Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
File:                     7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft (raw, json)
Hash identifier:          Rc4Lb/tMAZtW39U131ahvfZ3kAcP4t1u4WUn4vrPxro=
Subject key identifier:   D3:01:BF:04:64:C1:76:BF:C6:A4:F9:6D:C4:DB:CB:6B:A2:E2:CA:6D
Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
Certificate issuer:       /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Certificate serial:       02ED5F9FD562644D10E80385B1D231D5AE454554
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
Manifest number:          057E
Signing time:             Thu 26 Mar 2026 03:12:21 +0000
Manifest this update:     Thu 26 Mar 2026 03:07:21 +0000
Manifest next update:     Sun 29 Mar 2026 06:35:21 +0000
Files and hashes:         1: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: PE8TrRaW4vcKNAJ983twfVSijpuNJ3TLSSc+Qt8t8hU=)
                          2: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: G9QQEUF/JEpvuMiEFjI454QFIL6ErRBbxzNtJBadEKo=)
                          3: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: XFEPxT5rgKneUguYZI7iHSi0r6woQzAHzM7M2WIoeNI=)
                          4: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl (hash: ubqWqMg2q9CNMxSJ36IWA9X9cvPxPBbp6gkCDk90Yzc=)
                          5: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: aI1tvHYppd3YXyR/O37hfeObUgos+GLtu2SX+nqPoQU=)
                          6: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: XaCxNhVFk1U1KTVB2CbYanrzfxuEtPcg5wcygy4gOYY=)
                          7: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: /z09OiRj3X3jdpAzL2zzsyQl3NVUfWX0DmTJAQJUjoA=)
                          8: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: gXLN3MXkJce/eFsTQ9PNYvadHko8wdBPO3cRtiaDQ0I=)
                          9: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: U/6aanmiS3G1NNN9piNHjwZVd8g8y5TJEUDFQPXUGlk=)
                          10: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: W0KpE+rUhEn171HevcbczmdRBRinyTjaRQYX3+eLx8w=)
                          11: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: UcZisdRV6VpbDwvpN9+PovvAC3nXLEWnKVwQNbh4YQE=)
                          12: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: EADkNzeGnGCmwQU5JKqfE+M8ZMnucERvk9U//gfvfYM=)
                          13: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: 6q6G3WlaBoWOxOrDz9l3FTN6AH7AT8Eijh6MTkRhXls=)
                          14: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: +seHZcuWtkwwgdY5gf9yiLnl5NtpTzkJHA183uWwsjQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
                          rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 06:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ed:5f:9f:d5:62:64:4d:10:e8:03:85:b1:d2:31:d5:ae:45:45:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
        Validity
            Not Before: Mar 26 03:07:21 2026 GMT
            Not After : Mar 29 06:35:21 2026 GMT
        Subject: CN=D301BF0464C176BFC6A4F96DC4DBCB6BA2E2CA6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:da:a5:30:c3:24:47:f7:06:04:42:b4:17:
                    59:8d:76:88:a0:da:cd:03:d3:de:55:a3:6f:ef:15:
                    00:59:c1:41:83:f3:11:32:a6:f1:7d:38:6e:1a:cc:
                    26:a4:23:f0:44:64:0a:9f:a0:04:75:6a:16:bc:92:
                    ce:64:f1:72:c3:0e:78:f0:89:17:13:57:88:d1:87:
                    1f:0c:f0:9f:17:a1:90:84:cc:21:86:53:16:31:7d:
                    ab:df:47:0f:c9:92:c4:c7:8e:b2:5d:ad:da:92:c0:
                    90:f9:ab:c0:95:f4:b1:01:13:08:27:24:06:54:36:
                    19:a0:6d:0f:bf:f9:bb:ee:d7:2a:9f:49:2a:cb:e6:
                    44:a5:fe:ff:09:f7:a6:56:1a:dd:14:66:7b:53:7b:
                    13:84:b9:6d:49:d8:51:c2:a1:77:fe:28:a9:6b:54:
                    be:ea:81:fb:6a:ac:3a:de:97:42:6b:7b:2d:ff:8c:
                    cb:bf:79:79:52:6e:12:a1:0e:57:ec:52:3e:74:61:
                    49:9b:10:f0:e5:32:27:f0:68:04:c7:0b:87:c9:be:
                    98:f9:d5:90:32:24:84:34:9d:f0:b1:71:09:e7:da:
                    d6:87:28:ed:bc:7f:35:91:75:ea:7a:d0:7d:68:38:
                    89:7c:d3:32:0f:90:1e:28:ef:29:63:1c:9f:6c:57:
                    1f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:01:BF:04:64:C1:76:BF:C6:A4:F9:6D:C4:DB:CB:6B:A2:E2:CA:6D
            X509v3 Authority Key Identifier:
                keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ee:96:01:39:f2:86:97:b9:86:77:f3:2f:10:92:65:81:c4:
         be:76:91:51:60:2d:03:3a:e6:51:4f:74:1d:9b:55:57:ce:f1:
         e0:40:83:17:1c:b6:f9:32:9a:f8:c3:c0:57:01:df:c7:88:fc:
         d1:da:6a:e3:cd:69:65:d6:2a:0a:01:02:73:6d:bf:6e:24:f9:
         44:f7:04:e2:ea:a0:e9:91:97:3d:4c:1c:34:d0:08:c1:6d:5d:
         57:e4:39:a0:a4:da:02:7a:cb:c1:18:3a:1e:36:a1:b6:5b:d4:
         74:9b:5f:93:d9:b6:d4:96:c3:1c:2e:d3:d8:f1:f6:66:e8:c0:
         2e:31:ad:4c:c1:5c:f2:6e:65:54:f3:df:4e:de:37:da:3f:85:
         5a:2a:15:e8:a4:9d:ec:ca:5c:64:96:03:a6:55:74:17:4e:c2:
         13:3d:bc:70:70:e4:02:e9:d4:48:23:c9:f5:ab:0b:b8:8f:d7:
         5e:72:2b:38:c2:ca:35:d4:66:ca:c2:8a:9e:1a:c3:4b:a4:37:
         15:97:81:18:47:aa:59:13:79:6c:66:4f:80:02:6a:e5:01:5a:
         f6:0d:33:42:4b:01:cb:a4:04:54:b6:01:c5:34:b0:a8:b6:f7:
         c6:7f:b3:93:54:d6:af:be:98:ab:0e:2f:e0:b9:ab:b1:9c:79:
         47:85:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:38 2026 by rpki-client