Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft
File:                     31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json)
Hash identifier:          5o5uZsA29uGZTamiyuqBr5kYLEUwmthCddCIY963d8o=
Subject key identifier:   50:02:A2:6B:19:33:87:5A:5A:F8:33:A7:13:D8:D1:1F:A2:80:95:7C
Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C
Certificate issuer:       /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C
Certificate serial:       69D7AB3CDBBC51D891517B6A3F9693C222136A85
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft
Manifest number:          0514
Signing time:             Tue 17 Mar 2026 14:21:23 +0000
Manifest this update:     Tue 17 Mar 2026 14:16:23 +0000
Manifest next update:     Fri 20 Mar 2026 22:38:23 +0000
Files and hashes:         1: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: Oi7fTgBrQUHh0LCMFbO5c5/8ZtBJ6tfzSSx+iJl3WYU=)
                          2: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: OKqI7wk9s+5lWRf35Yfqzmg5yNGtB9DsiRyeUnZnzmU=)
                          3: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 4tzfw7v7zN8EuKwfSetCDIUtnJqIsP5H9YVxzc/+js4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl
                          rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 21:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d7:ab:3c:db:bc:51:d8:91:51:7b:6a:3f:96:93:c2:22:13:6a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C
        Validity
            Not Before: Mar 17 14:16:23 2026 GMT
            Not After : Mar 20 22:38:23 2026 GMT
        Subject: CN=5002A26B1933875A5AF833A713D8D11FA280957C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:34:0e:95:06:ed:25:f6:5e:5e:85:d3:83:
                    8d:d3:4a:ad:00:a6:c9:3e:09:18:b1:2a:4b:84:e9:
                    9b:ef:54:7f:d4:a2:cf:d8:b8:8d:07:f2:57:80:53:
                    33:6b:53:06:8a:30:7f:a0:e8:11:30:33:ca:cf:84:
                    66:31:df:ae:70:d6:7b:75:59:97:eb:87:3f:09:56:
                    32:4f:f0:b8:a6:55:ae:7b:e4:0d:da:b8:c2:f6:dd:
                    6e:85:7a:6b:02:4f:82:47:d8:5b:1c:6e:70:b3:1e:
                    3d:d5:98:93:fb:fe:10:4b:d5:b0:3c:dc:27:f4:51:
                    8c:5f:22:a8:5a:0d:2c:93:67:15:2c:9a:eb:72:77:
                    f8:12:61:1b:63:7f:f1:ed:da:3f:6b:ab:74:6d:71:
                    0d:4f:b0:06:58:cb:df:90:6f:33:b3:1a:a7:ca:cd:
                    ea:61:77:55:0a:5d:68:4f:f2:e9:36:eb:b5:21:f0:
                    0c:c1:34:01:ff:46:19:1c:b3:6a:b8:c2:2b:dd:6f:
                    00:2f:b5:22:ef:69:37:68:7e:30:d8:89:c1:60:bc:
                    d5:fc:63:17:48:a2:7f:5f:9c:a7:d3:95:2f:31:c3:
                    37:e3:f2:68:ee:19:99:2d:5e:ac:37:83:37:35:77:
                    43:a1:7b:0c:7c:46:d6:51:2e:76:df:96:f6:64:29:
                    7d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:02:A2:6B:19:33:87:5A:5A:F8:33:A7:13:D8:D1:1F:A2:80:95:7C
            X509v3 Authority Key Identifier:
                keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:60:77:87:9f:84:87:de:d0:5d:c7:fc:e1:53:22:39:4f:f0:
         10:be:88:15:97:ee:a9:a1:af:1d:15:60:5c:4f:25:00:47:e7:
         a4:e5:47:09:09:51:b6:f9:6b:05:5b:85:30:83:1a:35:f5:ce:
         dc:e3:fd:8e:c1:bf:96:13:d1:1d:0c:15:31:8c:5f:31:5b:02:
         39:cf:46:a9:51:cd:4a:58:95:74:d2:82:57:bc:5b:b9:2a:31:
         17:0e:8a:c8:10:e5:a0:ae:21:16:fd:4e:66:d8:23:80:77:2a:
         49:40:63:6c:c2:b8:67:f0:63:8e:db:94:d7:1c:e2:e1:09:48:
         db:8a:c5:17:ee:b6:2c:1e:2a:ec:70:01:3c:28:b9:3e:5c:2f:
         79:e3:91:b3:ab:e7:98:26:6e:74:88:bb:03:cc:b5:43:72:8d:
         f4:89:88:0e:1a:46:db:61:5e:cb:90:38:1b:87:14:dd:95:e8:
         b0:b1:d4:5a:27:86:38:cc:3f:e2:ef:6a:1a:b2:f6:8a:64:e5:
         df:d9:d6:be:0a:cd:a8:52:1f:df:eb:6e:14:37:f8:d6:48:d0:
         d8:7f:65:eb:e7:28:7c:40:9a:82:2c:06:4e:33:6f:3c:87:16:
         a9:1d:d2:5d:1b:34:8c:2f:17:1a:be:d2:c4:bb:dc:64:85:31:
         6b:ea:5d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 22:06:45 2026 by rpki-client