Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft
File:                     3B6C011787F4528DAFAEE19B8408D9405F030E61.mft (raw, json)
Hash identifier:          Q95bjSuS4K1kDv7HQYhXLbGP0Wi++2lGqs8ngpVNp1w=
Subject key identifier:   82:F2:CC:11:1D:7A:E8:F6:3C:1B:DF:B2:4F:B2:68:0E:7A:F0:DD:81
Authority key identifier: 3B:6C:01:17:87:F4:52:8D:AF:AE:E1:9B:84:08:D9:40:5F:03:0E:61
Certificate issuer:       /CN=3B6C011787F4528DAFAEE19B8408D9405F030E61
Certificate serial:       441D10A979A734248B802D60EAD070DE946AE5B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B6C011787F4528DAFAEE19B8408D9405F030E61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft
Manifest number:          11
Signing time:             Tue 17 Mar 2026 08:32:42 +0000
Manifest this update:     Tue 17 Mar 2026 08:27:42 +0000
Manifest next update:     Fri 20 Mar 2026 15:16:42 +0000
Files and hashes:         1: 3B6C011787F4528DAFAEE19B8408D9405F030E61.crl (hash: TdO3hWIwun2hi8X2scveWPmZeDcRgHLle7WcJn7aeyY=)
                          2: 3130332e3131352e39392e302f32342d3234203d3e20313337333536.roa (hash: qF7ZyvBLQXU0z6sQinAxqtICo9LN6FDZ9IqqCQLq5zI=)
                          3: 323030313a6466353a323530303a3a2f34382d3438203d3e20313337333536.roa (hash: rTSV+CqWgDbyB0T8+UwJX4nONp+OV7Tlp7vmg3QUH/0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.crl
                          rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B6C011787F4528DAFAEE19B8408D9405F030E61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 15:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1d:10:a9:79:a7:34:24:8b:80:2d:60:ea:d0:70:de:94:6a:e5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B6C011787F4528DAFAEE19B8408D9405F030E61
        Validity
            Not Before: Mar 17 08:27:42 2026 GMT
            Not After : Mar 20 15:16:42 2026 GMT
        Subject: CN=82F2CC111D7AE8F63C1BDFB24FB2680E7AF0DD81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:30:2e:9a:56:93:eb:01:a2:7f:cf:17:2f:ad:
                    31:04:14:3a:b8:2d:f2:1c:69:ea:cf:59:74:2b:41:
                    43:34:f6:b3:f6:d4:5d:96:72:02:d0:bb:bc:16:39:
                    4b:54:36:42:ff:d0:ac:74:ec:95:bf:2a:ba:09:4b:
                    9d:9e:93:e7:4a:6a:d9:5f:e6:d7:26:65:62:79:de:
                    74:7e:21:3b:36:4a:28:dc:b9:de:08:09:fb:d7:94:
                    ae:f1:83:a2:f9:43:3a:d2:5a:d0:71:8c:85:50:46:
                    ce:15:51:bc:f4:09:3a:0b:ce:4e:47:b7:65:4d:a1:
                    38:f4:12:57:45:b3:9b:46:8d:6b:4a:77:dd:6b:75:
                    65:06:c4:04:09:6e:bf:d4:59:50:36:88:cd:e7:9e:
                    81:ed:bf:1a:c3:ce:99:fe:4c:0e:2f:c8:71:00:fe:
                    8b:70:fb:8d:fe:21:62:6a:29:d7:bb:8e:6c:07:9d:
                    6e:59:61:5e:cb:ce:1a:11:37:d8:93:52:a9:98:e6:
                    6e:47:9b:a9:18:78:51:f3:32:63:94:14:0c:a1:57:
                    88:eb:43:b7:00:89:72:97:08:20:54:84:9a:a0:65:
                    bc:46:d7:7f:f6:d3:b4:38:23:c9:a1:4f:0d:af:90:
                    cb:f8:14:b3:34:15:c4:6e:a6:25:e0:66:70:37:6f:
                    b7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F2:CC:11:1D:7A:E8:F6:3C:1B:DF:B2:4F:B2:68:0E:7A:F0:DD:81
            X509v3 Authority Key Identifier:
                keyid:3B:6C:01:17:87:F4:52:8D:AF:AE:E1:9B:84:08:D9:40:5F:03:0E:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B6C011787F4528DAFAEE19B8408D9405F030E61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:06:3a:89:4b:6e:61:bd:9c:3d:67:ca:12:4c:77:99:10:6d:
         c0:1e:ec:e8:4e:bc:3b:af:91:df:f1:43:47:ab:48:a6:5a:91:
         bf:7b:bc:08:b8:68:51:7c:9a:56:93:28:aa:49:e7:0f:e3:6a:
         71:fa:26:45:4a:ec:d7:95:fb:30:6a:a0:dd:66:82:71:79:e6:
         3a:91:94:af:b3:85:f9:47:11:57:89:1c:62:0e:21:ff:d0:ce:
         81:54:5e:ea:be:71:55:bb:48:6c:b2:67:d0:d8:5b:4d:f0:25:
         0a:d5:9a:64:ee:d2:4b:29:23:9f:08:d7:cc:5d:80:9d:c0:23:
         ac:13:ee:c8:fb:ba:31:9e:f8:fd:0f:02:32:1f:12:09:fa:68:
         27:21:86:bc:1d:f7:b7:03:70:83:bf:1b:07:52:68:01:30:71:
         8d:03:69:64:e6:40:5a:b7:cb:59:00:c0:66:27:6d:b1:9e:06:
         5c:21:cd:b3:27:e6:c0:ef:86:25:dd:a4:73:2a:84:e2:13:47:
         27:ea:15:e5:1a:ff:26:35:94:15:04:5f:71:b0:88:53:6e:34:
         6c:b8:7f:ab:3f:35:ce:7a:fb:8d:d5:a8:21:e0:eb:5a:41:51:
         6a:f6:08:b7:81:3b:2c:9e:ff:69:b3:81:74:54:d3:ce:bc:39:
         2a:fa:44:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:36:13 2026 by rpki-client