Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft
File:                     FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft (raw, json)
Hash identifier:          DIzZH8NAk63jNM0sYK4PbIPLTE1pqUuJ45OqYp4M4bk=
Subject key identifier:   4C:CE:CF:D5:82:2C:74:95:C3:B3:2F:C9:6C:0C:1E:15:4B:CE:3E:F3
Authority key identifier: FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A
Certificate issuer:       /CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A
Certificate serial:       619888D4F43C34ECDE1A5B62203F682DA96B4ADA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft
Manifest number:          0209
Signing time:             Tue 24 Mar 2026 16:41:13 +0000
Manifest this update:     Tue 24 Mar 2026 16:36:13 +0000
Manifest next update:     Sat 28 Mar 2026 02:04:13 +0000
Files and hashes:         1: 3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa (hash: nYxGm+wXBB6BnWlg8cahicWVzy6cw/+GSLhfcV6lfLY=)
                          2: FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl (hash: RaQaojld9Ki/2IjEC8MkJqpFOWN6+zOuthcmtX1PtYI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl
                          rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 02:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:98:88:d4:f4:3c:34:ec:de:1a:5b:62:20:3f:68:2d:a9:6b:4a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A
        Validity
            Not Before: Mar 24 16:36:13 2026 GMT
            Not After : Mar 28 02:04:13 2026 GMT
        Subject: CN=4CCECFD5822C7495C3B32FC96C0C1E154BCE3EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7f:65:6f:01:be:1d:09:04:09:0c:58:91:51:
                    05:73:a3:80:f8:bd:69:b5:c6:da:7a:b2:57:be:42:
                    ce:97:da:24:0e:f1:97:98:ae:04:30:e6:33:0e:ff:
                    6a:08:87:ac:bf:9f:8d:b5:e7:a3:f5:f1:30:52:67:
                    f4:ad:d1:c8:b6:64:33:30:bc:8b:f9:e8:c4:6a:d7:
                    17:6b:30:15:98:f9:f0:17:b6:55:d9:f9:d8:e1:47:
                    97:c1:49:d3:69:92:59:b9:07:92:39:6b:ec:5e:51:
                    32:8c:84:c9:00:7e:e6:11:16:28:f6:95:c7:49:85:
                    e4:16:65:51:d2:b0:e3:57:6a:0b:b5:40:00:8b:13:
                    26:9f:ed:89:0b:bf:b9:cc:a4:16:5d:43:d5:27:75:
                    7e:20:a7:09:e7:cc:0d:6e:d8:38:2d:bc:69:9c:b1:
                    50:82:63:13:ff:fc:0b:3a:71:80:d1:d1:83:14:c7:
                    e4:1a:f1:54:ff:51:fa:be:2d:ad:c7:8d:0c:b7:33:
                    08:57:0e:6f:b7:b2:e4:99:9b:67:47:0c:5e:cd:5f:
                    a1:37:15:9d:74:c4:fa:81:03:e3:fc:4a:6e:ea:65:
                    76:e7:f8:26:51:94:6c:60:6a:cd:2b:b8:f6:09:43:
                    ca:7a:f5:26:06:30:4c:03:1e:26:03:86:17:36:13:
                    22:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CE:CF:D5:82:2C:74:95:C3:B3:2F:C9:6C:0C:1E:15:4B:CE:3E:F3
            X509v3 Authority Key Identifier:
                keyid:FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e2:4a:81:be:00:e7:ad:1b:a0:11:f7:5a:7b:84:ee:b5:57:
         30:9c:75:58:2c:0c:ca:9a:3d:63:47:67:65:be:e7:b3:36:e3:
         3e:28:2e:84:e2:2e:c7:bb:b9:bc:3d:a6:20:19:d6:b1:ef:1f:
         10:7a:d2:c9:62:b1:fd:2a:fb:71:cc:39:ee:e9:35:2a:23:2f:
         f3:f8:2e:fb:74:c7:cd:96:3b:fb:4c:30:58:65:4c:f6:53:c0:
         49:55:90:03:91:65:7c:81:81:59:8b:ae:15:dc:0a:ae:da:0f:
         09:ca:40:05:81:66:d1:76:2d:a3:7e:8a:55:cc:31:87:19:27:
         60:31:44:68:f7:0e:b2:ef:9c:9e:d4:14:5c:72:69:6f:a8:50:
         8e:74:85:0e:62:e0:83:8f:1a:7f:0d:1a:43:c1:e5:4e:34:1c:
         36:6b:d6:db:76:9d:cf:74:79:83:71:7b:5a:d5:56:c3:de:7c:
         67:10:54:54:e5:b5:7e:cf:07:fe:c3:8e:0c:fc:dc:b6:23:91:
         f0:44:79:84:c3:16:0a:94:4c:48:e2:49:77:22:8d:a1:09:c5:
         cf:e7:48:68:a2:36:26:d2:8f:08:92:f0:de:d7:c2:cd:f6:46:
         9e:25:7b:bf:a2:72:6b:e3:27:56:05:9a:5d:ff:87:3b:4e:bc:
         fe:bd:ff:0c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYZiI1PQ8NOzeGltiID9oLalrStowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZFNThB
ODE4NzkyQTAeFw0yNjAzMjQxNjM2MTNaFw0yNjAzMjgwMjA0MTNaMDMxMTAvBgNV
BAMTKDRDQ0VDRkQ1ODIyQzc0OTVDM0IzMkZDOTZDMEMxRTE1NEJDRTNFRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOf2VvAb4dCQQJDFiRUQVzo4D4
vWm1xtp6sle+Qs6X2iQO8ZeYrgQw5jMO/2oIh6y/n42156P18TBSZ/St0ci2ZDMw
vIv56MRq1xdrMBWY+fAXtlXZ+djhR5fBSdNpklm5B5I5a+xeUTKMhMkAfuYRFij2
lcdJheQWZVHSsONXagu1QACLEyaf7YkLv7nMpBZdQ9UndX4gpwnnzA1u2DgtvGmc
sVCCYxP//As6cYDR0YMUx+Qa8VT/Ufq+La3HjQy3MwhXDm+3suSZm2dHDF7NX6E3
FZ10xPqBA+P8Sm7qZXbn+CZRlGxgas0ruPYJQ8p69SYGMEwDHiYDhhc2EyKPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUTM7P1YIsdJXDsy/JbAweFUvOPvMwHwYDVR0j
BBgwFoAU/ear7huVL034XWMqiSP+WKgYeSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
Mjc0NGRkZS03YzFmLTRjYmEtOTNjMC05ZjA2NjllZWVkOTIvMC9GREU2QUJFRTFC
OTUyRjRERjg1RDYzMkE4OTIzRkU1OEE4MTg3OTJBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZFNThBODE4
NzkyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3NDRkZGUtN2MxZi00Y2JhLTkz
YzAtOWYwNjY5ZWVlZDkyLzAvRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZF
NThBODE4NzkyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAXiSoG+AOetG6AR91p7hO61VzCcdVgsDMqa
PWNHZ2W+57M24z4oLoTiLse7ubw9piAZ1rHvHxB60slisf0q+3HMOe7pNSojL/P4
Lvt0x82WO/tMMFhlTPZTwElVkAORZXyBgVmLrhXcCq7aDwnKQAWBZtF2LaN+ilXM
MYcZJ2AxRGj3DrLvnJ7UFFxyaW+oUI50hQ5i4IOPGn8NGkPB5U40HDZr1tt2nc90
eYNxe1rVVsPefGcQVFTltX7PB/7Djgz83LYjkfBEeYTDFgqUTEjiSXcijaEJxc/n
SGiiNibSjwiS8N7Xws32Rp4le7+icmvjJ1YFml3/hztOvP69/ww=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:37 2026 by rpki-client