Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft
File:                     E64D2B2A02A172B64A71F75C753571C841216A21.mft (raw, json)
Hash identifier:          hY/pOrCjTn7KNVbCYI5LoySCEObf6s4V71FrTpX2x74=
Subject key identifier:   EB:80:8B:82:CA:FF:61:87:B8:7F:B7:62:22:9A:BA:4E:C5:7F:D2:EF
Authority key identifier: E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21
Certificate issuer:       /CN=E64D2B2A02A172B64A71F75C753571C841216A21
Certificate serial:       0E7EC332C0E897C9208B1AB77BDDDAF91F5C9124
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft
Manifest number:          0106
Signing time:             Tue 24 Mar 2026 16:40:57 +0000
Manifest this update:     Tue 24 Mar 2026 16:35:57 +0000
Manifest next update:     Fri 27 Mar 2026 17:53:57 +0000
Files and hashes:         1: 3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (hash: 3wY6YhGHW2FNk89iUabtEb3voGoMeSvrsN+5cal1TNI=)
                          2: E64D2B2A02A172B64A71F75C753571C841216A21.crl (hash: FkvUS1zJI+TqGH9I0i4xnfiIKsXwwFGheaz4SawU6aw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl
                          rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 17:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7e:c3:32:c0:e8:97:c9:20:8b:1a:b7:7b:dd:da:f9:1f:5c:91:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E64D2B2A02A172B64A71F75C753571C841216A21
        Validity
            Not Before: Mar 24 16:35:57 2026 GMT
            Not After : Mar 27 17:53:57 2026 GMT
        Subject: CN=EB808B82CAFF6187B87FB762229ABA4EC57FD2EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5d:0c:6b:50:cc:f9:80:2e:98:97:60:0b:fb:
                    8c:98:8a:c6:d5:8e:20:84:a8:bf:d0:9f:b1:5a:29:
                    1e:31:b9:5c:d7:6e:90:b0:fc:f4:90:52:14:8b:1a:
                    3a:81:ef:fb:a8:da:8d:bd:d5:02:5a:11:0e:ce:6d:
                    86:91:05:4b:e5:45:61:39:47:a7:6e:61:45:aa:2e:
                    2d:36:0a:70:a7:ac:2c:98:7d:f4:53:d5:35:6b:b6:
                    1c:65:37:0e:b8:d2:63:07:6b:da:10:6e:b2:7f:07:
                    0a:4a:84:ee:f8:30:15:8e:0a:d9:dd:bc:f0:9d:7d:
                    e1:ca:0d:9f:60:c6:b7:15:1d:72:37:f5:13:27:66:
                    fa:1c:2b:f9:57:30:68:6b:25:90:56:28:c8:98:ad:
                    11:fd:fb:7f:e7:a0:3b:23:83:be:84:ec:7c:a2:5d:
                    53:59:f0:16:21:6a:af:a0:b6:60:78:94:db:2b:23:
                    af:9d:2e:63:2e:e2:d2:64:1d:93:29:fd:d7:68:ee:
                    e8:5e:70:2d:20:0e:e4:b9:c3:50:d5:5d:51:f5:0a:
                    b4:71:fc:b5:a8:aa:6b:4d:96:d3:7b:e4:f6:3f:a6:
                    92:52:19:6d:3d:41:06:9f:51:e3:7a:57:40:1f:e2:
                    8d:ef:fb:da:5b:8b:29:33:c6:93:c7:e2:aa:e6:42:
                    69:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:80:8B:82:CA:FF:61:87:B8:7F:B7:62:22:9A:BA:4E:C5:7F:D2:EF
            X509v3 Authority Key Identifier:
                keyid:E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1d:e5:1c:ac:1e:04:43:f8:d3:66:2f:82:e5:ad:62:99:3d:
         d1:85:d2:ea:dc:1a:09:8e:2c:ec:ea:ee:27:0a:41:4e:b8:41:
         18:3a:a8:f1:96:91:10:c3:23:ee:37:b5:1f:7f:51:10:fc:5e:
         63:4e:56:fd:60:bb:82:8f:7a:1d:f4:f7:67:6e:60:3a:96:aa:
         8a:81:32:99:59:91:16:c7:88:93:59:a7:6e:eb:82:59:de:00:
         21:5b:d9:58:58:81:fd:34:ab:ba:69:20:2b:82:1c:93:e7:dc:
         5e:cb:6f:f3:15:71:0a:20:b7:27:a5:61:dd:d9:51:ce:c6:8d:
         15:d0:4c:b3:ef:0c:19:5b:ac:6e:5d:e4:55:fc:fd:ae:9c:9f:
         3d:ee:92:31:e2:60:6d:07:bf:bd:20:2f:c0:44:f7:9d:40:d7:
         b3:5f:90:23:b2:5c:27:f9:d9:2f:49:81:f9:fb:90:f1:02:47:
         e0:06:f7:06:25:34:3c:f4:8e:63:4c:c1:82:e8:79:52:85:0b:
         12:25:69:9f:82:2f:bb:25:7e:35:42:28:78:ef:1c:25:62:dd:
         42:31:7a:1c:9a:4f:67:31:f9:c9:ad:58:b1:62:fe:75:9a:c0:
         aa:d7:13:9a:6c:a0:cf:22:13:53:ed:bf:0f:9c:0c:bf:ce:37:
         3a:8d:c2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:31:12 2026 by rpki-client