Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
File:                     C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft (raw, json)
Hash identifier:          +O/XzV7FIt6hln34tjuZr6nhfda4cFI6MuD/6YB3Pko=
Subject key identifier:   80:42:95:2B:09:A7:65:A8:1A:5D:AA:9D:02:76:C0:1B:46:6C:F6:3C
Authority key identifier: C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21
Certificate issuer:       /CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721
Certificate serial:       5F5995E253D9FFA8D9E3FF0FDF1F8A351CA0A5C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
Manifest number:          0105
Signing time:             Sat 14 Nov 2026 14:42:46 +0000
Manifest this update:     Sat 14 Nov 2026 14:37:46 +0000
Manifest next update:     Sun 15 Nov 2026 18:00:46 +0000
Files and hashes:         1: C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl (hash: 2xFXLoGA253udLfoKXtnmZ8TicwZCq7UimvNOxkfYEc=)
                          2: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: 7fMJt0M4VQARtwl7gUUn1d68a36tK2tjagq7bmrxvDM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl
                          rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:59:95:e2:53:d9:ff:a8:d9:e3:ff:0f:df:1f:8a:35:1c:a0:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721
        Validity
            Not Before: Nov 14 14:37:46 2026 GMT
            Not After : Nov 15 18:00:46 2026 GMT
        Subject: CN=8042952B09A765A81A5DAA9D0276C01B466CF63C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:9e:9e:57:c9:02:21:36:c0:49:9c:e0:52:
                    f1:57:cc:79:9b:63:cc:39:8c:34:52:91:19:af:c5:
                    9f:37:97:f2:2b:e5:44:ef:52:c4:7a:b8:3f:09:b3:
                    d7:ec:c4:c6:70:06:70:b1:44:6e:64:b0:06:82:e1:
                    fb:f6:8a:78:22:6f:f8:e0:09:94:c4:09:51:6a:68:
                    9a:0a:46:72:9b:0f:5d:96:c0:de:55:9a:45:60:2f:
                    c0:c3:09:8b:9f:4a:d4:2f:2a:fb:2f:d1:35:58:46:
                    01:3d:ea:7a:fb:1b:5d:92:18:9a:e9:9a:6a:b4:8c:
                    e5:11:9e:ac:a9:39:28:62:43:31:cc:e2:7f:d9:86:
                    cd:29:33:1c:4b:83:a1:3a:87:ba:9c:4b:c8:91:c3:
                    84:55:57:6e:a0:52:3c:53:3f:cc:e2:ec:91:23:4b:
                    7d:aa:6c:72:35:60:4b:31:b7:6b:7c:67:4f:d5:e0:
                    de:38:e1:d2:9c:b4:58:9e:e2:eb:a0:33:d8:f5:39:
                    fb:bb:71:75:51:c8:43:48:f2:0f:2a:a6:02:11:e2:
                    7f:f8:9d:bf:91:8b:06:29:66:0a:34:3d:a7:f6:45:
                    4d:a6:6d:b3:99:5e:53:0e:df:d2:e8:fe:1d:da:54:
                    b1:55:db:b8:d4:18:63:40:5f:b3:99:f8:30:cc:b0:
                    b9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:42:95:2B:09:A7:65:A8:1A:5D:AA:9D:02:76:C0:1B:46:6C:F6:3C
            X509v3 Authority Key Identifier:
                keyid:C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e4:c5:8c:db:9a:00:d4:9f:74:51:61:96:85:05:7a:3b:4a:
         fd:84:22:43:9f:f1:e4:8c:9e:9d:33:ec:21:21:99:bf:67:1f:
         ed:96:49:c0:4b:55:f2:c5:48:93:8e:c3:a5:3c:f7:89:08:d6:
         c6:ec:92:f8:2b:c8:2c:2e:0e:ce:93:94:21:bb:eb:36:23:31:
         37:8b:58:ec:0a:f5:bb:30:2e:27:9d:8a:aa:fc:17:6b:8e:d8:
         94:01:9f:1a:1b:ee:4a:24:7b:7d:3a:bf:af:96:c4:b4:0c:ba:
         ef:72:d6:ff:85:20:2d:b6:39:42:d5:5b:26:f0:13:57:65:c5:
         ab:9b:b1:aa:ff:cd:c9:de:be:a6:59:1f:c1:f9:49:45:13:fe:
         04:a8:82:0a:46:b9:1b:df:13:5b:77:31:0a:ca:b8:1d:77:51:
         28:27:3e:33:ed:c9:76:5b:10:2c:34:17:ac:e5:d4:c4:c4:a0:
         b9:a4:4e:ed:46:18:4e:75:46:d0:b5:c6:dd:f7:e0:e2:46:a8:
         95:41:7d:4e:96:7d:c5:ff:e9:62:04:58:d3:fd:d6:a2:e3:13:
         87:03:0a:f5:6a:6e:0f:d0:f1:7d:c0:94:0c:15:4a:4c:f3:d0:
         07:1c:a7:2a:d8:ad:9f:29:3c:03:a2:34:c8:61:77:12:7f:df:
         17:a0:af:67
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUX1mV4lPZ/6jZ4/8P3x+KNRygpcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAzRDVDMzZCQTEyMTQzRjYxRDM4QThFQkREQjY5RjNC
NTk5MDcyMTAeFw0yNjExMTQxNDM3NDZaFw0yNjExMTUxODAwNDZaMDMxMTAvBgNV
BAMTKDgwNDI5NTJCMDlBNzY1QTgxQTVEQUE5RDAyNzZDMDFCNDY2Q0Y2M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zJ6eV8kCITbASZzgUvFXzHmb
Y8w5jDRSkRmvxZ83l/Ir5UTvUsR6uD8Js9fsxMZwBnCxRG5ksAaC4fv2ingib/jg
CZTECVFqaJoKRnKbD12WwN5VmkVgL8DDCYufStQvKvsv0TVYRgE96nr7G12SGJrp
mmq0jOURnqypOShiQzHM4n/Zhs0pMxxLg6E6h7qcS8iRw4RVV26gUjxTP8zi7JEj
S32qbHI1YEsxt2t8Z0/V4N444dKctFie4uugM9j1Ofu7cXVRyENI8g8qpgIR4n/4
nb+RiwYpZgo0Paf2RU2mbbOZXlMO39Lo/h3aVLFV27jUGGNAX7OZ+DDMsLlFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgEKVKwmnZagaXaqdAnbAG0Zs9jwwHwYDVR0j
BBgwFoAUwD1cNroSFD9h04qOvdtp87WZByEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWIwMDI5OTItYWNiMi00Zjc3LTk5N2QtMzIxN2VhZDk5YmI1LzAvQzAzRDVDMzZC
QTEyMTQzRjYxRDM4QThFQkREQjY5RjNCNTk5MDcyMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9DMDNENUMzNkJBMTIxNDNGNjFEMzhBOEVCRERCNjlGM0I1OTkw
NzIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5
N2QtMzIxN2VhZDk5YmI1LzAvQzAzRDVDMzZCQTEyMTQzRjYxRDM4QThFQkREQjY5
RjNCNTk5MDcyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAETkxYzbmgDUn3RRYZaFBXo7Sv2EIkOf8eSM
np0z7CEhmb9nH+2WScBLVfLFSJOOw6U894kI1sbskvgryCwuDs6TlCG76zYjMTeL
WOwK9bswLiediqr8F2uO2JQBnxob7koke306v6+WxLQMuu9y1v+FIC22OULVWybw
E1dlxaubsar/zcnevqZZH8H5SUUT/gSoggpGuRvfE1t3MQrKuB13USgnPjPtyXZb
ECw0F6zl1MTEoLmkTu1GGE51RtC1xt334OJGqJVBfU6WfcX/6WIEWNP91qLjE4cD
CvVqbg/Q8X3AlAwVSkzz0AccpyrYrZ8pPAOiNMhhdxJ/3xegr2c=
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:07 2026 by rpki-client