Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft
File:                     8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft (raw, json)
Hash identifier:          dAFh9YjsNS+l0QNal4fSVb6TFYYPgICgf6xP2UXgUDQ=
Subject key identifier:   A0:95:2C:EB:06:03:C0:47:80:C8:BC:53:D6:53:F8:ED:E1:FD:DE:48
Authority key identifier: 87:03:BB:6F:1E:BC:7A:E2:FE:80:DC:B9:29:5B:C8:68:29:90:B4:B2
Certificate issuer:       /CN=8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2
Certificate serial:       3AC3A3E16236823FEE7BF45FEB654778746E4069
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 20:22:12 +0000
Manifest this update:     Tue 12 May 2026 20:17:12 +0000
Manifest next update:     Wed 13 May 2026 22:04:12 +0000
Files and hashes:         1: 8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl (hash: vSyL8txaPAA0Kn+ZwbfqML//nrtAihLZNp+MIbi92Wo=)
                          2: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: TG9ZchK6MwAHkiaJ/8wY22oJErP/aDt3mOhVppYOUpA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl
                          rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c3:a3:e1:62:36:82:3f:ee:7b:f4:5f:eb:65:47:78:74:6e:40:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2
        Validity
            Not Before: May 12 20:17:12 2026 GMT
            Not After : May 13 22:04:12 2026 GMT
        Subject: CN=A0952CEB0603C04780C8BC53D653F8EDE1FDDE48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:75:22:75:ee:45:c2:74:b6:09:74:5c:92:
                    11:20:b1:55:89:27:c7:be:de:02:93:cc:0f:ca:fc:
                    b2:c2:14:ad:c8:35:68:89:0e:89:da:4a:af:b4:65:
                    ee:ea:9f:34:18:d7:a6:26:65:8b:ef:96:4b:db:34:
                    db:10:10:9c:53:52:40:52:c1:49:db:66:52:18:91:
                    3e:7e:ce:7b:14:40:b6:ca:24:0b:e6:c5:a3:f9:2c:
                    71:34:29:e6:08:cd:7a:d1:6e:f3:01:ba:42:c8:9e:
                    f4:03:d2:33:ed:ae:b1:ea:21:2b:5a:6c:21:d8:92:
                    3b:fa:31:04:7d:33:e6:f1:87:50:2d:11:05:e3:a6:
                    8c:29:cf:0e:c7:68:7d:49:7e:b2:70:56:bc:73:d9:
                    05:2b:58:a0:d9:29:0e:fb:c1:a4:d9:be:cb:2a:37:
                    c3:39:29:96:c0:2d:90:ef:41:39:84:4c:18:31:fb:
                    a9:fe:ed:c4:54:33:f7:aa:fd:f2:6a:cd:cf:5e:05:
                    cd:0f:86:45:b1:7f:d7:59:b0:bb:f4:ba:57:a6:b9:
                    88:2c:b3:12:34:3a:f1:cf:c6:5f:73:87:4e:e3:35:
                    84:2e:43:13:5d:33:79:20:7d:35:6b:cf:9d:bb:e2:
                    fd:59:a1:ef:44:d8:c2:80:a0:e4:bb:a5:0f:99:cd:
                    27:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:95:2C:EB:06:03:C0:47:80:C8:BC:53:D6:53:F8:ED:E1:FD:DE:48
            X509v3 Authority Key Identifier:
                keyid:87:03:BB:6F:1E:BC:7A:E2:FE:80:DC:B9:29:5B:C8:68:29:90:B4:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:28:ad:50:ed:59:cf:41:b9:81:1f:5c:08:55:62:c3:42:14:
         6e:90:da:c8:c4:6f:06:58:83:3a:c0:4e:f2:62:e1:33:cd:7a:
         70:3e:14:d7:04:d5:8e:8b:3c:8e:21:02:92:d1:9d:a5:d5:73:
         9f:4d:04:15:d2:19:1e:9c:48:dd:b2:75:14:61:43:8e:92:20:
         87:12:ba:c2:ee:56:b9:af:ad:84:12:15:fb:ea:fc:0d:05:84:
         42:d0:dc:45:01:2a:43:e9:c7:0e:a1:eb:0b:ba:66:70:ff:1c:
         48:d6:58:3b:0d:b8:ef:65:a7:5b:07:2a:4c:44:91:4c:0a:a9:
         e7:7d:86:aa:50:e8:70:08:65:55:ad:ed:2a:c8:25:48:60:41:
         ca:fc:3c:a4:4b:5e:94:99:72:fe:38:5b:8a:06:d1:47:ff:6e:
         ba:a8:38:18:cb:06:d0:d9:a5:79:c0:93:e1:ef:a0:3c:e9:1d:
         8d:48:05:bb:ff:dc:4d:33:17:ec:41:b3:d2:3b:3a:91:7d:c1:
         99:90:fc:1e:4f:db:a2:ce:db:3b:0e:ed:ee:39:38:f7:21:c6:
         20:42:f9:89:a1:8c:00:a9:ed:46:00:43:de:c0:0e:50:21:bf:
         8e:18:64:d2:a3:ca:88:2a:a6:2f:8d:2c:81:6b:cf:1f:cd:36:
         25:3a:dc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:28 2026 by rpki-client