Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
File:                     0110A7C2C5E7B74C89B036FFF78974619577D31C.mft (raw, json)
Hash identifier:          XE5bA+i2eHbv6HtAksmi4BpoA35kCEQWtHaMFB9HVbc=
Subject key identifier:   BF:E0:10:9B:8E:43:72:25:B9:58:C2:D4:59:89:F0:71:E7:D0:8F:D4
Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
Certificate issuer:       /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Certificate serial:       674E2F5369EF932FA245AE064F9460DE331AFA37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
Manifest number:          03CF
Signing time:             Mon 23 Mar 2026 21:52:40 +0000
Manifest this update:     Mon 23 Mar 2026 21:47:40 +0000
Manifest next update:     Fri 27 Mar 2026 09:38:40 +0000
Files and hashes:         1: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: keDZ5dqo7QpwKbY9EEgBghaBvUKpvyvuxTWbyrg58Eo=)
                          2: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: PwS8ZteZSgPMYr/+U7TBWB1NbbKeXLIctaDRv9tMXAw=)
                          3: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: QyrGvl3uJu4kbUzsbT9TbYc82tEmeuxMRe2nDKPqdys=)
                          4: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: fYJfmsjf+SULVX6dy88bE8cQRoUB/HUNHP8Mc9BU5Es=)
                          5: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: neHLBe/fEcPkBE3oSjIGkPPuzPFnKvLrnK1gADqMmBU=)
                          6: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: F5F4og+0ANkMp2eyG+y4uSqqLHGppY2rxvIFdOjz0YY=)
                          7: 0110A7C2C5E7B74C89B036FFF78974619577D31C.crl (hash: L9R9AHnxJtQejvOTHDR+EaJb4ufjV8oqbgw8u/Koi2c=)
                          8: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: AljrwxcXPRJV2CeaxgkjeFz1mPYn0NpdJRkpDNeohWs=)
                          9: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: kiDIcGQKQVZgpPkBmd3kKHyPvS5ByOoUMCBMCrkzvlY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl
                          rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 09:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4e:2f:53:69:ef:93:2f:a2:45:ae:06:4f:94:60:de:33:1a:fa:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
        Validity
            Not Before: Mar 23 21:47:40 2026 GMT
            Not After : Mar 27 09:38:40 2026 GMT
        Subject: CN=BFE0109B8E437225B958C2D45989F071E7D08FD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:f4:77:33:b3:f4:00:c0:73:c4:a6:a1:dc:
                    b5:15:7a:79:18:c7:15:11:79:87:fa:d4:c0:a4:0f:
                    3a:64:79:85:0c:6c:7f:3f:97:12:9b:99:0a:51:18:
                    87:a8:66:71:7d:12:bb:de:37:3b:ba:5d:7c:b6:ea:
                    f5:09:73:0c:42:74:ec:e4:d9:dd:42:53:bc:0d:c4:
                    9b:89:4f:86:7c:b6:ab:b8:28:c7:39:c1:bc:70:e7:
                    a9:8f:7a:56:7c:9d:50:01:51:c2:86:60:b6:8f:e7:
                    f6:bd:e7:f0:6a:da:49:74:bc:7d:ed:c8:48:db:88:
                    4e:e9:ca:22:7e:e2:56:0b:3a:af:b4:c7:68:03:70:
                    c6:86:02:19:3a:3d:95:88:bc:ef:92:55:77:f0:7f:
                    3c:d9:29:d3:39:47:a5:b7:0c:29:78:9a:6b:95:00:
                    3c:13:da:5a:2f:e0:9b:1c:bb:46:5d:53:db:2d:27:
                    4a:15:30:b6:bd:e7:78:a9:2f:f8:c6:ea:94:36:09:
                    f7:7a:13:02:4b:9d:52:77:6b:62:22:83:aa:f4:cd:
                    e1:44:13:55:95:29:47:62:7e:5a:5a:d4:4a:37:bf:
                    af:72:cd:48:c8:6f:f2:51:cf:3a:77:0b:0f:8e:0c:
                    ad:a8:1a:a0:2d:7c:64:60:55:4a:cd:43:20:20:f9:
                    1d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E0:10:9B:8E:43:72:25:B9:58:C2:D4:59:89:F0:71:E7:D0:8F:D4
            X509v3 Authority Key Identifier:
                keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:38:9f:80:ce:ec:92:5d:f2:f5:b2:8b:61:57:a4:9b:e7:ee:
         0b:11:b4:dc:f1:df:29:d4:dd:7f:33:54:96:54:96:b5:b7:8c:
         32:1f:e0:dd:27:53:b5:5a:0b:3b:15:b4:cc:34:a8:07:54:17:
         43:ba:a6:0c:d9:6d:d1:51:c9:b7:af:b0:78:db:bb:83:90:7e:
         03:48:af:2a:86:44:c2:d9:d1:4c:f4:23:d5:d0:90:80:d8:92:
         06:ac:20:ac:39:49:d0:ff:ae:85:7b:54:dc:ff:c7:9e:32:1b:
         5c:18:9e:ed:9f:97:ef:c3:64:a7:07:a9:8b:ab:57:4c:ca:2f:
         5c:e5:d4:5a:97:a9:df:03:f4:7f:58:2d:8f:ed:e8:c0:7b:95:
         55:15:3e:17:dc:8c:ab:81:c1:22:08:d1:e9:22:1b:e0:db:40:
         b1:70:a2:ba:16:8e:e8:7f:07:2b:e8:2f:c9:eb:ff:1a:5a:1d:
         d9:d5:2c:86:56:57:eb:0a:c6:b7:f4:58:b8:18:3d:dd:a0:29:
         bf:0a:2a:e8:e1:1a:81:74:ef:b1:0f:6f:dd:15:8c:11:fb:14:
         b1:a0:23:5b:b7:c3:a5:ec:a2:ee:01:3a:f3:51:92:d1:28:ed:
         e8:68:18:34:d8:18:11:10:35:f9:bb:59:39:e1:9f:ee:fb:4e:
         9e:54:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:45 2026 by rpki-client