Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
File:                     3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft (raw, json)
Hash identifier:          nXcdG9/9ZHJKc9PRV5WySUZUiZuJi9+GJeJj5irbGHs=
Subject key identifier:   C0:EF:4F:FF:45:7B:AB:7F:B8:A2:85:A5:6A:12:39:3B:3E:D6:3D:1B
Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5
Certificate issuer:       /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
Certificate serial:       12BD49EC4A6368A45A92B97841B0F09C427A8D3D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
Manifest number:          12
Signing time:             Thu 14 May 2026 23:49:31 +0000
Manifest this update:     Thu 14 May 2026 23:44:31 +0000
Manifest next update:     Sat 16 May 2026 03:35:31 +0000
Files and hashes:         1: 323430363a626534303a666163653a3a2f34382d3438203d3e203233363739.roa (hash: PbuDJSAQXqe+YbQYZ8YEK8+HHcBku/MMl/4ow2T+fZM=)
                          2: 34332e3233302e3133302e302f32342d3234203d3e203233363739.roa (hash: qy2wfZHRdLfbkgw90ebnyPI4997KQ+iwXU8qrVLm8HY=)
                          3: 3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa (hash: VUDQpItd+3mQ5FEfCwJZEx6NgUwPRML1HHBOxBoEKaQ=)
                          4: 3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl (hash: rR8bA37VG84GC9IHQIZSFDPy0iNjliLctwJKPGWqz4I=)
                          5: 34332e3233302e3132382e302f32342d3234203d3e203233363739.roa (hash: doOzsTzSE36mgoSIEk74sHNoCKgIA+A/ijb08tABwGQ=)
                          6: 3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa (hash: LghNes9jQ+3fERFGIYDHSXbbc4nSMYy8cw//lu9REdQ=)
                          7: 3130332e3130332e3133372e302f32342d3234203d3e20313338383138.roa (hash: 4glWDbg2cthHWl40jAdpTpvdVV83NH6qF/yYaREdwKA=)
                          8: 323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa (hash: BTtVqrQ3GrSqxbnSLNvAGyR9geHV66mQRLtc+yOJ48k=)
                          9: 323430363a626534303a626162653a3a2f34382d3438203d3e20313338383138.roa (hash: Tjj+OKDjiFtagqUQK1BdjUoLQb0lOV71psKcaxKiSjc=)
                          10: 3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa (hash: ZmGgo3jaHXdx58TAmRSTnCCto4KpyY5aAzsNgTuNtrg=)
                          11: 34332e3233302e3133312e302f32342d3234203d3e203233363739.roa (hash: KTTzfIOZDP+sCVCw8zzqOhb2CjIcT0YOn1P5NcQm3jI=)
                          12: 3130332e3130332e3133392e302f32342d3234203d3e203233363739.roa (hash: xOmSeDJ7iA+Tnkm5H4X22K/meaXh6wCiDIBdj1esOYs=)
                          13: 3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa (hash: s1aR5khIH0XJ6oiD7CdhPXEq4FMhwYeqfSj1qAtdtp8=)
                          14: 34332e3233302e3132392e302f32342d3234203d3e203233363739.roa (hash: UGlFvxlrSD3eWOHFR+RqkvAQb3F8Wtbfd776kf/FNfc=)
                          15: 3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa (hash: v0zolYiVBPX0V+L+LtqJkU2q6rbdcBpLF4u+nGbvKcY=)
                          16: 3130332e3233382e3230312e302f32342d3234203d3e203233363739.roa (hash: S1uWt6Gd7lDlIkiaquvYF6It5VJtoeKCsNPdN2cYPYo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl
                          rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 16 May 2026 03:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:bd:49:ec:4a:63:68:a4:5a:92:b9:78:41:b0:f0:9c:42:7a:8d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
        Validity
            Not Before: May 14 23:44:31 2026 GMT
            Not After : May 16 03:35:31 2026 GMT
        Subject: CN=C0EF4FFF457BAB7FB8A285A56A12393B3ED63D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:93:13:a6:dc:86:e1:ee:61:0f:4a:a3:51:
                    f6:9a:a4:54:31:16:a5:71:92:ec:fa:84:b0:36:45:
                    81:77:0f:ed:e5:e6:31:e3:7e:74:6e:50:20:62:93:
                    84:80:d2:38:79:50:00:cd:90:b5:27:3f:fe:6f:45:
                    71:9a:00:e3:7d:8d:47:b5:6b:66:46:90:e7:4c:65:
                    6b:37:5b:29:af:97:5a:76:b8:cd:d6:1e:65:67:eb:
                    6e:54:2a:0c:d2:be:5c:76:87:80:88:b4:c2:24:c3:
                    d9:36:59:0a:41:3b:a7:96:c8:16:54:75:f4:ef:96:
                    00:5e:d7:b5:fa:81:77:39:9a:d9:fa:44:1f:ca:21:
                    d6:d7:57:fb:23:73:a8:62:f9:d2:e8:47:51:76:72:
                    f1:5f:2e:4a:df:fe:ea:b0:c7:08:f8:b6:32:5b:c4:
                    79:b9:87:90:16:c3:7a:13:d4:de:1f:4c:4b:bc:58:
                    5c:b7:68:13:a3:aa:df:fb:b6:34:02:37:18:ad:50:
                    b3:bf:29:a8:bb:5c:64:1e:f8:b8:20:a3:45:8d:17:
                    ba:82:42:8e:ab:20:ad:82:2c:7e:00:23:e9:8a:8a:
                    9a:f5:26:70:52:70:8e:f1:53:75:01:fc:69:71:3e:
                    f3:54:b3:7b:ec:8b:f9:cd:02:21:59:18:00:83:f4:
                    ce:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EF:4F:FF:45:7B:AB:7F:B8:A2:85:A5:6A:12:39:3B:3E:D6:3D:1B
            X509v3 Authority Key Identifier:
                keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:4c:35:5b:48:4e:4d:4d:73:c7:0a:93:a0:c3:02:32:1f:88:
         0c:9f:4f:b2:9c:d5:78:09:9e:45:65:5c:25:1a:cc:66:3a:60:
         c5:5a:bf:30:bb:ab:26:0b:51:dd:4e:4a:bc:57:5f:94:ad:30:
         89:75:05:a2:70:95:a4:0c:4f:9b:2d:c3:bd:21:d3:7d:59:58:
         17:aa:fd:5f:4b:cf:55:82:5e:b2:e0:51:ff:4c:2f:44:e9:77:
         bb:2b:88:92:58:57:12:f2:64:57:2b:65:b1:fc:04:49:ba:2c:
         e9:a4:9d:14:f3:21:db:ec:1a:50:14:10:ac:ae:75:ee:a5:c8:
         b0:97:d4:f7:4c:3a:84:5c:51:4f:59:6b:81:4b:5c:ee:6b:fd:
         b6:87:15:f3:e9:65:22:63:5c:1b:80:c5:b5:8c:d7:a3:f3:36:
         3c:dd:a4:1a:d7:aa:ba:68:63:96:22:1f:dd:09:e8:22:4a:be:
         d0:33:68:01:f9:2a:9b:bc:8f:c7:1b:6d:48:29:46:09:44:5a:
         a0:cd:59:cc:41:61:a7:00:0a:58:3e:b2:fb:4f:10:6b:eb:3f:
         40:75:57:ac:c2:24:48:30:88:fc:d1:48:9a:1d:dc:e3:f3:38:
         67:39:f2:93:68:9b:3f:a9:60:5e:4e:92:ea:0d:04:02:f4:b1:
         c8:0a:71:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 16:06:59 2026 by rpki-client