Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
File:                     149E265C01ED66DA98905D22913EE8E5950357C5.mft (raw, json)
Hash identifier:          13I885Q/TwiYsLsPP4j5GoRwvEs2KBxN9qUa4PxyMhY=
Subject key identifier:   49:3B:1C:09:01:C8:EB:0C:2D:89:09:93:6A:47:18:52:FE:23:76:5B
Authority key identifier: 14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5
Certificate issuer:       /CN=149E265C01ED66DA98905D22913EE8E5950357C5
Certificate serial:       61DEC75705AF723C8F0CF670C22F916346148203
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
Manifest number:          EB
Signing time:             Sun 25 Oct 2026 17:43:47 +0000
Manifest this update:     Sun 25 Oct 2026 17:38:47 +0000
Manifest next update:     Mon 26 Oct 2026 20:38:47 +0000
Files and hashes:         1: 149E265C01ED66DA98905D22913EE8E5950357C5.crl (hash: oo4YFspIW+XkN+JOIcgncN8uLWwNIuaNcKsJNfpI7gU=)
                          2: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: 2go2VsHnKk8a4v5C9iDrB1c2z6BX7uzmEdbp34kt9Ig=)
                          3: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: o6su7IMCtejCKrMWVaKfnnGbeizQl5tOylIJ73OtfwA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl
                          rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:de:c7:57:05:af:72:3c:8f:0c:f6:70:c2:2f:91:63:46:14:82:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149E265C01ED66DA98905D22913EE8E5950357C5
        Validity
            Not Before: Oct 25 17:38:47 2026 GMT
            Not After : Oct 26 20:38:47 2026 GMT
        Subject: CN=493B1C0901C8EB0C2D8909936A471852FE23765B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:41:30:66:69:b1:cb:28:9a:b7:3e:41:ab:
                    ff:f9:a7:e1:7e:00:4a:48:93:c7:00:68:41:22:0a:
                    14:55:8a:28:46:5a:94:c6:83:e6:c8:f0:cc:8a:9e:
                    8b:82:97:f4:97:74:de:33:06:63:a4:fc:e2:f3:9b:
                    b9:fb:b6:35:19:1a:2e:cd:a9:8a:df:ac:79:d9:ad:
                    7c:4f:f6:01:50:1c:60:7e:ba:27:d0:fa:b3:b6:fc:
                    72:b5:6f:62:c4:9a:1c:9a:a8:aa:1e:29:bd:df:2d:
                    f5:7f:cb:cb:0c:6e:a4:4d:0d:d2:24:5c:30:a2:7c:
                    a8:f5:63:6d:dc:eb:94:90:5b:40:88:9c:5d:e4:6e:
                    20:f8:90:33:04:d7:8a:65:c6:81:b2:f6:91:12:b3:
                    82:d1:ca:f0:6b:fa:d7:ec:79:ff:8d:ec:73:be:88:
                    1b:bf:bc:68:58:58:b8:89:ed:f1:6f:f8:ab:ad:03:
                    60:2f:d9:0f:a6:13:a7:3d:bb:47:bd:34:a9:d9:30:
                    6a:0c:2b:5e:ad:ae:d9:12:3a:56:5a:aa:88:71:e3:
                    10:f8:23:38:64:a2:97:be:41:7b:fe:bc:92:b4:32:
                    d8:70:11:ee:57:92:51:da:f1:34:e0:d4:08:5f:b2:
                    f4:9a:74:d7:3b:be:bb:4f:7f:14:8d:af:f6:61:99:
                    21:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3B:1C:09:01:C8:EB:0C:2D:89:09:93:6A:47:18:52:FE:23:76:5B
            X509v3 Authority Key Identifier:
                keyid:14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5a:86:0d:0c:ae:f9:d6:a5:d1:3d:b8:e5:62:92:78:60:d4:
         1c:73:d8:4a:de:25:c6:7a:44:0f:1e:f5:7f:c5:8f:ea:ff:2c:
         69:56:29:1a:2e:69:8a:0f:f3:7e:26:ad:59:30:04:50:d9:02:
         a4:b4:9e:bb:96:bb:77:ac:e3:cd:4a:d4:d6:66:75:42:19:07:
         40:d5:8a:f5:69:4f:99:2e:54:31:03:74:ea:9f:e7:55:f9:b5:
         4e:95:ed:47:dc:02:8d:ff:19:b0:f5:aa:4c:27:7d:8f:e1:91:
         a3:a6:76:b0:ed:d6:03:b6:0c:19:0a:01:3e:a8:83:c8:05:e7:
         a7:39:7f:5d:2c:88:f4:29:2d:bc:c6:68:08:97:99:a5:d8:4e:
         22:d9:c2:f6:d7:47:d3:07:51:bc:21:55:0e:fd:3f:53:9d:95:
         49:d4:5c:16:1e:ef:48:f9:70:36:5c:e2:8c:02:10:da:b8:42:
         f5:99:9f:06:0f:e2:a6:0d:82:e0:59:4c:76:82:c9:a5:b4:3a:
         b0:ae:f6:a1:88:a6:d6:80:d1:18:3a:57:8c:8f:d8:12:3a:f9:
         13:70:83:49:f9:49:59:3f:e0:f9:23:07:3e:6c:40:cb:e5:e1:
         47:38:aa:7a:3b:dd:e4:9a:e3:e9:a4:de:fd:e3:8a:51:5a:f0:
         6e:bc:1c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:47:45 2026 by rpki-client