Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft
File:                     DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json)
Hash identifier:          UQ8Yn+ukbrZgajygz9qWU7WZa7eR9NmdhUHO/gnQDDk=
Subject key identifier:   C0:FA:D8:BF:5A:7A:4C:C3:17:2D:42:12:0A:57:C9:67:E2:50:F5:1A
Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3
Certificate issuer:       /CN=DFE92467290F9E190072585C1045251D6F8B05A3
Certificate serial:       6076AA311E33E4EEEFB6071C18E62ECDCB2AFFD2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft
Manifest number:          0287
Signing time:             Wed 18 Mar 2026 00:52:41 +0000
Manifest this update:     Wed 18 Mar 2026 00:47:41 +0000
Manifest next update:     Sat 21 Mar 2026 06:57:41 +0000
Files and hashes:         1: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: HSvccbcXy7k9kPjMD6mXV/KFzh471F30ZXh1rABYDjw=)
                          2: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: hTTPOovPU5S5pgQwsEkaHg3eYPOv1GrcN/iefrxGZkI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 06:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:76:aa:31:1e:33:e4:ee:ef:b6:07:1c:18:e6:2e:cd:cb:2a:ff:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3
        Validity
            Not Before: Mar 18 00:47:41 2026 GMT
            Not After : Mar 21 06:57:41 2026 GMT
        Subject: CN=C0FAD8BF5A7A4CC3172D42120A57C967E250F51A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:a9:44:6b:93:27:cd:db:dc:aa:9f:d7:89:
                    f6:3b:3a:dd:3f:83:34:76:ca:55:77:78:21:00:28:
                    b8:7b:42:f5:dd:dc:82:58:95:4a:f9:b1:93:6a:5c:
                    64:4b:6e:69:4b:c6:78:a6:dd:52:df:92:e9:20:0f:
                    b5:c1:0f:7a:fa:aa:12:88:57:4a:db:87:3d:dd:f8:
                    12:ef:aa:2d:96:02:ea:8f:22:5a:52:74:6c:97:21:
                    8c:79:55:f1:df:84:ea:00:78:07:a8:85:fd:a7:14:
                    4f:1a:f3:6e:4b:a0:99:ec:36:62:77:fb:37:72:ee:
                    eb:00:2f:b7:6d:b9:fd:11:b8:b4:13:73:d5:b2:00:
                    c8:10:b8:1c:97:33:67:00:30:28:2f:0a:07:fd:76:
                    40:8f:7d:45:e2:ec:05:04:5e:ff:4a:e1:18:73:3e:
                    1b:e7:db:78:ba:c9:ac:b7:61:f2:60:20:f8:78:ae:
                    e8:87:be:ee:ab:d1:d1:f6:46:7a:ea:c6:a6:5f:a9:
                    70:60:e1:d0:17:44:9c:58:3f:a1:bc:a7:f0:64:21:
                    80:68:14:c7:9c:4c:93:78:06:dc:fc:ce:41:59:b9:
                    38:ba:1e:a7:0e:68:ca:ce:a4:8d:c9:53:d3:a3:87:
                    18:8a:57:01:5d:01:ab:6d:49:5a:e3:3b:a4:2e:30:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FA:D8:BF:5A:7A:4C:C3:17:2D:42:12:0A:57:C9:67:E2:50:F5:1A
            X509v3 Authority Key Identifier:
                keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:15:e8:9e:c9:4a:05:c1:27:1b:26:f4:9b:ae:86:7e:3a:2d:
         18:1d:20:51:91:ed:b3:58:ef:f6:ce:31:85:57:e1:ca:d0:ec:
         5e:de:ad:d1:66:45:a5:f3:32:d6:72:c0:af:72:db:d3:35:06:
         91:2a:28:f1:59:6d:1b:5f:b7:ab:a7:25:d5:ff:81:3f:0f:7e:
         5b:4d:2b:41:51:2b:87:d5:cf:13:29:b6:5f:8d:e2:f5:c8:fe:
         a8:3c:33:df:e7:c3:b9:21:3b:4d:62:10:40:e6:4f:be:6a:da:
         6b:87:2e:fe:ff:98:a4:f5:a9:41:2d:ae:c5:e2:60:e9:c9:55:
         7d:38:88:8f:a6:c4:40:f2:87:0e:79:8f:11:43:e2:ed:70:42:
         fb:65:c9:b9:66:87:e0:a2:a8:5c:00:77:e2:d3:1f:a3:ad:26:
         f4:4f:31:53:24:11:9e:25:a3:15:b5:1b:3c:2a:fd:11:75:b7:
         5b:d3:fc:46:4a:04:a2:19:40:ae:78:ed:0e:fc:f3:e8:1c:06:
         88:2c:fe:25:42:c6:46:5e:4f:c3:88:27:c1:0d:62:bc:d4:e2:
         24:40:6e:55:4b:df:ad:15:ea:fc:a4:b2:42:b3:3b:51:a9:f8:
         9e:d1:b0:60:e3:2a:bc:b0:92:e5:3e:e4:7a:3a:b9:c1:02:b9:
         0d:94:52:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:57:53 2026 by rpki-client