Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft
File:                     EE2943438815BD3AA204737348DB6D3884516325.mft (raw, json)
Hash identifier:          dNiL9UpK+fQ73CePLaZU3A07ew/sSBWyKAj+XQPJL0s=
Subject key identifier:   EE:4D:E6:51:EA:A6:AA:59:97:7E:E9:7B:4A:07:9E:05:19:42:A4:F5
Authority key identifier: EE:29:43:43:88:15:BD:3A:A2:04:73:73:48:DB:6D:38:84:51:63:25
Certificate issuer:       /CN=EE2943438815BD3AA204737348DB6D3884516325
Certificate serial:       22A2E88CDC21C8417B36DCF8FCF79C986EA7A513
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft
Manifest number:          42
Signing time:             Fri 19 Jun 2026 23:19:09 +0000
Manifest this update:     Fri 19 Jun 2026 23:14:09 +0000
Manifest next update:     Sun 21 Jun 2026 00:54:09 +0000
Files and hashes:         1: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: QxVgQbc9bJ28BSqw5k+C3GSuIOfZW0NlgNTshO2WruQ=)
                          2: EE2943438815BD3AA204737348DB6D3884516325.crl (hash: ike740q66IUS0pBBeUVP9kn5UdSuur0cqosMst1roJI=)
                          3: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: G3KzWHfdyRcChB//+h8vgfZ65TxUJCZuJOLl/yrV7ac=)
                          4: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: fq5M+dx6USCMFcMueBlB0OlQMgC40bRFl66f36qCgPM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.crl
                          rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 00:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a2:e8:8c:dc:21:c8:41:7b:36:dc:f8:fc:f7:9c:98:6e:a7:a5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE2943438815BD3AA204737348DB6D3884516325
        Validity
            Not Before: Jun 19 23:14:09 2026 GMT
            Not After : Jun 21 00:54:09 2026 GMT
        Subject: CN=EE4DE651EAA6AA59977EE97B4A079E051942A4F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:6b:1d:64:f7:b1:5b:02:0a:8e:bc:c9:4d:
                    19:fb:2f:5f:1d:1f:5b:64:22:c7:8d:1e:04:b4:b3:
                    70:36:7a:2b:4a:7c:b6:c2:a0:27:01:91:22:b8:e2:
                    df:f6:47:77:2e:19:3a:67:d6:22:5b:6b:59:7c:af:
                    ee:07:63:fc:66:40:16:83:f5:2b:83:4a:99:0e:c8:
                    db:8d:f3:a6:47:75:c1:10:f9:86:8a:2c:45:b0:db:
                    1d:d5:67:52:37:32:cf:05:4a:8a:0f:41:00:76:76:
                    1a:ac:4a:65:8d:60:55:25:f6:12:a7:bd:85:f9:b4:
                    df:89:e0:8d:20:fa:f9:9f:fa:72:0d:99:de:9f:74:
                    d8:0f:5e:00:31:86:07:97:d3:44:9d:32:d5:5e:f3:
                    87:16:89:6f:c7:dd:a6:40:f4:8a:0d:85:12:34:dc:
                    e1:48:73:df:78:7a:72:c3:e3:8b:f8:d8:e6:4c:54:
                    39:30:fa:32:93:c6:23:cc:3d:c2:a7:d3:aa:14:c1:
                    94:f8:e5:1e:db:43:90:61:01:0d:bd:cd:c7:d8:f6:
                    28:a3:5a:a0:8a:0a:83:f4:00:6a:c5:33:2e:4c:76:
                    ab:2b:7b:ac:8d:58:87:42:ed:f5:36:bc:d5:45:6b:
                    ee:2e:06:ee:fc:ea:c3:5a:51:31:7a:60:2b:c3:ee:
                    bf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4D:E6:51:EA:A6:AA:59:97:7E:E9:7B:4A:07:9E:05:19:42:A4:F5
            X509v3 Authority Key Identifier:
                keyid:EE:29:43:43:88:15:BD:3A:A2:04:73:73:48:DB:6D:38:84:51:63:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0c:3b:43:db:b1:7d:14:02:b6:2a:10:b9:47:a8:c7:15:d3:
         d6:11:c0:41:e7:fb:de:7b:af:47:f4:05:f0:e7:f4:48:a5:15:
         64:54:2a:19:18:44:20:eb:d5:99:b0:3b:c1:fd:41:99:ef:b0:
         ad:00:85:bf:1f:eb:a0:6b:30:68:73:e7:90:c7:19:5e:12:60:
         28:b1:ee:21:09:1c:3d:13:6a:80:a3:a4:93:8d:31:15:a7:df:
         7b:d7:28:bd:db:56:40:77:c2:73:54:5d:b0:96:84:20:f4:e8:
         b4:a3:ad:ab:56:49:6b:d1:54:0f:14:49:6b:f9:0e:d9:d7:e4:
         46:a3:2b:67:bf:23:9f:91:36:52:aa:b6:b6:11:4d:cb:2a:be:
         d9:4f:64:60:ec:09:a9:dd:b1:99:92:86:30:7a:be:35:4a:1e:
         42:aa:2a:38:90:04:40:d1:65:1c:67:aa:16:71:3b:07:67:b2:
         36:31:f0:94:2c:4f:35:d5:3f:9d:ba:80:d3:a6:70:43:90:37:
         0b:85:08:4e:f4:15:25:13:13:e1:ce:5e:50:62:54:b5:01:2d:
         21:63:aa:5a:10:72:80:e3:30:ef:1b:56:bc:a9:2b:bf:8a:d7:
         33:16:34:c7:be:bd:7c:22:d3:1e:1d:3d:b7:a2:0e:91:9e:83:
         c2:73:73:92
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIqLojNwhyEF7Ntz4/PecmG6npRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUyOTQzNDM4ODE1QkQzQUEyMDQ3MzczNDhEQjZEMzg4
NDUxNjMyNTAeFw0yNjA2MTkyMzE0MDlaFw0yNjA2MjEwMDU0MDlaMDMxMTAvBgNV
BAMTKEVFNERFNjUxRUFBNkFBNTk5NzdFRTk3QjRBMDc5RTA1MTk0MkE0RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDMmsdZPexWwIKjrzJTRn7L18d
H1tkIseNHgS0s3A2eitKfLbCoCcBkSK44t/2R3cuGTpn1iJba1l8r+4HY/xmQBaD
9SuDSpkOyNuN86ZHdcEQ+YaKLEWw2x3VZ1I3Ms8FSooPQQB2dhqsSmWNYFUl9hKn
vYX5tN+J4I0g+vmf+nINmd6fdNgPXgAxhgeX00SdMtVe84cWiW/H3aZA9IoNhRI0
3OFIc994enLD44v42OZMVDkw+jKTxiPMPcKn06oUwZT45R7bQ5BhAQ29zcfY9iij
WqCKCoP0AGrFMy5Mdqsre6yNWIdC7fU2vNVFa+4uBu786sNaUTF6YCvD7r/5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7k3mUeqmqlmXful7SgeeBRlCpPUwHwYDVR0j
BBgwFoAU7ilDQ4gVvTqiBHNzSNttOIRRYyUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGQ3MDNiODAtMmU3OC00ZDExLWFiNzQtMDgwMTdlNDIyZDZlLzAvRUUyOTQzNDM4
ODE1QkQzQUEyMDQ3MzczNDhEQjZEMzg4NDUxNjMyNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRTI5NDM0Mzg4MTVCRDNBQTIwNDczNzM0OERCNkQzODg0NTE2
MzI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi
NzQtMDgwMTdlNDIyZDZlLzAvRUUyOTQzNDM4ODE1QkQzQUEyMDQ3MzczNDhEQjZE
Mzg4NDUxNjMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAAMO0PbsX0UArYqELlHqMcV09YRwEHn+957
r0f0BfDn9EilFWRUKhkYRCDr1ZmwO8H9QZnvsK0Ahb8f66BrMGhz55DHGV4SYCix
7iEJHD0TaoCjpJONMRWn33vXKL3bVkB3wnNUXbCWhCD06LSjratWSWvRVA8USWv5
DtnX5EajK2e/I5+RNlKqtrYRTcsqvtlPZGDsCandsZmShjB6vjVKHkKqKjiQBEDR
ZRxnqhZxOwdnsjYx8JQsTzXVP526gNOmcEOQNwuFCE70FSUTE+HOXlBiVLUBLSFj
qloQcoDjMO8bVrypK7+K1zMWNMe+vXwi0x4dPbeiDpGeg8Jzc5I=
-----END CERTIFICATE-----
Generated at Sat Jun 20 09:21:07 2026 by rpki-client