Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft
File:                     03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft (raw, json)
Hash identifier:          EDECWWR9MSKhpemZCot+ukAiI1OEfZtrp7YC6dJLxGo=
Subject key identifier:   52:E1:AF:8A:DD:89:65:AF:E0:9A:B5:EF:4C:CD:21:FB:0E:A6:59:7A
Authority key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE
Certificate issuer:       /CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE
Certificate serial:       489E43E391E3884147D7963C04A311FE5DE033DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft
Manifest number:          03DB
Signing time:             Mon 23 Mar 2026 02:41:08 +0000
Manifest this update:     Mon 23 Mar 2026 02:36:08 +0000
Manifest next update:     Thu 26 Mar 2026 04:29:08 +0000
Files and hashes:         1: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl (hash: hd3tGTm/csrQpIwyvrokz9Kixx31TRRxjbyMim5THxE=)
                          2: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: LeAX921PuFORgks79ePG8mv8iLwlKYZRHuQBuRA29no=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl
                          rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 04:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9e:43:e3:91:e3:88:41:47:d7:96:3c:04:a3:11:fe:5d:e0:33:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE
        Validity
            Not Before: Mar 23 02:36:08 2026 GMT
            Not After : Mar 26 04:29:08 2026 GMT
        Subject: CN=52E1AF8ADD8965AFE09AB5EF4CCD21FB0EA6597A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:a3:9c:29:e5:d3:12:5b:83:65:b3:07:d2:
                    1b:02:b4:af:cd:f8:ab:41:11:ac:1f:ab:e4:a3:68:
                    99:bd:a8:4b:80:56:19:0a:5e:10:09:61:90:99:6c:
                    3e:b6:65:f8:5b:0f:4a:d7:1f:58:e0:8c:f2:cf:d2:
                    7a:b1:2e:6d:36:4b:9f:84:f1:64:94:14:71:2c:6e:
                    8f:79:76:9e:91:5b:10:aa:0f:a0:37:59:49:00:3c:
                    5f:f1:76:e5:fa:8b:f1:7d:fc:06:d5:85:ba:62:45:
                    47:0e:ef:6e:9c:a1:6a:cf:8b:48:e7:67:5a:5b:f2:
                    b4:ef:74:5e:e3:1c:de:07:2d:11:3b:cf:00:8d:03:
                    c3:bf:56:06:0c:e4:2d:c2:c0:31:a7:8c:92:87:f2:
                    b2:00:a4:56:9b:6b:4b:25:51:a6:ab:fe:74:fa:96:
                    48:67:ef:6a:9e:07:c5:bd:e6:b2:16:fd:94:2a:92:
                    82:af:70:b8:78:2f:e2:af:b9:02:26:cc:f8:fa:6e:
                    75:ec:8b:35:2f:e7:f8:53:bb:bd:fc:55:11:d2:fd:
                    1e:1b:4a:57:8a:a3:68:1c:46:05:2b:6b:d9:af:07:
                    4d:eb:aa:5e:cb:4f:b9:2c:ac:a7:37:34:cd:8c:3e:
                    d1:88:26:c8:0f:35:bb:37:32:03:40:79:07:df:73:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E1:AF:8A:DD:89:65:AF:E0:9A:B5:EF:4C:CD:21:FB:0E:A6:59:7A
            X509v3 Authority Key Identifier:
                keyid:03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5e:bd:14:9b:44:3c:ce:2b:7b:b7:2d:ba:d6:2e:1a:15:55:
         36:67:1f:a0:e5:92:59:a7:8c:76:8a:fd:85:81:0c:34:95:99:
         74:df:c4:73:6c:e9:a0:4e:bf:2a:5a:a9:48:3b:08:87:b6:93:
         eb:6e:c5:47:93:4e:6f:5d:45:9b:9c:92:55:fe:af:20:f1:56:
         48:d9:eb:81:f2:f1:b0:8f:b3:5d:ca:77:70:f9:b3:a1:d3:81:
         4a:dd:38:2a:7c:0c:33:6c:67:81:06:e0:0b:ec:95:0d:83:19:
         94:da:7f:49:ab:58:72:90:c4:a2:1d:f9:3d:67:74:e6:00:87:
         c3:eb:b5:bf:f1:94:f5:0c:55:37:a9:11:b0:42:70:84:e2:e1:
         ca:b7:49:dd:4d:27:2b:00:7b:41:ef:82:b2:17:87:b2:9a:a1:
         8a:94:13:79:eb:3f:e3:0f:ec:df:7b:8a:1b:b9:08:4b:7d:f0:
         f1:53:70:f1:d5:7e:d3:29:ee:27:b4:8f:ac:1e:f6:57:d4:9c:
         24:68:11:fc:be:49:d4:e9:e5:6a:3e:64:c1:18:df:d0:5a:54:
         74:4d:1d:5d:f8:22:09:04:a2:09:36:1b:33:70:16:3c:6c:3c:
         19:3f:b7:6e:f9:19:e4:27:b8:64:1e:60:2c:4f:8e:41:98:b3:
         8e:aa:d7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 01:50:18 2026 by rpki-client