Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/462310BC71429E762524CFB126D88F0808C17EA6.mft
File:                     462310BC71429E762524CFB126D88F0808C17EA6.mft (raw, json)
Hash identifier:          gOpmMamJISRsDD+1TriuuDHmLWbxqkyVYf4c0TTvNwo=
Subject key identifier:   11:D5:C8:73:FA:56:74:59:6D:66:46:E9:00:F8:28:1C:6D:0F:13:51
Authority key identifier: 46:23:10:BC:71:42:9E:76:25:24:CF:B1:26:D8:8F:08:08:C1:7E:A6
Certificate issuer:       /CN=462310BC71429E762524CFB126D88F0808C17EA6
Certificate serial:       35A49ABB308205A78BAFFC3048E9C43832FBDF7D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/462310BC71429E762524CFB126D88F0808C17EA6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/462310BC71429E762524CFB126D88F0808C17EA6.mft
Manifest number:          01BD
Signing time:             Wed 25 Mar 2026 18:10:57 +0000
Manifest this update:     Wed 25 Mar 2026 18:05:57 +0000
Manifest next update:     Sat 28 Mar 2026 22:56:57 +0000
Files and hashes:         1: 3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa (hash: 9dEps8rTL9BK+ay3BeWlPldLGwUU4MuBEz8LBiFA+Dw=)
                          2: 462310BC71429E762524CFB126D88F0808C17EA6.crl (hash: pRotLQfFaIlgqvPPT5BHtFIBtpt8eHLo0yxuOsZOZCQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/462310BC71429E762524CFB126D88F0808C17EA6.crl
                          rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/462310BC71429E762524CFB126D88F0808C17EA6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/462310BC71429E762524CFB126D88F0808C17EA6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 22:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a4:9a:bb:30:82:05:a7:8b:af:fc:30:48:e9:c4:38:32:fb:df:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=462310BC71429E762524CFB126D88F0808C17EA6
        Validity
            Not Before: Mar 25 18:05:57 2026 GMT
            Not After : Mar 28 22:56:57 2026 GMT
        Subject: CN=11D5C873FA5674596D6646E900F8281C6D0F1351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:94:f5:75:55:ca:d8:aa:22:26:c1:b7:53:
                    9f:2f:08:a5:d0:f8:bc:bf:2d:da:c1:ea:a4:65:ce:
                    2e:ba:9a:71:08:9f:af:5d:ac:bf:71:58:ea:9a:c0:
                    c4:df:79:29:ef:03:27:32:a6:b5:b5:e3:d3:31:36:
                    40:c5:91:2d:6f:db:9a:0c:1c:0c:05:b1:4b:49:27:
                    a3:e1:b1:c1:ce:48:88:9b:74:6b:59:be:1f:27:ee:
                    89:37:71:5d:cd:b4:53:c5:47:ed:f7:52:b5:bb:e2:
                    40:4b:f2:68:0c:18:cf:3f:01:24:c5:f0:e0:c6:81:
                    08:96:36:98:59:c2:c1:a0:9c:c0:65:1a:f1:47:5d:
                    33:30:02:4a:64:c6:53:d3:f7:a3:c4:1e:f4:6d:ed:
                    db:96:56:04:26:17:82:11:b0:71:e7:78:2a:df:fd:
                    12:87:03:79:5d:e5:bb:e4:40:c7:af:6b:06:9a:aa:
                    f5:b1:ab:bb:c0:eb:f0:ec:d9:ed:02:a3:a7:f1:41:
                    78:df:a2:a0:12:7c:7f:63:3b:d6:3e:b3:db:e6:42:
                    ed:e6:c3:84:7f:a5:5d:4c:bb:8e:91:a6:bf:62:3f:
                    9a:64:96:df:bf:06:2b:8f:49:f8:21:1f:af:03:3e:
                    26:7d:3d:eb:43:46:a4:00:21:0f:51:a1:0e:8e:5b:
                    fa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D5:C8:73:FA:56:74:59:6D:66:46:E9:00:F8:28:1C:6D:0F:13:51
            X509v3 Authority Key Identifier:
                keyid:46:23:10:BC:71:42:9E:76:25:24:CF:B1:26:D8:8F:08:08:C1:7E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/462310BC71429E762524CFB126D88F0808C17EA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/462310BC71429E762524CFB126D88F0808C17EA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/462310BC71429E762524CFB126D88F0808C17EA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3f:53:43:26:13:78:f8:07:ca:fa:2d:5c:67:36:51:8e:f5:
         2a:be:08:db:3b:3a:70:d2:0e:3e:5a:08:8b:e2:f7:5a:6a:5d:
         7f:79:c8:fc:ee:b9:c0:6e:b8:3a:48:88:11:c9:ed:5c:e5:50:
         cf:ef:7d:ea:0b:c7:18:8d:70:7c:e9:02:0c:4f:3d:f1:46:67:
         46:9b:43:f8:52:71:d2:68:06:84:32:79:49:bc:93:38:60:41:
         f8:fa:da:0c:54:80:65:75:fb:92:79:06:d9:c8:32:8d:28:5e:
         17:bc:1a:db:8e:59:e6:eb:3b:99:86:51:82:d3:45:3f:72:67:
         79:6e:24:fc:1d:98:bb:21:b7:73:0d:f6:dc:58:a4:f2:4a:8d:
         2a:94:a6:93:8c:5d:41:dc:0e:e8:92:da:f5:2d:8f:a2:73:8a:
         a4:fa:9b:64:ba:73:29:0a:43:46:bf:7d:1d:fb:20:3a:dc:6f:
         6c:02:dc:48:51:e2:a5:b1:b9:f1:48:fe:a4:31:8f:4d:fb:7d:
         17:be:28:5d:fc:50:a2:19:f9:73:94:cc:a0:ff:bb:50:ad:3a:
         0d:9c:6b:eb:03:a0:5e:76:b2:d4:4f:db:03:63:b7:fc:35:0a:
         90:40:bc:74:eb:66:52:9e:1c:d1:b4:bc:2d:7f:91:18:26:0f:
         bd:a1:91:3c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNaSauzCCBaeLr/wwSOnEODL7330wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYyMzEwQkM3MTQyOUU3NjI1MjRDRkIxMjZEODhGMDgw
OEMxN0VBNjAeFw0yNjAzMjUxODA1NTdaFw0yNjAzMjgyMjU2NTdaMDMxMTAvBgNV
BAMTKDExRDVDODczRkE1Njc0NTk2RDY2NDZFOTAwRjgyODFDNkQwRjEzNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAj5T1dVXK2KoiJsG3U58vCKXQ
+Ly/LdrB6qRlzi66mnEIn69drL9xWOqawMTfeSnvAycyprW149MxNkDFkS1v25oM
HAwFsUtJJ6PhscHOSIibdGtZvh8n7ok3cV3NtFPFR+33UrW74kBL8mgMGM8/ASTF
8ODGgQiWNphZwsGgnMBlGvFHXTMwAkpkxlPT96PEHvRt7duWVgQmF4IRsHHneCrf
/RKHA3ld5bvkQMevawaaqvWxq7vA6/Ds2e0Co6fxQXjfoqASfH9jO9Y+s9vmQu3m
w4R/pV1Mu46Rpr9iP5pklt+/BiuPSfghH68DPiZ9PetDRqQAIQ9RoQ6OW/oNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEdXIc/pWdFltZkbpAPgoHG0PE1EwHwYDVR0j
BBgwFoAURiMQvHFCnnYlJM+xJtiPCAjBfqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MzZkNmE0Zi1jYzM5LTRkOWUtODQxZC0wMGJkN2RjYjE3NWEvMC80NjIzMTBCQzcx
NDI5RTc2MjUyNENGQjEyNkQ4OEYwODA4QzE3RUE2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDYyMzEwQkM3MTQyOUU3NjI1MjRDRkIxMjZEODhGMDgwOEMx
N0VBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM2ZDZhNGYtY2MzOS00ZDllLTg0
MWQtMDBiZDdkY2IxNzVhLzAvNDYyMzEwQkM3MTQyOUU3NjI1MjRDRkIxMjZEODhG
MDgwOEMxN0VBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFM/U0MmE3j4B8r6LVxnNlGO9Sq+CNs7OnDS
Dj5aCIvi91pqXX95yPzuucBuuDpIiBHJ7VzlUM/vfeoLxxiNcHzpAgxPPfFGZ0ab
Q/hScdJoBoQyeUm8kzhgQfj62gxUgGV1+5J5BtnIMo0oXhe8GtuOWebrO5mGUYLT
RT9yZ3luJPwdmLsht3MN9txYpPJKjSqUppOMXUHcDuiS2vUtj6JziqT6m2S6cykK
Q0a/fR37IDrcb2wC3EhR4qWxufFI/qQxj037fRe+KF38UKIZ+XOUzKD/u1CtOg2c
a+sDoF52stRP2wNjt/w1CpBAvHTrZlKeHNG0vC1/kRgmD72hkTw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:12 2026 by rpki-client