Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
File:                     74968D237E4D28CC12725975DFEBE487B0EAA72F.mft (raw, json)
Hash identifier:          GOQo6JAya6UPPu3CT7k+R6inGpaDkNZyILYjFKprgx8=
Subject key identifier:   2F:3D:12:8A:70:43:82:67:BA:E6:8E:D9:7C:4C:9E:59:B0:D2:27:9B
Authority key identifier: 74:96:8D:23:7E:4D:28:CC:12:72:59:75:DF:EB:E4:87:B0:EA:A7:2F
Certificate issuer:       /CN=74968D237E4D28CC12725975DFEBE487B0EAA72F
Certificate serial:       6EB1A60758E22D0855A271530ECC725DA619DC4A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
Manifest number:          EB
Signing time:             Sun 25 Oct 2026 05:53:34 +0000
Manifest this update:     Sun 25 Oct 2026 05:48:34 +0000
Manifest next update:     Mon 26 Oct 2026 06:31:34 +0000
Files and hashes:         1: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: AWLeqSIPPGZYHKfAsY5sORe/thUthJhR3mD21mk84m8=)
                          2: 74968D237E4D28CC12725975DFEBE487B0EAA72F.crl (hash: EEkeRaJ4Snt28TyzHTRauajI3xjWAAOzAf5Foqar570=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.crl
                          rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 06:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b1:a6:07:58:e2:2d:08:55:a2:71:53:0e:cc:72:5d:a6:19:dc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74968D237E4D28CC12725975DFEBE487B0EAA72F
        Validity
            Not Before: Oct 25 05:48:34 2026 GMT
            Not After : Oct 26 06:31:34 2026 GMT
        Subject: CN=2F3D128A70438267BAE68ED97C4C9E59B0D2279B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b9:e8:1a:16:a3:01:1d:90:c7:fc:43:ae:06:
                    b1:fb:a5:6a:9f:04:22:5b:b9:b0:e2:96:ad:37:01:
                    fb:c0:75:58:65:11:13:1c:be:05:01:33:a5:40:15:
                    fa:b5:28:d9:6a:c1:71:10:8b:7d:b9:04:d0:ac:14:
                    72:c6:78:eb:a3:58:80:2a:1c:d8:4d:38:21:83:40:
                    33:06:e1:8e:a9:aa:5d:55:74:d7:09:6c:97:a3:60:
                    92:a4:80:07:98:90:7d:e7:dd:b2:92:a9:3d:1e:bb:
                    0e:b3:1b:11:5b:d5:f8:de:7d:ca:f1:67:64:5e:53:
                    62:73:cc:7e:eb:a9:02:9f:4f:86:a3:ab:cb:23:40:
                    5d:6a:64:fa:1f:39:e2:1f:01:19:c9:b3:ba:ee:3d:
                    f9:17:fe:fc:b8:68:39:a7:b3:80:91:59:ea:bf:37:
                    1d:f0:32:db:dc:d7:b9:8b:7e:c2:5b:e1:c5:ea:92:
                    3a:97:ba:19:f7:02:11:2b:58:71:16:77:55:4a:de:
                    28:16:d2:0a:f2:39:18:c0:88:a2:69:6e:74:df:40:
                    96:88:c7:c8:4e:07:c5:5b:e5:9a:86:13:e2:a5:24:
                    01:1f:24:cf:48:76:76:33:ad:25:b2:94:cd:89:23:
                    73:8b:4a:b8:36:38:78:c1:f8:2c:74:b9:69:87:74:
                    0c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3D:12:8A:70:43:82:67:BA:E6:8E:D9:7C:4C:9E:59:B0:D2:27:9B
            X509v3 Authority Key Identifier:
                keyid:74:96:8D:23:7E:4D:28:CC:12:72:59:75:DF:EB:E4:87:B0:EA:A7:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:7e:7d:12:a6:fb:5a:58:00:eb:cd:09:37:b3:e3:a7:4e:71:
         1b:2e:36:4b:35:4c:48:72:d2:6f:b7:ef:44:c3:93:9d:eb:9a:
         ea:b8:6e:6f:a6:22:d2:9a:8b:6a:27:4f:fa:7d:56:a5:4f:dd:
         93:62:f4:b3:99:7b:dc:f8:0c:bf:4b:24:24:95:85:cb:19:1c:
         bd:e2:90:94:80:41:c3:35:86:ed:dd:02:4a:0c:f2:d5:13:0a:
         7c:25:c4:ac:ac:2c:b5:0a:9e:bf:80:92:1b:66:25:1d:80:84:
         8b:a6:43:44:dd:5f:7d:54:07:e2:8f:6d:a0:e8:88:98:97:20:
         2e:93:9d:56:ff:42:d6:8f:46:70:a1:25:5d:a0:2d:08:4c:07:
         bb:4c:51:11:90:d6:9a:e6:4e:ef:ef:b9:4b:79:4a:11:51:ce:
         a1:ad:04:f2:de:47:68:fb:f4:f3:03:46:84:67:6b:04:3d:84:
         9f:6e:fd:27:f4:0b:6a:36:2d:97:28:b5:b1:a1:d4:0b:d8:43:
         09:94:fc:62:a9:1f:41:4c:b4:77:b2:b9:d9:e2:4e:07:44:7e:
         8b:b9:5c:09:da:6a:ee:00:9b:e6:42:a7:2d:f7:9d:d2:54:ac:
         b4:10:c9:0a:53:92:96:65:40:a1:8f:a1:7e:b2:7a:0f:a8:04:
         44:8d:62:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:33:19 2026 by rpki-client