Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
File:                     ED174C0150D63525F5DB20F0992EDEECD70380E5.mft (raw, json)
Hash identifier:          8dmquA7+6QigkCe2t8ieyCtd4oOEeP7TT3lrHcT5yGU=
Subject key identifier:   77:42:DD:61:2B:1B:81:F0:C3:8A:A1:27:7E:7C:86:96:49:08:4D:46
Authority key identifier: ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5
Certificate issuer:       /CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
Certificate serial:       33B9E8D2E9672A7059CA9DAB3152B3177B269B77
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
Manifest number:          D4
Signing time:             Wed 07 Oct 2026 22:05:00 +0000
Manifest this update:     Wed 07 Oct 2026 22:00:00 +0000
Manifest next update:     Fri 09 Oct 2026 00:10:00 +0000
Files and hashes:         1: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: MaBel9u9pYezsd1ShGGBnY40dDIrzHcanWzm4FOSRAg=)
                          2: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: n4IkgoMW2u0zkFgXDHL0eZSUTKgr/z1ZRj5PZ9Dfmxk=)
                          3: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: zmRnpGvMIJDXa5x4jILWd60y8Q5Ncg1iyAcAcxswFl4=)
                          4: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: bfhOCogzMUQqHoQaSn812eSk7yOuSzPxVDD+Nz5nDsc=)
                          5: ED174C0150D63525F5DB20F0992EDEECD70380E5.crl (hash: ndwJ/d20C2ZNG7ZRmxSWHkhhCl6x6yMt/efvbXAwD/c=)
                          6: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: 3XmUzAiqVZaFyzkEVDaETxoV3L7puo8oceCYnEmmitg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl
                          rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 00:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b9:e8:d2:e9:67:2a:70:59:ca:9d:ab:31:52:b3:17:7b:26:9b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
        Validity
            Not Before: Oct  7 22:00:00 2026 GMT
            Not After : Oct  9 00:10:00 2026 GMT
        Subject: CN=7742DD612B1B81F0C38AA1277E7C869649084D46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:93:89:b8:e7:a6:c4:42:72:1f:56:c4:08:
                    60:ba:1d:67:7d:95:73:ad:d5:e8:a4:65:79:3a:08:
                    09:b7:76:f2:8d:a8:74:71:5f:2b:06:b6:2f:b0:28:
                    89:ca:9b:90:71:b3:12:9d:b1:88:f9:ba:28:08:05:
                    34:f6:f2:bf:37:a3:69:9b:9c:d9:91:a9:45:85:30:
                    20:e4:2b:26:01:b7:96:c0:9e:06:c6:f1:30:92:d7:
                    d2:ed:2e:94:62:2b:ab:bd:f8:14:6f:1f:27:18:be:
                    11:4a:82:89:c2:9c:ca:4f:ee:ad:73:71:69:5e:98:
                    02:ae:d4:ab:31:1a:2c:7c:7b:3b:45:4a:52:d2:88:
                    b0:7c:29:af:b1:9a:39:91:c3:69:9d:9c:e2:0d:08:
                    f0:5e:db:96:d4:dd:a9:a4:38:4b:a7:ed:92:ff:4c:
                    81:f1:33:cd:47:49:a5:c7:bd:8b:4a:43:3b:32:16:
                    74:95:c3:83:f8:0f:1e:62:d6:f7:72:19:f4:52:25:
                    c5:14:c8:c6:20:2f:33:04:43:a8:8f:2a:ed:53:d7:
                    d8:6f:33:db:40:4b:0f:db:9f:58:36:b6:69:0d:f5:
                    4b:42:89:15:72:3d:4d:c2:8e:b0:02:6f:a4:3a:1d:
                    39:64:c9:9f:9d:07:00:cf:dc:f4:bd:bf:8b:9f:87:
                    64:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:42:DD:61:2B:1B:81:F0:C3:8A:A1:27:7E:7C:86:96:49:08:4D:46
            X509v3 Authority Key Identifier:
                keyid:ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:0b:e8:8b:1f:fe:e0:fb:0e:32:b6:e7:1d:fe:66:46:2f:c9:
         ed:c8:49:26:4e:0d:ad:58:2b:54:76:30:3c:65:bb:08:92:7e:
         a8:7c:75:4b:19:ae:63:fc:bc:81:12:46:e7:67:56:17:6c:d2:
         f3:c5:4a:73:8c:60:36:05:03:04:9d:6a:6d:c6:b1:ea:3b:54:
         16:bd:dd:5b:bc:83:af:28:07:a6:26:83:ed:88:2a:d6:4d:33:
         70:5b:7a:1a:ca:0f:38:5f:2c:ec:f1:0a:3a:df:93:f7:a7:95:
         94:43:aa:80:be:bc:62:1e:a1:71:95:ce:f4:fc:fb:ac:23:e6:
         0f:c1:91:95:e3:bf:d3:a2:88:15:0f:0d:39:23:15:db:2d:ea:
         1c:ff:88:dc:b1:63:c4:fa:c2:77:c3:17:8b:39:b2:31:ed:b1:
         fb:b6:34:a8:54:77:a0:97:3e:16:9e:b7:ab:a0:0b:a9:28:9d:
         19:30:e7:cc:70:f4:90:03:ab:24:3a:fe:79:f3:b0:9f:0a:ad:
         ad:b0:f5:56:73:fd:72:83:fb:03:ab:34:d7:3b:72:d5:41:0e:
         50:3b:ba:62:0b:87:ae:cf:25:1f:cf:0b:fa:ee:09:e0:31:a5:
         a2:9c:a2:f4:c9:3c:f9:2b:29:ca:8f:13:6a:1f:31:4f:01:7e:
         87:bc:81:da
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUM7no0ulnKnBZyp2rMVKzF3smm3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQxNzRDMDE1MEQ2MzUyNUY1REIyMEYwOTkyRURFRUNE
NzAzODBFNTAeFw0yNjEwMDcyMjAwMDBaFw0yNjEwMDkwMDEwMDBaMDMxMTAvBgNV
BAMTKDc3NDJERDYxMkIxQjgxRjBDMzhBQTEyNzdFN0M4Njk2NDkwODRENDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzHpOJuOemxEJyH1bECGC6HWd9
lXOt1eikZXk6CAm3dvKNqHRxXysGti+wKInKm5BxsxKdsYj5uigIBTT28r83o2mb
nNmRqUWFMCDkKyYBt5bAngbG8TCS19LtLpRiK6u9+BRvHycYvhFKgonCnMpP7q1z
cWlemAKu1KsxGix8eztFSlLSiLB8Ka+xmjmRw2mdnOINCPBe25bU3amkOEun7ZL/
TIHxM81HSaXHvYtKQzsyFnSVw4P4Dx5i1vdyGfRSJcUUyMYgLzMEQ6iPKu1T19hv
M9tASw/bn1g2tmkN9UtCiRVyPU3CjrACb6Q6HTlkyZ+dBwDP3PS9v4ufh2QDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUd0LdYSsbgfDDiqEnfnyGlkkITUYwHwYDVR0j
BBgwFoAU7RdMAVDWNSX12yDwmS7e7NcDgOUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzRiZjA3Y2YtNTBhOS00MjhhLTkwZDItZDQ0ZDZiNzYyYjU1LzAvRUQxNzRDMDE1
MEQ2MzUyNUY1REIyMEYwOTkyRURFRUNENzAzODBFNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRDE3NEMwMTUwRDYzNTI1RjVEQjIwRjA5OTJFREVFQ0Q3MDM4
MEU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRiZjA3Y2YtNTBhOS00MjhhLTkw
ZDItZDQ0ZDZiNzYyYjU1LzAvRUQxNzRDMDE1MEQ2MzUyNUY1REIyMEYwOTkyRURF
RUNENzAzODBFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJML6Isf/uD7DjK25x3+ZkYvye3ISSZODa1Y
K1R2MDxluwiSfqh8dUsZrmP8vIESRudnVhds0vPFSnOMYDYFAwSdam3Gseo7VBa9
3Vu8g68oB6Ymg+2IKtZNM3BbehrKDzhfLOzxCjrfk/enlZRDqoC+vGIeoXGVzvT8
+6wj5g/BkZXjv9OiiBUPDTkjFdst6hz/iNyxY8T6wnfDF4s5sjHtsfu2NKhUd6CX
Phaet6ugC6konRkw58xw9JADqyQ6/nnzsJ8Kra2w9VZz/XKD+wOrNNc7ctVBDlA7
umILh67PJR/PC/ruCeAxpaKcovTJPPkrKcqPE2ofMU8Bfoe8gdo=
-----END CERTIFICATE-----
Generated at Thu Oct 8 07:53:07 2026 by rpki-client