Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft
File:                     87C7B4B7933266A0A09E2290B0934622DD072C9B.mft (raw, json)
Hash identifier:          +bf2vl7OebrvUeNcrvSM0bFN7HtNxOjRl7yrZZCYqxA=
Subject key identifier:   9B:97:ED:96:73:6A:44:5E:91:CC:CD:23:62:2A:00:E4:4A:EE:88:60
Authority key identifier: 87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B
Certificate issuer:       /CN=87C7B4B7933266A0A09E2290B0934622DD072C9B
Certificate serial:       6B004026819AE8F9C3B64D7B1306FF22527F02B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft
Manifest number:          0203
Signing time:             Thu 26 Mar 2026 04:22:32 +0000
Manifest this update:     Thu 26 Mar 2026 04:17:32 +0000
Manifest next update:     Sun 29 Mar 2026 07:07:32 +0000
Files and hashes:         1: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: hCEj/QyElaSlXw7fH2Elzk01Ogcjojp5yTlkppcV3sU=)
                          2: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: KZVD7OAboXTBhMUu53su70M8avlrOY8wZiIl8TEQgso=)
                          3: 87C7B4B7933266A0A09E2290B0934622DD072C9B.crl (hash: nfXMbV7mOvehwN5HjIX4+5SIQTJMuhAQIgpwh/Png20=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl
                          rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 07:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:00:40:26:81:9a:e8:f9:c3:b6:4d:7b:13:06:ff:22:52:7f:02:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87C7B4B7933266A0A09E2290B0934622DD072C9B
        Validity
            Not Before: Mar 26 04:17:32 2026 GMT
            Not After : Mar 29 07:07:32 2026 GMT
        Subject: CN=9B97ED96736A445E91CCCD23622A00E44AEE8860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1a:6f:59:44:03:ba:2d:63:ba:56:be:01:19:
                    75:54:dc:94:11:89:52:54:95:6d:14:90:a3:03:e2:
                    17:07:d6:aa:2e:1c:90:da:7f:bd:a2:5d:20:3b:5b:
                    32:23:a7:85:72:c4:fc:03:6b:d0:bf:5b:09:dc:04:
                    a2:c2:39:d3:cf:0d:b2:ad:93:63:f7:bf:74:06:42:
                    06:09:8c:ac:03:bc:25:5f:2a:34:c6:19:23:31:1e:
                    c7:fd:be:1d:8a:2c:12:a7:5e:5e:58:53:75:aa:7f:
                    95:77:7c:eb:2b:8a:d0:ab:d6:73:01:e5:6a:d5:17:
                    05:ef:41:69:e9:88:cf:3b:19:16:97:40:15:d1:21:
                    a1:43:9c:8f:b6:46:16:30:6e:f2:81:8f:69:14:a0:
                    13:58:18:7f:77:de:f1:c5:5b:6f:5c:97:78:f9:47:
                    49:98:1a:ff:15:65:2a:c7:75:1a:6c:19:6c:04:39:
                    e1:72:06:5a:d3:a9:83:7a:56:a3:84:c8:60:36:76:
                    a8:10:26:02:63:8e:92:52:91:f7:1c:0e:0d:41:34:
                    d3:04:a7:97:4c:14:8c:75:bf:23:ee:71:11:7a:11:
                    08:59:4d:a7:5f:77:e4:ee:a8:bd:09:60:eb:9b:82:
                    fc:03:5d:f8:67:5a:9a:6e:83:2a:f5:dc:26:16:4c:
                    c5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:97:ED:96:73:6A:44:5E:91:CC:CD:23:62:2A:00:E4:4A:EE:88:60
            X509v3 Authority Key Identifier:
                keyid:87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ea:dd:29:db:69:48:d1:28:f1:f1:c6:19:42:77:41:21:f9:
         33:e3:22:cf:c4:04:6a:eb:ea:5f:ce:88:2d:88:9e:4e:ce:d5:
         75:8f:7f:1c:1d:b9:36:9e:51:89:ca:d7:6a:14:da:bc:a6:b6:
         0f:51:1a:bc:31:a2:f4:11:af:5f:a0:f6:2e:45:e0:cf:57:0e:
         7c:d4:c8:31:75:61:cc:bd:9e:b3:c8:bd:d3:22:05:69:5f:8f:
         a9:55:5b:b2:95:ea:d6:3f:0e:2a:18:13:0e:f9:03:86:20:a7:
         9b:0b:07:16:1a:d4:7d:ae:a0:10:3e:9b:fb:aa:3a:a2:18:37:
         70:ab:27:b0:99:aa:c3:af:2c:a7:d1:29:92:9d:16:ec:95:02:
         68:94:26:fb:8b:78:7f:36:04:5b:73:4c:8c:e4:f6:c0:b0:32:
         a1:b5:9b:c5:b5:de:04:e5:f4:4b:af:df:d7:ea:51:4b:09:7b:
         9c:de:a2:4f:e6:c8:e1:77:de:34:36:23:18:65:88:11:73:b3:
         f5:29:18:87:71:f2:c5:63:5c:cd:03:67:85:06:33:5d:19:8c:
         a7:39:67:72:cb:14:c0:e0:75:d1:8d:18:bf:be:95:e1:3c:34:
         be:d6:60:de:2b:87:f8:5c:8a:4e:23:ef:c4:32:40:dc:5d:b2:
         b3:56:b3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:46:50 2026 by rpki-client