Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
File:                     74968D237E4D28CC12725975DFEBE487B0EAA72F.mft (raw, json)
Hash identifier:          1uV6YLOgkcHInXjh+QaDzHcC89EPq6yoeepFOIZD27g=
Subject key identifier:   E1:A7:A8:74:EC:6F:B1:F7:5A:76:DE:F6:6E:8B:8E:64:5A:D2:0E:F1
Authority key identifier: 74:96:8D:23:7E:4D:28:CC:12:72:59:75:DF:EB:E4:87:B0:EA:A7:2F
Certificate issuer:       /CN=74968D237E4D28CC12725975DFEBE487B0EAA72F
Certificate serial:       5AFB854C035CE2864F02F20C91B92BF08975A094
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
Manifest number:          EA
Signing time:             Sat 24 Oct 2026 12:03:53 +0000
Manifest this update:     Sat 24 Oct 2026 11:58:53 +0000
Manifest next update:     Sun 25 Oct 2026 13:50:53 +0000
Files and hashes:         1: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: AWLeqSIPPGZYHKfAsY5sORe/thUthJhR3mD21mk84m8=)
                          2: 74968D237E4D28CC12725975DFEBE487B0EAA72F.crl (hash: JRFj/MdZ83yrx89JoKKzvG2iDIp4rWN0D4JIXt855V0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.crl
                          rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 13:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fb:85:4c:03:5c:e2:86:4f:02:f2:0c:91:b9:2b:f0:89:75:a0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74968D237E4D28CC12725975DFEBE487B0EAA72F
        Validity
            Not Before: Oct 24 11:58:53 2026 GMT
            Not After : Oct 25 13:50:53 2026 GMT
        Subject: CN=E1A7A874EC6FB1F75A76DEF66E8B8E645AD20EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:b7:bd:58:4e:4d:db:06:57:f5:8b:1b:dd:
                    77:7f:e2:a2:21:f6:21:a3:c9:a0:00:ae:a1:99:df:
                    a0:aa:80:aa:26:9d:98:d7:e1:01:39:60:7a:42:2f:
                    1a:4b:6c:68:bd:1b:c5:b7:d7:c4:d3:05:12:4d:f4:
                    f1:5e:fb:a3:c1:74:b3:7f:a0:62:20:c8:b3:61:87:
                    c0:e4:18:23:84:f8:7f:a6:6e:50:e4:61:4e:3e:cf:
                    96:91:84:f0:91:65:82:db:05:8f:43:60:38:ea:f1:
                    7e:02:ff:36:7c:57:f5:51:fa:7b:a7:96:a7:55:cd:
                    28:bf:84:64:6e:ad:c2:a2:b4:7e:bb:03:e3:a0:00:
                    09:d9:1a:c7:b2:a7:e8:46:2d:f9:3c:7b:07:ea:c7:
                    59:60:66:cc:36:0c:14:0e:ef:24:05:6c:15:a2:5d:
                    09:62:b6:07:e6:fe:8a:c9:20:d4:7b:2e:65:28:37:
                    a3:0c:b5:e0:dd:52:89:a6:53:97:78:27:d0:5c:5e:
                    d6:6d:07:e4:8f:66:fe:40:43:30:22:e1:e0:78:94:
                    3e:ee:c5:de:36:b3:d0:2f:90:8a:8d:26:ac:7f:c9:
                    03:cb:7d:86:f2:42:8d:7b:eb:52:73:5f:8f:07:ac:
                    de:1a:92:66:bd:aa:54:0f:2c:50:9c:02:ba:e9:26:
                    82:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A7:A8:74:EC:6F:B1:F7:5A:76:DE:F6:6E:8B:8E:64:5A:D2:0E:F1
            X509v3 Authority Key Identifier:
                keyid:74:96:8D:23:7E:4D:28:CC:12:72:59:75:DF:EB:E4:87:B0:EA:A7:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:fd:d3:20:9b:5c:30:49:6f:e2:e3:65:f3:94:61:48:35:17:
         03:87:06:ef:00:0e:20:41:6e:06:e5:61:f6:b6:c1:3a:dc:a3:
         9c:5c:1e:7a:02:25:b2:88:8b:01:d1:78:5c:c8:1f:28:ba:46:
         c1:d3:6e:2b:cf:85:28:b5:05:5b:e4:d9:87:26:c3:31:11:f3:
         f9:bf:52:99:fb:05:52:cc:bd:4e:52:5b:85:c5:68:83:b4:42:
         ee:a0:d5:b5:60:0e:cb:8b:ca:18:d7:b6:d4:e6:21:88:44:1b:
         12:3e:99:15:a4:63:4a:9b:28:34:e3:7b:03:1a:c3:ee:8d:79:
         57:1a:e1:bc:47:50:ab:99:64:38:b3:bd:72:01:e3:a8:4a:41:
         44:89:04:b7:8c:65:4d:ac:25:a2:b1:ec:1c:37:1f:93:7c:de:
         a8:04:f2:40:ac:87:fc:36:19:37:92:b8:23:d2:d2:50:57:e7:
         90:f2:58:6f:73:e6:f9:7d:ea:5d:d4:d0:80:d3:e4:03:55:e5:
         0b:96:8e:b6:62:77:9f:ec:91:11:b4:90:28:56:54:09:29:34:
         51:a0:28:78:aa:1e:a8:82:af:89:8c:15:d8:f0:45:c1:16:4c:
         a7:04:22:fd:22:95:98:78:a4:8a:42:e8:62:e7:34:00:ad:88:
         bb:67:c6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:09:11 2026 by rpki-client