Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
File:                     C4632299E016D269164FA40AEF99CC8602E2B7C1.mft (raw, json)
Hash identifier:          XFR6TLDaTMtD5CTddXdb+rXEbG4VvjEDvfQ5VRII2oU=
Subject key identifier:   4D:C1:CE:79:E5:88:97:84:8F:11:1C:84:16:32:4F:44:40:2F:D4:66
Authority key identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1
Certificate issuer:       /CN=C4632299E016D269164FA40AEF99CC8602E2B7C1
Certificate serial:       0B56AC353F6730964F4CE3C5749470C9AF4DDC86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
Manifest number:          0118
Signing time:             Tue 24 Mar 2026 06:31:45 +0000
Manifest this update:     Tue 24 Mar 2026 06:26:45 +0000
Manifest next update:     Fri 27 Mar 2026 14:42:45 +0000
Files and hashes:         1: 3136302e32322e36342e302f32332d3234203d3e203435333035.roa (hash: gDEeaK4MqvoH1/Rybnd4HP4RdLEQVc8gkFhCRcLn6ys=)
                          2: C4632299E016D269164FA40AEF99CC8602E2B7C1.crl (hash: g42UH+yRp7NkMhXWW8rpzy92UpaLJiNUiNCqDNzslwI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl
                          rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 14:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:56:ac:35:3f:67:30:96:4f:4c:e3:c5:74:94:70:c9:af:4d:dc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4632299E016D269164FA40AEF99CC8602E2B7C1
        Validity
            Not Before: Mar 24 06:26:45 2026 GMT
            Not After : Mar 27 14:42:45 2026 GMT
        Subject: CN=4DC1CE79E58897848F111C8416324F44402FD466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:6e:47:3a:aa:9e:2b:54:82:9e:16:fb:cf:
                    04:61:bd:98:52:9e:18:82:8c:02:ba:fd:0f:17:4e:
                    f7:89:65:18:4e:3f:cf:98:8c:f9:20:04:c7:20:24:
                    e3:d1:51:9d:a1:bd:8f:90:4c:49:d2:c0:a8:e7:94:
                    6b:a6:40:51:ff:13:71:80:13:ee:f8:1c:0b:29:ca:
                    a6:3c:9f:1f:5a:89:55:1b:3a:3e:45:66:24:96:2b:
                    61:69:31:ee:fe:f4:ba:c7:93:a0:14:46:e4:a7:b2:
                    a3:fc:96:8b:4f:60:4e:47:4b:97:2c:a1:26:44:e2:
                    9d:01:e3:13:4d:7c:39:ab:2a:cd:c5:77:5c:6e:4a:
                    05:52:e3:c5:b7:86:4c:1a:cf:2f:af:96:2f:3d:68:
                    66:93:a1:3a:a2:e8:a9:09:01:a3:03:08:be:2b:d7:
                    04:85:02:36:a6:c6:e8:a0:ac:70:35:96:f3:d9:83:
                    a5:a3:21:f4:a8:d0:56:52:fc:cb:01:6b:dc:9d:e3:
                    60:c8:98:8c:27:61:e0:3d:c8:1e:91:a6:75:8e:18:
                    04:3a:a0:6c:7d:ee:33:6b:42:d1:0b:3d:07:a9:53:
                    7a:59:63:86:09:af:f7:8e:a3:2f:7d:8f:92:07:82:
                    40:33:ec:f9:d2:fe:a9:8b:ad:27:ad:f7:d4:98:42:
                    a0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C1:CE:79:E5:88:97:84:8F:11:1C:84:16:32:4F:44:40:2F:D4:66
            X509v3 Authority Key Identifier:
                keyid:C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:cd:0b:de:29:7d:50:1a:10:dc:9f:f8:b8:b0:a0:90:09:9d:
         8d:cb:d1:f9:40:39:ce:0f:ce:46:cf:f5:6f:7a:14:05:5e:3d:
         f6:82:5f:cd:42:aa:ec:0f:1c:6b:a7:d4:30:9b:70:83:6a:33:
         cd:92:e8:38:35:a6:fb:9d:b9:01:ec:3c:24:21:49:7b:03:9f:
         6e:bb:23:3c:db:89:7b:dd:2c:07:1f:e4:8f:95:70:16:bd:ab:
         70:17:11:d2:e6:32:7f:6e:2d:aa:30:27:02:f7:72:29:9a:97:
         4d:07:30:91:a2:e0:24:cd:4a:0f:86:a7:fd:35:bc:2a:c2:1a:
         a1:93:e5:46:b9:7d:06:44:9b:31:21:a6:cd:41:04:bc:d1:e1:
         29:a6:e9:71:e2:e3:8b:b9:a8:2d:17:4d:24:ae:36:77:d0:c4:
         9b:23:3d:1d:90:7d:63:d1:3f:d1:c1:35:85:f5:e4:1d:62:e1:
         57:3a:9b:bd:11:a0:29:1c:aa:e5:a4:4b:61:b7:17:12:9a:c8:
         b4:24:b2:c6:7b:f8:bc:79:c4:e4:99:e9:63:e3:0f:c3:0d:8a:
         bc:92:3b:27:76:10:94:26:d6:48:ca:59:82:bf:7f:4b:22:cc:
         5b:2e:d3:ba:46:fc:67:07:36:a6:1b:96:71:6e:e3:f9:50:d0:
         73:22:31:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:27 2026 by rpki-client