Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft
File:                     516450A151C5487FCC5911F4C18941CA895B07A5.mft (raw, json)
Hash identifier:          xnj5TDMjzhV3YQmW24MWDDtIBJSia/c/z/laWHUoQGo=
Subject key identifier:   04:D1:E6:41:F0:DC:94:9E:EE:4B:B9:80:E3:E5:5A:D2:30:34:47:18
Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5
Certificate issuer:       /CN=516450A151C5487FCC5911F4C18941CA895B07A5
Certificate serial:       50FBE9BBAB95EE9A9E0F840E94603DBA3282F112
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft
Manifest number:          035D
Signing time:             Tue 24 Mar 2026 12:21:02 +0000
Manifest this update:     Tue 24 Mar 2026 12:16:02 +0000
Manifest next update:     Fri 27 Mar 2026 18:35:02 +0000
Files and hashes:         1: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: +9l9/c1oHNd6x+rotlaCAqAorgvfQYB/2M8mOFajTwg=)
                          2: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: z85xof54DRtz327x0y44Pw+jx9DlTvA8Q/kbbufAMJs=)
                          3: 516450A151C5487FCC5911F4C18941CA895B07A5.crl (hash: pezdsl4EqjD9eO2GxZOvUUuTWzotjIkoIh8guWKzwBY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl
                          rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 18:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fb:e9:bb:ab:95:ee:9a:9e:0f:84:0e:94:60:3d:ba:32:82:f1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5
        Validity
            Not Before: Mar 24 12:16:02 2026 GMT
            Not After : Mar 27 18:35:02 2026 GMT
        Subject: CN=04D1E641F0DC949EEE4BB980E3E55AD230344718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fb:43:0c:bf:70:5e:91:86:c7:e2:3a:f6:f0:
                    cf:10:55:03:55:3d:42:63:6e:23:0c:2d:42:45:a8:
                    dd:9b:41:4c:73:0d:1c:ff:a6:c4:c8:1d:6f:b9:e5:
                    e9:3a:40:96:19:4d:4f:44:8e:22:c1:4d:22:6b:e7:
                    56:e4:d9:14:20:a7:7c:4e:bb:94:23:e0:4b:e0:71:
                    6b:99:e8:c4:47:5c:50:0b:4a:d3:99:91:68:73:b2:
                    9c:01:2e:79:89:c3:bf:26:e4:8a:b0:8d:97:99:cf:
                    34:21:21:be:0a:7e:0d:81:c3:ec:cb:c0:c8:60:5c:
                    98:54:ba:0e:a5:f0:6a:9d:25:ec:5d:7b:d1:d1:b5:
                    4d:43:af:8b:78:6b:90:e5:f6:04:e3:e1:50:8d:e4:
                    e7:ff:e5:12:7e:c9:d3:37:62:30:43:f2:4b:1f:be:
                    21:9a:cf:ba:40:cd:75:b0:30:2b:35:d0:41:38:ce:
                    af:56:35:e1:79:26:24:34:1f:c8:de:db:6b:72:79:
                    eb:81:e4:c3:e5:d8:df:43:43:b7:b2:a6:c3:6e:1f:
                    7b:84:d9:d2:8e:da:eb:5e:54:04:29:36:cc:be:a6:
                    69:f5:05:1c:fa:c2:93:de:d7:9e:6b:ed:4d:11:58:
                    af:f2:7e:27:59:05:43:14:c6:26:a6:ca:b3:4d:51:
                    f5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D1:E6:41:F0:DC:94:9E:EE:4B:B9:80:E3:E5:5A:D2:30:34:47:18
            X509v3 Authority Key Identifier:
                keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:36:64:65:1b:35:e8:6e:63:55:11:8a:0b:7b:9a:fc:74:e7:
         77:c4:b5:1f:93:64:f9:37:2f:89:36:19:e7:fd:ff:cd:25:5f:
         cc:05:20:fb:13:af:5f:dc:d9:77:73:ba:fb:28:83:7b:41:8c:
         79:ef:11:30:19:36:b7:85:38:9b:2d:51:8d:bc:82:94:25:c7:
         52:c3:93:7d:51:5d:6a:87:95:fa:18:e0:d9:71:94:0f:58:bb:
         3a:01:3e:0f:8c:39:99:d7:e9:8e:22:1f:52:fd:68:de:e9:c7:
         86:64:1a:3e:c0:95:b8:d0:2b:ad:dd:13:8c:63:0e:c3:37:35:
         f4:dd:46:32:5c:8d:70:d5:92:3b:1f:d0:b2:1c:7b:11:3d:e6:
         de:f6:17:46:63:70:48:4c:f4:ae:91:27:87:92:23:23:7c:9a:
         cb:75:bd:5c:ab:45:bd:64:96:b7:6a:7d:d7:7f:08:a1:15:15:
         9d:90:8c:e1:37:d2:ad:18:0b:b0:0e:eb:6d:8a:55:61:95:09:
         79:80:b2:bc:a1:5c:09:27:c8:cd:3f:9b:fd:d8:72:40:f2:d8:
         5a:be:b3:1e:04:e9:3f:c7:7f:06:41:45:f0:a5:a3:9a:9b:0d:
         d8:69:b2:f2:11:19:b6:78:2e:41:f1:98:8d:63:7a:5e:44:01:
         37:b1:39:f5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUPvpu6uV7pqeD4QOlGA9ujKC8RIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4
OTVCMDdBNTAeFw0yNjAzMjQxMjE2MDJaFw0yNjAzMjcxODM1MDJaMDMxMTAvBgNV
BAMTKDA0RDFFNjQxRjBEQzk0OUVFRTRCQjk4MEUzRTU1QUQyMzAzNDQ3MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW+0MMv3BekYbH4jr28M8QVQNV
PUJjbiMMLUJFqN2bQUxzDRz/psTIHW+55ek6QJYZTU9EjiLBTSJr51bk2RQgp3xO
u5Qj4EvgcWuZ6MRHXFALStOZkWhzspwBLnmJw78m5IqwjZeZzzQhIb4Kfg2Bw+zL
wMhgXJhUug6l8GqdJexde9HRtU1Dr4t4a5Dl9gTj4VCN5Of/5RJ+ydM3YjBD8ksf
viGaz7pAzXWwMCs10EE4zq9WNeF5JiQ0H8je22tyeeuB5MPl2N9DQ7eypsNuH3uE
2dKO2uteVAQpNsy+pmn1BRz6wpPe155r7U0RWK/yfidZBUMUxiamyrNNUfU/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBNHmQfDclJ7uS7mA4+Va0jA0RxgwHwYDVR0j
BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx
QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC
MDdBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw
OGUtMjI2ZmRkMDdmOWFlLzAvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQx
Q0E4OTVCMDdBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALs2ZGUbNehuY1URigt7mvx053fEtR+TZPk3
L4k2Gef9/80lX8wFIPsTr1/c2Xdzuvsog3tBjHnvETAZNreFOJstUY28gpQlx1LD
k31RXWqHlfoY4NlxlA9YuzoBPg+MOZnX6Y4iH1L9aN7px4ZkGj7AlbjQK63dE4xj
DsM3NfTdRjJcjXDVkjsf0LIcexE95t72F0ZjcEhM9K6RJ4eSIyN8mst1vVyrRb1k
lrdqfdd/CKEVFZ2QjOE30q0YC7AO622KVWGVCXmAsryhXAknyM0/m/3YckDy2Fq+
sx4E6T/HfwZBRfClo5qbDdhpsvIRGbZ4LkHxmI1jel5EATexOfU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:40 2026 by rpki-client