Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
File:                     2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft (raw, json)
Hash identifier:          POedypqPFT/zWQBSR7xMmMhJEovLrOMyfyMFIXGATkc=
Subject key identifier:   EA:62:9C:3A:F2:42:73:88:86:05:20:04:2F:F4:E2:FB:59:5A:CE:38
Authority key identifier: 2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70
Certificate issuer:       /CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
Certificate serial:       7EBCA0C65F5E187767A8EB83FCA67945E598B763
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
Manifest number:          EA
Signing time:             Sat 24 Oct 2026 19:23:27 +0000
Manifest this update:     Sat 24 Oct 2026 19:18:27 +0000
Manifest next update:     Sun 25 Oct 2026 20:47:27 +0000
Files and hashes:         1: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: HJc5JvMy8GHohXvfOoaZGX6TD+10pfnhOdLgXA7YFDo=)
                          2: 323430343a326363303a34633a3a2f34362d3436203d3e20313331373336.roa (hash: cS+IrgZpY9aClZBoWCUDEv2Phmt7SwlOezLlcCoBSPI=)
                          3: 323430343a326363303a34303a3a2f34362d3436203d3e20313331373336.roa (hash: xUpoxjFUHIIvNkT92mjiWI0plg15apjL+jPNvQQ2Uk8=)
                          4: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: NS29Duq3Ad0Oay5mRumCSue0EKVMXVW+d3uV6la1Mk4=)
                          5: 323430343a326363303a35383a3a2f34362d3436203d3e20313331373336.roa (hash: 2ePu3EHR90dClUt0r5HRZza+Dx4B+Kag1aBuSmuBj9s=)
                          6: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: VaVs+XiSWxs1hEguef/hHo/bNFA4CcDh7KZrSmxpBag=)
                          7: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: dpRjxkyvMZSuMwoiOFiEbs0aVfBM9F5a6WoDjj2reGk=)
                          8: 323430343a326363303a35343a3a2f34362d3436203d3e20313331373336.roa (hash: R7p8u3fUD9Q1PWm/nzBs05bZYIMNm4aJaBgF+3K7/6A=)
                          9: 2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl (hash: Y23idgPyjTO04FCxsfzkxHkGy/ELmzjperhSi2WWWSQ=)
                          10: 323430343a326363303a34343a3a2f34362d3436203d3e20313331373336.roa (hash: GR4L5FJqVS9TJ+dvaa8HynQA+y7YhiRBbKDogiUCsq4=)
                          11: 323430343a326363303a34383a3a2f34362d3436203d3e20313331373336.roa (hash: jZfpgRC0d5fkEjm8vD7qc9gZsnKZQYBh0EboO+Uho7s=)
                          12: 323430343a326363303a32303a3a2f34332d3433203d3e20313331373336.roa (hash: fToGnwAHAJ5VtIANKumAt4uzlSvc7R1/Zv4oJQS4kF0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl
                          rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 19:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bc:a0:c6:5f:5e:18:77:67:a8:eb:83:fc:a6:79:45:e5:98:b7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
        Validity
            Not Before: Oct 24 19:18:27 2026 GMT
            Not After : Oct 25 20:47:27 2026 GMT
        Subject: CN=EA629C3AF2427388860520042FF4E2FB595ACE38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1f:48:ce:33:7d:f2:b9:82:79:39:4a:70:85:
                    54:6e:b5:cd:b8:0d:43:d4:84:15:41:48:c7:3a:bc:
                    30:18:02:3b:a5:0f:d7:36:78:8d:5f:67:b6:a2:4c:
                    91:eb:f2:0d:80:f7:1d:92:d1:2e:00:d7:2f:a2:cf:
                    0f:6c:63:3a:20:a0:85:e8:ce:fd:28:87:a9:ac:52:
                    28:d9:f1:da:db:b7:b5:c5:c3:33:08:66:cc:9a:c8:
                    e2:0e:a0:30:14:da:4e:28:d6:89:cb:b8:97:e8:02:
                    b1:5d:fd:d3:1c:07:3c:4f:a1:88:14:cf:06:c3:20:
                    70:df:28:2e:b3:28:75:70:22:02:cb:88:f8:95:a4:
                    3a:39:ba:92:2a:7c:a1:ee:42:44:c3:31:0f:02:22:
                    a5:67:f5:84:80:11:48:c7:f6:56:44:1b:10:18:8c:
                    f0:db:2f:14:14:f8:96:96:bb:5b:5b:f4:2b:4d:8a:
                    79:b6:26:4c:63:c9:b4:67:c8:c0:0d:5d:57:d5:11:
                    22:22:12:6b:be:eb:2e:9b:2f:04:e0:27:ca:d0:56:
                    ea:df:72:14:9b:d0:03:ad:fa:1c:85:a0:1c:1c:d2:
                    98:f5:df:9b:46:37:dc:41:65:3e:38:96:3e:8c:6c:
                    e4:1c:94:4e:11:3a:d5:ae:e8:ec:ac:fb:cb:a4:4b:
                    67:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:62:9C:3A:F2:42:73:88:86:05:20:04:2F:F4:E2:FB:59:5A:CE:38
            X509v3 Authority Key Identifier:
                keyid:2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5b:9c:1b:30:32:b7:2a:bb:0b:cc:66:f1:98:32:e3:f0:7d:
         1d:c2:8a:29:08:31:43:c8:1e:61:e9:b4:06:c9:18:20:8a:e6:
         30:a7:12:84:19:d6:34:22:76:80:34:6f:59:1b:3e:e2:6f:f3:
         07:58:47:1c:21:c7:b4:83:90:76:58:be:9a:53:17:b7:d7:61:
         ca:6c:33:b7:a1:c7:50:e5:77:03:4d:37:b9:6c:c0:2e:a5:91:
         a8:25:10:88:23:e2:c6:09:22:42:70:19:0f:45:b7:a3:a1:be:
         c1:e1:cc:fa:bf:0f:83:59:7b:93:5e:8c:6e:b2:6d:1f:30:f8:
         02:d3:84:5e:41:52:97:52:d4:73:ec:74:69:42:81:0a:54:c2:
         38:c3:3c:84:0b:43:e4:7a:32:94:21:f8:a4:61:db:03:c7:11:
         d5:1e:29:87:2b:45:b8:f2:73:6f:46:14:2f:60:4c:9c:77:7b:
         c1:30:f3:05:68:ef:71:dd:83:f5:34:89:09:05:5a:82:d7:98:
         b2:fa:c0:41:e4:90:f4:ff:27:4b:1a:2f:52:de:e5:69:3c:62:
         49:9c:a6:ca:ed:ab:2c:0a:64:83:ae:a5:64:94:24:98:b0:19:
         12:99:67:9e:f6:66:ad:f9:16:e8:11:36:7a:98:1c:c3:f2:03:
         89:87:d6:9e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfrygxl9eGHdnqOuD/KZ5ReWYt2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVBQjIyREVEQTE3Qzg2MzM1MjBDNzY1QzFCRUNFNjg1
MkI4QkQ3MDAeFw0yNjEwMjQxOTE4MjdaFw0yNjEwMjUyMDQ3MjdaMDMxMTAvBgNV
BAMTKEVBNjI5QzNBRjI0MjczODg4NjA1MjAwNDJGRjRFMkZCNTk1QUNFMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfH0jOM33yuYJ5OUpwhVRutc24
DUPUhBVBSMc6vDAYAjulD9c2eI1fZ7aiTJHr8g2A9x2S0S4A1y+izw9sYzogoIXo
zv0oh6msUijZ8drbt7XFwzMIZsyayOIOoDAU2k4o1onLuJfoArFd/dMcBzxPoYgU
zwbDIHDfKC6zKHVwIgLLiPiVpDo5upIqfKHuQkTDMQ8CIqVn9YSAEUjH9lZEGxAY
jPDbLxQU+JaWu1tb9CtNinm2JkxjybRnyMANXVfVESIiEmu+6y6bLwTgJ8rQVurf
chSb0AOt+hyFoBwc0pj135tGN9xBZT44lj6MbOQclE4ROtWu6Oys+8ukS2ePAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6mKcOvJCc4iGBSAEL/Ti+1lazjgwHwYDVR0j
BBgwFoAULqsi3toXyGM1IMdlwb7OaFK4vXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTI1Y2RhMzYtNjkzYS00YzFhLWJhOWUtZTBlMTc4MTEyMTQwLzAvMkVBQjIyREVE
QTE3Qzg2MzM1MjBDNzY1QzFCRUNFNjg1MkI4QkQ3MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yRUFCMjJERURBMTdDODYzMzUyMEM3NjVDMUJFQ0U2ODUyQjhC
RDcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI1Y2RhMzYtNjkzYS00YzFhLWJh
OWUtZTBlMTc4MTEyMTQwLzAvMkVBQjIyREVEQTE3Qzg2MzM1MjBDNzY1QzFCRUNF
Njg1MkI4QkQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADNbnBswMrcquwvMZvGYMuPwfR3CiikIMUPI
HmHptAbJGCCK5jCnEoQZ1jQidoA0b1kbPuJv8wdYRxwhx7SDkHZYvppTF7fXYcps
M7ehx1DldwNNN7lswC6lkaglEIgj4sYJIkJwGQ9Ft6OhvsHhzPq/D4NZe5NejG6y
bR8w+ALThF5BUpdS1HPsdGlCgQpUwjjDPIQLQ+R6MpQh+KRh2wPHEdUeKYcrRbjy
c29GFC9gTJx3e8Ew8wVo73Hdg/U0iQkFWoLXmLL6wEHkkPT/J0saL1Le5Wk8Ykmc
psrtqywKZIOupWSUJJiwGRKZZ572Zq35FugRNnqYHMPyA4mH1p4=
-----END CERTIFICATE-----
Generated at Sun Oct 25 06:08:27 2026 by rpki-client