Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft
File:                     032056FFABA06741112BA404900B315C87E35361.mft (raw, json)
Hash identifier:          WeslI4HbgLg1SJDSOXWtNvDldTAPb0u9Gc9RhC9iB/E=
Subject key identifier:   15:D8:47:82:CB:94:70:96:C5:24:C2:69:36:8E:36:5F:A8:E9:30:E6
Authority key identifier: 03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61
Certificate issuer:       /CN=032056FFABA06741112BA404900B315C87E35361
Certificate serial:       491E9A4E4FC47F8FF2C0EABEC78664EFC507B45F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft
Manifest number:          04EB
Signing time:             Thu 26 Mar 2026 15:21:59 +0000
Manifest this update:     Thu 26 Mar 2026 15:16:59 +0000
Manifest next update:     Sun 29 Mar 2026 15:54:59 +0000
Files and hashes:         1: 3130332e3136302e3137382e302f32342d3234203d3e20313431353932.roa (hash: 070ri83xExMdKtEdfjzfBz11cSdoZunm6w/qFgRzS8c=)
                          2: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (hash: QK6CN8VP70JNYDKvwc0+OXdvb1mIgOWz+j/nYm9EjQI=)
                          3: 032056FFABA06741112BA404900B315C87E35361.crl (hash: y/byFRTefd6xHE/y/3P8ZpsltH6gnfDWzE/sFqpX45Y=)
                          4: 3130332e3136302e3137392e302f32342d3234203d3e20313431353932.roa (hash: XpUtFFHKDImDXUc3xuhie6Np6VSuqCdJLLAEZLptbEU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl
                          rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 15:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1e:9a:4e:4f:c4:7f:8f:f2:c0:ea:be:c7:86:64:ef:c5:07:b4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032056FFABA06741112BA404900B315C87E35361
        Validity
            Not Before: Mar 26 15:16:59 2026 GMT
            Not After : Mar 29 15:54:59 2026 GMT
        Subject: CN=15D84782CB947096C524C269368E365FA8E930E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:1e:30:58:65:d6:fb:99:4c:51:65:aa:db:
                    fb:2c:3c:46:da:ef:82:52:88:7f:2b:9e:6b:31:a7:
                    5c:51:6b:3b:39:43:48:1b:3b:79:78:70:94:3b:fe:
                    de:98:9c:90:81:b7:2a:3c:16:b2:3f:42:8f:25:9d:
                    24:3e:50:04:0a:c6:24:d9:2d:a2:4e:d1:47:87:4d:
                    a3:6f:32:3f:fc:b2:a0:16:3b:b3:d1:7d:89:3a:06:
                    a5:f8:4f:66:b9:a8:f3:e1:e4:46:27:e2:9a:5e:3e:
                    37:d8:22:b9:41:7e:1a:2f:a2:72:66:fb:77:64:01:
                    ad:38:55:d9:67:6c:94:47:16:25:92:7e:7c:65:05:
                    9d:af:fa:20:61:2e:5d:7a:5c:4a:52:c6:82:a3:ee:
                    f5:84:e5:6c:fd:c4:63:0d:99:74:99:c0:a4:e2:c3:
                    a8:73:09:ec:74:42:47:f8:49:be:08:35:7b:00:ee:
                    bb:94:55:ab:56:be:75:24:b1:08:38:36:7c:dd:0e:
                    ce:4c:55:fd:5d:f1:4e:38:f8:2f:bf:98:ec:ff:40:
                    6a:76:5b:7a:6f:a9:97:d8:4f:fd:a3:10:a5:bc:9c:
                    45:ca:4e:f5:cb:93:83:30:a4:73:77:68:4b:a9:22:
                    34:84:48:13:6b:7a:4b:fe:0a:84:66:6e:62:35:2b:
                    df:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D8:47:82:CB:94:70:96:C5:24:C2:69:36:8E:36:5F:A8:E9:30:E6
            X509v3 Authority Key Identifier:
                keyid:03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:c7:b4:71:ef:6f:de:78:2d:60:4d:60:ee:3a:4c:60:9d:8b:
         54:aa:9b:20:37:1c:80:72:04:0a:25:58:c9:09:ec:e8:7e:5b:
         17:f8:03:3e:f7:83:b7:51:3c:36:bd:b6:d0:f1:16:19:72:7f:
         77:2e:d3:c1:fd:d9:7e:ec:2b:48:f8:e1:25:d3:91:14:55:ce:
         2a:04:ff:59:14:45:35:d2:a1:a1:05:02:40:0f:5d:1c:13:c5:
         27:f4:9f:75:2c:bc:1f:ee:ba:3b:18:e3:4a:14:61:cf:80:c1:
         49:6d:44:4e:50:6a:79:71:e6:c1:fa:6a:60:da:86:c4:a0:05:
         12:be:c3:38:b2:24:7b:59:89:34:95:81:37:40:1b:28:08:90:
         3f:bf:99:10:d3:c3:37:67:1a:bf:70:5f:b1:5b:c5:d6:8b:34:
         d1:5e:1e:1c:6b:73:fb:44:8d:f1:b2:f6:2d:10:9a:52:c3:68:
         e1:06:c3:9f:0e:f5:d4:ae:b9:04:af:35:60:b8:c5:60:80:6e:
         b5:43:21:ba:c1:55:07:03:7b:aa:d8:dc:99:a6:70:1e:f4:83:
         37:0e:d2:19:5a:2e:1c:95:33:e4:08:03:77:c0:60:ec:18:6d:
         9a:9a:37:ef:a0:78:73:da:8f:17:09:86:36:2e:2e:33:5e:83:
         8f:b1:22:1e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSR6aTk/Ef4/ywOq+x4Zk78UHtF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4
N0UzNTM2MTAeFw0yNjAzMjYxNTE2NTlaFw0yNjAzMjkxNTU0NTlaMDMxMTAvBgNV
BAMTKDE1RDg0NzgyQ0I5NDcwOTZDNTI0QzI2OTM2OEUzNjVGQThFOTMwRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWfx4wWGXW+5lMUWWq2/ssPEba
74JSiH8rnmsxp1xRazs5Q0gbO3l4cJQ7/t6YnJCBtyo8FrI/Qo8lnSQ+UAQKxiTZ
LaJO0UeHTaNvMj/8sqAWO7PRfYk6BqX4T2a5qPPh5EYn4ppePjfYIrlBfhovonJm
+3dkAa04VdlnbJRHFiWSfnxlBZ2v+iBhLl16XEpSxoKj7vWE5Wz9xGMNmXSZwKTi
w6hzCex0Qkf4Sb4INXsA7ruUVatWvnUksQg4NnzdDs5MVf1d8U44+C+/mOz/QGp2
W3pvqZfYT/2jEKW8nEXKTvXLk4MwpHN3aEupIjSESBNrekv+CoRmbmI1K995AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFdhHgsuUcJbFJMJpNo42X6jpMOYwHwYDVR0j
BBgwFoAUAyBW/6ugZ0ERK6QEkAsxXIfjU2EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MGE4MjBiNC04MmVmLTQ0MTItYmUyZS01ZDY5MTRiZDQ4NDQvMC8wMzIwNTZGRkFC
QTA2NzQxMTEyQkE0MDQ5MDBCMzE1Qzg3RTM1MzYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4N0Uz
NTM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhODIwYjQtODJlZi00NDEyLWJl
MmUtNWQ2OTE0YmQ0ODQ0LzAvMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMx
NUM4N0UzNTM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMvHtHHvb954LWBNYO46TGCdi1SqmyA3HIBy
BAolWMkJ7Oh+Wxf4Az73g7dRPDa9ttDxFhlyf3cu08H92X7sK0j44SXTkRRVzioE
/1kURTXSoaEFAkAPXRwTxSf0n3UsvB/uujsY40oUYc+AwUltRE5Qanlx5sH6amDa
hsSgBRK+wziyJHtZiTSVgTdAGygIkD+/mRDTwzdnGr9wX7FbxdaLNNFeHhxrc/tE
jfGy9i0QmlLDaOEGw58O9dSuuQSvNWC4xWCAbrVDIbrBVQcDe6rY3JmmcB70gzcO
0hlaLhyVM+QIA3fAYOwYbZqaN++geHPajxcJhjYuLjNeg4+xIh4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:35:35 2026 by rpki-client