Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
File:                     03B83E011591057E9C55D430A83D331349B52D74.mft (raw, json)
Hash identifier:          5Idj9AxdzHFxCUhr9Ihd1/+ZN1V1aUoM2Oc1xVPmPxw=
Subject key identifier:   60:8C:56:B9:1E:1F:01:51:E3:0A:C6:5C:D0:BA:CB:C3:AC:EB:F4:B0
Authority key identifier: 03:B8:3E:01:15:91:05:7E:9C:55:D4:30:A8:3D:33:13:49:B5:2D:74
Certificate issuer:       /CN=03B83E011591057E9C55D430A83D331349B52D74
Certificate serial:       1EC47820C8E79E3F77D36B54A939CF41248D0A49
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 05:25:52 +0000
Manifest this update:     Tue 12 May 2026 05:20:52 +0000
Manifest next update:     Wed 13 May 2026 09:13:52 +0000
Files and hashes:         1: 3130332e33302e302e302f32322d3234203d3e20313331373738.roa (hash: MWGMyGsif1qG/JrFen/swi1iMUWK7kAxIalVFfa1ZhI=)
                          2: 03B83E011591057E9C55D430A83D331349B52D74.crl (hash: FnsUOPQOUCvEU2Cf8qa60IlR904VAV3ioLRdquPaz7k=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.crl
                          rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c4:78:20:c8:e7:9e:3f:77:d3:6b:54:a9:39:cf:41:24:8d:0a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03B83E011591057E9C55D430A83D331349B52D74
        Validity
            Not Before: May 12 05:20:52 2026 GMT
            Not After : May 13 09:13:52 2026 GMT
        Subject: CN=608C56B91E1F0151E30AC65CD0BACBC3ACEBF4B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:24:50:e1:74:ce:95:fd:92:b3:8f:85:fa:82:
                    10:e1:95:3f:dd:8d:b9:ab:1e:60:8f:4f:42:76:a6:
                    9f:71:ec:1d:da:6f:d0:00:42:91:fe:5b:d9:e1:f2:
                    e0:10:0a:0f:ca:5c:0b:1f:28:d7:11:a0:8e:0a:cf:
                    8e:56:62:1b:f1:da:5d:ad:d2:e6:84:bd:90:c5:00:
                    74:16:65:fe:c0:f2:2a:b2:e6:9d:88:67:1a:37:f2:
                    ec:02:6b:b9:95:c9:4c:a8:6f:21:48:a6:ec:0f:4c:
                    1a:24:03:18:a2:05:45:e7:9a:78:a2:d6:1e:94:da:
                    72:3a:c5:d0:83:51:bb:e0:ba:54:33:08:2a:1c:ae:
                    aa:23:bf:ec:d0:14:db:7d:2b:d2:b1:7c:29:3f:96:
                    87:99:26:69:a2:31:4c:4e:f5:ac:a2:00:fe:39:1c:
                    5d:88:e3:da:65:f6:18:9a:c1:f2:2a:df:6f:b0:01:
                    93:b0:19:fc:3e:ff:05:6d:89:90:05:ab:69:77:a5:
                    90:03:c3:28:90:c7:40:5c:88:da:72:ac:8c:23:69:
                    bf:04:52:f8:1e:2a:f8:9e:fc:20:b2:1d:62:ab:72:
                    cf:68:ab:9e:ec:1a:f5:06:e8:31:a5:5d:20:7a:92:
                    3c:d0:99:12:68:37:cd:97:e6:25:02:3f:9b:73:94:
                    70:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8C:56:B9:1E:1F:01:51:E3:0A:C6:5C:D0:BA:CB:C3:AC:EB:F4:B0
            X509v3 Authority Key Identifier:
                keyid:03:B8:3E:01:15:91:05:7E:9C:55:D4:30:A8:3D:33:13:49:B5:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f2:45:13:f8:b8:4f:f7:d7:07:1b:70:8c:16:36:99:46:d2:
         97:a2:a2:80:8d:18:cc:7a:70:87:33:62:64:32:b0:a0:fe:1b:
         52:90:84:65:e7:6f:7e:84:fd:a0:05:36:75:9e:93:5e:49:19:
         db:08:0c:a6:e4:06:97:cd:f1:75:a3:7f:7e:69:6a:48:9c:db:
         84:eb:28:93:84:52:6f:63:a1:db:ba:72:b3:93:e7:7c:e7:29:
         b9:bc:7b:75:08:41:ca:50:a2:5a:f2:6e:3c:0d:65:d7:c1:7f:
         f6:6b:bf:da:3b:21:0a:6b:1b:73:65:58:2a:22:34:92:22:6a:
         2f:a0:63:d9:ff:14:56:58:12:c5:3f:8e:2a:d1:4a:4e:90:80:
         40:cc:5f:3b:b2:2c:46:19:eb:8a:78:b5:53:f3:2c:f5:75:af:
         fb:36:85:06:14:3f:f6:cf:44:9f:1c:c8:01:41:45:5c:08:d9:
         87:b9:0d:ef:37:b6:02:72:68:38:00:73:d1:6d:34:4e:53:47:
         4d:5c:6d:e7:b8:a6:f4:6d:4e:2a:a0:95:d7:90:36:26:42:08:
         c0:44:d3:23:b9:48:b1:e7:ae:ba:a5:89:99:61:7c:81:d0:f6:
         36:3e:a5:64:47:b1:0c:fc:bb:ee:e0:42:ef:a6:42:9f:13:d5:
         e4:4b:c0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:52 2026 by rpki-client