Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
File:                     1976DD7D4FBDFBEB355F0B96690613959E106872.mft (raw, json)
Hash identifier:          W456WQZgm6zT8K+Z+PtUVvSR9EisdS0rbVQD40qgSoM=
Subject key identifier:   B2:52:22:C6:94:94:44:4B:DD:AB:3B:66:CD:17:F1:CF:56:5C:DC:04
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       47570FD991D14F48D3B513EE6E44FAC016A1D7F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
Manifest number:          0564
Signing time:             Wed 25 Mar 2026 12:02:10 +0000
Manifest this update:     Wed 25 Mar 2026 11:57:10 +0000
Manifest next update:     Sat 28 Mar 2026 13:45:10 +0000
Files and hashes:         1: 3230332e3231302e38342e302f32322d3232203d3e203535363939.roa (hash: 7SlCCBwvpXf5oNDVNUKjezl2ujoj3pY3VJsCEIji7gA=)
                          2: 3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa (hash: Z0HkArdqIMJrBesbtTWXeTOTwVWpOh3aH8V39csunso=)
                          3: 3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (hash: QRbMpzKdAfgfaj6wVJQ8tKGh3zUVZXKDZTbjWChNsSM=)
                          4: 3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (hash: GRueTMA2O7baTL3L4l0x1m5orgjkTOBplI10xnIAWvE=)
                          5: 3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa (hash: y4LCjeHJUSobMj/KV8lbwGmURe5cadaNn3OVULBwa7M=)
                          6: 3130332e32332e33322e302f32322d3232203d3e203535363939.roa (hash: 6MeWYAWtNqzt67sAV06u6BArwq93v2nLiPhDZr8DwFc=)
                          7: 3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa (hash: 5aSqM2G2yl80LesSPcdF7TAurA8t2nRlgTMy90PqfEI=)
                          8: 3136302e31392e36342e302f32322d3232203d3e203535363939.roa (hash: yJK4a8K11r+E+tJag+nY+8xsV5fpS89Sq9CzTcNXWcQ=)
                          9: 1976DD7D4FBDFBEB355F0B96690613959E106872.crl (hash: emvyVGtUsxPFxA8pWvPkmqjFCbLSBMYAm7swSfdQA4w=)
                          10: 3132312e35322e3133362e302f32312d3231203d3e203535363939.roa (hash: LXI9mNoX4MU73UV9+XQILK6lbIuNFPN8Km57asx93mE=)
                          11: 323430343a613163303a3a2f33322d3332203d3e203535363939.roa (hash: 8hhOR4WCINakOuDn9ngdKAlBm2vVq/aSfVO70m35uwA=)
                          12: 3130332e3235352e3135362e302f32332d3233203d3e203535363939.roa (hash: KQGoiV9BbegSAyEwUGTDu3EKXx16FmPyMikvR+g+1xM=)
                          13: 3230332e3230372e35362e302f32322d3232203d3e203535363939.roa (hash: pgKybEe1UDr8NMq8IDGfdGJ30yQQRx6GVXnTuNxgMuU=)
                          14: 3230322e3135312e31322e302f32322d3232203d3e203535363939.roa (hash: X7lH+ZABzDfLLUY93QifZSz4LLPKca9OeiY0/c7tpYs=)
                          15: 3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (hash: IBqG3JTOb2BDjjHywaslInJ9v2wxZNaFPsj9QnGmFyU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 13:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:57:0f:d9:91:d1:4f:48:d3:b5:13:ee:6e:44:fa:c0:16:a1:d7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Mar 25 11:57:10 2026 GMT
            Not After : Mar 28 13:45:10 2026 GMT
        Subject: CN=B25222C69494444BDDAB3B66CD17F1CF565CDC04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:e4:4a:02:31:d8:f6:29:7c:8d:14:f5:ae:
                    3a:cc:68:9c:41:56:1c:fc:c5:07:ce:8e:e9:4b:39:
                    20:ef:55:5c:11:bf:84:d0:8d:8e:83:b7:a8:6f:c9:
                    81:60:74:30:20:1e:8c:27:6b:bc:be:52:67:fc:97:
                    13:c6:12:86:a1:ea:64:01:71:4f:05:fa:07:5f:cf:
                    65:ee:7e:9f:4a:91:e5:17:ad:03:8c:83:b2:ed:c2:
                    9a:4c:d7:70:cc:eb:17:c7:8f:43:4d:d3:33:a3:3e:
                    f4:44:d1:b1:74:71:bf:1c:f2:bc:08:b3:60:b0:69:
                    08:be:bb:ee:34:8a:a0:9c:f1:05:f9:74:d0:5a:8e:
                    ef:52:c2:a5:84:7d:df:ca:23:f0:4e:c3:0e:39:de:
                    5d:2f:90:20:ba:f2:6b:d3:40:60:0d:4d:88:84:db:
                    19:58:ee:ec:85:89:9b:8a:d2:fa:4a:6e:f3:2e:86:
                    c9:58:6a:f8:2a:18:b0:22:90:51:03:eb:14:f1:86:
                    bc:c2:cc:1a:7c:51:8b:78:28:3e:d4:2f:5c:16:b3:
                    ea:a1:10:26:2c:d6:71:52:55:b3:45:d8:bb:e5:49:
                    d0:21:da:46:7f:ea:8c:6a:76:61:4b:c2:5a:6d:ca:
                    07:f2:28:f4:77:5f:97:84:f9:7b:55:64:21:83:cd:
                    e4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:52:22:C6:94:94:44:4B:DD:AB:3B:66:CD:17:F1:CF:56:5C:DC:04
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c6:87:52:06:6a:61:a1:ae:88:84:ed:fe:74:ac:b9:d3:8a:
         3d:f5:5f:a5:a7:3f:50:5b:6e:77:c4:24:a0:ba:27:a8:d1:e8:
         5b:b2:cd:5a:1e:ca:8a:8b:52:a0:f5:63:fe:2b:a0:3d:14:4d:
         81:e6:94:9a:8b:bc:37:c7:50:ad:e0:df:5a:c4:91:51:1d:7a:
         30:32:64:0c:af:2f:b6:17:31:ed:eb:c1:b7:8b:34:1a:5f:db:
         de:00:8e:bb:24:f5:82:6a:13:5a:1f:b2:5b:1f:a8:b7:5d:bf:
         ac:49:86:48:a8:d9:99:91:0e:b9:ae:6d:a2:84:ca:50:73:a9:
         1f:c2:be:28:4e:6d:e4:2c:b4:02:04:65:03:d6:87:84:de:23:
         5a:e9:e5:eb:45:c0:f1:be:10:d1:b2:70:e6:53:12:d4:42:ec:
         a4:82:ea:d9:d8:a3:60:84:47:52:6f:f5:6d:9d:ec:89:9d:54:
         90:e3:a0:4f:8a:56:52:9f:e0:9d:b7:04:78:ea:11:6d:07:5e:
         ef:4b:10:88:f4:7a:4a:9c:fa:7d:c4:88:03:ae:35:26:4f:9a:
         f2:a8:0d:0f:70:6d:b2:dc:8e:c0:98:da:8c:05:be:ff:71:e4:
         c3:9d:65:88:9a:c1:e6:e2:0e:ba:bf:bf:04:e6:89:46:87:65:
         2b:10:3c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:13:23 2026 by rpki-client