Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft
File:                     F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft (raw, json)
Hash identifier:          1jl32VgtwnFhkFejqp/oUv9HNoxZjk0cTkbHpsWQoTE=
Subject key identifier:   8E:C8:26:03:46:ED:3C:77:38:D8:77:73:0F:E6:78:DB:8E:CC:B8:61
Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87
Certificate issuer:       /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
Certificate serial:       5BE5107F57B65B8B02A5F41796E49D046C3A6746
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft
Manifest number:          043D
Signing time:             Wed 25 Mar 2026 09:01:47 +0000
Manifest this update:     Wed 25 Mar 2026 08:56:47 +0000
Manifest next update:     Sat 28 Mar 2026 13:06:47 +0000
Files and hashes:         1: 3130332e3136372e33352e302f32342d3234203d3e20313431393638.roa (hash: X75Y1ke9EhYYnMWTmSs9YygENE9XIc8HW5QtbaF4szA=)
                          2: 323430373a366163303a31313a3a2f34382d3438203d3e20313431393638.roa (hash: KAJCu1iCPskRzFApZeKWkG+iUAJWkZs6zCJ/D+YJ9os=)
                          3: 323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa (hash: eNWwXCWeYF839zYO7rMMIV3xkBiscdjR2fVL1yHTmFI=)
                          4: 323430373a366163303a31323a3a2f34382d3438203d3e20313431393638.roa (hash: 2uoAvqN/FM14L5lYzO1GVcFvR0u9AsKQ/EUf68eVpD0=)
                          5: 323430373a366163303a313a3a2f34382d3438203d3e20313431393638.roa (hash: JuWvkFNe6CRMNhByLK16nJkYZTO2k5TO5xniu6RBjQg=)
                          6: F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl (hash: aNXrW9LIB+EthKFHpkQSRFxey7Cv74QYJSOgBtO9wmE=)
                          7: 323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa (hash: yEBIywXimpkaV6kkZf88ktJaXacXrWtJ0Gm2cewbi/o=)
                          8: 323430373a366163303a373a3a2f34382d3438203d3e20313431393638.roa (hash: atcNnqjFig4yqzcc2NQKhseVRp+SSu5h8Qfgjziyil4=)
                          9: 323430373a366163303a363a3a2f34382d3438203d3e20313431393638.roa (hash: T/o1aeON+5pcPSVvOY4Ob6kz5MQ6qhREksqkwLylLGs=)
                          10: 323430373a366163303a353a3a2f34382d3438203d3e20313431393638.roa (hash: y53KFZA/tHqzsXpGrb+bL9SpP44PyS+GN1rbt/HAxH8=)
                          11: 323430373a366163303a3a2f33322d3332203d3e20313431393638.roa (hash: BYOZ/cPV+fUkHg0+c7RxKqMf19AlU3qFLfOj2NidjIY=)
                          12: 323430373a366163303a31303a3a2f34382d3438203d3e20313431393638.roa (hash: RSMkgkbZL4J3AjFFRuXF01xRgKPhd/9MO1mI7DC0lXE=)
                          13: 323430373a366163303a333a3a2f34382d3438203d3e20313431393638.roa (hash: /VC6Nzqbkey0me4WfOLi7H8x3rryeyAeIA0bOas07CU=)
                          14: 3130332e3136372e33342e302f32342d3234203d3e20313431393638.roa (hash: 4RGO73jPUEYZsGWgfGegl/rwd/0QbjuHMtgIH17ts/g=)
                          15: 323430373a366163303a343a3a2f34382d3438203d3e20313431393638.roa (hash: i0RgwT0qanGUvdxsXMyR7MVxxtMqoKmL58+Eu4f9DWA=)
                          16: 323430373a366163303a393a3a2f34382d3438203d3e20313431393638.roa (hash: yNpbjX6gTD89ln+i99OQ8YcqMnJleD0jKIxU7l3uW2g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl
                          rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 13:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e5:10:7f:57:b6:5b:8b:02:a5:f4:17:96:e4:9d:04:6c:3a:67:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
        Validity
            Not Before: Mar 25 08:56:47 2026 GMT
            Not After : Mar 28 13:06:47 2026 GMT
        Subject: CN=8EC8260346ED3C7738D877730FE678DB8ECCB861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:f4:5e:27:e9:48:ab:c5:2e:6b:7a:bd:2f:
                    3e:48:b2:88:fe:2a:68:14:d5:8d:a1:16:77:79:79:
                    b6:4b:d8:7a:09:10:37:a3:1b:98:51:ab:2e:78:15:
                    e9:8f:c2:27:8a:29:36:02:08:74:6e:5a:6d:d7:d2:
                    d5:45:7f:ec:d6:e0:b6:57:a9:93:b9:7d:c5:5e:98:
                    57:c2:f9:07:97:79:0f:9a:ac:ab:a9:94:22:f3:77:
                    41:c8:7d:0f:e4:2e:31:43:2f:77:07:8a:de:07:2e:
                    71:fb:1c:7f:4e:85:79:de:27:e7:7e:56:58:75:a9:
                    8d:98:97:cc:d2:fd:3b:cf:5b:72:6e:e1:a5:37:8b:
                    0d:c4:66:38:4a:9b:0a:cb:79:f1:64:0a:76:fa:f4:
                    bf:b2:6f:37:00:f1:53:22:cd:28:1a:e7:ab:cb:8f:
                    bd:cb:e4:83:12:d1:e6:06:75:a9:b4:de:5c:60:3f:
                    fa:9f:c8:9e:08:9a:ad:64:fb:bc:50:43:26:8d:02:
                    c5:0d:05:61:f2:78:b4:08:52:90:d7:d2:f7:f6:aa:
                    e5:04:47:02:d3:93:b8:cf:f7:cb:e9:be:c1:99:4d:
                    5c:64:13:ce:e3:7a:99:2e:81:a2:7d:2b:b5:93:3b:
                    a1:51:e8:10:9c:8a:da:bf:68:9c:72:34:06:6b:41:
                    0b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C8:26:03:46:ED:3C:77:38:D8:77:73:0F:E6:78:DB:8E:CC:B8:61
            X509v3 Authority Key Identifier:
                keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b7:14:6e:9d:2d:64:ea:f3:c7:51:40:66:f6:b3:39:94:c3:
         f9:ea:2e:66:5f:0f:62:42:96:5b:7d:d7:dc:79:ae:ba:a1:42:
         78:6e:67:5f:b7:51:74:81:17:31:44:3b:34:3a:be:98:23:c9:
         24:d2:8c:81:73:95:ab:19:1a:9d:a8:ba:50:ca:b5:97:29:0d:
         c2:65:bc:03:30:31:25:b6:fc:44:ff:5f:00:ce:c8:17:20:1d:
         20:f5:5a:0d:e3:a6:8d:ef:b1:e3:ec:cd:51:de:cf:04:21:85:
         81:22:01:77:ec:60:f1:d2:2e:c5:c0:00:f7:e0:31:5a:c7:7d:
         11:f8:ab:86:fd:94:de:4e:26:e8:4d:c6:0a:bb:54:03:4e:49:
         29:99:6d:f6:01:e7:52:86:f6:eb:6c:f9:0a:b6:e4:25:04:76:
         69:0e:cb:74:6e:e5:97:70:74:27:57:3d:46:2c:b9:31:c7:28:
         f1:cb:75:de:66:89:be:72:16:5a:0d:f4:c2:9d:1a:a3:2e:c5:
         e7:ca:b9:b8:d0:c8:f3:4f:ee:a3:6c:b9:83:50:c3:e7:77:3c:
         0a:1b:e8:b3:83:ca:b6:5e:f7:8e:2e:0a:8f:cb:b7:23:fe:6e:
         e3:2f:b7:00:c4:56:c6:e7:39:57:f0:f8:a9:69:a7:49:b6:7c:
         ac:95:9f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:33 2026 by rpki-client