Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
File:                     ED174C0150D63525F5DB20F0992EDEECD70380E5.mft (raw, json)
Hash identifier:          DadFFBXc/4VwSujgHfvg8rY7FFaxKLE6+5SNcNgWKkU=
Subject key identifier:   B1:36:90:5E:C4:4E:F4:8D:E6:68:13:88:F6:EE:10:11:11:E2:D5:BF
Authority key identifier: ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5
Certificate issuer:       /CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
Certificate serial:       2241DC899E52988845CECD5A138F8AE8EAAFF1B0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
Manifest number:          BF
Signing time:             Tue 22 Sep 2026 01:48:41 +0000
Manifest this update:     Tue 22 Sep 2026 01:43:41 +0000
Manifest next update:     Wed 23 Sep 2026 05:31:41 +0000
Files and hashes:         1: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: bfhOCogzMUQqHoQaSn812eSk7yOuSzPxVDD+Nz5nDsc=)
                          2: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: MaBel9u9pYezsd1ShGGBnY40dDIrzHcanWzm4FOSRAg=)
                          3: ED174C0150D63525F5DB20F0992EDEECD70380E5.crl (hash: 21SbBQ44vMmT3S4YGBXqYFiQWKK6HgRvugPGI2KdKOE=)
                          4: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: 3XmUzAiqVZaFyzkEVDaETxoV3L7puo8oceCYnEmmitg=)
                          5: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: zmRnpGvMIJDXa5x4jILWd60y8Q5Ncg1iyAcAcxswFl4=)
                          6: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: n4IkgoMW2u0zkFgXDHL0eZSUTKgr/z1ZRj5PZ9Dfmxk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl
                          rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 03:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:41:dc:89:9e:52:98:88:45:ce:cd:5a:13:8f:8a:e8:ea:af:f1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
        Validity
            Not Before: Sep 22 01:43:41 2026 GMT
            Not After : Sep 23 05:31:41 2026 GMT
        Subject: CN=B136905EC44EF48DE6681388F6EE101111E2D5BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:b6:f9:a9:05:bd:2e:8d:01:e3:7a:bb:8f:
                    cf:af:1f:a6:6a:76:10:d1:30:f5:6f:a2:d4:96:84:
                    72:2f:c9:0c:04:7b:d3:ef:50:05:d4:45:9e:30:8a:
                    a7:47:24:b6:84:bf:6f:41:09:3c:d6:81:63:74:9a:
                    fc:71:c6:1d:04:e1:2e:29:1e:c9:13:b3:d9:d1:d7:
                    9d:c6:e6:d5:56:5d:e9:20:5c:ba:62:93:46:b4:5c:
                    58:19:75:ef:7c:23:a0:5e:7e:af:ae:e8:7b:d5:9c:
                    58:4f:f8:00:74:90:7b:93:2e:60:c9:7d:40:aa:1c:
                    b8:2f:80:3c:30:f8:44:d9:e1:1d:5b:8d:24:3e:3f:
                    5b:d4:c6:2a:df:10:fd:62:8f:a1:fa:4d:2a:65:9b:
                    93:18:8a:c2:42:55:34:a7:c4:ec:56:a0:aa:ff:b0:
                    0b:eb:f7:4d:00:59:15:08:49:54:98:07:82:1d:e1:
                    9c:7c:21:3f:78:65:40:f0:2c:2c:eb:33:07:79:00:
                    c3:a8:1f:f8:62:1f:b8:e4:5f:d3:45:0e:55:dd:eb:
                    ce:72:99:78:65:d1:4c:b4:f5:53:12:bb:3d:fb:72:
                    f1:d6:cd:27:6f:2d:0e:26:10:3c:48:8f:86:cd:5f:
                    9d:ff:3f:e2:fb:11:a8:2f:d2:b9:b7:af:fd:ea:25:
                    47:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:36:90:5E:C4:4E:F4:8D:E6:68:13:88:F6:EE:10:11:11:E2:D5:BF
            X509v3 Authority Key Identifier:
                keyid:ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:9b:f5:9c:3f:0f:fa:12:5d:89:50:32:ba:d6:01:77:3e:0f:
         aa:14:8d:27:01:db:30:89:3e:d1:3b:1e:46:0c:d8:1a:05:94:
         5e:17:ad:07:68:bd:61:8b:1d:61:55:c1:c1:44:61:91:04:7f:
         ed:bb:4f:a8:d9:ea:34:f6:06:f1:21:f9:92:ea:82:57:81:1b:
         c2:9f:db:d2:b1:4f:04:33:c4:9e:6b:eb:c1:47:c2:51:a9:c2:
         e6:29:4e:c3:bc:c7:33:83:d9:89:8c:10:fd:ff:6d:85:c7:1b:
         30:08:ba:8b:45:c9:f7:d8:78:56:54:49:09:ab:74:21:e7:a1:
         7c:76:ec:24:34:e6:4e:7b:06:eb:72:a0:4d:8a:a5:25:33:e9:
         92:3e:04:55:97:6c:95:d8:b7:fd:0c:b7:6b:26:c0:89:b7:2a:
         2e:a9:aa:5c:15:81:7d:79:8a:5d:da:75:58:68:7f:5c:7e:96:
         66:af:68:a2:08:58:6e:e4:3f:48:22:d0:55:0d:63:b0:0a:8c:
         18:75:9f:a0:01:2a:13:c6:e7:0b:97:5e:72:4f:83:f4:6a:1b:
         0a:30:7e:94:73:87:d9:6c:2e:d0:88:87:74:cb:14:5a:3f:e9:
         bc:53:e5:fb:2c:07:ce:fd:6f:34:f5:42:76:aa:7a:73:fd:92:
         47:b8:a6:4a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIkHciZ5SmIhFzs1aE4+K6Oqv8bAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQxNzRDMDE1MEQ2MzUyNUY1REIyMEYwOTkyRURFRUNE
NzAzODBFNTAeFw0yNjA5MjIwMTQzNDFaFw0yNjA5MjMwNTMxNDFaMDMxMTAvBgNV
BAMTKEIxMzY5MDVFQzQ0RUY0OERFNjY4MTM4OEY2RUUxMDExMTFFMkQ1QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC78Lb5qQW9Lo0B43q7j8+vH6Zq
dhDRMPVvotSWhHIvyQwEe9PvUAXURZ4wiqdHJLaEv29BCTzWgWN0mvxxxh0E4S4p
HskTs9nR153G5tVWXekgXLpik0a0XFgZde98I6Befq+u6HvVnFhP+AB0kHuTLmDJ
fUCqHLgvgDww+ETZ4R1bjSQ+P1vUxirfEP1ij6H6TSplm5MYisJCVTSnxOxWoKr/
sAvr900AWRUISVSYB4Id4Zx8IT94ZUDwLCzrMwd5AMOoH/hiH7jkX9NFDlXd685y
mXhl0Uy09VMSuz37cvHWzSdvLQ4mEDxIj4bNX53/P+L7Eagv0rm3r/3qJUc5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsTaQXsRO9I3maBOI9u4QERHi1b8wHwYDVR0j
BBgwFoAU7RdMAVDWNSX12yDwmS7e7NcDgOUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzRiZjA3Y2YtNTBhOS00MjhhLTkwZDItZDQ0ZDZiNzYyYjU1LzAvRUQxNzRDMDE1
MEQ2MzUyNUY1REIyMEYwOTkyRURFRUNENzAzODBFNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRDE3NEMwMTUwRDYzNTI1RjVEQjIwRjA5OTJFREVFQ0Q3MDM4
MEU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRiZjA3Y2YtNTBhOS00MjhhLTkw
ZDItZDQ0ZDZiNzYyYjU1LzAvRUQxNzRDMDE1MEQ2MzUyNUY1REIyMEYwOTkyRURF
RUNENzAzODBFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ2b9Zw/D/oSXYlQMrrWAXc+D6oUjScB2zCJ
PtE7HkYM2BoFlF4XrQdovWGLHWFVwcFEYZEEf+27T6jZ6jT2BvEh+ZLqgleBG8Kf
29KxTwQzxJ5r68FHwlGpwuYpTsO8xzOD2YmMEP3/bYXHGzAIuotFyffYeFZUSQmr
dCHnoXx27CQ05k57ButyoE2KpSUz6ZI+BFWXbJXYt/0Mt2smwIm3Ki6pqlwVgX15
il3adVhof1x+lmavaKIIWG7kP0gi0FUNY7AKjBh1n6ABKhPG5wuXXnJPg/RqGwow
fpRzh9lsLtCIh3TLFFo/6bxT5fssB879bzT1QnaqenP9kke4pko=
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:47:29 2026 by rpki-client