Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft
File:                     4551A032C44485FF6593E043527E3E1CE35B4C46.mft (raw, json)
Hash identifier:          etW47f4UajQK4BwTUrBF9wv8I1+Mhoiz9Ij9S9mUvjg=
Subject key identifier:   5D:90:0E:D2:FA:2E:65:DA:1A:2E:F9:CF:B7:2D:62:7A:B2:2F:F3:03
Authority key identifier: 45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46
Certificate issuer:       /CN=4551A032C44485FF6593E043527E3E1CE35B4C46
Certificate serial:       6EF96C042E9F8D62A84B5CE9FEF0C53D13087DD3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft
Manifest number:          055F
Signing time:             Wed 25 Mar 2026 13:41:24 +0000
Manifest this update:     Wed 25 Mar 2026 13:36:24 +0000
Manifest next update:     Sat 28 Mar 2026 13:54:24 +0000
Files and hashes:         1: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (hash: cwL/Wm98vbTxoyJQfTlH4ycMGF6EbITvKpTsxzWifEM=)
                          2: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (hash: MKGEqu2Psk6FQlMCBwUj3C02UOwY+xcEBLE/JQF9Mu0=)
                          3: 4551A032C44485FF6593E043527E3E1CE35B4C46.crl (hash: lWRRMTsOSoDYOIAGppr8g8npJR84yYkfF6ng454EQeE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl
                          rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 13:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f9:6c:04:2e:9f:8d:62:a8:4b:5c:e9:fe:f0:c5:3d:13:08:7d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4551A032C44485FF6593E043527E3E1CE35B4C46
        Validity
            Not Before: Mar 25 13:36:24 2026 GMT
            Not After : Mar 28 13:54:24 2026 GMT
        Subject: CN=5D900ED2FA2E65DA1A2EF9CFB72D627AB22FF303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:05:49:df:1d:a7:d8:9f:00:65:6e:3c:87:
                    b0:a8:71:3b:75:41:d4:7a:71:aa:04:5b:fb:0b:40:
                    0e:3b:a0:b0:3f:2b:0d:96:77:1f:f9:0e:41:b2:1a:
                    8b:89:60:46:5c:e3:29:81:24:cc:1f:5b:b8:7b:a8:
                    1a:86:e1:f5:ae:f5:47:a5:f4:40:8d:95:67:f1:a7:
                    4b:10:b7:e8:46:ad:e2:81:8f:ba:bd:6d:9d:43:3b:
                    d9:ce:28:ce:d5:db:c3:8c:a4:c8:f1:da:10:de:69:
                    45:3e:5f:16:95:c7:1e:14:39:6b:1a:81:62:24:2f:
                    c7:47:57:c9:41:16:96:1d:10:52:9b:26:36:60:45:
                    7e:b2:bb:93:72:b7:2d:66:06:ec:8a:5f:74:4c:a2:
                    29:a0:0c:49:20:3a:25:e8:2a:9e:8c:53:b1:09:fe:
                    14:37:a4:d8:94:ed:6d:15:a0:98:b4:49:b2:d7:a2:
                    b5:60:b8:8a:c9:3c:92:cc:e2:53:a0:4c:cc:1b:5a:
                    54:05:88:8b:83:e4:bb:c5:96:35:fa:11:4e:6c:41:
                    fd:48:2f:56:69:07:2f:f1:ad:dc:d1:47:6c:33:e9:
                    8e:2e:ab:ae:f5:a9:0e:90:7f:d9:bb:68:dc:25:3a:
                    9f:63:bf:61:f3:f2:7a:b7:b7:12:f0:df:2b:93:7e:
                    18:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:90:0E:D2:FA:2E:65:DA:1A:2E:F9:CF:B7:2D:62:7A:B2:2F:F3:03
            X509v3 Authority Key Identifier:
                keyid:45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2e:c5:cd:e0:07:48:9f:b4:20:13:2d:83:df:ef:6c:b0:b2:
         65:1b:3b:e4:ee:22:16:82:66:88:fb:3d:3c:02:37:d9:83:b0:
         a5:ef:ad:3d:c1:ec:11:80:a4:d2:4c:54:9c:2d:dd:8f:be:d1:
         3b:18:5e:d9:e5:21:fb:27:5e:56:fe:f3:56:9f:cb:e0:7a:f2:
         51:b6:4f:62:46:b5:12:0c:0e:db:9e:e1:8b:03:b5:d6:58:32:
         c3:e1:b9:63:56:d2:5b:28:f0:69:e0:a9:e7:51:52:f4:79:2f:
         8b:b9:4e:a0:a3:0b:36:81:64:81:6e:0e:16:e9:65:57:7f:07:
         d5:78:7e:b5:f4:60:87:6a:0f:60:17:04:13:f4:0a:75:0d:3d:
         ed:ba:2c:de:9b:a6:4b:40:f2:e6:03:55:25:cc:83:b2:95:80:
         5a:29:21:d4:39:88:31:7e:47:61:cb:a5:5c:42:1b:bf:43:b6:
         5e:a8:73:78:e2:bb:6d:86:32:e2:3e:e0:84:88:e9:56:2b:32:
         1a:74:5c:16:f4:09:0b:0c:d4:d8:d3:a7:4b:7b:33:fe:78:df:
         e1:a1:6a:f7:ba:80:44:09:4b:a0:2c:6d:f0:5a:08:65:65:98:
         6a:31:80:5d:f4:74:e6:8d:66:25:bf:53:ce:a8:d8:30:0a:01:
         e9:8d:29:39
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbvlsBC6fjWKoS1zp/vDFPRMIfdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNF
MzVCNEM0NjAeFw0yNjAzMjUxMzM2MjRaFw0yNjAzMjgxMzU0MjRaMDMxMTAvBgNV
BAMTKDVEOTAwRUQyRkEyRTY1REExQTJFRjlDRkI3MkQ2MjdBQjIyRkYzMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tQVJ3x2n2J8AZW48h7CocTt1
QdR6caoEW/sLQA47oLA/Kw2Wdx/5DkGyGouJYEZc4ymBJMwfW7h7qBqG4fWu9Uel
9ECNlWfxp0sQt+hGreKBj7q9bZ1DO9nOKM7V28OMpMjx2hDeaUU+XxaVxx4UOWsa
gWIkL8dHV8lBFpYdEFKbJjZgRX6yu5Nyty1mBuyKX3RMoimgDEkgOiXoKp6MU7EJ
/hQ3pNiU7W0VoJi0SbLXorVguIrJPJLM4lOgTMwbWlQFiIuD5LvFljX6EU5sQf1I
L1ZpBy/xrdzRR2wz6Y4uq671qQ6Qf9m7aNwlOp9jv2Hz8nq3txLw3yuTfhjtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUXZAO0vouZdoaLvnPty1ierIv8wMwHwYDVR0j
BBgwFoAURVGgMsREhf9lk+BDUn4+HONbTEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
M2E2MmM5YS1kNGYwLTQ1NGItODA3Zi04NGY5YjNjMjAyYjMvMC80NTUxQTAzMkM0
NDQ4NUZGNjU5M0UwNDM1MjdFM0UxQ0UzNUI0QzQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNFMzVC
NEM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNhNjJjOWEtZDRmMC00NTRiLTgw
N2YtODRmOWIzYzIwMmIzLzAvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNF
MUNFMzVCNEM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABQuxc3gB0iftCATLYPf72ywsmUbO+TuIhaC
Zoj7PTwCN9mDsKXvrT3B7BGApNJMVJwt3Y++0TsYXtnlIfsnXlb+81afy+B68lG2
T2JGtRIMDtue4YsDtdZYMsPhuWNW0lso8GngqedRUvR5L4u5TqCjCzaBZIFuDhbp
ZVd/B9V4frX0YIdqD2AXBBP0CnUNPe26LN6bpktA8uYDVSXMg7KVgFopIdQ5iDF+
R2HLpVxCG79Dtl6oc3jiu22GMuI+4ISI6VYrMhp0XBb0CQsM1NjTp0t7M/543+Gh
ave6gEQJS6AsbfBaCGVlmGoxgF30dOaNZiW/U86o2DAKAemNKTk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:30 2026 by rpki-client