Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft
File:                     3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft (raw, json)
Hash identifier:          lvExmDAUX+vyULiywHj7794K6tZVDGkqesAbt5DaO94=
Subject key identifier:   F4:5D:74:F7:30:5D:8D:A9:47:06:02:EE:90:B7:CA:6E:CE:D0:A9:42
Authority key identifier: 3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13
Certificate issuer:       /CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613
Certificate serial:       36D97C0162D89863353AC633F58C7ADF67F0EC3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft
Manifest number:          024E
Signing time:             Tue 24 Mar 2026 03:31:33 +0000
Manifest this update:     Tue 24 Mar 2026 03:26:33 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:33 +0000
Files and hashes:         1: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl (hash: TYDhjPk89E66iuO03nx3A89ihqvMXqY4wqDXM0ps/PE=)
                          2: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: QZrvNrtpXCKPjhSgsC8kdyvVzWQ/ADZleC5w3ZKWFT4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl
                          rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 11:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d9:7c:01:62:d8:98:63:35:3a:c6:33:f5:8c:7a:df:67:f0:ec:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613
        Validity
            Not Before: Mar 24 03:26:33 2026 GMT
            Not After : Mar 27 11:01:33 2026 GMT
        Subject: CN=F45D74F7305D8DA9470602EE90B7CA6ECED0A942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8b:03:5f:93:ff:2e:2e:71:8c:de:5e:56:34:
                    1c:15:e3:18:a5:76:15:4e:e4:de:8c:3f:1b:11:d6:
                    ff:a0:6b:37:7b:4e:4c:d0:0e:37:e3:2d:a1:29:fd:
                    1c:3b:f7:59:b1:04:00:e1:d7:bf:36:7c:a8:6b:69:
                    a0:14:1b:76:cf:38:ed:44:5a:c8:fe:d8:1a:52:f0:
                    7c:02:0e:30:3c:18:9f:c4:df:31:6c:8c:49:0c:9c:
                    2b:2c:14:ad:6a:5a:5e:5a:1c:da:db:1e:08:09:27:
                    3e:f7:78:14:35:b4:d2:1b:fc:30:cc:08:2d:07:81:
                    5c:3c:0a:c4:88:83:75:70:0f:db:5f:54:a9:1d:09:
                    2c:16:9f:e4:01:8b:20:f0:5d:5e:d6:bc:ff:01:67:
                    22:d2:8d:eb:f9:56:6a:31:d3:12:2c:1d:64:2b:bf:
                    2d:73:98:9f:0b:06:cf:01:00:84:70:70:53:7a:d3:
                    68:de:bf:ec:ea:ac:24:94:59:5f:85:3e:6c:44:47:
                    3b:3e:d0:91:12:f4:6c:22:0b:08:ec:dd:ba:3b:24:
                    3d:b3:92:49:f4:0c:2d:d7:91:f1:de:e8:c7:86:ec:
                    16:ed:f8:5c:86:89:81:35:fc:57:a2:4a:df:2a:60:
                    c5:a5:93:f0:27:dc:75:73:40:83:b7:ff:3e:57:7a:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5D:74:F7:30:5D:8D:A9:47:06:02:EE:90:B7:CA:6E:CE:D0:A9:42
            X509v3 Authority Key Identifier:
                keyid:3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f8:9b:88:25:06:89:80:18:04:a0:75:89:f3:ce:fa:63:16:
         68:e8:c9:aa:a7:7f:64:30:87:67:8c:4d:09:57:ad:57:53:78:
         69:38:61:31:e3:dc:d2:59:fb:56:1f:bc:33:d8:d5:11:b9:51:
         ba:55:13:ed:59:92:cc:0a:84:22:fd:50:48:18:86:44:c8:e5:
         e2:57:93:65:fe:fd:89:fe:8c:99:72:47:27:dd:9f:4a:44:2f:
         8a:25:63:be:63:75:b6:46:ce:51:f2:5f:27:87:cb:92:f5:df:
         48:6f:bb:42:b2:43:bb:df:21:04:b3:46:05:cd:13:23:84:d4:
         bc:64:39:37:b2:0b:b0:15:7f:9e:8d:6d:0d:05:4d:08:41:2c:
         8b:75:ef:e6:68:d3:33:9a:78:fb:8c:f3:52:a1:32:02:6b:d0:
         36:41:fe:ff:c2:12:e2:72:f6:d6:b9:02:4c:77:7a:af:17:bd:
         ba:1f:34:ca:5e:55:a3:bb:bb:9a:1c:81:d6:42:b0:6a:e5:d6:
         b1:54:1b:66:42:b8:05:65:07:72:6d:e9:57:64:e0:c0:10:df:
         3f:8d:9a:12:1f:45:5c:a7:bd:37:a5:14:4c:c4:a7:f8:c0:73:
         32:55:f9:88:d5:81:1b:d7:69:a8:f1:25:ed:4e:4c:e4:1d:6b:
         c2:70:52:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:01:57 2026 by rpki-client