Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft
File:                     EDE74DB94791A93866EC7291214CFE17A2E8847C.mft (raw, json)
Hash identifier:          peE8AwWK8puXJygiAJS+iYlbof5U6tpL7NFlVNU7Gn8=
Subject key identifier:   11:82:15:F8:04:34:5E:40:FD:1E:F5:37:07:7E:F9:C9:EC:A5:3A:C8
Authority key identifier: ED:E7:4D:B9:47:91:A9:38:66:EC:72:91:21:4C:FE:17:A2:E8:84:7C
Certificate issuer:       /CN=EDE74DB94791A93866EC7291214CFE17A2E8847C
Certificate serial:       6BD9896A36ACF9338E2B96205D30475A5281CB44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft
Manifest number:          EC
Signing time:             Mon 26 Oct 2026 02:50:30 +0000
Manifest this update:     Mon 26 Oct 2026 02:45:30 +0000
Manifest next update:     Tue 27 Oct 2026 05:46:30 +0000
Files and hashes:         1: EDE74DB94791A93866EC7291214CFE17A2E8847C.crl (hash: VjS49KjFGHgW9FUw9qMGCjywsEt2hBWPs3ztlHdCmk0=)
                          2: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: 4l+iqPdBiSlCoKQVmREPhK2V683AQV+EJjvlxdf5bAw=)
                          3: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: 8iN/CyAnWulsiAeIh9OXGEEjvzE7Yu0Mej0akYbb1wk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.crl
                          rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 05:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d9:89:6a:36:ac:f9:33:8e:2b:96:20:5d:30:47:5a:52:81:cb:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE74DB94791A93866EC7291214CFE17A2E8847C
        Validity
            Not Before: Oct 26 02:45:30 2026 GMT
            Not After : Oct 27 05:46:30 2026 GMT
        Subject: CN=118215F804345E40FD1EF537077EF9C9ECA53AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:48:86:a8:14:33:ac:d5:88:b8:15:ba:5b:3a:
                    2d:c3:b4:e5:f7:fc:7c:d6:e9:47:77:8e:16:8d:0a:
                    71:ed:32:a4:e1:b2:d9:00:f5:0c:05:ec:4c:9e:85:
                    9a:5a:cb:b2:7f:4a:40:00:a0:56:c9:63:85:ae:fd:
                    b3:30:e6:38:62:8f:f3:de:7a:51:83:c4:8b:24:90:
                    7c:f4:63:35:26:7e:7f:60:b0:d4:ac:f8:bc:b0:8a:
                    aa:e1:11:8f:4f:b5:07:0a:68:b3:14:46:34:31:9e:
                    5d:af:39:d3:75:14:2b:c3:12:32:65:22:c7:fa:41:
                    13:d8:f4:f3:ad:14:e3:95:87:1d:a2:63:1d:e5:4f:
                    1f:f0:bd:69:60:b2:d4:01:80:cd:12:2c:b6:5a:28:
                    db:eb:50:0c:c4:b4:f9:bb:d2:5e:44:4a:da:ac:de:
                    79:8f:dc:2a:18:6a:29:76:30:23:8a:bb:0f:c2:89:
                    22:d3:81:d9:02:89:a5:89:22:b5:b9:5f:8b:c5:53:
                    21:68:4a:14:70:dd:0f:95:ab:f3:db:e0:48:7c:9a:
                    af:42:6a:8a:72:e2:48:7f:b7:6d:d4:2a:01:09:6b:
                    06:19:d7:80:96:d8:c8:fd:d1:ca:79:af:b5:5f:d7:
                    77:02:9a:3c:c2:fa:93:28:d3:9b:0d:03:f7:fc:1f:
                    ed:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:82:15:F8:04:34:5E:40:FD:1E:F5:37:07:7E:F9:C9:EC:A5:3A:C8
            X509v3 Authority Key Identifier:
                keyid:ED:E7:4D:B9:47:91:A9:38:66:EC:72:91:21:4C:FE:17:A2:E8:84:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:87:50:1b:5a:ca:55:9e:a8:92:36:7f:97:e3:e1:f0:51:cf:
         d0:4b:69:10:85:14:ff:14:dc:0e:1b:8c:9c:bc:e2:c7:80:90:
         c9:43:c0:fb:a3:9f:f5:41:3e:83:af:7b:de:97:9a:49:5f:3f:
         16:e3:04:57:c5:9d:d7:fc:4d:69:e9:70:33:42:ad:41:8e:dd:
         ef:0e:f1:ad:99:dc:81:ec:62:92:7f:01:66:89:69:85:c7:61:
         1f:09:5d:8d:56:d3:97:8f:48:b0:91:2a:1b:4a:76:83:ed:15:
         63:76:51:24:31:3c:2b:ac:33:ff:56:58:5f:9f:be:e0:6f:8c:
         31:bd:20:f0:04:c3:96:9c:b6:cd:9a:c7:e8:4e:f2:18:f7:33:
         0f:b8:65:cb:60:5e:41:01:33:ee:49:1a:4e:e2:14:99:d5:ab:
         19:5e:9c:9b:cd:c7:92:3b:00:7d:95:5a:48:99:76:1d:a0:2f:
         eb:40:8f:7d:e9:09:59:3a:a1:7c:98:b4:06:18:ed:79:2d:a0:
         91:5b:38:6b:39:ae:35:96:6c:79:a3:e7:7a:97:a8:7e:25:81:
         56:94:75:cb:0a:ef:fb:bd:89:1c:86:1a:dd:73:16:06:60:b3:
         8d:26:ee:cc:f5:a2:ca:f4:6d:c2:09:18:d9:df:77:dc:db:e6:
         24:86:59:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:25:59 2026 by rpki-client