Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft
File:                     19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft (raw, json)
Hash identifier:          HEHpZkH+oUEnpqW4uFQsCj/qB65gux9LA4mY6RS7g2M=
Subject key identifier:   FE:74:0E:91:05:EC:86:14:18:ED:1F:0F:66:CC:9D:43:EE:E6:B2:3A
Authority key identifier: 19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE
Certificate issuer:       /CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE
Certificate serial:       1E930577569CB515CA100D38E54B7D761E7566BA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft
Manifest number:          01FA
Signing time:             Wed 25 Mar 2026 18:22:12 +0000
Manifest this update:     Wed 25 Mar 2026 18:17:12 +0000
Manifest next update:     Sun 29 Mar 2026 06:15:12 +0000
Files and hashes:         1: 3130332e36382e3231342e302f32332d3234203d3e20313530353137.roa (hash: 5eHMmSOXqcaio0G7mCeIUfZJCaBBOr7GrZWeXm+wBUE=)
                          2: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl (hash: avGn3fiTHmAGAnNozl7yuclN3qUJ56OPk6Cu3HwqpU8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl
                          rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 06:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:93:05:77:56:9c:b5:15:ca:10:0d:38:e5:4b:7d:76:1e:75:66:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE
        Validity
            Not Before: Mar 25 18:17:12 2026 GMT
            Not After : Mar 29 06:15:12 2026 GMT
        Subject: CN=FE740E9105EC861418ED1F0F66CC9D43EEE6B23A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:09:03:be:5e:f8:88:75:f9:1f:38:51:52:6c:
                    c7:8d:7c:4c:6c:83:6e:0f:7a:c8:38:23:b9:83:95:
                    52:cc:b1:05:7a:3f:c0:37:50:34:01:56:a5:d5:fb:
                    7e:d2:8b:b6:95:23:4f:bd:0a:dd:d7:7a:7f:c1:7d:
                    6a:06:0e:82:00:b9:03:3e:1b:e5:6a:61:41:eb:27:
                    cf:54:5e:5e:b1:c1:e6:0d:ff:8a:5f:d0:e3:71:1e:
                    0b:57:31:db:30:b7:98:81:fa:2c:a6:97:b5:2e:9e:
                    8a:53:52:29:8d:b3:73:57:20:d7:a4:2c:43:7d:84:
                    07:e2:dd:a7:6e:95:ff:43:e5:f8:b0:3d:9c:55:07:
                    83:03:4d:ca:c8:0b:1f:7a:f5:37:ac:66:23:24:f1:
                    7a:b9:30:01:fb:3c:09:87:ca:41:7f:04:bb:80:7f:
                    08:f3:6a:5c:47:81:0c:c4:cd:2d:96:a1:c2:80:92:
                    5d:4d:77:f5:54:24:19:f4:89:27:24:96:15:3c:d0:
                    22:35:41:59:6a:41:2d:4f:28:c9:4d:18:d9:ab:d1:
                    96:9e:d3:31:87:50:5b:75:95:c5:d3:e5:5d:85:72:
                    9e:3c:b9:98:b6:49:d0:ce:b0:dc:03:67:b9:c3:b4:
                    b4:9f:ea:fb:48:47:94:c3:60:fd:13:84:aa:6a:3e:
                    f9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:74:0E:91:05:EC:86:14:18:ED:1F:0F:66:CC:9D:43:EE:E6:B2:3A
            X509v3 Authority Key Identifier:
                keyid:19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:dc:5a:a9:8f:52:2d:f6:04:40:9a:77:f2:0c:63:a0:43:3b:
         f6:78:74:d7:5c:3a:5f:fe:c1:ce:60:6e:9f:1a:e7:72:1d:c1:
         48:12:7b:b2:1b:56:02:85:0d:35:ef:14:87:67:eb:ff:3c:71:
         8d:54:3d:83:b9:10:2b:3b:d7:85:ce:1b:21:2f:a9:26:16:e7:
         0c:73:25:29:9b:ff:fe:60:35:76:70:7b:4e:5d:00:d6:a9:d1:
         cc:97:67:86:57:4c:51:74:86:75:3d:71:97:56:8a:c9:d4:af:
         ef:bb:b8:22:6d:31:44:a7:ab:b3:1e:3b:1f:5f:45:3e:3f:e8:
         14:21:5e:15:6b:08:66:a9:b3:ff:bd:bb:12:8a:bf:d0:01:b2:
         08:20:66:15:9c:6e:0f:5f:b7:12:bd:40:5c:39:d7:94:3c:af:
         b4:72:47:8a:cd:52:2e:80:e7:a1:41:ff:dd:4a:1c:65:3a:1f:
         df:45:b3:e3:62:5e:e0:94:88:98:93:14:cc:99:b3:c0:64:1d:
         eb:78:5c:d4:0d:e1:51:46:40:b6:48:f1:ee:11:c5:87:81:90:
         be:d2:4e:64:db:89:d9:cf:f8:29:cc:48:f0:fa:24:77:e7:4e:
         14:b9:46:49:18:57:87:04:9d:bc:9f:a6:e2:eb:01:34:48:19:
         e3:64:77:c1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHpMFd1actRXKEA045Ut9dh51ZrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0
Q0Y3OTFCRTAeFw0yNjAzMjUxODE3MTJaFw0yNjAzMjkwNjE1MTJaMDMxMTAvBgNV
BAMTKEZFNzQwRTkxMDVFQzg2MTQxOEVEMUYwRjY2Q0M5RDQzRUVFNkIyM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7CQO+XviIdfkfOFFSbMeNfExs
g24Pesg4I7mDlVLMsQV6P8A3UDQBVqXV+37Si7aVI0+9Ct3Xen/BfWoGDoIAuQM+
G+VqYUHrJ89UXl6xweYN/4pf0ONxHgtXMdswt5iB+iyml7UunopTUimNs3NXINek
LEN9hAfi3adulf9D5fiwPZxVB4MDTcrICx969TesZiMk8Xq5MAH7PAmHykF/BLuA
fwjzalxHgQzEzS2WocKAkl1Nd/VUJBn0iScklhU80CI1QVlqQS1PKMlNGNmr0Zae
0zGHUFt1lcXT5V2Fcp48uZi2SdDOsNwDZ7nDtLSf6vtIR5TDYP0ThKpqPvlRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/nQOkQXshhQY7R8PZsydQ+7msjowHwYDVR0j
BBgwFoAUGSgLj1qk+97GecNR6wQNKEz3kb4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZWJmNjNlZC1kNDUwLTQ3N2UtYjMxYi1hZjkyYjE3MjZkMmUvMC8xOTI4MEI4RjVB
QTRGQkRFQzY3OUMzNTFFQjA0MEQyODRDRjc5MUJFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0Q0Y3
OTFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGViZjYzZWQtZDQ1MC00NzdlLWIz
MWItYWY5MmIxNzI2ZDJlLzAvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBE
Mjg0Q0Y3OTFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKDcWqmPUi32BECad/IMY6BDO/Z4dNdcOl/+
wc5gbp8a53IdwUgSe7IbVgKFDTXvFIdn6/88cY1UPYO5ECs714XOGyEvqSYW5wxz
JSmb//5gNXZwe05dANap0cyXZ4ZXTFF0hnU9cZdWisnUr++7uCJtMUSnq7MeOx9f
RT4/6BQhXhVrCGaps/+9uxKKv9ABsgggZhWcbg9ftxK9QFw515Q8r7RyR4rNUi6A
56FB/91KHGU6H99Fs+NiXuCUiJiTFMyZs8BkHet4XNQN4VFGQLZI8e4RxYeBkL7S
TmTbidnP+CnMSPD6JHfnThS5RkkYV4cEnbyfpuLrATRIGeNkd8E=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:41 2026 by rpki-client