad:
                    0e:dd:91:bc:12:50:bb:ba:a9:81:3a:80:21:48:ab:
                    f0:94:37:aa:50:fe:32:bf:c7:c1:ae:ba:dc:05:d1:
                    b3:a7:d9:6b:94:08:e9:f9:d0:e5:2b:4d:cd:13:7f:
                    b2:a3:62:57:58:9e:28:5e:43:1b:df:dc:94:75:a7:
                    cd:2e:6b:a3:14:4d:39:c5:87:a2:21:88:9f:e7:3b:
                    e9:32:c3:88:42:22:0b:a6:f3:d4:30:b8:5c:fe:e9:
                    f1:ef:5f:1e:40:34:4a:b2:d7:4f:5b:4a:4b:80:37:
                    0d:ae:33:f1:2f:37:93:24:45:ed:14:60:f2:e3:d1:
                    3e:5c:64:57:d2:16:23:b1:d4:ad:43:de:28:7b:1f:
                    c4:34:a1:21:5f:43:e1:0d:82:31:e1:f1:1c:a0:5f:
                    a1:c4:7b:94:0f:53:ed:a8:0e:eb:fb:66:fd:8b:62:
                    9c:83:92:a1:db:79:e6:e4:26:2c:e2:63:23:2b:c7:
                    3c:af:fa:ec:ef:6c:18:95:3c:0f:cc:d7:17:99:35:
                    af:b5:a9:02:e2:ee:d0:e1:a5:5c:e7:a7:29:c8:61:
                    ee:9b:d4:19:fa:9d:30:f2:20:d5:2f:f5:b0:62:c1:
                    47:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7B:F9:2B:7C:1D:19:B7:55:7D:D6:1D:7C:19:B5:D6:FF:43:BB:5E
            X509v3 Authority Key Identifier:
                keyid:EB:A9:D7:84:E9:CC:3F:2A:70:EB:52:69:76:A0:1F:48:F5:F5:29:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:02:29:bb:2e:00:b7:7a:be:36:1f:32:04:8b:60:d0:1e:f8:
         cd:ec:6a:ca:a1:a9:4a:7b:1d:99:47:f2:a8:0f:61:13:b7:cc:
         22:bd:15:2b:fa:b6:cf:0c:62:84:53:c9:41:13:3c:2b:fd:48:
         41:9d:74:25:db:74:62:ef:54:b5:ec:31:88:fa:5f:93:a5:fc:
         61:1b:45:e8:57:04:8e:48:fa:be:5c:dd:f6:be:31:71:a0:9b:
         41:12:f5:92:fe:de:07:8d:56:39:34:55:e0:cf:5a:6e:d6:74:
         81:e8:c1:0f:fd:9f:08:69:5b:52:f9:6c:6a:c3:08:31:e7:40:
         a8:5f:a8:ca:09:66:a5:0c:95:fd:ee:10:36:7a:16:d9:f1:5d:
         d9:78:6a:68:77:27:54:f5:65:72:32:54:ae:f8:94:2e:86:e6:
         2c:4c:58:6a:f5:aa:dc:3c:9e:0c:b8:d8:de:05:33:a0:1e:04:
         41:78:8e:25:a3:5a:b1:05:08:f5:d9:e0:5c:bb:2b:7b:fd:e2:
         a1:87:8d:8c:91:50:11:8f:9d:de:71:0f:8c:31:da:7a:ae:d1:
         29:c1:2d:05:81:09:f5:66:20:fa:e4:96:98:aa:20:ec:a4:be:
         b9:c8:47:8d:ae:e4:05:ed:03:65:67:f9:eb:5d:d9:83:e6:68:
         50:29:d9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:28:33 2026 by rpki-client