Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
File:                     03B83E011591057E9C55D430A83D331349B52D74.mft (raw, json)
Hash identifier:          DZELQGW9NI2X07PyUIUZ+vRgpN/P8cHBPps00ahYIWQ=
Subject key identifier:   57:EE:29:66:F3:B4:B4:4A:D1:6D:5C:2A:1D:F3:A1:D9:C9:23:15:3C
Authority key identifier: 03:B8:3E:01:15:91:05:7E:9C:55:D4:30:A8:3D:33:13:49:B5:2D:74
Certificate issuer:       /CN=03B83E011591057E9C55D430A83D331349B52D74
Certificate serial:       79FD0C7C2B3CC0E768F551C964F4F12D9A4BCF2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 06:37:32 +0000
Manifest this update:     Fri 24 Jul 2026 06:32:32 +0000
Manifest next update:     Sat 25 Jul 2026 09:44:32 +0000
Files and hashes:         1: 03B83E011591057E9C55D430A83D331349B52D74.crl (hash: +xVQDHO+F9Us2UQ5Ctx+s+2RbXm/OaIRWcb78NtdMUM=)
                          2: 3130332e33302e302e302f32322d3234203d3e20313331373738.roa (hash: MWGMyGsif1qG/JrFen/swi1iMUWK7kAxIalVFfa1ZhI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.crl
                          rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 07:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fd:0c:7c:2b:3c:c0:e7:68:f5:51:c9:64:f4:f1:2d:9a:4b:cf:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03B83E011591057E9C55D430A83D331349B52D74
        Validity
            Not Before: Jul 24 06:32:32 2026 GMT
            Not After : Jul 25 09:44:32 2026 GMT
        Subject: CN=57EE2966F3B4B44AD16D5C2A1DF3A1D9C923153C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:88:fe:1b:65:97:29:fd:37:b2:a2:6f:81:5d:
                    40:ec:0c:00:f6:e2:0b:20:79:a5:49:4d:73:78:f4:
                    df:a7:67:6c:5b:06:2c:3a:83:98:8e:49:bd:9e:5c:
                    80:44:26:1a:ba:70:7a:80:8f:e7:81:72:8b:be:52:
                    eb:dd:25:d6:18:64:db:2c:14:fe:88:39:7a:a2:90:
                    ef:a7:c5:6d:c6:02:a9:da:eb:ee:cb:8f:b8:95:cb:
                    96:be:b8:1c:6b:dc:bf:d9:6e:ed:ca:ae:47:04:e0:
                    fb:fc:c1:23:41:ff:f5:61:ac:1b:31:28:d3:1f:e0:
                    12:18:a6:31:fe:d0:5d:96:f3:8c:bd:e6:83:28:2e:
                    70:53:f3:76:32:77:fc:74:ef:5c:a1:9c:69:20:35:
                    83:6e:79:31:b0:5e:6e:34:7c:0c:90:06:06:12:7d:
                    1f:78:79:f9:e4:56:47:e0:26:a5:01:e3:fd:a5:02:
                    0d:4d:43:53:65:e0:b0:73:28:ee:12:a1:e8:7a:93:
                    49:6e:87:f4:53:5c:26:1d:0a:f7:39:84:c7:ba:e3:
                    06:61:27:ff:b5:78:a6:39:a9:9f:82:96:30:d5:19:
                    2e:71:55:6c:fc:bd:86:d2:dd:38:bf:a6:31:0f:3d:
                    bb:44:ef:06:82:bd:de:42:37:3e:4e:9f:90:b0:cc:
                    f3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EE:29:66:F3:B4:B4:4A:D1:6D:5C:2A:1D:F3:A1:D9:C9:23:15:3C
            X509v3 Authority Key Identifier:
                keyid:03:B8:3E:01:15:91:05:7E:9C:55:D4:30:A8:3D:33:13:49:B5:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:6f:26:27:56:93:f5:3b:72:1d:89:1d:e5:e4:5d:6c:c7:9a:
         28:b4:fd:d2:d4:ee:a2:6d:e2:dd:8e:32:81:03:2d:e6:8c:14:
         c0:d5:1e:dd:10:fe:f1:2e:48:34:7a:eb:db:2a:13:77:34:4a:
         d0:4b:dd:63:23:50:ed:3c:4c:16:c5:6e:d3:28:e4:3c:ee:c9:
         ed:8b:d8:d5:f1:21:a9:04:c4:bd:72:39:b6:11:19:b8:59:bc:
         e6:b5:d7:e5:7e:bf:fc:ed:e8:2f:46:9f:a7:84:55:87:9a:c0:
         22:9c:c9:f1:4f:d4:48:20:2e:66:90:bf:1f:87:ba:1f:db:37:
         f1:fa:b6:ed:59:72:7f:1e:ec:84:7f:a7:94:20:53:59:77:2a:
         7b:fd:d4:b4:c6:d0:f4:fe:0e:bb:89:95:28:6d:f7:78:3a:b4:
         52:2e:ac:50:a6:45:85:37:13:1d:ed:ff:4d:eb:b8:ad:c1:1a:
         a1:ea:5f:ae:04:25:7a:be:3d:32:09:64:51:e4:eb:9a:ed:57:
         bd:7e:f0:9d:d3:e2:0e:55:fe:90:13:a0:c1:a4:7c:70:4d:97:
         2a:5c:1e:8a:6a:10:ce:a2:c5:e5:b8:18:a7:ed:67:1f:87:3d:
         b5:69:40:aa:fd:40:de:22:e4:65:fe:63:ab:45:aa:8f:8a:2d:
         40:93:5e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:52 2026 by rpki-client