Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
File:                     667078BDA093F84040F3016D179CABA67F68A647.mft (raw, json)
Hash identifier:          X5Dz2JPwVQG80GOCKpV/u2N9QEnO341UB5Zj7jc9Xwk=
Subject key identifier:   9F:CD:6D:01:77:29:4F:15:C6:48:16:CB:FC:1C:12:0D:5C:83:E9:AE
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       38E99753ACE893106E0AF26E2AC0775C33B88334
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
Manifest number:          0309
Signing time:             Wed 25 Mar 2026 10:41:34 +0000
Manifest this update:     Wed 25 Mar 2026 10:36:34 +0000
Manifest next update:     Sat 28 Mar 2026 21:09:34 +0000
Files and hashes:         1: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: Rpp4YpehQ1M+h6emtzM5wkYph2BpAIpQDGT9zp1ts2M=)
                          2: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: 2pAFw4pCfgppnXNzn4U9fVaUZRHA5FxGk6QsaeCqBJY=)
                          3: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: Ix+R/yfCu9YeIQiklNVMKU4ccTsIM4M8qCqs+sb4ZL0=)
                          4: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: OsKe0Kd5H+cGfVTzKHXPxDzQtoqEpS1qzPCWtVfHK8o=)
                          5: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: p1IlE+POO9hCFBImJs4SWaLDjBIhdLsxh8yaBGtXhAg=)
                          6: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: 4EhIBVtTUnA2NsufqUE56qVJQ8W9fy5ksrwQzL7c16E=)
                          7: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: IHCCAgl8I2RtthVlx/101ymvDPNvq6bpd64iBZCpSWQ=)
                          8: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: W5Ot0BBUNk5NFwRYk7ap1jPaT+1meSB0kfyCkhd5n7I=)
                          9: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: HbKwsuQgYC8kyv50M23w4h1WaGyYUtMgukyV/PzUlcs=)
                          10: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: CFm8UxOFUNv/+ECnjHOC47sfC3C4NJroGuyfEm+9/Ds=)
                          11: 667078BDA093F84040F3016D179CABA67F68A647.crl (hash: jfNLz5I1NUzzC8VAcr7mVFNnI5O6YRB0qQpgkh83ElM=)
                          12: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: yr0MNMuQ/IlUxBG9BJkWSvncA4WzNuZMrgeTlRsfQrw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 21:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e9:97:53:ac:e8:93:10:6e:0a:f2:6e:2a:c0:77:5c:33:b8:83:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Mar 25 10:36:34 2026 GMT
            Not After : Mar 28 21:09:34 2026 GMT
        Subject: CN=9FCD6D0177294F15C64816CBFC1C120D5C83E9AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:aa:57:7f:ec:46:cf:d0:03:1e:62:5e:34:ed:
                    a3:d2:2b:11:40:88:53:99:fd:9f:f9:61:bc:1a:1e:
                    3e:5f:f0:48:b6:db:22:7a:7f:72:98:c5:c9:80:55:
                    39:29:2c:69:2c:ba:52:b7:ff:52:9b:df:3d:3f:97:
                    c9:a1:37:9d:9c:3b:d5:42:58:32:9b:73:b5:2e:85:
                    a2:ab:c3:26:c1:77:80:72:2a:56:31:8c:a2:95:77:
                    bf:09:0b:41:b2:f2:5e:fb:99:cf:9d:c8:e6:b1:9e:
                    c8:c1:da:51:27:f6:45:09:53:f7:00:d4:6c:d0:98:
                    50:31:b3:7e:35:44:97:fb:62:1d:6a:9a:54:91:84:
                    08:43:79:76:94:f3:05:22:44:8f:69:b2:f1:87:a0:
                    e7:7a:d1:91:78:8e:1b:98:00:51:53:2a:59:76:98:
                    0a:05:e2:70:4e:c6:09:4e:6a:1e:88:0a:36:4e:95:
                    38:16:58:6a:c2:73:5d:2e:a8:19:37:d6:cb:91:7b:
                    76:d6:1b:10:8b:9f:3f:f7:57:05:be:29:28:39:f1:
                    db:23:6d:03:f6:ae:56:00:7d:5d:cf:e1:bc:dc:80:
                    91:eb:91:a5:4e:92:ca:59:f8:b7:4a:09:58:fc:2a:
                    ec:84:a0:8c:ce:52:c1:a7:ea:58:53:6d:8e:ec:58:
                    9c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CD:6D:01:77:29:4F:15:C6:48:16:CB:FC:1C:12:0D:5C:83:E9:AE
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5b:7c:8f:52:99:29:cc:dc:b6:e2:02:15:3d:ae:bb:c5:d4:
         46:94:84:f0:59:36:48:a5:94:f5:a5:3f:1b:4b:8b:79:ab:43:
         39:de:fb:0c:f2:5e:35:ca:30:ff:71:d9:1f:62:fb:88:eb:3f:
         cd:34:2e:4f:9f:4d:4d:65:13:18:9e:93:69:47:30:24:61:1a:
         53:dc:b4:55:3f:06:63:22:8c:12:40:0b:df:93:05:0d:69:c2:
         f1:52:8a:a8:45:53:ba:87:0a:0a:ce:64:20:5f:0b:6e:fa:1c:
         4f:c7:f8:80:ff:3a:4a:8b:a6:4d:bc:c2:e4:1b:98:40:fa:97:
         fb:16:60:5b:c7:a7:92:4c:b4:92:0b:cf:4c:01:45:ab:df:46:
         d8:ae:55:de:12:63:62:88:11:69:9c:bd:b4:c4:f9:5e:60:ce:
         47:74:71:5a:7c:02:70:e1:14:39:33:03:e0:73:16:e4:e6:e0:
         a0:89:29:76:3a:2e:f3:9f:b6:13:53:a8:bd:ed:1f:86:04:ca:
         d3:f9:5d:d1:33:49:ca:d8:30:a8:37:f4:4e:b8:da:64:bc:b8:
         7c:1e:6c:ed:ad:3b:cb:06:05:25:73:3c:4e:fd:77:3e:36:36:
         38:9d:1a:c4:24:fb:9a:04:b5:d8:c5:71:bc:43:ef:6a:0f:84:
         28:0b:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:04:54 2026 by rpki-client