Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft
File:                     EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft (raw, json)
Hash identifier:          /yYAiA4/tsFrQwKIt84V6/X62diymA5ihG4RQMUgHdQ=
Subject key identifier:   BC:B8:D7:5A:8F:8A:A7:1C:BF:75:C2:E5:FF:BD:94:64:AB:75:98:A4
Authority key identifier: EF:DB:09:4B:3A:4B:DD:FF:AE:7A:31:18:46:33:B6:D1:4D:8E:5F:5E
Certificate issuer:       /CN=EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E
Certificate serial:       38DFD40D88003D05C05C22582872B8298A258DCA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft
Manifest number:          94
Signing time:             Thu 20 Aug 2026 11:21:50 +0000
Manifest this update:     Thu 20 Aug 2026 11:16:50 +0000
Manifest next update:     Fri 21 Aug 2026 12:55:50 +0000
Files and hashes:         1: 3130332e3135332e36322e302f32332d3234203d3e20313430343537.roa (hash: BZhn4U/UvZ5+wud72EXtfRQcfjbr1V+Ji6U8Qf15hk4=)
                          2: EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl (hash: IZZhXkK0O6IgUA0IkzyNYbAEno2GjABMrUt1vGEezZ0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl
                          rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Aug 2026 06:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:df:d4:0d:88:00:3d:05:c0:5c:22:58:28:72:b8:29:8a:25:8d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E
        Validity
            Not Before: Aug 20 11:16:50 2026 GMT
            Not After : Aug 21 12:55:50 2026 GMT
        Subject: CN=BCB8D75A8F8AA71CBF75C2E5FFBD9464AB7598A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:6d:85:87:d9:70:1e:04:17:84:53:ef:4a:1b:
                    f8:f4:48:c7:fa:d6:f5:4b:f4:24:fb:35:87:64:a2:
                    be:d2:3c:ce:1c:b9:82:7d:2a:d2:de:59:e7:0c:5f:
                    e6:bd:06:c0:b1:a8:5c:71:a6:01:f4:f8:d8:e5:5f:
                    ce:2d:22:fd:af:fc:cf:ec:bd:71:ba:f4:9b:49:cc:
                    25:29:ea:f1:98:18:35:f7:7b:3f:d0:11:fa:d9:03:
                    21:1f:8c:3d:ab:a1:2e:00:48:ab:73:e8:a0:e8:c7:
                    d0:32:a3:3a:8c:af:5d:2c:32:88:d4:af:48:66:82:
                    da:ff:ed:b0:44:4f:e2:74:18:f8:42:50:7f:5d:5e:
                    d1:82:b7:31:bb:94:d3:2f:2b:e7:35:99:1f:ee:5e:
                    ee:df:ce:5a:e2:2c:3d:0d:c5:21:80:62:3c:95:44:
                    5a:98:56:43:4e:5a:dd:e7:06:5e:c5:bf:5c:ba:b0:
                    e0:89:8f:f7:e7:a3:9a:ed:2a:6c:3c:e6:1d:12:65:
                    3d:5d:74:a9:34:cf:5b:0f:66:f1:28:7e:53:a0:a2:
                    29:77:ce:47:16:16:51:90:e4:be:16:f4:4b:00:a4:
                    8f:2e:64:ec:d3:5d:15:44:58:11:56:66:1a:28:8e:
                    56:9a:a6:ff:6e:e0:8f:3f:10:44:2c:2c:43:07:c4:
                    c5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B8:D7:5A:8F:8A:A7:1C:BF:75:C2:E5:FF:BD:94:64:AB:75:98:A4
            X509v3 Authority Key Identifier:
                keyid:EF:DB:09:4B:3A:4B:DD:FF:AE:7A:31:18:46:33:B6:D1:4D:8E:5F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d4:ae:db:2d:ce:ce:fd:a3:7a:4f:87:bf:05:05:91:c8:7e:
         72:70:62:d2:6a:0c:63:b3:cc:ee:7c:ce:76:68:36:89:4e:07:
         3d:32:c6:e5:ee:d4:7f:cc:93:2d:f4:9f:23:57:f9:cc:03:5c:
         3b:d4:cc:d4:cf:ba:8b:c9:a0:15:dc:f0:e5:d1:3c:8b:80:da:
         8f:2f:66:a8:8e:97:43:1e:70:e3:fb:98:73:59:ed:d3:3d:0c:
         4f:03:d5:21:84:39:2e:8a:d6:82:84:3a:df:02:0a:bb:c4:43:
         3c:4d:b2:7e:ac:2b:61:70:26:94:0d:70:55:8c:8b:45:23:dd:
         17:61:34:73:62:e5:82:5a:f8:d6:34:c3:5e:75:e8:16:f4:2d:
         90:d3:e6:8d:b9:91:e6:ed:2f:98:00:98:10:6b:07:db:5d:0f:
         00:69:9c:51:97:c6:23:91:e3:b3:8f:1f:b1:40:92:12:a6:ff:
         f0:fb:60:27:0d:c3:55:38:94:89:ec:55:03:6e:29:d0:ba:e2:
         83:8e:f2:12:6a:fe:ff:39:1a:d2:c0:2d:e4:84:e1:66:8b:fe:
         93:42:86:c9:1e:91:d8:92:cb:19:86:a8:81:7b:f3:66:cb:cf:
         b2:f4:ee:0e:e7:af:a4:58:eb:cc:47:a5:a6:10:4e:79:fe:ba:
         87:a5:46:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 16:06:04 2026 by rpki-client