Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
File:                     EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft (raw, json)
Hash identifier:          EGMUQ3Z0xgbhrkmXsqAQVjbxDu6OZIlZFDZGSa+3/ZY=
Subject key identifier:   A5:07:17:ED:78:0F:63:DD:D9:48:23:B0:B5:CF:33:69:C5:4F:2F:9F
Authority key identifier: EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44
Certificate issuer:       /CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744
Certificate serial:       62CBD51B806AC94B54E5290E501F7F42ADBBF4D3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
Manifest number:          BC
Signing time:             Sun 20 Sep 2026 04:48:06 +0000
Manifest this update:     Sun 20 Sep 2026 04:43:06 +0000
Manifest next update:     Mon 21 Sep 2026 07:31:06 +0000
Files and hashes:         1: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: BnM/pd6T0nNd5d7QI+jI59NRWk0b0EsbuiWKkA+Hh+0=)
                          2: EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl (hash: OT6sNs/nbBGXo/zy22VPsmTrrtk7hYg7MH/VFI4nirY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl
                          rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 07:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cb:d5:1b:80:6a:c9:4b:54:e5:29:0e:50:1f:7f:42:ad:bb:f4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744
        Validity
            Not Before: Sep 20 04:43:06 2026 GMT
            Not After : Sep 21 07:31:06 2026 GMT
        Subject: CN=A50717ED780F63DDD94823B0B5CF3369C54F2F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:85:8b:8b:ab:44:9c:8b:b1:86:1c:df:3e:ab:
                    f0:95:b9:2c:4f:00:ff:0f:54:a4:14:d2:91:72:1a:
                    6b:82:a4:91:e4:f2:6c:0e:9b:3c:88:99:92:03:0a:
                    c2:37:50:3b:43:59:d5:58:0f:42:d9:09:f2:6b:64:
                    00:e0:ce:c9:c6:06:e5:11:38:eb:1d:75:32:20:e3:
                    30:24:ea:ac:ca:b0:ef:d4:27:11:aa:66:18:4b:a3:
                    07:78:d7:23:cd:b0:9c:01:a0:25:74:ae:f6:4a:df:
                    8a:d2:a7:d6:3c:4c:f4:b6:59:7a:be:91:81:7c:b9:
                    1a:e6:f0:4d:5b:8a:ca:4d:9a:8f:c1:9a:e8:b5:79:
                    12:4d:ae:0a:c4:54:56:b7:bf:92:2e:7d:a5:9d:bc:
                    40:41:c6:e8:7c:b7:65:61:7d:3e:c6:62:9c:2b:30:
                    95:58:8f:99:94:02:9d:39:f7:4b:a5:4a:97:7d:45:
                    78:e6:39:d2:ff:06:d5:44:c0:a1:f4:5d:00:d8:65:
                    38:75:19:90:aa:3d:7f:9d:3f:fe:b1:a1:bb:3b:d0:
                    2e:03:7e:68:57:48:5f:a4:61:5d:d7:f5:aa:2b:c3:
                    48:d3:3e:5b:40:df:bf:c8:49:f0:08:db:0b:a3:4f:
                    31:47:07:19:5e:97:1d:c7:d0:66:98:22:63:f4:7b:
                    19:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:07:17:ED:78:0F:63:DD:D9:48:23:B0:B5:CF:33:69:C5:4F:2F:9F
            X509v3 Authority Key Identifier:
                keyid:EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:da:dd:26:f6:cf:5d:9f:ad:b6:38:cc:8c:dc:52:9d:40:af:
         41:c4:7e:77:c8:48:b1:d3:48:be:9a:42:a0:d1:23:3d:4b:56:
         1c:9c:f9:c5:7b:86:22:b9:14:49:c8:b4:99:62:96:c0:bb:32:
         f7:28:cb:e3:50:e6:5f:30:37:7d:bf:ff:3f:f4:be:4d:95:cd:
         9a:b3:94:46:a3:b5:bd:b0:3e:0e:b1:3f:ee:a2:26:40:d3:08:
         95:56:10:93:01:f6:68:88:88:53:b8:b9:8e:2c:4d:d0:b1:41:
         f0:75:80:e4:df:e1:4f:00:a6:22:42:a9:c5:33:4e:97:ad:3b:
         a8:f2:54:d1:a3:78:ac:38:76:84:47:7d:8e:a7:69:ae:a8:66:
         81:1c:2b:c9:a6:4a:64:21:b6:11:e0:04:3a:dd:c5:69:84:1d:
         04:15:22:fd:d5:fb:1d:6a:0d:36:dd:b4:dc:93:89:fb:b2:0c:
         42:0c:18:9e:b2:8f:a9:74:6e:f8:9e:71:06:f6:73:d2:18:da:
         e0:83:13:6c:0b:e5:b8:cf:e1:82:e8:0d:67:a2:83:b9:b3:1d:
         77:ac:b2:95:11:2e:6c:3e:a4:93:66:96:cc:d7:f6:cf:f1:74:
         8d:c7:52:ef:d1:fa:86:57:0c:7d:c0:9e:41:1d:4c:a8:b5:5b:
         5e:c1:5e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:10 2026 by rpki-client