Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
File:                     03B83E011591057E9C55D430A83D331349B52D74.mft (raw, json)
Hash identifier:          usieFABcabfaZB+/cwLlYysP2J5Yg+h1S8CkFs75gKY=
Subject key identifier:   9D:35:76:16:65:50:26:13:7B:AC:5B:83:5C:73:D7:04:B8:C5:BE:29
Authority key identifier: 03:B8:3E:01:15:91:05:7E:9C:55:D4:30:A8:3D:33:13:49:B5:2D:74
Certificate issuer:       /CN=03B83E011591057E9C55D430A83D331349B52D74
Certificate serial:       12BD667B8B6D3F0FE883BDD70F9366760A9CA4E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 19:53:19 +0000
Manifest this update:     Tue 16 Jun 2026 19:48:19 +0000
Manifest next update:     Wed 17 Jun 2026 22:09:19 +0000
Files and hashes:         1: 03B83E011591057E9C55D430A83D331349B52D74.crl (hash: BaknddCFR6PusmDzd/K34rE331CXQhYSaKm8oycy+FQ=)
                          2: 3130332e33302e302e302f32322d3234203d3e20313331373738.roa (hash: MWGMyGsif1qG/JrFen/swi1iMUWK7kAxIalVFfa1ZhI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.crl
                          rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 22:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:bd:66:7b:8b:6d:3f:0f:e8:83:bd:d7:0f:93:66:76:0a:9c:a4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03B83E011591057E9C55D430A83D331349B52D74
        Validity
            Not Before: Jun 16 19:48:19 2026 GMT
            Not After : Jun 17 22:09:19 2026 GMT
        Subject: CN=9D357616655026137BAC5B835C73D704B8C5BE29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:73:02:ed:df:fe:e8:3c:39:55:91:9d:bd:eb:
                    c0:9d:e5:2d:a9:1b:aa:74:ee:a2:e8:a0:45:cc:2e:
                    d5:8f:16:70:08:db:c8:4f:a2:c3:03:6e:a9:e3:df:
                    80:71:7d:24:fc:9f:e7:e1:08:47:c5:b2:6a:b8:54:
                    e5:b2:ce:9e:10:6e:5a:99:02:7a:7a:3f:c6:86:2c:
                    df:4d:bd:fb:c8:27:b6:78:ee:8e:4b:19:15:ef:bc:
                    1e:28:94:0b:9f:33:9a:bd:a7:93:cd:5c:ea:ee:b7:
                    01:76:fa:57:fa:79:9b:b7:6f:ef:52:b1:1c:24:f3:
                    a2:74:0d:a6:8f:54:b4:22:13:7d:2d:43:b0:2f:45:
                    ce:9b:60:09:1b:48:f7:72:ae:61:68:93:1b:87:63:
                    cf:2d:0b:03:e7:73:fb:a1:c5:43:44:bb:15:a8:52:
                    ef:dc:3c:f8:df:13:85:c2:4e:64:ff:a8:8d:9a:95:
                    d4:f6:bf:d8:0c:fa:68:e4:9a:7a:e5:69:72:25:ba:
                    37:8b:78:c4:08:ff:3a:3b:61:62:6f:f6:f0:1c:76:
                    dc:bb:f8:f3:16:cc:13:be:5a:56:3f:78:4b:2e:8e:
                    0a:86:75:ec:a7:6d:ae:31:66:e2:07:f1:37:44:31:
                    c3:73:5e:6a:3e:03:52:47:47:d6:d5:5c:74:14:0e:
                    46:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:35:76:16:65:50:26:13:7B:AC:5B:83:5C:73:D7:04:B8:C5:BE:29
            X509v3 Authority Key Identifier:
                keyid:03:B8:3E:01:15:91:05:7E:9C:55:D4:30:A8:3D:33:13:49:B5:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:11:d6:d5:8d:13:f0:bc:1e:22:be:bb:d8:35:42:b5:75:ff:
         18:ee:4c:e2:30:d6:0a:37:3f:44:da:31:5b:b5:83:a5:b9:d9:
         ff:07:e2:29:72:7b:1b:83:74:b1:ec:4c:c8:ad:10:52:76:c5:
         b1:b2:a4:ac:88:eb:de:a2:78:c4:bf:ec:05:72:3e:f5:1a:4a:
         b6:62:21:79:26:91:43:12:c9:7d:b6:43:28:8b:78:86:96:94:
         48:70:11:00:50:ef:11:86:55:f5:d8:eb:ae:32:ca:33:dd:e3:
         5e:47:cf:02:04:3b:22:47:a8:af:30:07:a2:0a:a6:b0:6b:35:
         38:95:a4:d9:23:7a:15:47:13:2a:73:79:eb:55:87:13:4d:e5:
         2f:62:88:83:35:c7:c0:d4:73:fb:09:77:2a:bd:a5:7d:22:06:
         b0:f6:52:e2:bb:fc:ab:84:f6:25:c8:79:1c:42:ba:de:97:cf:
         92:cd:a1:60:f3:ea:81:07:a1:b8:8c:10:8a:34:e1:b4:82:e0:
         4a:10:d0:8f:5e:b3:c3:5d:2f:5a:f2:00:e4:71:52:ec:e6:3e:
         42:a7:ce:15:40:44:7b:68:d0:f2:40:38:c0:9d:f2:fa:05:92:
         c8:de:b1:a8:98:86:c7:25:46:fe:c3:93:c9:7b:61:dc:70:48:
         7a:6b:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:32:47 2026 by rpki-client