Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft
File:                     E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft (raw, json)
Hash identifier:          aUQ1un0NSoWWnXHLxc8D0229Jh1T9zWTzt1kMAJpzkI=
Subject key identifier:   ED:CB:B1:3E:B8:CB:E5:5E:1B:C5:5E:61:E3:AE:7B:B4:CA:D5:E7:1F
Authority key identifier: E8:A9:34:26:8F:45:DA:8A:6A:43:32:96:81:F0:D4:FE:AE:CF:F5:BC
Certificate issuer:       /CN=E8A934268F45DA8A6A43329681F0D4FEAECFF5BC
Certificate serial:       3C3B8176CF114FA91F241A83C5CE44AB0F80A31F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 14:31:46 +0000
Manifest this update:     Tue 16 Jun 2026 14:26:46 +0000
Manifest next update:     Wed 17 Jun 2026 17:19:46 +0000
Files and hashes:         1: E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.crl (hash: BWh6cVW/UydVDHxIebOBCkSIxZhvlT1MfyWYefC3oIo=)
                          2: 3130332e37382e35312e302f32342d3234203d3e20313530323536.roa (hash: PIufH5O182sP9pVKKuDwELYzvTT1F4q43CMzZkbvVHc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.crl
                          rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 17:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3b:81:76:cf:11:4f:a9:1f:24:1a:83:c5:ce:44:ab:0f:80:a3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8A934268F45DA8A6A43329681F0D4FEAECFF5BC
        Validity
            Not Before: Jun 16 14:26:46 2026 GMT
            Not After : Jun 17 17:19:46 2026 GMT
        Subject: CN=EDCBB13EB8CBE55E1BC55E61E3AE7BB4CAD5E71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:da:c7:29:cf:50:14:64:59:0d:9d:f7:e3:a6:
                    f6:cd:cb:16:35:7d:46:9f:66:c5:59:47:bc:59:2b:
                    96:21:8b:cb:28:d6:75:0a:9c:62:4b:0b:25:ae:89:
                    f5:e3:5d:ce:f3:98:a1:10:b5:de:c8:d9:cf:d3:ef:
                    28:10:94:85:a1:09:b3:9b:59:6e:3a:20:65:8c:db:
                    1d:55:b0:d1:00:b5:6b:fa:77:53:30:cb:2a:99:39:
                    6a:1c:9a:20:5e:b4:5c:72:dc:a9:27:4c:43:68:0a:
                    59:e2:f6:42:8a:f8:96:05:f9:e2:75:be:b7:bc:95:
                    f9:47:34:97:a9:d8:f7:9c:f3:bf:92:14:09:ec:72:
                    6b:d4:3f:ce:7e:81:0d:ba:90:f1:e3:1a:53:c0:51:
                    c7:69:67:f8:b3:8c:2d:9e:46:d6:8e:26:a9:31:97:
                    7c:b5:90:f1:57:51:6c:9e:30:a0:31:e9:ac:11:6b:
                    0f:2d:bb:0c:e7:27:c3:9a:8e:a9:16:01:02:0b:bc:
                    05:8b:e9:7f:85:2b:73:89:34:6e:b0:f3:44:fa:ba:
                    1b:36:71:c7:26:dd:70:b6:93:59:3e:4a:51:00:55:
                    9d:99:48:39:e8:f3:4e:54:b4:dd:bc:63:41:03:98:
                    ea:a3:53:96:a0:60:fe:15:2e:ee:44:98:96:62:58:
                    64:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CB:B1:3E:B8:CB:E5:5E:1B:C5:5E:61:E3:AE:7B:B4:CA:D5:E7:1F
            X509v3 Authority Key Identifier:
                keyid:E8:A9:34:26:8F:45:DA:8A:6A:43:32:96:81:F0:D4:FE:AE:CF:F5:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:19:4f:f7:76:f1:e8:11:84:29:83:af:27:bb:93:5d:cf:5a:
         ce:b2:15:34:52:a9:ca:c7:51:d3:f7:67:8b:0c:9e:5f:d3:13:
         7b:93:d5:c5:3e:24:fe:13:92:22:88:39:7d:44:1d:43:5f:40:
         49:63:0b:d7:d3:b9:17:2b:29:80:b6:82:4e:0b:ef:72:18:6a:
         c0:86:3d:02:c9:fa:0e:ff:d7:fa:f0:c4:bc:b8:d5:a1:47:49:
         5d:77:25:a3:da:8e:e0:8c:50:1b:8e:8c:0a:33:b2:0e:51:62:
         02:06:7d:1d:80:55:d9:5f:56:0d:ad:e7:22:7a:e6:73:35:68:
         ba:b8:fd:2b:91:3c:7a:8c:c5:92:78:0a:dd:84:28:12:64:11:
         32:e1:ef:7f:f3:2a:13:ba:be:3b:f2:39:5f:e0:57:d2:31:d2:
         50:7f:40:52:17:2b:42:f4:cf:85:51:24:32:f6:9d:be:4f:21:
         d9:b8:7c:c3:69:79:a8:83:62:44:c8:26:9e:62:c7:c7:20:27:
         00:b5:56:70:49:18:f4:4b:d1:20:01:a2:0e:76:81:2a:14:6f:
         b6:b1:b0:fd:1d:22:ab:38:2f:ad:17:f4:61:32:91:ba:32:4f:
         ae:55:4d:a8:81:32:52:16:63:86:28:f0:ab:a7:ac:cf:9c:c3:
         c6:6f:42:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:03:07 2026 by rpki-client