Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
File:                     C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft (raw, json)
Hash identifier:          U1xmkAsZh0PYxNFoBgultd87DAk0yfdn22IUMjSXC3M=
Subject key identifier:   0E:49:40:FA:8C:06:9D:DB:09:9E:F6:DD:45:D6:ED:3D:2C:21:36:ED
Authority key identifier: C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21
Certificate issuer:       /CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721
Certificate serial:       3D325223D3E38BBC77352084DA39B5AD4F960B7E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 05:49:54 +0000
Manifest this update:     Wed 17 Jun 2026 05:44:54 +0000
Manifest next update:     Thu 18 Jun 2026 05:49:54 +0000
Files and hashes:         1: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: 7fMJt0M4VQARtwl7gUUn1d68a36tK2tjagq7bmrxvDM=)
                          2: C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl (hash: ehs2w3dv+PR8R9YpLySJSp4lffI4V/FSF0mDbjnqJy0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl
                          rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 04:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:32:52:23:d3:e3:8b:bc:77:35:20:84:da:39:b5:ad:4f:96:0b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721
        Validity
            Not Before: Jun 17 05:44:54 2026 GMT
            Not After : Jun 18 05:49:54 2026 GMT
        Subject: CN=0E4940FA8C069DDB099EF6DD45D6ED3D2C2136ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:52:11:30:5c:df:43:5a:35:75:00:c2:fe:
                    fc:c0:ad:b3:2a:17:69:cb:00:c3:6b:c3:fc:47:5e:
                    ec:85:4e:39:66:e9:07:82:0f:45:6a:ff:65:18:6f:
                    c9:e5:e4:9b:15:78:18:1f:71:a0:fd:fa:50:49:1f:
                    f6:33:6b:fe:e7:2d:8f:77:f9:7d:d2:c6:6c:e4:57:
                    85:8f:64:00:bf:ab:79:c1:eb:30:7c:ca:a9:31:f2:
                    70:a5:6b:90:e9:32:75:86:1e:06:f8:4c:9e:db:a2:
                    74:9c:7f:f5:7b:a0:87:79:ff:c6:0b:96:a0:b7:2f:
                    df:08:d8:36:3c:5c:35:30:1f:5b:3f:f2:0c:b5:0e:
                    bf:ff:fc:1b:00:e4:83:d8:8c:22:11:df:ff:d2:68:
                    77:fc:ce:2f:cd:9e:49:f0:d5:b3:96:b2:b5:32:50:
                    9c:06:08:61:19:d8:32:8a:68:97:cc:05:59:6b:50:
                    51:bf:e6:bb:aa:7d:69:dc:3a:93:79:34:35:25:49:
                    ad:97:74:47:e4:d7:b9:38:2f:05:fe:c1:c5:99:0d:
                    4a:b8:8c:6b:74:c3:d6:ec:ba:c0:22:75:ba:a5:2d:
                    ea:f5:67:57:f9:44:1d:c2:51:c1:63:88:c5:70:e8:
                    cc:43:24:5f:6c:a8:5b:d1:52:67:6a:71:16:b0:dd:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:49:40:FA:8C:06:9D:DB:09:9E:F6:DD:45:D6:ED:3D:2C:21:36:ED
            X509v3 Authority Key Identifier:
                keyid:C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b1:bf:4b:39:34:32:0e:e5:1e:0a:61:b3:3f:d9:98:37:6c:
         84:80:42:00:de:53:0a:08:1c:53:7f:84:c8:ff:52:09:d6:6d:
         5d:c3:97:17:d1:b1:68:d6:0f:be:f8:c2:1e:6c:d7:4c:70:2e:
         fc:48:12:9d:9c:dc:f9:d8:a2:be:dd:6f:89:5f:45:22:90:90:
         45:de:c9:c3:bb:b6:c5:73:ff:50:72:1b:e0:cf:84:78:15:4a:
         8f:97:fa:88:4c:fc:cb:20:9c:4a:0b:7b:ef:c0:41:29:10:6a:
         25:2c:3f:79:0e:50:44:c4:14:a8:7d:ca:ac:bf:46:9b:7a:f6:
         b4:d4:81:b4:23:b3:2b:3f:47:86:cc:61:cc:68:6f:0a:02:fa:
         28:06:ec:c9:ab:59:64:2b:46:3f:6d:13:dc:cd:d2:77:86:39:
         2b:85:dd:a0:fe:38:60:61:3a:79:9c:23:d0:7b:ba:7e:cb:78:
         3c:19:55:25:01:bc:4d:70:37:c0:93:df:27:b6:33:2f:e6:cf:
         5c:b0:92:18:6d:02:ba:cb:db:50:2d:50:3c:f9:9b:82:16:9c:
         74:9b:91:14:3e:aa:96:fb:81:24:24:38:fe:19:f4:c0:fd:81:
         db:ad:0e:88:f6:fb:40:28:54:b1:15:f9:1c:c2:d3:7d:d9:75:
         4f:46:13:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:47 2026 by rpki-client