Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
File:                     1635F5E419798341BDC615D4E1C6AE340C34BEED.mft (raw, json)
Hash identifier:          1qDsbep85oQ83zT0LbhVYe/tsPfdyCQAd1xYqu+OdAU=
Subject key identifier:   CD:7C:60:8A:90:20:7B:B3:A6:A8:78:DB:4D:7E:A6:A5:E0:7C:AC:1F
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Certificate issuer:       /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial:       4B7EC05FA9A12A1C72082E7DB9939A3BD6972ADF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
Manifest number:          0563
Signing time:             Wed 25 Mar 2026 06:21:40 +0000
Manifest this update:     Wed 25 Mar 2026 06:16:40 +0000
Manifest next update:     Sat 28 Mar 2026 09:57:40 +0000
Files and hashes:         1: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: vN2suRuDQ8/GCQHEEEyC7GJFF4AF2Ux2vUSPEF0UgN4=)
                          2: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: kTRg5VWzA/woXO+nc54YqUj1OHro7jOG0YTwaTc42Oo=)
                          3: 3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (hash: IM2twiGIKQqETGmIWQI3vAIIytZPeeD5wgctglA7Hpc=)
                          4: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: jd6LmOWTW9h+pZpEVT+8YFnE7+vOf7HUJDd4WCtQWm0=)
                          5: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 1kbjcVz7NV7SFqtMY1gTY7M0GuY6igkJGp6NsdTqDPc=)
                          6: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: SoYj2/CQvnngSSgeQ/2h6CjbPD0PX7O3f0MfyUEw7yQ=)
                          7: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: dVPU6JD2A84NVYrSKQ9v6ag+q7nJt0d3GPOdYg/vAzs=)
                          8: 1635F5E419798341BDC615D4E1C6AE340C34BEED.crl (hash: KX7Yq/rryU+PFVyL/oU7DTs/Irnjk0G9kCinaGBv344=)
                          9: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: lS1RAb31GjYc1m7ta2BgMoEsUFuw8zYDY4GO22I3IUc=)
                          10: 3231302e37392e3230382e302f32302d3234203d3e203137393130.roa (hash: Fow2FQnfsWM+t0AdvtL67zUS1huXa7y9vM3+TEZxD7M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
                          rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 09:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7e:c0:5f:a9:a1:2a:1c:72:08:2e:7d:b9:93:9a:3b:d6:97:2a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
        Validity
            Not Before: Mar 25 06:16:40 2026 GMT
            Not After : Mar 28 09:57:40 2026 GMT
        Subject: CN=CD7C608A90207BB3A6A878DB4D7EA6A5E07CAC1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:31:cb:ac:fa:7c:87:aa:0a:79:59:dd:3c:
                    7c:cd:c4:48:21:41:2c:3e:ac:47:9c:da:3b:33:04:
                    15:ad:11:5d:da:0b:2e:53:6e:d9:a6:06:00:79:4a:
                    d9:c9:a2:b0:bc:44:bc:ab:b9:e6:20:42:09:91:5b:
                    af:93:80:88:eb:4e:31:80:5e:b9:29:4c:61:68:03:
                    a6:a5:f9:19:4f:62:af:ef:e6:69:bf:00:91:22:b3:
                    51:88:81:91:7b:04:d6:11:22:83:bd:fc:59:1c:38:
                    ff:42:33:4e:fe:1c:8a:51:b4:41:9b:03:86:05:0f:
                    81:03:86:c5:02:2c:c6:3e:c9:8c:9a:04:4e:4c:23:
                    1d:ea:d4:90:48:f8:4b:45:db:a4:07:55:d4:2e:da:
                    f9:a8:e9:ae:4f:15:b1:5b:31:47:44:b2:66:e8:79:
                    45:46:0d:cb:4b:3e:15:77:17:3d:83:57:4c:e5:22:
                    13:57:09:af:e2:3c:17:01:db:a1:e5:2c:fe:e1:50:
                    63:8e:23:61:e6:78:a7:44:7f:06:5d:88:1f:38:8a:
                    e4:4f:0f:30:fa:64:e2:33:ab:9e:ba:73:b2:a3:98:
                    b3:87:e5:b4:14:bc:74:e0:ce:3c:5e:81:69:51:52:
                    22:2e:fe:88:c7:9f:8d:ed:0e:ed:00:5c:e1:77:e7:
                    2c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7C:60:8A:90:20:7B:B3:A6:A8:78:DB:4D:7E:A6:A5:E0:7C:AC:1F
            X509v3 Authority Key Identifier:
                keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:40:33:f4:ee:79:d4:55:b0:41:f1:c3:1d:82:c8:72:ab:68:
         12:5c:22:5d:d5:f4:3c:2d:dd:c4:5f:29:86:ac:cd:13:c6:5b:
         f6:95:62:65:e5:17:a5:a4:9a:83:1e:96:b2:3f:42:4a:33:58:
         f5:95:dd:df:14:0f:2f:ac:92:97:cd:f0:bd:89:69:2b:89:33:
         3e:36:d0:17:ed:5b:28:4c:e5:43:39:cd:ea:4c:77:cb:37:cb:
         98:ee:46:98:85:95:1e:8a:ae:66:38:2d:a1:2c:e7:1a:5d:bc:
         45:41:a8:ba:20:6b:83:a9:7c:d5:40:99:a7:f9:b5:50:70:71:
         66:bf:e3:3a:8c:f6:9b:7b:41:1f:9a:e6:e8:d1:ff:53:67:ee:
         89:f5:3e:5d:3f:2e:0f:5b:09:40:b2:8e:63:7f:75:39:19:dd:
         32:7b:ff:a2:c4:db:a0:67:14:e8:d0:de:8f:d0:3b:79:d0:3c:
         8b:ac:64:80:db:64:e0:40:90:0c:f5:ac:65:b5:67:a6:01:91:
         45:e2:65:86:5c:18:eb:44:e7:c7:db:c9:34:5a:69:15:df:5f:
         3b:1e:9e:7f:92:f5:97:d7:ed:bb:b0:85:c9:bc:72:42:ab:22:
         7d:ae:a4:24:d1:ff:09:b8:46:d0:99:27:5e:14:b1:af:38:88:
         f0:26:7f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:46:57 2026 by rpki-client