Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
File:                     EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft (raw, json)
Hash identifier:          NZ0K7AdqP034zu/q1gKKzxulqA4JGTZHU0vx9rfxIkI=
Subject key identifier:   A9:0F:D7:84:D2:FE:17:30:50:73:3D:AC:21:9E:D1:77:D0:22:6D:AF
Authority key identifier: EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44
Certificate issuer:       /CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744
Certificate serial:       4EF19AC37D3BBC199B7C970DD946A70BDB2F15BE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
Manifest number:          EA
Signing time:             Sun 25 Oct 2026 03:43:29 +0000
Manifest this update:     Sun 25 Oct 2026 03:38:29 +0000
Manifest next update:     Mon 26 Oct 2026 03:56:29 +0000
Files and hashes:         1: EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl (hash: SZVvDU3bs3sJ3UuRNLYr97lUz66fCMrN69yJpj6UFds=)
                          2: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: BnM/pd6T0nNd5d7QI+jI59NRWk0b0EsbuiWKkA+Hh+0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl
                          rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 03:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f1:9a:c3:7d:3b:bc:19:9b:7c:97:0d:d9:46:a7:0b:db:2f:15:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744
        Validity
            Not Before: Oct 25 03:38:29 2026 GMT
            Not After : Oct 26 03:56:29 2026 GMT
        Subject: CN=A90FD784D2FE173050733DAC219ED177D0226DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:84:17:09:0f:0c:65:c5:ec:a5:5e:52:79:5b:
                    fb:f5:6a:71:49:bc:8f:2a:bc:78:55:c7:6f:7c:be:
                    0a:47:c2:ab:e0:8f:13:29:fb:2f:52:1a:18:d4:b7:
                    5e:f8:9b:9e:07:e2:0a:23:70:65:43:20:37:1c:dd:
                    49:b7:e1:ae:12:f2:3d:c9:47:29:84:ea:7a:58:e0:
                    f0:53:d2:4f:55:16:54:8a:84:e7:f9:c2:69:17:7d:
                    7d:dc:62:90:09:8b:cf:d4:bb:25:e3:b4:c7:a9:b9:
                    9b:8f:b7:f9:17:8d:90:81:8d:4b:ed:f2:c4:b4:3e:
                    73:c7:ce:d4:88:61:ca:3b:aa:e7:d5:0c:2e:9a:ef:
                    ac:67:10:5a:b5:82:2f:c1:91:92:dc:96:f2:2c:da:
                    fb:db:fd:29:50:27:9a:4d:b9:fd:df:9c:0a:d6:c1:
                    cc:55:82:88:07:11:95:b8:5b:fa:66:06:44:c2:84:
                    e3:e6:ac:07:a5:f7:4b:e0:ef:2a:23:c9:d4:14:40:
                    dc:b4:86:ef:45:4b:9a:3a:0d:47:7e:bf:f0:9b:e7:
                    42:8e:42:9a:a2:ad:29:e8:bd:ce:7f:d8:a3:d0:61:
                    c5:bc:c5:a2:c4:af:bd:31:5a:04:fb:7a:d8:e4:03:
                    0b:6a:f8:fd:f1:36:04:f8:f5:da:04:13:e7:84:05:
                    8c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0F:D7:84:D2:FE:17:30:50:73:3D:AC:21:9E:D1:77:D0:22:6D:AF
            X509v3 Authority Key Identifier:
                keyid:EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d0:09:4a:a8:a9:fd:66:7d:f6:fe:40:61:34:37:53:fb:39:
         f6:67:26:b3:24:f5:fc:dc:1a:f8:93:4d:1f:c3:59:8e:cf:1e:
         7c:ae:e4:e5:8d:c1:d0:b5:20:b0:90:8d:9b:12:33:5c:1e:89:
         20:a4:89:43:d7:46:4c:ff:f8:90:a8:21:5e:d2:4c:2c:92:e8:
         9c:99:15:1c:e8:fd:f8:65:83:f7:25:35:9e:58:7b:66:0b:e0:
         aa:1a:e8:e1:fc:bd:e9:ec:c6:2f:7d:72:95:2d:ed:6e:47:dc:
         a5:b6:c7:5a:03:40:c1:a8:4f:74:7f:6b:ae:b0:ab:04:66:d3:
         b9:6c:f4:ff:47:75:73:94:21:b8:bb:dd:c7:5a:4c:f1:5f:2d:
         a4:fa:a6:0f:1e:4b:1b:80:7d:1f:92:b6:8b:41:fc:e4:a2:5e:
         66:22:42:55:75:d6:5d:29:c7:85:ee:58:c1:60:08:29:60:01:
         ad:b2:83:70:de:4d:fa:b5:d1:b3:04:6b:21:53:8b:2c:6b:8e:
         15:44:ef:ef:b0:2f:5f:ab:86:ab:2d:db:a4:15:a2:38:bc:52:
         10:59:57:4a:7f:7e:5a:c0:46:0f:14:2c:23:be:db:23:be:23:
         3b:58:ec:78:ef:c7:0c:54:ed:ca:f5:42:31:04:15:b5:85:f0:
         85:4d:95:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:33:34 2026 by rpki-client