Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
File:                     E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft (raw, json)
Hash identifier:          KyZJBLXp8Dwcf5eOBKu5xjJ3iFcNKww5VBo+eEmZ47w=
Subject key identifier:   15:AA:69:C1:73:12:37:DC:3C:53:61:C3:89:B0:D4:22:EF:D6:34:4C
Authority key identifier: E4:91:6A:38:F9:28:B0:49:A7:53:3C:B4:FE:25:B8:FA:9D:96:DF:74
Certificate issuer:       /CN=E4916A38F928B049A7533CB4FE25B8FA9D96DF74
Certificate serial:       0983C181369212FB380A5C7DD3A13D65F6F586AB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
Manifest number:          A2
Signing time:             Tue 01 Sep 2026 01:00:27 +0000
Manifest this update:     Tue 01 Sep 2026 00:55:27 +0000
Manifest next update:     Wed 02 Sep 2026 04:02:27 +0000
Files and hashes:         1: E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl (hash: StvGJpkejgJioAg9ahCuEq0A9cnjpCb1nbhIsCsHsUY=)
                          2: 3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (hash: LV3eS8DWx/O74oQ0CzVazcwm3a7uu6GLraOIjVHVQ5o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl
                          rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 02:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:83:c1:81:36:92:12:fb:38:0a:5c:7d:d3:a1:3d:65:f6:f5:86:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4916A38F928B049A7533CB4FE25B8FA9D96DF74
        Validity
            Not Before: Sep  1 00:55:27 2026 GMT
            Not After : Sep  2 04:02:27 2026 GMT
        Subject: CN=15AA69C1731237DC3C5361C389B0D422EFD6344C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:92:e3:67:e8:66:f4:35:09:13:5e:40:12:
                    87:dc:84:67:80:0f:13:4c:8b:17:5a:4a:59:4e:db:
                    35:44:d2:dd:56:56:d4:fa:f1:84:88:3c:e6:de:78:
                    b5:ac:fb:9c:aa:1d:81:3a:8a:b8:fb:a8:71:1f:83:
                    e3:e3:67:11:5b:52:5a:c4:f9:6d:71:85:7a:21:78:
                    2e:ce:80:a4:ea:93:4a:c3:7e:05:eb:53:8e:82:c8:
                    a7:54:86:26:75:c0:27:15:31:0e:71:d4:be:10:c7:
                    20:1e:a5:33:a0:49:da:c1:4b:c1:34:cc:02:c6:6e:
                    62:22:10:73:86:b5:d3:12:28:c5:7b:52:20:d5:b7:
                    40:28:ec:73:51:bd:31:22:a1:0b:e5:ca:65:65:57:
                    bf:4c:66:fb:8b:d9:35:a7:89:ef:61:c9:a5:36:84:
                    8a:3b:b1:78:83:f3:a8:63:e2:af:5a:87:fc:c5:28:
                    ad:6f:c6:43:7b:71:c8:21:31:61:2b:47:c2:92:ae:
                    f2:4b:ed:c0:01:28:f1:87:e3:7d:ee:92:fb:91:32:
                    22:63:fd:f4:9c:6f:1c:d5:5a:7b:74:ba:c2:29:b5:
                    f8:16:ae:c4:59:d8:15:b7:8d:aa:13:74:c6:b6:bd:
                    a1:f4:83:dc:9e:39:3d:d5:bc:98:3b:6a:a6:e0:dd:
                    fb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AA:69:C1:73:12:37:DC:3C:53:61:C3:89:B0:D4:22:EF:D6:34:4C
            X509v3 Authority Key Identifier:
                keyid:E4:91:6A:38:F9:28:B0:49:A7:53:3C:B4:FE:25:B8:FA:9D:96:DF:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a4:e6:f8:9f:85:c1:5b:ab:bd:2f:fa:48:fa:58:d9:e1:47:
         6c:7b:e5:79:03:29:cb:e1:9d:c8:3c:ea:04:b7:6c:41:01:20:
         c0:76:ae:71:71:dc:ad:1f:49:03:2e:28:01:5f:15:de:ed:eb:
         fd:4b:b9:94:5f:a9:c8:f6:d0:a0:25:20:7b:b7:7c:2b:b5:10:
         b9:ec:f0:76:11:02:a8:c8:6f:a1:06:d4:0d:5a:c7:4f:42:27:
         30:ee:fa:ae:c0:b1:49:2a:43:66:0f:15:5c:b2:85:e9:ae:cd:
         76:d0:ea:23:49:63:1d:01:4d:3f:be:f2:5b:86:8f:13:31:0a:
         d4:38:67:a3:8a:22:96:f1:b1:b2:90:a7:ea:43:78:d4:54:c7:
         e7:17:43:20:16:43:23:a3:e3:6b:1d:d6:3f:83:5a:5e:23:20:
         22:26:b2:91:c6:e1:3f:04:fa:bd:7b:0f:e5:31:bd:e4:bd:55:
         ee:1a:00:0d:7d:7b:a6:47:c8:d3:33:a3:df:48:0d:28:86:3a:
         3e:83:f9:96:ca:49:84:d8:87:64:ac:32:f3:e7:c9:4d:60:12:
         ef:95:35:b9:e8:94:26:69:3a:46:d9:ba:b6:b5:6f:26:3d:3b:
         42:35:90:fc:09:51:c7:0b:22:27:71:b3:27:6f:03:20:1c:e3:
         68:db:ec:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 06:20:58 2026 by rpki-client