Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.mft
File:                     1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.mft (raw, json)
Hash identifier:          XAMgH4oo+eXlyIq/w5Ir0Jep1C6P//oXrfSHgAPHSGs=
Subject key identifier:   11:F3:7E:85:FE:A5:81:A9:E6:90:0C:83:2B:59:EA:A0:D1:D6:AB:FE
Authority key identifier: 1B:93:CB:8B:8D:CE:7D:B4:D6:45:21:15:64:7A:37:0E:A2:2E:3E:23
Certificate issuer:       /CN=1B93CB8B8DCE7DB4D6452115647A370EA22E3E23
Certificate serial:       31CD9A6411F1D0007909CFEE9FB87547C3FD8977
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 15:25:00 +0000
Manifest this update:     Tue 12 May 2026 15:20:00 +0000
Manifest next update:     Wed 13 May 2026 16:32:00 +0000
Files and hashes:         1: 3130332e3136342e3137342e302f32332d3234203d3e20313439393330.roa (hash: GEOw2YpRpFtyzg+8GHqzWLsuzfpbet3gaQc6Cku+uzs=)
                          2: 1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.crl (hash: JyMp29vm+l0lLM5IJvSMyB2CH39NRlLV1Hx3b493nRA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.crl
                          rsync://rpki-rsync.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cd:9a:64:11:f1:d0:00:79:09:cf:ee:9f:b8:75:47:c3:fd:89:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B93CB8B8DCE7DB4D6452115647A370EA22E3E23
        Validity
            Not Before: May 12 15:20:00 2026 GMT
            Not After : May 13 16:32:00 2026 GMT
        Subject: CN=11F37E85FEA581A9E6900C832B59EAA0D1D6ABFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:d4:70:3a:0f:f9:32:9c:43:56:3d:15:4a:
                    63:57:e9:db:3e:66:27:5d:1f:fd:b3:3e:7b:0b:8d:
                    5f:71:6a:d3:72:de:fe:52:cd:e7:69:4a:a4:a9:dc:
                    32:14:c5:9f:0d:68:07:ca:fe:fd:a6:3b:f2:3d:75:
                    bb:d7:86:6f:0c:7d:31:a6:b9:dd:57:41:ba:d9:84:
                    ec:76:79:ab:05:b2:d2:fc:1d:1f:93:25:e1:a0:38:
                    6f:64:62:4b:03:3a:f3:b5:83:37:f8:ba:07:08:65:
                    17:39:4c:6b:e9:e8:c6:ca:73:6c:a0:9d:8a:01:4d:
                    b1:71:62:ff:23:b6:54:3a:33:6f:d5:c8:8b:89:ca:
                    b5:80:e3:e0:eb:e8:6e:a1:fc:0c:d4:c0:69:db:47:
                    a0:fb:de:f8:ce:50:35:9a:4c:a9:5f:17:33:59:84:
                    9e:1c:c3:2b:ac:b0:d6:28:81:2b:ed:04:0c:3d:74:
                    88:bc:b4:57:b5:d4:61:18:05:78:1d:28:c1:6b:4f:
                    54:0c:d5:8d:25:e7:c9:c3:1d:38:cb:3a:d2:e7:f8:
                    65:5d:e3:12:8b:01:27:89:29:b4:bb:89:fd:45:72:
                    c3:63:47:81:41:1b:f7:a3:96:8f:36:7e:1c:32:5f:
                    67:21:c2:22:6b:26:98:bc:e8:6a:e4:53:32:ba:e6:
                    65:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F3:7E:85:FE:A5:81:A9:E6:90:0C:83:2B:59:EA:A0:D1:D6:AB:FE
            X509v3 Authority Key Identifier:
                keyid:1B:93:CB:8B:8D:CE:7D:B4:D6:45:21:15:64:7A:37:0E:A2:2E:3E:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6b:93:02:6f:9b:e5:61:62:2e:1f:0e:a6:a0:05:38:d7:35:
         b2:a2:80:ab:a4:e5:b0:5f:13:bf:08:e8:82:3d:8d:cd:4f:77:
         ee:79:26:b3:67:4a:df:7b:29:4c:1d:57:ef:4d:57:1b:2d:5b:
         a4:a0:44:5d:fd:75:02:b3:5e:50:7e:82:cd:36:18:e6:15:58:
         40:24:5a:79:09:3d:ce:c0:e5:1f:d6:95:95:44:14:62:ef:9e:
         2d:59:42:dc:27:a3:f0:e6:a3:e7:ac:ea:65:c7:3a:a1:f2:08:
         c1:65:94:c0:81:b3:c3:d8:06:7f:c9:09:97:61:a5:7b:66:6b:
         16:4b:ab:8c:23:50:01:36:a9:9e:85:71:d4:90:52:43:4e:d1:
         39:2a:dc:c8:91:b9:c0:a8:3d:1c:f0:e0:f1:16:d7:36:9a:4f:
         61:92:7f:d2:b2:93:31:63:75:63:54:cb:f8:9f:85:9e:a2:78:
         f0:da:20:31:79:8e:df:00:89:29:0a:1a:92:01:ee:60:f9:b0:
         e9:5c:74:7b:7a:33:74:bd:bc:2a:c5:3e:cd:05:89:2c:42:9b:
         b8:5f:8c:07:39:26:8f:10:05:9a:a7:cb:6f:df:52:1c:e6:23:
         37:62:0a:c3:d4:99:f3:9f:46:2e:a4:df:27:bf:f9:85:29:8a:
         65:fd:b5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:35 2026 by rpki-client