Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft
File:                     19B904DED71657E1E79F9B50507DCCCB817E9635.mft (raw, json)
Hash identifier:          +ZlsiCtIq1td7FGDV2+KX2v9iRpbNO83NkUI3ihZLEA=
Subject key identifier:   89:B8:82:74:E7:78:84:60:AF:07:F4:82:AF:4C:AB:1C:76:27:68:04
Authority key identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35
Certificate issuer:       /CN=19B904DED71657E1E79F9B50507DCCCB817E9635
Certificate serial:       4F2BE9D275FBEAADB900FEC86ACB89BBC4F1311E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft
Manifest number:          021B
Signing time:             Wed 25 Mar 2026 10:21:29 +0000
Manifest this update:     Wed 25 Mar 2026 10:16:29 +0000
Manifest next update:     Sat 28 Mar 2026 17:34:29 +0000
Files and hashes:         1: 3130332e38332e38342e302f32342d3234203d3e20313530323533.roa (hash: /A41BcbFlmN4rn19MC9WB3juhu+qD5Fs4F7T58QaR/A=)
                          2: 19B904DED71657E1E79F9B50507DCCCB817E9635.crl (hash: 5lX/U8vPHtYJYY1tZZ6ZZP2O1pWGoKxHk115InfjYTw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl
                          rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 17:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2b:e9:d2:75:fb:ea:ad:b9:00:fe:c8:6a:cb:89:bb:c4:f1:31:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B904DED71657E1E79F9B50507DCCCB817E9635
        Validity
            Not Before: Mar 25 10:16:29 2026 GMT
            Not After : Mar 28 17:34:29 2026 GMT
        Subject: CN=89B88274E7788460AF07F482AF4CAB1C76276804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:c8:da:9c:a2:13:5c:87:82:66:4e:a2:bb:
                    d2:cd:66:41:ec:5c:ca:8c:f9:c4:37:a4:88:5e:96:
                    88:fe:31:47:f2:88:e8:ab:f5:73:cd:1a:f2:1e:52:
                    d4:2f:5b:37:a0:c2:2c:8c:ec:f9:a8:c6:11:67:0b:
                    e8:d1:bc:6e:8e:b7:e7:d6:10:49:08:2b:f6:09:31:
                    a3:d9:7e:ff:d4:d3:46:ad:b0:9e:ee:54:1d:e5:2e:
                    63:76:64:2d:9f:0c:93:c9:e4:60:1d:ba:87:a9:c1:
                    c3:b8:75:46:62:5e:23:ec:15:45:28:0a:34:97:ab:
                    b3:55:a8:2e:e0:15:f3:48:db:7e:f7:28:2f:b6:de:
                    de:92:13:1e:50:0b:18:77:b1:73:e9:ea:96:ca:e6:
                    f5:b6:a9:12:c4:1a:3a:18:4a:37:fc:3b:ec:38:8c:
                    44:41:17:79:2e:3a:10:c2:6a:7e:d1:93:16:0d:fc:
                    a2:8a:49:99:12:70:f8:c4:49:62:55:4b:03:40:e4:
                    c1:ee:89:26:14:a3:69:b4:f7:77:14:4b:ed:51:3c:
                    0d:0a:9a:4e:e6:4a:f2:52:a1:ab:78:cb:5b:3e:b6:
                    27:7a:1e:df:69:5e:e0:88:4d:fa:b4:5e:23:ce:0a:
                    22:08:99:8b:a0:22:6a:3e:08:63:ae:e5:6d:d1:b4:
                    9f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B8:82:74:E7:78:84:60:AF:07:F4:82:AF:4C:AB:1C:76:27:68:04
            X509v3 Authority Key Identifier:
                keyid:19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0c:b7:7c:33:ae:18:9d:e9:5d:57:25:d8:77:3e:0d:10:66:
         3f:27:b5:98:8e:34:02:76:35:1a:9c:1f:a0:32:b9:e8:01:ba:
         fe:d7:6d:15:e8:2e:85:ce:bf:b3:bd:87:5c:d4:86:25:6b:d0:
         d5:cd:90:fc:71:7e:a8:37:73:d7:d7:69:aa:e8:28:fd:55:12:
         3c:72:9f:e7:34:67:6d:80:d0:4e:18:5f:94:53:83:02:36:a3:
         79:8a:a6:1b:df:62:1f:3f:21:63:9c:c9:a1:14:85:49:77:ae:
         52:8d:3d:41:46:0e:67:72:11:df:cb:f8:fc:0b:da:93:40:f5:
         b4:8a:8d:55:6b:bc:d8:d0:db:b2:1f:2a:1e:95:db:ce:59:1b:
         96:60:74:8d:8c:3d:82:bd:be:0b:05:8c:3a:be:1d:26:a2:f4:
         f7:a8:fd:1c:c8:78:1f:69:04:10:aa:b1:ee:a9:0c:59:d2:fe:
         b4:4e:44:50:de:17:af:0a:f9:cb:ed:55:23:10:87:0c:9a:db:
         2a:1d:21:d7:33:ce:06:23:ed:a8:02:21:b6:df:8c:ef:04:c7:
         9b:81:a6:3e:b2:4f:28:d5:d7:68:a4:3e:72:5a:7a:96:4a:51:
         8a:1f:35:59:37:70:29:28:53:1b:00:38:1e:44:6c:49:2a:d4:
         d1:31:c0:90
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTyvp0nX76q25AP7IasuJu8TxMR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3RENDQ0I4
MTdFOTYzNTAeFw0yNjAzMjUxMDE2MjlaFw0yNjAzMjgxNzM0MjlaMDMxMTAvBgNV
BAMTKDg5Qjg4Mjc0RTc3ODg0NjBBRjA3RjQ4MkFGNENBQjFDNzYyNzY4MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFAsjanKITXIeCZk6iu9LNZkHs
XMqM+cQ3pIheloj+MUfyiOir9XPNGvIeUtQvWzegwiyM7PmoxhFnC+jRvG6Ot+fW
EEkIK/YJMaPZfv/U00atsJ7uVB3lLmN2ZC2fDJPJ5GAduoepwcO4dUZiXiPsFUUo
CjSXq7NVqC7gFfNI2373KC+23t6SEx5QCxh3sXPp6pbK5vW2qRLEGjoYSjf8O+w4
jERBF3kuOhDCan7RkxYN/KKKSZkScPjESWJVSwNA5MHuiSYUo2m093cUS+1RPA0K
mk7mSvJSoat4y1s+tid6Ht9pXuCITfq0XiPOCiIImYugImo+CGOu5W3RtJ9lAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUibiCdOd4hGCvB/SCr0yrHHYnaAQwHwYDVR0j
BBgwFoAUGbkE3tcWV+Hnn5tQUH3My4F+ljUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NmU0MGE5OC05M2VmLTRhZjgtYTQzNi00Njk3NDAxNTQ3ODIvMC8xOUI5MDRERUQ3
MTY1N0UxRTc5RjlCNTA1MDdEQ0NDQjgxN0U5NjM1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3RENDQ0I4MTdF
OTYzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZlNDBhOTgtOTNlZi00YWY4LWE0
MzYtNDY5NzQwMTU0NzgyLzAvMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3REND
Q0I4MTdFOTYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACEMt3wzrhid6V1XJdh3Pg0QZj8ntZiONAJ2
NRqcH6AyuegBuv7XbRXoLoXOv7O9h1zUhiVr0NXNkPxxfqg3c9fXaaroKP1VEjxy
n+c0Z22A0E4YX5RTgwI2o3mKphvfYh8/IWOcyaEUhUl3rlKNPUFGDmdyEd/L+PwL
2pNA9bSKjVVrvNjQ27IfKh6V285ZG5ZgdI2MPYK9vgsFjDq+HSai9Peo/RzIeB9p
BBCqse6pDFnS/rRORFDeF68K+cvtVSMQhwya2yodIdczzgYj7agCIbbfjO8Ex5uB
pj6yTyjV12ikPnJaepZKUYofNVk3cCkoUxsAOB5EbEkq1NExwJA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:17:33 2026 by rpki-client