Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft
File:                     E420F134FA1A6BA70588424BD4E862EE6C50C188.mft (raw, json)
Hash identifier:          WSTtHG1+gN7euy2yAx58WdZthAwHdiopGWxAJ1ysOjw=
Subject key identifier:   A2:24:34:6A:F9:91:EF:D8:23:1F:B0:F4:C2:C6:F1:E0:14:78:F6:A3
Authority key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88
Certificate issuer:       /CN=E420F134FA1A6BA70588424BD4E862EE6C50C188
Certificate serial:       10E195086302F2A371F3D390FEB2CBDEFC729E16
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft
Manifest number:          055C
Signing time:             Wed 25 Mar 2026 10:21:27 +0000
Manifest this update:     Wed 25 Mar 2026 10:16:27 +0000
Manifest next update:     Sat 28 Mar 2026 18:21:27 +0000
Files and hashes:         1: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: nIcaXDvKx2+XVxNFuL8CckiCEV48hFgqOSdn9qzzkF4=)
                          2: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: MDl2DN2os7/fU39oaMG8yA+MKomCGHMu/9vzlZ9xU2U=)
                          3: E420F134FA1A6BA70588424BD4E862EE6C50C188.crl (hash: giTPab3mFZ/NqVHB7X8u9ag6PCYYxdtdiJ7X9LBQUR8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl
                          rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 18:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e1:95:08:63:02:f2:a3:71:f3:d3:90:fe:b2:cb:de:fc:72:9e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188
        Validity
            Not Before: Mar 25 10:16:27 2026 GMT
            Not After : Mar 28 18:21:27 2026 GMT
        Subject: CN=A224346AF991EFD8231FB0F4C2C6F1E01478F6A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:48:63:61:e2:c8:4e:28:0b:28:28:d5:d1:
                    d8:78:9d:af:24:1a:84:b6:99:a2:53:b1:2e:91:2e:
                    3c:8e:0b:e1:52:6f:1b:03:aa:5e:19:f8:3d:27:c5:
                    86:c8:94:a5:51:4a:a4:04:c1:cc:35:e4:02:1a:34:
                    1a:45:89:6f:5f:d5:2b:74:f3:68:42:70:07:97:6d:
                    5d:18:2d:d0:cc:de:4e:e2:be:d1:19:5f:b4:ce:46:
                    f9:3c:14:42:bc:8c:3d:95:01:a8:67:d6:98:bc:06:
                    de:ba:b3:c1:f8:84:08:f8:7d:d9:c7:33:92:13:84:
                    9f:47:d9:3b:a0:0e:1c:0c:6d:6c:10:3a:1e:6b:ca:
                    c3:ad:a3:e9:97:3a:83:9f:1f:e8:cc:bc:0f:1d:ef:
                    78:da:98:fe:d4:b8:8d:db:20:92:90:43:f4:25:c1:
                    d6:5f:0b:36:0a:15:f4:a8:80:80:f3:f5:d5:a5:73:
                    74:d1:44:bc:66:9c:ad:b2:31:29:e2:ce:a1:a9:fe:
                    9a:80:dd:29:a8:35:23:98:da:93:0f:00:fe:23:e5:
                    71:ff:0e:9c:db:38:6e:14:61:30:c7:a0:1b:55:dd:
                    9e:02:3b:ec:fe:e5:a6:55:ac:28:cb:33:be:8f:14:
                    a3:e0:92:54:47:94:6e:c8:ef:a9:26:24:1c:73:a3:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:24:34:6A:F9:91:EF:D8:23:1F:B0:F4:C2:C6:F1:E0:14:78:F6:A3
            X509v3 Authority Key Identifier:
                keyid:E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:70:65:80:a8:9f:b5:5b:ef:58:b9:63:73:4b:35:a4:33:10:
         82:99:05:39:84:f3:3a:40:f4:c9:15:8b:cb:da:bc:9f:b1:72:
         81:13:87:00:3f:9c:91:07:ad:2d:d9:f7:6a:54:ee:ed:1c:1a:
         6e:58:04:26:24:14:3c:3f:e2:83:04:a2:bd:20:bd:aa:93:ba:
         a7:3c:d4:c3:d5:88:ed:8d:0b:f9:89:91:63:e9:84:eb:62:bb:
         0b:c2:5b:53:ac:31:4b:7e:a5:c3:ec:5b:f1:2e:f0:5a:60:0d:
         25:14:02:42:7a:ff:be:de:47:c7:5b:1c:9b:4b:cd:35:d5:56:
         a8:66:6b:f1:db:67:e9:ec:aa:97:a6:ba:f9:fd:d1:14:52:8f:
         59:06:05:ca:d0:fc:ca:be:f5:82:4a:69:10:a1:76:5b:c8:68:
         a3:94:d9:38:c9:f4:66:27:26:c3:fa:f3:36:74:c5:d9:58:6d:
         5c:14:8c:33:43:7c:d1:40:ac:70:7f:b3:a5:28:1a:61:9b:94:
         3b:44:e7:18:36:7a:30:db:24:62:b7:80:22:8d:1b:97:85:fb:
         aa:2f:90:7a:66:fb:ce:02:33:55:a3:8c:ca:21:ed:7d:1a:32:
         59:8f:42:70:29:fa:93:ac:ea:e6:d1:68:3a:b3:ee:89:b8:4a:
         18:74:a2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:54 2026 by rpki-client