Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft
File:                     7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft (raw, json)
Hash identifier:          nhsDvyTN3xNL1rRUeVfCPPlqx/APvSykb6jrhGvmvzI=
Subject key identifier:   A6:81:22:BA:BD:3D:F2:AE:E9:87:8F:54:7C:03:2B:E0:BA:91:3F:F8
Authority key identifier: 71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1
Certificate issuer:       /CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1
Certificate serial:       06C6200C2C2D87F4300E81E00006E8F4F201533F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft
Manifest number:          03D8
Signing time:             Wed 18 Mar 2026 07:42:11 +0000
Manifest this update:     Wed 18 Mar 2026 07:37:11 +0000
Manifest next update:     Sat 21 Mar 2026 11:41:11 +0000
Files and hashes:         1: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl (hash: v7TRELja/Hk1Sy/lbjjMPcqxlpSBNBovOVt7dgDIInM=)
                          2: 3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa (hash: Huk9VwXKZY5qRslqFA8wI/7KNHFWY9r3OLcCPFaU2PQ=)
                          3: 3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa (hash: atE5KSrX4qCNxOqfUBA003QYsCNbJn6G5XKmt7zJQAw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl
                          rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 11:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c6:20:0c:2c:2d:87:f4:30:0e:81:e0:00:06:e8:f4:f2:01:53:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1
        Validity
            Not Before: Mar 18 07:37:11 2026 GMT
            Not After : Mar 21 11:41:11 2026 GMT
        Subject: CN=A68122BABD3DF2AEE9878F547C032BE0BA913FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:a2:e4:14:2a:53:9d:33:7e:fa:49:f9:1c:
                    1b:b7:b0:e9:7b:bf:43:48:ec:49:2e:9d:19:6a:ec:
                    89:1f:02:06:e3:97:b9:0a:1f:1b:3f:6e:23:05:96:
                    44:e2:e4:a9:1b:21:ce:c3:96:c9:66:24:1f:25:09:
                    8a:4a:03:49:d8:ef:67:dc:49:be:ee:8b:d3:6d:9d:
                    77:b7:77:a9:32:29:08:71:86:80:d0:01:9f:23:a9:
                    e6:dc:2e:10:e9:a8:93:b8:6a:17:59:72:7a:f8:7c:
                    f5:ff:f4:d2:7b:00:ce:ef:c7:21:84:21:1f:19:08:
                    67:74:9a:7a:6d:7e:8f:ed:76:49:8d:11:a0:7a:6a:
                    fc:3e:ba:ff:94:0e:9f:1b:fb:f7:44:84:f9:97:64:
                    1c:cf:59:7a:f8:93:3a:a3:75:f2:76:e0:35:96:9e:
                    3d:97:f3:a8:48:5c:a8:68:11:02:79:fc:18:32:07:
                    80:5b:70:a5:b5:f4:65:f1:13:12:13:73:fe:22:42:
                    2c:1c:e8:0f:48:f7:e6:45:83:f9:16:eb:e3:42:23:
                    2b:7b:5b:d5:8d:a3:4b:91:30:05:84:8b:f4:17:fb:
                    90:c5:72:19:ae:5b:d3:19:0f:3c:44:82:07:89:e5:
                    aa:ed:69:d6:f1:d5:e9:46:2e:7d:6c:94:ef:2b:e6:
                    1b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:81:22:BA:BD:3D:F2:AE:E9:87:8F:54:7C:03:2B:E0:BA:91:3F:F8
            X509v3 Authority Key Identifier:
                keyid:71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d5:58:1a:54:c9:04:7b:04:c2:18:2c:50:88:fd:50:37:77:
         15:72:94:d5:a1:e3:c7:29:96:38:01:ba:06:61:7c:0a:47:50:
         b7:92:43:f7:82:60:0a:14:10:9f:c4:cb:e0:cd:38:66:37:f7:
         18:92:37:f3:15:20:71:2d:2f:cd:67:fc:1d:fa:5a:ca:72:51:
         c6:15:62:70:05:45:cf:b2:aa:35:53:70:29:a9:44:24:64:a5:
         de:96:95:3c:d9:6b:09:c2:11:d7:77:ef:51:7f:39:ad:34:40:
         4e:8c:0a:9c:5e:54:fb:5a:10:89:a7:63:c5:9b:f3:6a:bc:df:
         46:b1:56:f9:16:c5:6c:2d:22:c7:89:4e:2d:9c:6d:46:da:7b:
         06:7b:7b:d1:1e:50:03:66:d7:dc:56:34:d1:2a:cd:00:e2:07:
         cb:22:fc:7f:9f:c3:dc:0f:c9:e1:9f:b6:68:3f:3a:21:43:91:
         e7:85:3c:6e:09:4d:c1:4b:76:a5:bc:65:6f:34:bd:00:eb:ba:
         c6:5b:c8:b0:1c:8a:3f:f3:e2:fe:b2:1b:55:51:a0:0b:86:95:
         22:65:dc:f3:df:a0:45:ba:5b:c9:49:80:d2:85:a7:6d:cb:31:
         8a:d4:f1:bc:92:c6:ea:b0:6b:37:b9:b3:b6:fc:aa:40:47:54:
         75:0b:b0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:40:25 2026 by rpki-client