Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
File:                     2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft (raw, json)
Hash identifier:          QgUxCvNRe4s1cilikqDOxVplnjVAuiupxT66NmDgY6M=
Subject key identifier:   59:E5:93:4F:9A:D5:87:86:D0:AD:06:6C:A2:B7:B0:A0:12:81:BF:3E
Authority key identifier: 2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70
Certificate issuer:       /CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
Certificate serial:       2915BFFBA8F74E3AECB085AC784B26149B97627D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 15:41:11 +0000
Manifest this update:     Mon 21 Sep 2026 15:36:11 +0000
Manifest next update:     Tue 22 Sep 2026 19:08:11 +0000
Files and hashes:         1: 323430343a326363303a32303a3a2f34332d3433203d3e20313331373336.roa (hash: fToGnwAHAJ5VtIANKumAt4uzlSvc7R1/Zv4oJQS4kF0=)
                          2: 323430343a326363303a35343a3a2f34362d3436203d3e20313331373336.roa (hash: R7p8u3fUD9Q1PWm/nzBs05bZYIMNm4aJaBgF+3K7/6A=)
                          3: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: dpRjxkyvMZSuMwoiOFiEbs0aVfBM9F5a6WoDjj2reGk=)
                          4: 323430343a326363303a35383a3a2f34362d3436203d3e20313331373336.roa (hash: 2ePu3EHR90dClUt0r5HRZza+Dx4B+Kag1aBuSmuBj9s=)
                          5: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: HJc5JvMy8GHohXvfOoaZGX6TD+10pfnhOdLgXA7YFDo=)
                          6: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: NS29Duq3Ad0Oay5mRumCSue0EKVMXVW+d3uV6la1Mk4=)
                          7: 323430343a326363303a34633a3a2f34362d3436203d3e20313331373336.roa (hash: cS+IrgZpY9aClZBoWCUDEv2Phmt7SwlOezLlcCoBSPI=)
                          8: 323430343a326363303a34343a3a2f34362d3436203d3e20313331373336.roa (hash: GR4L5FJqVS9TJ+dvaa8HynQA+y7YhiRBbKDogiUCsq4=)
                          9: 323430343a326363303a34383a3a2f34362d3436203d3e20313331373336.roa (hash: jZfpgRC0d5fkEjm8vD7qc9gZsnKZQYBh0EboO+Uho7s=)
                          10: 323430343a326363303a34303a3a2f34362d3436203d3e20313331373336.roa (hash: xUpoxjFUHIIvNkT92mjiWI0plg15apjL+jPNvQQ2Uk8=)
                          11: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: VaVs+XiSWxs1hEguef/hHo/bNFA4CcDh7KZrSmxpBag=)
                          12: 2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl (hash: Z6pFm9qgJPQytOwypdMZIp8Tr1UmFvKdv2J3xvuqOyU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl
                          rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 19:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:15:bf:fb:a8:f7:4e:3a:ec:b0:85:ac:78:4b:26:14:9b:97:62:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
        Validity
            Not Before: Sep 21 15:36:11 2026 GMT
            Not After : Sep 22 19:08:11 2026 GMT
        Subject: CN=59E5934F9AD58786D0AD066CA2B7B0A01281BF3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:27:b1:df:ce:96:10:c4:88:73:20:b8:3c:
                    9f:a8:c6:41:01:03:0c:1f:a9:8f:38:fb:99:17:65:
                    59:57:b7:36:40:56:25:bc:0c:9d:ae:b3:0f:df:11:
                    52:1e:81:a0:94:da:09:05:42:6f:4e:8e:76:d2:0b:
                    b9:29:a8:5f:da:85:58:97:96:d4:6e:ac:7e:c0:ae:
                    fd:8a:45:51:ea:12:9f:35:4d:06:51:37:4a:de:39:
                    58:b7:c4:38:bf:d4:8d:eb:40:ef:48:d5:95:84:4c:
                    28:d0:d4:9a:b5:9f:ea:fc:5e:d2:9f:8c:3e:1c:9c:
                    76:4b:57:a3:03:fc:42:47:59:c6:16:03:37:ec:ce:
                    cc:3f:0d:e1:99:df:68:fc:ea:b6:6e:74:e7:a4:3b:
                    f5:3f:b3:44:6c:28:15:55:8d:d8:2f:f3:3b:2c:e5:
                    00:7a:21:b9:0c:2c:93:06:c6:7b:68:2a:7e:c2:86:
                    16:e0:3a:35:6b:40:63:5d:5f:72:e6:6e:88:23:06:
                    85:56:e2:a6:9b:ce:30:d8:ef:eb:35:24:7d:d1:f3:
                    0f:8d:c3:b7:59:c2:5e:c4:7a:7b:0e:1e:52:58:22:
                    6a:9a:37:fb:c9:aa:1b:ed:ed:37:2d:ab:87:0d:a6:
                    89:24:5e:b6:19:cc:cc:bd:15:0e:a4:f3:ae:6c:d3:
                    39:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E5:93:4F:9A:D5:87:86:D0:AD:06:6C:A2:B7:B0:A0:12:81:BF:3E
            X509v3 Authority Key Identifier:
                keyid:2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:79:f6:f6:c4:a0:ad:93:9f:79:61:3d:4f:b0:16:6e:ed:bd:
         20:3d:8a:9a:32:03:63:b0:23:e3:c2:8c:0e:39:be:af:2a:15:
         dd:3e:c3:be:44:19:0d:04:ae:d7:e7:51:bb:ea:1a:ad:7b:e1:
         a5:f2:74:7c:c0:06:d7:26:a0:04:a4:18:d8:85:08:03:a0:d8:
         ee:ab:9c:d1:ea:23:23:1a:7a:97:f4:cc:25:bc:62:8a:fe:3f:
         ec:37:44:a5:e1:30:93:13:17:fd:07:17:4d:1f:10:a1:c3:16:
         f1:43:32:46:a9:c7:67:0e:25:51:51:1d:5b:26:55:12:4d:2a:
         e1:fd:19:bb:96:14:4a:89:1a:a6:3d:20:79:7a:c9:6a:0e:37:
         bf:06:c9:1c:dd:2d:c9:f9:ca:ca:cf:b5:b5:c5:b7:11:05:47:
         16:d3:e5:ad:da:63:92:03:a4:05:44:63:69:45:8c:7d:7c:db:
         cb:1e:be:2d:fa:a1:58:41:04:b0:21:0f:79:90:bc:4f:18:96:
         ee:f9:bf:d7:1a:42:7c:2f:fa:5f:5a:ae:cf:c6:f6:db:8a:dc:
         9f:d6:38:a8:95:b5:bc:e7:79:a2:7f:b6:46:47:55:2e:63:5e:
         e2:00:36:e6:02:71:c2:bc:d7:db:b5:a5:8c:94:a3:b2:95:68:
         75:f0:01:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:08:46 2026 by rpki-client