Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
File:                     E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft (raw, json)
Hash identifier:          NxzvXaVJhbKE9wX+srXReAyYw9qNXCx2bQjA2zsGz1k=
Subject key identifier:   04:3A:0D:3E:29:72:70:85:72:70:1B:AE:4A:AB:20:52:22:16:F8:E8
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       2648D71D807C0674F5CB1014A93CACBC438F3A4A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
Manifest number:          0576
Signing time:             Fri 20 Mar 2026 03:31:46 +0000
Manifest this update:     Fri 20 Mar 2026 03:26:46 +0000
Manifest next update:     Mon 23 Mar 2026 13:35:46 +0000
Files and hashes:         1: E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl (hash: 4l0Wn4WUyUwim1Dg4TEN2WQEVh6CAyr5P6AR5qRnirQ=)
                          2: 3130332e32302e39302e302f32342d3234203d3e203538333831.roa (hash: ZCDeDW5e4bvoXPvLxe3JXfhMdTbpbaiaIpNkg+zIZ0Y=)
                          3: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (hash: da+6m2Ao8Np4pQ1E/E3mUNsxrZ/EVmn5FouVzksz9c8=)
                          4: 3130332e352e35312e302f32342d3234203d3e203538333831.roa (hash: nS7UXaLsw+XesTFtPMOcwHh9hj1HTqDHIYZibFhRrcY=)
                          5: 3130332e32302e39312e302f32342d3234203d3e203538333831.roa (hash: hmMcMiYkJO+tuTA7DC0ppoNMZ4KBMUhsy6cmF32+Qec=)
                          6: 3130332e352e35302e302f32342d3234203d3e203538333831.roa (hash: twcuhPimgN61YsKukKpiR5ZA50pVAb8Xf9OqbYaf4Xk=)
                          7: 3130332e352e35302e302f32332d3234203d3e203538333831.roa (hash: vUQFNtw/Wx42/8lzOcd3z8v6J/NH0/1TKrlG8NlfvWA=)
                          8: 3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (hash: eUwo5rKZ1JO+BNgUPFO8WjwWbLczpxzUbvuAL5kF0Zk=)
                          9: 3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (hash: PNeE/+7B+BLu8LaYSXrWWlcFbIVgwo7q+aOooyp+C94=)
                          10: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (hash: 5K/CSCkpnd8IXIfswWl0TeD0OpMXzsyDAU0E28APGJ4=)
                          11: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (hash: /Ofm9hgC2vE5yJdV0nMHS0AoKDDRKW35xmkMsGHOf0s=)
                          12: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (hash: X3xgSMVzKJ9opAYSbaWBR94z1g20KaoMiqJp72jrAmM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Mar 2026 13:35:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:48:d7:1d:80:7c:06:74:f5:cb:10:14:a9:3c:ac:bc:43:8f:3a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: Mar 20 03:26:46 2026 GMT
            Not After : Mar 23 13:35:46 2026 GMT
        Subject: CN=043A0D3E2972708572701BAE4AAB20522216F8E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:76:e3:40:b6:41:91:bf:c5:a5:6b:a9:33:
                    36:d3:f3:d1:5d:66:e6:c7:c4:b3:b6:83:94:14:ad:
                    06:92:61:f9:b8:17:10:e0:b4:04:2d:1c:e1:00:b1:
                    28:4a:cc:23:43:11:6c:83:bc:4b:6c:7d:1b:aa:ea:
                    84:9e:a0:0d:6d:a3:75:51:16:9d:b4:5f:09:86:03:
                    b1:9b:9c:33:b6:01:a6:db:d6:30:ae:75:1d:b4:ce:
                    6c:a8:bd:ce:0c:92:84:c2:46:59:ea:88:fc:63:1b:
                    a2:a7:bd:fe:88:ba:57:a8:40:4b:15:80:23:e6:40:
                    dc:1d:b0:2c:93:26:ee:27:33:95:00:eb:7b:07:2c:
                    5f:a9:24:03:15:9d:23:36:57:2c:6e:30:6c:8d:35:
                    5b:10:69:a5:2d:9b:ad:4b:87:2f:4f:f8:6e:4e:0a:
                    27:d8:aa:00:e7:ab:79:a6:dd:08:6f:fc:a1:02:da:
                    b3:5a:5c:77:50:c3:55:e5:53:83:f0:6a:bb:56:bf:
                    c8:46:46:f0:13:4f:5d:c7:75:c8:a6:14:66:66:ca:
                    df:88:e3:b4:ef:76:eb:c1:91:95:82:1e:95:d9:38:
                    01:18:4e:9c:b9:59:f3:6a:c8:e3:e7:09:75:da:6e:
                    e1:04:6d:dd:ad:e9:ef:f4:67:ca:1c:ca:57:df:19:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3A:0D:3E:29:72:70:85:72:70:1B:AE:4A:AB:20:52:22:16:F8:E8
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6c:a4:be:7b:9b:64:7f:7d:a3:f1:7f:c3:8f:35:34:3c:3f:
         15:1a:1b:12:5b:1e:a0:2c:f8:e9:5c:4e:64:27:a3:ed:87:bc:
         91:64:dd:0a:6d:88:61:95:c3:76:e3:3e:28:07:5d:1d:6e:a1:
         c7:b5:eb:8f:32:bb:e5:78:c8:ae:d4:35:d7:10:54:50:3c:12:
         68:4c:00:ef:dc:bc:66:6d:73:8b:c8:2d:f6:c3:b1:54:f8:72:
         eb:0e:a9:d1:d0:e8:34:93:69:f6:43:85:2b:a6:ef:54:75:f8:
         ca:ba:46:4e:2f:4e:00:32:d3:bb:60:51:39:6d:aa:73:7d:59:
         da:be:4c:b6:b8:32:b5:57:fb:03:2c:e8:21:96:f9:0a:5a:d8:
         ad:b1:b7:2d:4f:fc:2b:69:73:4d:d7:02:e0:84:08:54:66:c1:
         39:ba:6a:7e:06:a1:d7:cd:fa:3b:aa:c2:1d:1c:a2:5c:ad:83:
         5c:a9:1c:75:7a:d0:47:c6:62:c4:2e:be:6b:d4:2e:49:9b:21:
         16:5d:a9:25:97:6f:39:46:70:1d:1b:66:c4:07:5a:96:ba:48:
         b1:6e:f6:4c:b6:55:8d:cb:cc:2c:47:dd:66:ac:6d:02:79:40:
         78:37:e9:a1:03:e3:2b:9e:2f:46:3a:0d:d7:76:09:e4:87:0f:
         6a:73:9d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 13:59:24 2026 by rpki-client