Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
File:                     FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json)
Hash identifier:          Ga0fITJEANkAiYlaHyn+LYHpGZikfO49pF8Ag9K+A5I=
Subject key identifier:   4F:0E:2F:8E:2A:E9:96:C5:4A:78:88:66:AF:34:00:B2:16:6D:7D:5C
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Certificate issuer:       /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial:       7F774CC76D51D17476EFB39F63BB818743CA0CCC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
Manifest number:          0566
Signing time:             Tue 24 Mar 2026 05:22:27 +0000
Manifest this update:     Tue 24 Mar 2026 05:17:27 +0000
Manifest next update:     Fri 27 Mar 2026 16:57:27 +0000
Files and hashes:         1: 3130332e31312e39382e302f32342d3234203d3e203535363533.roa (hash: Ulal03KaCVZbu0jye4Et6grNN6xfSzGRs7XoejJgRmc=)
                          2: 31342e3130322e3135342e302f32342d3234203d3e203535363533.roa (hash: 3zcWmXCIsv3omjOiSti1UlbmTCz0e0HYT7ukX9kfxvE=)
                          3: 3130332e31312e39362e302f32342d3234203d3e203535363533.roa (hash: H4PttalZLNptjPsZ0cni/wefIj1b5DtDJUp4pLmDsx8=)
                          4: 31342e3130322e3135322e302f32342d3234203d3e203535363533.roa (hash: Ic0fHoziZDQ5ySiUrW0yV+eRMvxq+Fv+lvK78woem+Y=)
                          5: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (hash: zhsac+dR+hLwxuxKAvs58KLjwCG2OW3/qJ9XL7XL52Y=)
                          6: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: bGPK4/XEobq1bk7eW0IqEOt5RrHUWnGxVvGe+M2MWVI=)
                          7: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: LP20HfshJwQOceNt1VvrquukYaJYsiGhnjymh9Hizw4=)
                          8: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: tcAOfelZsfvkpX9bUklTUsOMqUIe7iMnYq8XrY6rniM=)
                          9: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: PVQdneK9Q2r+2YuMkyuS3S7JvDEOimiQ6kS5G4qY3D8=)
                          10: 31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (hash: is5MWGQz2ThLibcgEVqAwJiiHTPRuDzYs+szhUZM1uA=)
                          11: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: VXuEsrUjBUraWB5GeM4W6dfuMEU9X+IXajG+jXJX29c=)
                          12: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: zwjRbhAd37vYOMqQTMDgbFZLcXrfLuBXrkpquQN03WE=)
                          13: 31342e3130322e3135352e302f32342d3234203d3e203535363533.roa (hash: Aqv+Cv2xxpkL4seMoOW2PqWbLLYJHATV5/+tD0LtsgA=)
                          14: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: r4N7YVGjSR/vf/OS/81YrBx8jNMdTo+vkJbDS2Aeqlg=)
                          15: 3130332e31312e39392e302f32342d3234203d3e203535363533.roa (hash: IOFzZe1IvwoIGSoJhxZwtkEkEW47dvJdJ0E5fC3jeys=)
                          16: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 9BxarKCax6xXzwA7sCkwW9bstNPy4ZEaa9LRlsVppIQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
                          rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 16:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:77:4c:c7:6d:51:d1:74:76:ef:b3:9f:63:bb:81:87:43:ca:0c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
        Validity
            Not Before: Mar 24 05:17:27 2026 GMT
            Not After : Mar 27 16:57:27 2026 GMT
        Subject: CN=4F0E2F8E2AE996C54A788866AF3400B2166D7D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bc:3c:c6:68:be:93:8d:9c:7c:6c:39:d2:d4:
                    88:e5:7f:4a:cd:5a:9c:f5:1a:d4:10:f8:ed:4e:af:
                    bb:65:81:1d:40:f1:43:b5:db:bd:de:74:eb:94:33:
                    f5:58:25:6d:0b:73:b5:bf:df:51:09:f1:31:74:b5:
                    e1:2e:96:40:3d:45:58:d3:b0:18:c4:54:b6:a1:c3:
                    ca:93:69:fb:e8:9a:24:4e:a7:8d:50:be:d9:08:e7:
                    a6:f0:66:b0:7f:5d:37:95:07:88:d2:4c:d7:56:59:
                    a2:61:ca:33:4f:cc:ea:8e:3d:32:c1:ca:fe:0e:18:
                    11:ea:71:f4:a4:75:b6:3f:a0:8c:77:df:d2:31:d7:
                    5a:57:35:a7:f6:1d:60:06:8b:5a:49:e3:a7:32:f9:
                    7c:c6:e7:28:6f:fd:9d:b8:6c:34:bb:9c:e8:04:1a:
                    36:33:c8:56:3a:e6:d1:80:f7:97:90:40:7a:9c:16:
                    61:bd:21:a2:da:88:3e:0e:75:2b:69:91:0c:1d:12:
                    8d:cb:d5:a4:de:93:b8:7c:52:a2:1b:5a:16:a9:76:
                    f1:b9:62:52:1c:36:a8:1e:42:a3:84:5a:5e:d8:7c:
                    5d:f6:d1:6b:ed:99:71:e1:44:f7:85:da:4f:9f:d2:
                    bd:c1:af:ff:36:42:d7:40:9e:5b:62:58:48:d7:0d:
                    50:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0E:2F:8E:2A:E9:96:C5:4A:78:88:66:AF:34:00:B2:16:6D:7D:5C
            X509v3 Authority Key Identifier:
                keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:3e:65:de:dd:1c:5f:75:2c:22:95:26:b8:71:5b:0a:98:8b:
         8a:6f:fe:47:c1:03:02:9c:bf:e1:b6:13:d9:2f:a1:f7:94:1b:
         5b:1d:b0:48:5e:6b:39:17:5f:89:04:e3:8a:88:ba:0e:00:bb:
         ab:28:44:b5:32:4b:88:34:b5:ba:95:73:73:f2:c0:b2:90:49:
         85:d4:26:a0:db:c9:7d:7c:03:e8:a9:13:e9:c2:6f:e5:d9:5f:
         62:c0:5a:d4:0d:f9:26:df:e1:f6:6e:36:72:55:91:74:8a:ad:
         d1:18:da:ab:48:76:ce:62:cd:70:71:e4:a9:47:be:b2:34:4a:
         84:19:ef:42:9a:ce:52:9d:04:e0:67:23:d5:db:d2:d0:ee:e1:
         1e:44:d1:56:f3:ff:1c:15:57:ed:ac:1d:12:46:c0:f8:bb:39:
         8f:f9:bc:fb:14:b0:2b:79:97:96:f6:f6:19:7d:6a:48:1a:e6:
         04:3f:e5:9c:68:33:01:7c:0f:5c:5e:4c:03:85:be:3b:1e:d2:
         ce:ca:61:df:8c:c1:5e:b9:55:2f:43:7a:cb:33:bd:32:a3:ae:
         62:c6:d6:91:3f:c1:3f:47:40:ab:82:69:c5:25:10:9a:05:90:
         4d:04:56:51:c9:31:b1:d1:47:9b:67:fb:97:fe:d1:c1:18:8f:
         67:d5:42:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:58:31 2026 by rpki-client