Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
File:                     9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft (raw, json)
Hash identifier:          eKdbVbHreP40CtnA+wWBZ0oXdjHurapmKhUjTSXCrM0=
Subject key identifier:   02:4C:A0:8D:78:B5:23:BD:1A:DD:E7:44:20:11:64:CE:EB:28:DA:9C
Authority key identifier: 9C:0A:D7:06:2A:3E:06:0D:75:A5:5B:4E:50:47:F6:AF:D8:8C:13:44
Certificate issuer:       /CN=9C0AD7062A3E060D75A55B4E5047F6AFD88C1344
Certificate serial:       12E856B10654DD015DE8CE2A324A9ABF5E915047
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 07:08:19 +0000
Manifest this update:     Tue 12 May 2026 07:03:19 +0000
Manifest next update:     Wed 13 May 2026 11:00:19 +0000
Files and hashes:         1: 9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl (hash: BlBBBQSmvYbdhPyBw52RRvExlSBFv1HQSr4FBLUmY6g=)
                          2: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: zW2qkXEpoz4y3CxwswSc/8npi9VR1vmLGxgHBmxtWZc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl
                          rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e8:56:b1:06:54:dd:01:5d:e8:ce:2a:32:4a:9a:bf:5e:91:50:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0AD7062A3E060D75A55B4E5047F6AFD88C1344
        Validity
            Not Before: May 12 07:03:19 2026 GMT
            Not After : May 13 11:00:19 2026 GMT
        Subject: CN=024CA08D78B523BD1ADDE744201164CEEB28DA9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e0:a7:6f:4b:7d:67:86:f9:cf:a0:e7:f8:ed:
                    20:60:e2:e7:5a:cc:f6:66:4b:c2:fa:e9:ec:d2:42:
                    b9:37:8e:51:87:7a:63:4a:9c:3d:dd:60:4a:7d:cb:
                    94:68:59:ed:54:66:90:c5:1d:bf:13:cb:c4:1d:58:
                    93:7f:db:ac:0b:68:99:60:08:b3:21:4d:3f:40:f4:
                    d9:e5:9f:7f:48:fa:ec:f4:f5:79:25:ba:f1:83:40:
                    42:94:63:98:dc:b6:7f:b2:34:06:da:45:12:a8:9f:
                    bd:9b:da:4d:9a:a0:cc:f0:5f:8d:41:c4:83:e9:1d:
                    c3:69:eb:0a:44:1f:ca:e7:cb:13:41:80:ee:66:44:
                    53:1b:d3:c2:d1:8d:0c:fb:ac:0c:2b:4b:4d:d9:eb:
                    ed:af:1a:a4:ca:11:66:ab:bb:a3:5a:48:d0:88:b3:
                    d4:b2:1e:e2:df:4f:b7:f9:36:e2:b2:3e:c9:20:37:
                    fb:ef:ae:e3:d2:b5:d2:06:0e:57:b4:ff:bc:8e:df:
                    4b:3d:47:bb:b3:8a:10:2d:da:62:28:10:53:59:ec:
                    59:2e:96:92:5e:93:db:b7:a2:1d:c2:10:af:81:c9:
                    68:87:e4:be:8f:d9:34:87:e3:35:b5:1b:f3:64:6d:
                    8b:61:a1:6f:32:a1:69:3f:6b:d3:34:46:ba:a7:90:
                    7c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4C:A0:8D:78:B5:23:BD:1A:DD:E7:44:20:11:64:CE:EB:28:DA:9C
            X509v3 Authority Key Identifier:
                keyid:9C:0A:D7:06:2A:3E:06:0D:75:A5:5B:4E:50:47:F6:AF:D8:8C:13:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fd:3e:08:25:d1:c8:d5:0c:e7:c6:bf:4c:33:38:2c:df:57:
         b4:0c:c5:87:87:5d:ab:cf:69:8f:98:96:09:f6:81:06:16:34:
         24:52:c6:c0:7d:61:f9:51:17:98:64:e0:23:a8:09:70:43:ca:
         6a:25:ae:d0:59:1f:4f:df:a2:0b:1f:67:14:65:88:5f:b3:3a:
         f5:23:af:f0:02:e5:dc:8b:8a:e5:29:94:3d:45:b8:42:2c:ab:
         10:df:ac:bb:0c:96:b4:7e:91:2c:17:da:85:36:75:3f:ad:92:
         42:14:1e:5d:6c:5e:b7:fd:19:05:97:c5:87:05:3e:42:9a:f1:
         36:94:2d:01:ce:d3:2b:90:06:8f:ae:fe:03:70:84:4e:94:b3:
         f5:39:a0:eb:7e:be:97:f9:64:20:18:f2:1d:ad:ea:75:59:04:
         a6:5c:7f:7c:05:23:ca:49:c8:a5:cf:68:77:5e:e7:05:16:a8:
         e3:4b:f5:fa:b6:fb:55:f0:a3:2a:02:1e:99:38:50:fd:63:c9:
         77:cd:16:62:e3:57:c6:00:b9:6a:33:bb:4e:ad:e5:dd:9a:cf:
         dc:3c:1a:29:22:5e:39:a8:9d:7c:0f:0c:91:c5:f7:47:bb:4f:
         72:7e:92:9e:55:df:5c:f5:c7:c4:8e:87:4d:67:0c:4a:d4:a1:
         15:15:64:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:57 2026 by rpki-client