Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
File:                     083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft (raw, json)
Hash identifier:          FrMQ/W7TprT9UZOj20ojyoglyNEPS5uujcOSVOwqCdA=
Subject key identifier:   7E:E2:4B:A7:0A:8B:E0:3C:C7:9E:F7:83:32:F5:9B:FE:2A:06:11:4B
Authority key identifier: 08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5
Certificate issuer:       /CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5
Certificate serial:       4DCD66CA57561C4974AFA3167511E3C688C9629C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
Manifest number:          EB
Signing time:             Sun 25 Oct 2026 09:33:25 +0000
Manifest this update:     Sun 25 Oct 2026 09:28:25 +0000
Manifest next update:     Mon 26 Oct 2026 12:11:25 +0000
Files and hashes:         1: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: Udq8GlzFIm/AvhcPc0cFCkf4+tnJ7nB5V9VbIrMM5Xs=)
                          2: 083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl (hash: q1d51BYuN0StTbUuRge5IvYcpck3QsfabjfSttY9Gxs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl
                          rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:cd:66:ca:57:56:1c:49:74:af:a3:16:75:11:e3:c6:88:c9:62:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5
        Validity
            Not Before: Oct 25 09:28:25 2026 GMT
            Not After : Oct 26 12:11:25 2026 GMT
        Subject: CN=7EE24BA70A8BE03CC79EF78332F59BFE2A06114B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:03:c8:2f:72:1f:00:20:51:2f:ce:c3:c6:44:
                    ef:13:17:42:4c:51:61:38:95:dc:41:93:d1:2f:9c:
                    70:26:4d:6f:41:0d:dd:e2:0e:90:eb:c9:20:47:1b:
                    c7:05:be:1a:1d:11:fd:f3:63:bb:c2:1c:4c:01:37:
                    8b:87:58:b3:9f:00:3c:f7:05:ce:22:e8:f2:e1:c5:
                    a8:58:dd:71:61:95:e9:58:52:4d:e8:4a:86:6b:c3:
                    7c:f5:0a:74:52:19:9c:c9:26:5b:9f:45:16:37:13:
                    d1:f6:97:23:78:56:bc:26:8a:8c:1e:0d:57:d5:08:
                    62:6f:91:b6:48:e6:9d:4c:2f:05:05:94:d8:7c:86:
                    4b:cc:ac:bd:9c:83:97:7a:fd:8f:34:58:32:46:56:
                    58:c5:ae:07:b9:48:a3:78:09:1e:7a:61:75:91:f9:
                    39:2b:55:bd:3d:83:64:73:28:67:ba:c8:f4:4f:9e:
                    bc:92:60:9c:02:ec:88:23:60:6f:d8:84:f0:55:fd:
                    72:13:ad:03:a0:e1:b5:30:d3:1e:57:08:d0:63:99:
                    1e:ee:d1:03:8d:8c:e0:bb:60:ab:9d:3d:19:0e:5c:
                    83:63:4e:73:fc:08:aa:bc:86:3a:4e:99:c2:0f:d9:
                    f2:75:d6:ba:4c:30:3a:4b:cf:1b:c8:d5:4a:19:13:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E2:4B:A7:0A:8B:E0:3C:C7:9E:F7:83:32:F5:9B:FE:2A:06:11:4B
            X509v3 Authority Key Identifier:
                keyid:08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c7:2e:25:6a:14:5d:6a:94:da:a4:2b:9e:8a:ee:17:c7:0f:
         86:99:0d:95:bf:3f:bd:f9:9e:e3:0f:62:ae:f3:88:90:db:3b:
         51:60:8d:89:a5:03:e0:36:bf:03:8a:a2:ef:0b:24:15:0a:74:
         01:40:98:ce:88:8a:96:d0:59:cb:36:27:58:ba:72:12:1f:50:
         1f:e8:37:43:70:68:5e:12:ad:ab:a6:a2:b9:f2:f5:5f:24:93:
         98:27:21:99:5b:53:ea:39:20:1f:92:4e:03:95:57:eb:dc:d3:
         f2:28:8f:49:19:a7:02:4e:cd:e0:ff:7b:df:68:5b:a8:3d:eb:
         68:fe:c5:10:98:4d:a8:32:04:9f:e9:a9:da:42:75:b6:98:b1:
         b6:a3:29:b3:54:f9:62:5d:43:00:b2:34:bf:f8:b9:fd:0c:93:
         f9:b7:2a:c0:20:87:c5:e8:3f:de:e9:79:13:22:c1:f9:ff:44:
         3c:65:fd:d3:75:d0:4f:3b:76:1c:e5:5c:29:ee:14:2e:3a:ee:
         9b:bd:c1:8b:6f:e7:a7:26:8e:77:72:59:27:5f:30:1c:79:7b:
         64:3a:34:62:7d:d6:8b:d8:4c:e1:2c:62:36:75:d4:da:d2:51:
         fa:f5:3c:93:48:ba:59:60:88:ed:13:b4:cf:b0:82:d0:21:3f:
         9c:4d:39:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:01:49 2026 by rpki-client