Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
File:                     735D87BA86773AC70137CF53116358A1F3B19766.mft (raw, json)
Hash identifier:          a54Vj3ldYc7hma6tDo4r79xMkRwqtFGuyJKzN20wRaU=
Subject key identifier:   48:5A:1D:DB:88:26:42:A0:6B:A4:57:22:6E:C8:1B:52:A3:04:9F:D5
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       4098DD0C1266627963EA55F6162CB0B72851CEBA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
Manifest number:          0290
Signing time:             Wed 25 Mar 2026 23:51:13 +0000
Manifest this update:     Wed 25 Mar 2026 23:46:13 +0000
Manifest next update:     Sun 29 Mar 2026 09:51:13 +0000
Files and hashes:         1: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: cA/F4dRQqVseyocCpcE2agAw/XVimr3HwwnooMdskYo=)
                          2: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: MYkgPF54ZFrZUvgyAUVZduFZA6VqGujX+c3smzb0mEg=)
                          3: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: SoFui+6+9U4okutKDEEDEO8cNoDM72pJozwIgVHrak0=)
                          4: 735D87BA86773AC70137CF53116358A1F3B19766.crl (hash: CqUwZD2uttfIcDUrEJs1HOrDGMvtj4eIp5LyUGq6M/8=)
                          5: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: Vj9b7eOBgij03V9LOKkEMCElDrFIB3RU0Drnp1lzskU=)
                          6: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: MNca57frzbraXQ+A5sffHCuXC7kbkp16cgNgxDCrZrE=)
                          7: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: bNf7w52cmLw3GYp+mMaw3papmg1ZcgmFTgd1v4VSUIU=)
                          8: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: hML4QQ0UsZ/MNuzlhXm7ZxAfBsEoo8p/TG6zTdeHPYA=)
                          9: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: cuW15q9SnbE27U2Jg8nnNYvxOwHbFyEv1g42R3Sx4E0=)
                          10: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: ixUeVPdiiujjqdz2cxBs4b9W1yytwj3hYRmTEjubFdc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 09:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:98:dd:0c:12:66:62:79:63:ea:55:f6:16:2c:b0:b7:28:51:ce:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Mar 25 23:46:13 2026 GMT
            Not After : Mar 29 09:51:13 2026 GMT
        Subject: CN=485A1DDB882642A06BA457226EC81B52A3049FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fe:3c:40:64:23:d5:55:2d:c2:7e:3a:86:66:
                    1d:74:7f:0b:13:c4:32:37:6c:5f:91:21:b2:a7:73:
                    b9:e9:2e:c4:6b:1c:3f:84:52:a2:0b:05:8f:54:d7:
                    bf:8a:a0:d0:c0:89:30:67:f5:94:79:a3:cc:d0:34:
                    81:28:81:d9:04:71:12:f9:42:9d:ae:7a:46:81:55:
                    da:ee:be:d0:72:3d:9d:34:02:6a:e6:61:08:c7:07:
                    f7:8a:9b:1e:85:7a:67:d3:dc:a2:ee:40:2f:e8:cf:
                    99:7f:28:82:e3:e4:27:3d:17:41:21:4f:f5:4e:3c:
                    db:f6:a5:e0:8f:16:04:9c:11:a2:2e:74:8b:ab:95:
                    4e:ec:a8:be:95:5b:01:53:69:ee:51:0b:7b:35:d7:
                    21:b5:79:41:41:e3:65:2d:40:e8:ef:d4:60:3c:b1:
                    82:35:d3:da:ff:25:ff:4f:07:8a:7e:40:47:55:5f:
                    cc:53:f6:d6:6f:0d:91:af:a9:57:54:69:3e:1f:42:
                    d6:62:69:28:9a:f2:a2:25:3c:11:05:0d:b2:05:6a:
                    fb:1e:a3:93:b5:ec:26:97:85:24:a9:96:10:31:c8:
                    30:58:6c:29:9b:4c:5d:ce:3f:5b:af:4f:2b:6f:54:
                    f2:09:d2:0b:38:99:dd:5f:3c:0f:74:0c:40:57:10:
                    72:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5A:1D:DB:88:26:42:A0:6B:A4:57:22:6E:C8:1B:52:A3:04:9F:D5
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c7:2e:e4:3b:37:7a:d8:87:42:7b:49:13:7e:b9:c7:09:5a:
         5d:10:f4:fe:e4:b1:44:a3:4f:77:70:de:e5:5c:5f:4e:5d:f4:
         c6:2f:b8:56:02:26:d1:9e:57:90:fc:d6:d0:14:84:8e:7c:2b:
         dc:db:d1:0c:bf:be:18:88:5a:19:da:ae:b0:d5:83:d1:c0:b1:
         d6:b0:8b:d2:66:b6:cb:b7:2a:a2:2f:da:be:35:10:7e:76:cf:
         c9:45:9d:4c:8b:7a:05:29:9c:ac:c8:a1:c1:e7:7e:ce:75:30:
         65:a4:0b:6a:eb:08:71:77:3b:05:cf:5c:52:9e:79:20:e0:33:
         11:3d:d6:e9:18:e6:f9:8e:86:2f:7c:78:2f:02:ac:cb:d6:5c:
         36:58:9c:d7:19:fe:90:a8:63:32:46:e7:b3:42:f9:63:06:af:
         38:cc:9b:4a:98:0f:33:49:7e:f8:d1:9e:63:b3:c9:df:1a:a5:
         e9:21:da:9c:5d:44:08:00:62:68:31:cc:49:37:53:53:be:04:
         1e:ee:52:81:66:6e:f6:e4:1c:16:a8:11:56:a8:01:1f:82:ad:
         cc:c0:c0:5c:e2:4a:3b:ac:b3:dc:d0:93:d9:99:8d:d0:75:72:
         53:e2:c3:9f:e5:3d:60:69:68:e8:63:5b:25:d1:aa:37:14:f7:
         2b:a7:f7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:08 2026 by rpki-client