Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft
File:                     0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft (raw, json)
Hash identifier:          JygFqhtuigbKOFapp8TXtYseQVCJTnDY2hJjBNpBsG0=
Subject key identifier:   54:96:BF:76:AB:48:95:EE:3D:BE:9F:47:64:05:8C:A1:E5:E3:0F:9A
Authority key identifier: 0D:3C:CC:7A:B1:67:58:20:A7:FD:BC:CF:45:02:97:1C:50:B5:29:F6
Certificate issuer:       /CN=0D3CCC7AB1675820A7FDBCCF4502971C50B529F6
Certificate serial:       0A57F0832CACF12BFEB890ED79EBC23A5EBD26
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 17:32:23 +0000
Manifest this update:     Tue 12 May 2026 17:27:23 +0000
Manifest next update:     Wed 13 May 2026 19:54:23 +0000
Files and hashes:         1: 3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa (hash: juymzIKjppYynqQQ7FDS68cI4msLoCrbwsScpp65U+4=)
                          2: 0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl (hash: HVhIeVNEsN/ZA0GUfOtpR4kZlgVbzwioNahtNOqyBRE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl
                          rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:57:f0:83:2c:ac:f1:2b:fe:b8:90:ed:79:eb:c2:3a:5e:bd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D3CCC7AB1675820A7FDBCCF4502971C50B529F6
        Validity
            Not Before: May 12 17:27:23 2026 GMT
            Not After : May 13 19:54:23 2026 GMT
        Subject: CN=5496BF76AB4895EE3DBE9F4764058CA1E5E30F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:10:b3:64:d9:1b:81:59:61:1e:0b:91:df:
                    22:00:98:92:34:ee:8f:43:76:4f:0f:63:83:ab:26:
                    77:3b:d4:84:20:41:db:db:46:c8:c8:e1:e4:f1:ca:
                    85:f5:e8:b9:86:28:1a:51:eb:8d:79:ff:3c:ae:92:
                    ac:af:71:5b:93:e7:d5:ac:5d:f8:de:61:06:56:d3:
                    26:13:71:80:12:7a:13:43:24:96:72:fc:57:79:fb:
                    d1:cc:ba:6d:87:8c:a5:a8:07:18:e4:83:77:ee:3a:
                    98:f1:33:6d:d9:bc:84:ca:a4:ff:fa:70:af:08:fe:
                    90:c1:02:5f:75:f8:4e:7a:0a:e4:28:b9:71:3b:5d:
                    3b:e5:12:a1:5b:ab:01:c2:b5:df:8d:8b:dc:68:4d:
                    f0:9a:23:50:94:bf:e1:93:70:99:04:c4:29:02:68:
                    4b:19:3f:aa:88:8a:f7:60:b7:9b:6c:c2:63:13:79:
                    d7:59:79:57:11:59:fe:bd:40:a9:8b:39:de:ec:7b:
                    a1:24:ee:1d:67:4b:3b:84:7d:4c:92:f0:eb:f5:6d:
                    ac:92:25:53:99:e7:3b:f5:3c:30:dd:3c:df:33:a9:
                    9c:09:19:a9:62:26:8d:fa:ae:ba:9f:ed:2d:5e:ab:
                    cf:57:85:1d:d9:58:1c:bc:45:71:88:e0:11:ba:0f:
                    ff:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:96:BF:76:AB:48:95:EE:3D:BE:9F:47:64:05:8C:A1:E5:E3:0F:9A
            X509v3 Authority Key Identifier:
                keyid:0D:3C:CC:7A:B1:67:58:20:A7:FD:BC:CF:45:02:97:1C:50:B5:29:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:10:b4:39:a4:4b:81:d7:b8:32:da:2b:5c:5e:e9:b5:cb:0f:
         de:fd:eb:7e:6a:6c:a9:df:cb:3c:ab:52:07:cf:9e:16:65:2d:
         2b:04:8e:f9:4b:7f:1b:c3:a5:1d:ef:ba:d7:6d:3b:ba:ab:9c:
         de:f2:0f:7b:06:6b:45:2a:e9:f9:e2:87:dc:9f:cf:19:df:63:
         83:d9:af:96:12:f1:4b:32:d6:56:c1:94:c8:d3:73:c5:2a:c1:
         4b:60:1e:d7:50:aa:27:ce:73:e2:20:b3:6f:5f:30:fc:a7:3d:
         98:bd:09:10:34:a4:0d:26:27:31:7e:e2:c3:13:9f:f8:35:72:
         b0:c6:85:f7:f8:ca:6e:d9:1e:83:26:a5:26:95:5c:af:1a:aa:
         03:93:a3:23:a7:69:f1:4b:09:91:26:a5:3d:2d:04:b2:3e:3f:
         cf:0f:fd:59:62:f0:2b:6c:79:3c:de:4e:78:57:b4:b1:24:ee:
         8a:c5:bc:a5:01:a8:19:94:b5:95:24:bb:4e:f7:2a:6c:cc:ed:
         05:c0:af:dd:49:4e:fa:6b:e0:2f:d6:33:6e:e8:15:d2:3f:f8:
         7c:72:69:f8:39:24:3a:2c:9e:37:ca:1d:f9:87:c6:b9:21:7c:
         d1:9d:88:c6:ac:3a:16:63:e8:c9:58:4d:9a:36:33:73:ae:80:
         5c:1c:55:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:22 2026 by rpki-client