Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
File:                     115880D133393FF2D96A5861679B5166AFDB1248.mft (raw, json)
Hash identifier:          TqlqxidQS0RzB10BFYocAh9N71oIrpv7YHiwA7YCmWo=
Subject key identifier:   53:80:BD:85:85:24:74:A5:A5:DD:63:F3:23:E8:C9:5C:B9:AB:72:F0
Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48
Certificate issuer:       /CN=115880D133393FF2D96A5861679B5166AFDB1248
Certificate serial:       1AF7ACE864A904CAADFF8D5E11593B1D2E0CDECA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
Manifest number:          0213
Signing time:             Thu 26 Mar 2026 05:02:50 +0000
Manifest this update:     Thu 26 Mar 2026 04:57:50 +0000
Manifest next update:     Sun 29 Mar 2026 15:16:50 +0000
Files and hashes:         1: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: 1qHo3owsIra2DLunWHCtcR/bz4Z6XiVGZF9DHU6ujCU=)
                          2: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: ovzcVNQEy/mX6iGBONz7ezsyibr0pRiafYk0E6VSJek=)
                          3: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: GbW8pIvunTcszaDOe8fHQRX98OSxYPSLoytCW4o6p7M=)
                          4: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: VvBdfRoXJdspZfeWpUDljLmbCHnzMGWW+ov3JCtu9WA=)
                          5: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: NlqtXEYc0qu5C4pNIHVhgdQEP8qnif0LKTnWyQfNsyQ=)
                          6: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: mM1uMrTnIIOB9qV95bnMry0CA1H0myomJNfLWIW9li4=)
                          7: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: 7cjr2Mf8da23M7780NOwEQz2pNcc6LU8HdKHbP3bqXY=)
                          8: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: h49j/2Ga2ZWeRDrwEjEvCDS4AX4uciyVzSTBX8uB/Wg=)
                          9: 115880D133393FF2D96A5861679B5166AFDB1248.crl (hash: g2McP9GqxaP3zZ9BGSm/AJSRZs3pi+7Q/asFbww02zc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl
                          rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 15:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f7:ac:e8:64:a9:04:ca:ad:ff:8d:5e:11:59:3b:1d:2e:0c:de:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248
        Validity
            Not Before: Mar 26 04:57:50 2026 GMT
            Not After : Mar 29 15:16:50 2026 GMT
        Subject: CN=5380BD85852474A5A5DD63F323E8C95CB9AB72F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:e3:17:a7:8f:59:8b:02:30:1e:57:57:c8:
                    6c:73:0b:a6:69:9a:ef:a6:54:26:24:ac:93:0a:68:
                    6d:dc:84:a9:e8:bf:1f:07:92:80:8e:4c:70:73:de:
                    a7:0b:00:ae:a1:e4:81:6f:5f:16:a0:1a:fe:5c:95:
                    3b:4e:31:8e:01:f0:cd:dd:c3:90:14:d0:3d:8c:19:
                    1f:8f:2c:ce:dd:57:e4:0c:5e:61:75:45:c0:c4:b2:
                    05:8c:96:29:d3:22:a6:dc:b0:fd:53:2c:d5:17:07:
                    dd:42:f2:3e:3f:37:8a:b1:6e:4a:7c:05:53:b5:40:
                    fc:9f:b4:30:e4:7b:d9:68:ce:fe:92:97:86:f1:98:
                    2a:9f:c6:53:b4:79:7f:24:37:41:ff:67:85:31:96:
                    bf:a9:ba:29:25:97:df:1f:c3:78:a8:4a:9c:53:3c:
                    82:42:6f:72:63:c1:81:25:e4:16:4d:64:32:6c:ae:
                    37:02:9d:7b:a5:ea:95:62:9a:7b:3b:2a:23:a2:96:
                    89:3a:19:10:c6:19:41:29:0e:ae:23:2d:17:11:c2:
                    16:84:0f:f6:34:1a:06:a8:94:8f:69:42:fc:30:69:
                    ed:29:a7:1b:a0:44:09:49:15:dc:24:ad:c1:22:52:
                    34:9f:b5:86:49:0f:06:cd:f7:be:51:f0:22:5a:e8:
                    93:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:80:BD:85:85:24:74:A5:A5:DD:63:F3:23:E8:C9:5C:B9:AB:72:F0
            X509v3 Authority Key Identifier:
                keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:67:1c:fa:29:76:1a:c3:a4:ee:d8:4e:75:58:cb:61:c9:a1:
         19:79:0b:17:73:70:da:58:0a:38:f5:db:05:38:44:e0:94:f3:
         71:7d:39:a0:e6:45:ad:96:36:66:57:49:5c:55:e8:56:17:94:
         a5:d6:58:b5:02:c7:75:c8:dd:e2:55:3f:08:ee:07:ef:fb:f5:
         0e:c0:3f:24:76:0c:8e:bc:d0:d9:c8:b0:dc:81:07:cd:e4:57:
         16:ec:e1:0b:89:ca:aa:ed:df:5b:ff:59:40:c2:c4:20:0b:13:
         fb:51:fd:dc:a4:b0:00:b0:d6:51:ac:19:eb:23:62:e8:74:a3:
         34:30:7a:35:3f:b7:88:64:60:08:dd:78:da:50:92:05:12:cc:
         eb:20:66:a5:82:ed:53:ea:89:43:14:b5:6a:a4:c0:a7:25:6d:
         91:af:42:e1:6e:c5:a6:f3:df:31:d3:36:08:76:7e:59:9a:67:
         1b:d4:85:17:e1:aa:b5:da:80:8e:62:01:48:d4:99:3b:c6:cc:
         cb:37:3c:c6:dd:ab:e3:2e:03:b3:60:0a:3e:ef:b4:b7:8d:f6:
         15:78:68:a1:37:b3:4c:20:f0:84:a9:60:b3:6f:04:4c:4c:ae:
         6b:07:ac:c0:24:68:1b:a7:1d:01:79:a3:b8:19:ba:16:6b:84:
         d3:58:52:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:30 2026 by rpki-client