Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
File:                     295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json)
Hash identifier:          +rJERHieFyN1tM0WlIl3fqZZde5WYi5bEy9yEKexsNs=
Subject key identifier:   78:BD:26:4D:C5:CB:F1:52:5B:5B:D4:83:3F:41:52:50:4A:A7:9D:66
Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33
Certificate issuer:       /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
Certificate serial:       2290FAB2EC11F37DBFC9502B34AB860E59F41D28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
Manifest number:          056C
Signing time:             Thu 26 Mar 2026 09:51:52 +0000
Manifest this update:     Thu 26 Mar 2026 09:46:52 +0000
Manifest next update:     Sun 29 Mar 2026 10:39:52 +0000
Files and hashes:         1: 3232332e3133302e32322e302f32332d3233203d3e20313338313238.roa (hash: hEy0rDvTYQnHKZCVMINLjOdzcBCjo3uIeSctB/ZGBr8=)
                          2: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: ECzNZR+t4Bdt6LAAlKcBfTJvufVHsod6z7EXxaTCQXQ=)
                          3: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 8ko5KnU2O3UImPaaQPj6kwQ2SIJ+vnIwwyyfVJf7KZc=)
                          4: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: 73W8GLSa6I8P01k3aFdjjpvb756Sn1uc1jeTJZ00bq4=)
                          5: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: 6l4eA4hgKKdV7HePb7GT4qkO7B2rOBXkYrSr+9u6X7c=)
                          6: 3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa (hash: Z00cWWLpoEgJbs9IwwNUQ+8l5Sk95TAHVLqYoXdZIhA=)
                          7: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: PMWu4w2Q+6FhMFUf3/IiRjbR53qP/H9SS7SsSz4BOlo=)
                          8: 3232332e3133302e32322e302f32342d3234203d3e20313338313238.roa (hash: XnGn/2+w4AJO6NSWZOl6oPCbIBn8oHiJVNfmgtkBLgs=)
                          9: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: S3vWYnYF+l4dhX20RDpIzaZuA3umTZ3b74Itz4An65E=)
                          10: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: pPyEloQMF0TdeYTY5eM6CCjgFQy8xkkymm+/u9Rl4Cw=)
                          11: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: zOGqafxPKIahoYeNeVQJwZYMYXlq5HVpdCLIvX5OtD0=)
                          12: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: nhGmrbnsJZJKbXEVM2224rOUYqSyOnxXP3J6DVLRP58=)
                          13: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: l2rb/twYBw2aZYhmSgzBcfGY6+bKUvNGghjYH7Qbemc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl
                          rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 10:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:90:fa:b2:ec:11:f3:7d:bf:c9:50:2b:34:ab:86:0e:59:f4:1d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
        Validity
            Not Before: Mar 26 09:46:52 2026 GMT
            Not After : Mar 29 10:39:52 2026 GMT
        Subject: CN=78BD264DC5CBF1525B5BD4833F4152504AA79D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4c:a9:5e:cb:7a:df:b4:30:38:be:cd:7d:c6:
                    3e:c9:88:53:c9:89:2e:c3:45:58:b1:88:37:c3:85:
                    43:c1:9b:e7:a1:89:0f:7e:50:a2:db:ef:8d:3d:68:
                    a9:59:47:c3:9b:25:3f:2f:07:b0:5d:1b:b4:68:43:
                    02:fd:15:ef:5b:2c:47:b5:be:46:cd:96:27:ad:b0:
                    fe:aa:b4:9e:52:a8:b8:24:34:f0:22:4f:07:c2:f2:
                    1e:bf:d3:d1:5a:bf:53:57:bf:fd:75:87:65:c4:ba:
                    37:b7:92:53:db:30:f7:fa:ca:a5:95:ef:43:90:4e:
                    39:db:96:2f:05:44:7a:c5:a7:20:6f:06:7c:12:12:
                    21:77:17:91:99:38:27:25:24:39:e3:17:36:9a:f2:
                    fc:af:d7:c7:f4:0f:00:a0:15:7a:1b:d2:24:81:a5:
                    6b:99:45:c3:67:16:f4:cc:2a:a9:3f:b8:e2:2b:3e:
                    3b:b4:50:2c:20:23:5b:f8:3d:c3:8a:d1:2d:a1:14:
                    4e:12:12:2a:e3:4e:96:84:9b:c2:bb:48:4e:8c:43:
                    35:93:7a:c1:93:58:81:46:12:cc:97:be:08:81:27:
                    64:6b:45:fb:bf:6a:dd:a9:1c:52:00:f0:25:37:28:
                    33:3a:07:86:7d:00:bf:ac:1b:fa:d7:ac:83:58:ed:
                    01:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BD:26:4D:C5:CB:F1:52:5B:5B:D4:83:3F:41:52:50:4A:A7:9D:66
            X509v3 Authority Key Identifier:
                keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b1:e0:0a:9c:96:7e:58:36:1e:23:4d:ae:39:fe:c4:e4:83:
         ef:76:91:b9:05:c2:72:7a:48:1b:80:26:b9:c4:4a:b9:3a:ef:
         50:19:83:42:45:2c:e7:8c:0d:26:21:68:d8:3f:e2:27:b9:e5:
         7f:a2:8d:19:35:fd:63:85:e0:66:ba:d0:73:b4:6e:fd:b1:ec:
         c5:fe:25:7d:7f:be:26:e1:5a:72:8f:a6:1c:49:14:7b:56:0f:
         7b:15:60:51:02:88:50:6a:22:43:fc:91:c3:ff:97:70:4d:29:
         f4:ec:65:47:b0:68:9d:b9:15:25:3e:8a:b5:a0:ac:19:46:15:
         86:f3:d2:0f:75:ad:bd:c5:53:48:b3:d8:36:1c:81:7a:2b:30:
         c8:72:15:c7:7b:d3:47:69:bf:7e:df:cc:21:88:0a:67:ef:34:
         a5:9d:96:d5:85:64:86:c5:b5:14:bc:f4:9b:e1:7d:5f:ca:6b:
         79:78:12:b3:a0:1b:36:87:a8:d8:49:97:25:8f:47:91:e5:ba:
         3e:16:d9:56:c9:fe:80:23:02:bb:1c:49:7f:84:56:27:03:c0:
         e6:63:f7:53:e1:e6:be:e5:3d:11:eb:77:4d:47:3c:36:46:35:
         0a:64:56:fb:7c:55:87:02:7c:e1:82:d2:fc:ec:71:42:db:3c:
         a5:2f:28:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:32:22 2026 by rpki-client