Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft
File:                     1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft (raw, json)
Hash identifier:          Xj+4pul5sdLdWTF/i7ggHf/5/OQ+DdR8cj6Ze/kHSEU=
Subject key identifier:   7D:0B:36:3B:4A:A9:C6:8D:90:37:94:2D:6A:68:6C:80:59:DC:8A:95
Authority key identifier: 1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D
Certificate issuer:       /CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D
Certificate serial:       5294751B3A8B67D094E6F967A569AC91A968B8C5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 23:17:09 +0000
Manifest this update:     Tue 12 May 2026 23:12:09 +0000
Manifest next update:     Thu 14 May 2026 01:52:09 +0000
Files and hashes:         1: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: HRWu5uWyYj+tP+jHdEqHR4i0tx4A8OiWh4bfexrm8jQ=)
                          2: 1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl (hash: HaMKakdI2JlXcWHSxQlDcFnQC9RlSz2AgRUn/4enxr4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl
                          rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:94:75:1b:3a:8b:67:d0:94:e6:f9:67:a5:69:ac:91:a9:68:b8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D
        Validity
            Not Before: May 12 23:12:09 2026 GMT
            Not After : May 14 01:52:09 2026 GMT
        Subject: CN=7D0B363B4AA9C68D9037942D6A686C8059DC8A95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:34:04:b9:d3:8a:5e:53:70:7a:85:29:c8:93:
                    de:6b:de:d8:3f:f3:cb:89:0d:47:ad:79:43:1b:fb:
                    04:9c:6c:58:1b:cb:59:6c:15:fb:8e:92:fc:51:08:
                    1e:1b:01:05:8e:77:f8:a8:56:b2:93:8e:70:4a:1b:
                    5f:36:a1:84:24:7c:05:9e:9a:05:20:99:1c:2a:2f:
                    1a:07:06:87:8e:ed:da:31:8a:30:b7:a9:75:83:94:
                    ba:12:e8:fd:5b:f9:11:62:2b:60:7d:ab:d8:b9:78:
                    8d:af:8a:c5:8d:4f:a2:05:92:87:24:a7:70:bc:ca:
                    7d:9a:20:ad:2b:08:e0:e4:9d:32:5f:82:ee:80:41:
                    17:ac:40:96:00:4b:1a:8c:64:21:d1:84:85:75:38:
                    f4:fb:a1:1f:5d:56:df:ec:70:04:44:27:45:fd:ba:
                    85:db:9d:70:57:ce:d6:89:31:46:61:be:b2:e0:ba:
                    d1:f7:f3:f6:49:99:16:98:6b:83:14:a0:12:1b:b1:
                    63:9f:51:0f:17:bd:f9:1e:ee:c0:43:3f:a3:d0:6a:
                    df:09:91:f6:0d:ac:7c:81:83:87:76:e8:c8:39:cd:
                    a4:da:c6:b7:64:3b:be:22:31:98:67:2a:38:db:58:
                    91:14:15:8f:69:dd:35:fc:df:6b:a2:10:0f:9a:4e:
                    34:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0B:36:3B:4A:A9:C6:8D:90:37:94:2D:6A:68:6C:80:59:DC:8A:95
            X509v3 Authority Key Identifier:
                keyid:1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:aa:76:20:e6:49:e0:9f:04:fb:37:35:3a:7e:1c:c8:08:39:
         e0:e8:c3:39:af:28:e2:b5:0b:f0:c4:55:8a:42:65:2a:b3:fb:
         57:75:e8:9b:e2:f4:8a:ed:06:f8:fe:e5:72:d1:28:08:bc:d6:
         f7:6f:42:0d:8c:2b:50:9f:aa:f3:bc:e9:d4:78:7c:b7:1b:ff:
         33:a4:a8:06:d2:74:4a:ff:2a:1e:bc:38:25:da:14:6c:32:5e:
         c8:77:22:5b:76:42:e7:3c:63:34:5f:de:fd:ee:a4:f5:fc:94:
         92:5d:36:fd:84:5d:12:1d:e0:fa:b8:f2:5a:77:ed:ce:89:7e:
         93:94:2b:07:ef:cc:c5:00:37:9c:ca:72:10:f9:9f:de:1e:4b:
         9e:69:6c:56:5d:a5:03:f5:a0:35:c0:2c:b9:54:e7:d5:7c:5f:
         f2:cc:c5:e6:54:2c:a1:08:ae:89:be:f0:90:75:27:34:8c:8a:
         9c:d6:d3:ba:32:dd:9a:8b:3a:8c:f3:3c:1a:34:5e:36:24:2c:
         4d:26:83:ae:80:f9:33:d3:f0:36:3a:50:78:2e:fb:62:7d:55:
         97:2b:80:16:b4:f6:b0:1c:72:76:e4:50:89:00:45:10:5a:44:
         4b:ee:94:5a:5f:f5:5b:75:3e:db:a6:b8:27:f1:66:5e:7e:74:
         85:3c:0c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:27 2026 by rpki-client