Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
File:                     743D7544160232918AB5AB2CD90221B4C4E978E5.mft (raw, json)
Hash identifier:          +b3vgY5yYhD2LwMHsjk9bkEMsxx124cZV7P+2viKKcA=
Subject key identifier:   A1:B3:25:B1:1D:54:7D:A8:58:3B:F1:92:DE:6A:86:53:93:58:05:D6
Authority key identifier: 74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5
Certificate issuer:       /CN=743D7544160232918AB5AB2CD90221B4C4E978E5
Certificate serial:       3F3089C32279F37E165C694D9A786271D9BA97C7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
Manifest number:          01EB
Signing time:             Thu 26 Mar 2026 08:41:11 +0000
Manifest this update:     Thu 26 Mar 2026 08:36:11 +0000
Manifest next update:     Sun 29 Mar 2026 15:30:11 +0000
Files and hashes:         1: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: O6AiiOFEwGMgZxev69IgPIlcJDgXQoSXIvEt086XR7k=)
                          2: 743D7544160232918AB5AB2CD90221B4C4E978E5.crl (hash: Y0KO6jej9E4/kTdUlPtOV17nMLN8KTdAbaISKNS2r1I=)
                          3: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: 6WBleXSX0c07tXo+dC+vbRCMKLXoYLwo1rSzqObcWfU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl
                          rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 15:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:30:89:c3:22:79:f3:7e:16:5c:69:4d:9a:78:62:71:d9:ba:97:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743D7544160232918AB5AB2CD90221B4C4E978E5
        Validity
            Not Before: Mar 26 08:36:11 2026 GMT
            Not After : Mar 29 15:30:11 2026 GMT
        Subject: CN=A1B325B11D547DA8583BF192DE6A8653935805D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:ca:4b:ce:83:78:be:78:30:17:d9:60:77:
                    95:be:2a:0f:3c:1a:72:87:45:09:5a:39:1e:0a:de:
                    b9:4e:98:35:95:3c:94:f7:6e:4a:c7:d4:78:e7:b5:
                    6e:48:74:5e:46:2f:04:41:7e:9d:ca:ae:2a:62:23:
                    25:fc:a0:55:be:b3:23:4a:3c:61:e9:90:14:97:25:
                    bf:9f:38:11:9c:19:4f:17:54:90:8c:dc:29:f8:39:
                    c4:2d:ec:8f:1d:5a:16:f5:0b:17:70:f6:96:5b:a8:
                    47:8d:95:c9:c2:52:b9:d8:d8:8b:d1:af:8d:fd:3e:
                    21:b9:2f:31:74:1c:cb:a5:fa:ad:fd:c3:ea:ce:89:
                    ab:2a:53:2f:aa:fb:d5:b2:04:33:90:d3:46:7d:72:
                    4f:19:e4:48:2a:4f:c0:3c:2e:ab:25:c3:6a:3e:16:
                    dc:93:3d:67:b3:72:f6:c3:ef:42:36:4a:f6:a8:4d:
                    94:d8:ab:b1:97:b8:1d:de:eb:c8:73:ca:6f:93:48:
                    13:d8:cc:50:b1:d3:08:1d:df:dc:fc:9c:21:57:7f:
                    ed:5f:da:f3:3c:37:42:c5:ed:91:4e:29:18:6c:a4:
                    fe:6d:de:f0:58:6f:ce:9c:7f:f8:54:51:a3:c7:51:
                    6a:eb:9a:7b:ec:e9:ba:28:bd:fe:e5:ce:54:28:d9:
                    9a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B3:25:B1:1D:54:7D:A8:58:3B:F1:92:DE:6A:86:53:93:58:05:D6
            X509v3 Authority Key Identifier:
                keyid:74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:eb:86:cf:58:36:27:6f:e7:8c:f6:37:4e:90:13:8d:6e:e0:
         59:e1:0c:3f:d9:a5:ba:ed:33:5d:e1:f2:14:98:65:9c:a7:3d:
         2d:dd:58:80:a0:4e:f2:6e:eb:ff:ad:e7:b9:06:79:29:9b:49:
         9f:77:e8:28:5d:d1:99:80:58:bb:f2:44:34:6e:0b:bb:3f:1a:
         78:6d:93:2f:53:4e:cb:95:89:16:68:6b:e3:5f:9e:f9:2a:32:
         b7:1c:79:52:d3:70:b1:b1:35:2c:3a:a5:e3:39:b8:9f:4e:0e:
         06:06:bf:2f:dd:61:f4:12:9b:6b:ca:af:b2:5e:f8:24:ee:a8:
         c9:58:02:27:ca:00:3d:81:43:c1:ce:c7:11:2b:ce:07:4e:cc:
         65:af:45:9d:8e:eb:aa:c3:3c:27:dd:90:82:07:d8:9b:94:e2:
         98:c4:6d:a0:8a:84:8b:d3:a3:36:e6:97:65:3c:d7:c7:6a:81:
         68:06:b3:17:2e:c6:93:91:93:7d:2f:af:98:a6:c5:b4:f5:be:
         22:1b:c8:e8:a5:fc:91:89:f1:98:df:d7:fc:2c:90:92:b3:02:
         38:68:c7:ce:37:42:7d:57:0f:fe:13:20:81:e6:ee:13:d8:e2:
         a0:cf:3e:93:73:4c:29:96:dc:85:21:09:bb:46:b4:8e:64:cc:
         f6:76:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:25 2026 by rpki-client