Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft
File:                     09461F85D577EF79DE072EECCA1E12135A3715C0.mft (raw, json)
Hash identifier:          op5JLXgg0Gt7cU6h1RLGTDRYX2MAjBvGUgPvh6UgiX4=
Subject key identifier:   51:3E:F3:1D:3F:E4:12:0C:07:36:66:3D:B4:58:DB:80:0A:2E:33:5E
Authority key identifier: 09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0
Certificate issuer:       /CN=09461F85D577EF79DE072EECCA1E12135A3715C0
Certificate serial:       31C8A945EF6B421395E39AC4E46A127F703987CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft
Manifest number:          021F
Signing time:             Thu 26 Mar 2026 06:12:29 +0000
Manifest this update:     Thu 26 Mar 2026 06:07:29 +0000
Manifest next update:     Sun 29 Mar 2026 13:35:29 +0000
Files and hashes:         1: 3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa (hash: h3TV+XhpTe6M1r47P8xg6LJKc7ssK2BZBj+55BbrRCw=)
                          2: 09461F85D577EF79DE072EECCA1E12135A3715C0.crl (hash: 3Tv90voqt5vlzSgggJBmoMgvioevFdJWE5oI9Dmwhtw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.crl
                          rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 13:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c8:a9:45:ef:6b:42:13:95:e3:9a:c4:e4:6a:12:7f:70:39:87:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09461F85D577EF79DE072EECCA1E12135A3715C0
        Validity
            Not Before: Mar 26 06:07:29 2026 GMT
            Not After : Mar 29 13:35:29 2026 GMT
        Subject: CN=513EF31D3FE4120C0736663DB458DB800A2E335E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:59:01:76:a8:52:aa:1e:4c:42:cc:b0:45:
                    4a:01:ec:14:8a:d6:51:99:5f:52:af:ec:e1:e7:3b:
                    16:fc:1b:52:61:7c:5c:7d:53:e2:c1:3c:66:6e:ae:
                    c1:e5:4e:c6:48:98:f6:1b:db:0a:b3:2c:d9:03:bb:
                    73:21:a7:73:4a:7d:ef:74:ab:aa:28:94:ed:56:30:
                    9b:7b:d9:40:cd:61:db:0d:69:34:c9:27:7f:1d:dd:
                    04:a9:9a:7f:e3:d0:d4:9f:33:df:c0:84:ee:fc:44:
                    c6:c9:03:2f:67:fd:78:46:99:7f:ee:22:66:e9:07:
                    09:9a:e5:42:93:34:f6:f3:f3:4d:16:91:46:4e:03:
                    b4:5d:06:e2:1b:0f:4c:19:3c:ac:f0:74:b9:8b:7e:
                    19:71:f0:93:79:59:30:51:b4:8c:f6:b9:7c:cd:ac:
                    26:22:85:36:0f:16:f4:36:8c:9e:21:48:10:99:d0:
                    7b:e6:20:6a:b2:cd:11:f0:0a:e5:8b:20:0d:b6:1e:
                    29:88:ca:1c:bf:22:72:d1:5a:e5:7a:2c:4c:57:31:
                    8c:f0:b4:5a:c2:9c:da:cc:ec:7c:ee:84:03:ef:60:
                    ae:85:eb:bd:27:1d:71:b3:1c:6f:2c:a8:55:c8:e5:
                    d4:b8:89:4c:ea:0e:c1:d0:a3:ff:27:71:39:ad:e6:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3E:F3:1D:3F:E4:12:0C:07:36:66:3D:B4:58:DB:80:0A:2E:33:5E
            X509v3 Authority Key Identifier:
                keyid:09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ea:aa:77:88:f6:82:89:67:bf:6d:55:38:57:a9:5d:60:f0:
         a9:8d:b8:90:89:40:a1:ca:16:46:30:1d:79:37:77:86:e5:c2:
         b7:e9:6e:12:f1:6d:b6:90:67:fa:a1:b9:bb:a2:7c:f5:33:31:
         dc:1e:00:d3:1b:42:6e:52:4b:ca:90:52:5d:15:9c:c3:9d:41:
         a9:2d:dc:53:0f:f9:0f:55:fa:c2:8b:1e:31:78:6d:a0:a6:59:
         ba:44:4c:04:ad:5c:88:fa:74:2d:60:0a:c9:a7:bd:dd:dc:6f:
         e1:fc:d2:f4:20:19:1d:cd:c2:5c:e4:8b:43:94:5f:45:c9:68:
         77:86:9a:5d:02:6f:84:72:59:4c:20:20:c4:1e:5d:77:52:7e:
         05:ea:ca:e5:95:91:cd:0e:25:cb:65:0d:f8:09:78:9c:0e:57:
         94:e3:24:c0:e9:4d:9e:b7:dd:ad:3e:95:20:9a:19:4a:9d:85:
         91:8a:9f:71:68:7f:01:e3:91:85:74:d3:af:ed:26:0f:4f:6f:
         b2:51:a0:73:9c:24:59:d1:93:61:92:3c:52:18:2c:35:85:8e:
         e8:b0:43:d2:b5:5a:aa:46:ae:50:d4:f8:fc:10:bf:c8:71:a7:
         f5:3d:ad:ad:ae:5b:ba:4d:8c:0b:46:46:8f:19:82:9c:e6:a3:
         3c:6b:1c:db
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMcipRe9rQhOV45rE5GoSf3A5h88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk0NjFGODVENTc3RUY3OURFMDcyRUVDQ0ExRTEyMTM1
QTM3MTVDMDAeFw0yNjAzMjYwNjA3MjlaFw0yNjAzMjkxMzM1MjlaMDMxMTAvBgNV
BAMTKDUxM0VGMzFEM0ZFNDEyMEMwNzM2NjYzREI0NThEQjgwMEEyRTMzNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFtFkBdqhSqh5MQsywRUoB7BSK
1lGZX1Kv7OHnOxb8G1JhfFx9U+LBPGZursHlTsZImPYb2wqzLNkDu3Mhp3NKfe90
q6oolO1WMJt72UDNYdsNaTTJJ38d3QSpmn/j0NSfM9/AhO78RMbJAy9n/XhGmX/u
ImbpBwma5UKTNPbz800WkUZOA7RdBuIbD0wZPKzwdLmLfhlx8JN5WTBRtIz2uXzN
rCYihTYPFvQ2jJ4hSBCZ0HvmIGqyzRHwCuWLIA22HimIyhy/InLRWuV6LExXMYzw
tFrCnNrM7HzuhAPvYK6F670nHXGzHG8sqFXI5dS4iUzqDsHQo/8ncTmt5utjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUT7zHT/kEgwHNmY9tFjbgAouM14wHwYDVR0j
BBgwFoAUCUYfhdV373neBy7syh4SE1o3FcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NzNiOTU5ZS1mZjUyLTQwMjgtYjUzNC0xZDYwNWZhM2E4MGIvMC8wOTQ2MUY4NUQ1
NzdFRjc5REUwNzJFRUNDQTFFMTIxMzVBMzcxNUMwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDk0NjFGODVENTc3RUY3OURFMDcyRUVDQ0ExRTEyMTM1QTM3
MTVDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTczYjk1OWUtZmY1Mi00MDI4LWI1
MzQtMWQ2MDVmYTNhODBiLzAvMDk0NjFGODVENTc3RUY3OURFMDcyRUVDQ0ExRTEy
MTM1QTM3MTVDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFbqqneI9oKJZ79tVThXqV1g8KmNuJCJQKHK
FkYwHXk3d4blwrfpbhLxbbaQZ/qhubuifPUzMdweANMbQm5SS8qQUl0VnMOdQakt
3FMP+Q9V+sKLHjF4baCmWbpETAStXIj6dC1gCsmnvd3cb+H80vQgGR3Nwlzki0OU
X0XJaHeGml0Cb4RyWUwgIMQeXXdSfgXqyuWVkc0OJctlDfgJeJwOV5TjJMDpTZ63
3a0+lSCaGUqdhZGKn3FofwHjkYV006/tJg9Pb7JRoHOcJFnRk2GSPFIYLDWFjuiw
Q9K1WqpGrlDU+PwQv8hxp/U9ra2uW7pNjAtGRo8ZgpzmozxrHNs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:57 2026 by rpki-client