Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
File:                     B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft (raw, json)
Hash identifier:          R8xh7/KzxTtBUQ0a9B3LUOJV9Y3JYty55896P+iP8Ao=
Subject key identifier:   9F:E9:32:E0:03:21:FC:7E:BA:1A:32:7F:2C:9B:6F:6F:18:4E:91:2B
Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1
Certificate issuer:       /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
Certificate serial:       7462D35AFF511ACBA3F03C4E425831D1604D4789
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
Manifest number:          0299
Signing time:             Fri 20 Mar 2026 19:52:38 +0000
Manifest this update:     Fri 20 Mar 2026 19:47:38 +0000
Manifest next update:     Tue 24 Mar 2026 04:32:38 +0000
Files and hashes:         1: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (hash: UnglZoBVP+l2hAxzoGbqmzfsJvv/Xe0z5CKmhsW/FLo=)
                          2: 3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (hash: 1UJAHonWaadwHYuLef8BFUV8SSyJkucgr+FB5CesNHg=)
                          3: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl (hash: S+YVMtQ9+keAAxC2POwMPwHvBBwssB7CgBSyh2xxLAM=)
                          4: 3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (hash: hum6PwDa+tJlyU75JQFBXd7LlyucqEnCFxIhwk7g/uE=)
                          5: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (hash: 8qmJTm3w/YB+pPXRr4kfQMyCGfmyB46RphMFNG6KdwM=)
                          6: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (hash: yqDA1Gh+nI24zoKtqUazyok0UGXURA+Nlb1kM1EqJCo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl
                          rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Mar 2026 02:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:62:d3:5a:ff:51:1a:cb:a3:f0:3c:4e:42:58:31:d1:60:4d:47:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
        Validity
            Not Before: Mar 20 19:47:38 2026 GMT
            Not After : Mar 24 04:32:38 2026 GMT
        Subject: CN=9FE932E00321FC7EBA1A327F2C9B6F6F184E912B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:60:ee:f7:b7:8e:be:3e:0b:02:9c:8d:11:
                    65:68:0c:df:85:d9:b9:24:ad:64:d2:0d:7a:20:75:
                    14:75:2b:4c:7c:bb:c5:80:90:ce:b8:cc:14:28:15:
                    fb:76:b1:d9:f6:e4:40:5c:c6:70:71:52:84:45:1c:
                    24:b9:33:7f:fd:84:76:6c:87:f3:01:96:08:c4:be:
                    43:8c:23:0d:a3:2e:b0:ba:02:a4:5d:e4:d6:75:60:
                    92:25:58:09:cf:11:b0:2c:1f:43:cd:aa:b7:cb:ce:
                    c2:00:16:2e:15:7a:e3:8f:d4:f8:27:30:6e:a4:a6:
                    4e:66:25:65:27:65:c7:69:bd:c0:9e:17:71:ac:f1:
                    6b:44:a0:ea:65:e9:7d:9f:5f:20:5d:a2:7e:95:31:
                    2a:a7:fa:24:08:d6:52:5e:d3:a2:2f:ba:9c:77:e4:
                    c4:21:5c:51:94:02:49:e6:0f:68:c2:20:e3:e7:2b:
                    06:08:97:a7:90:5b:e3:88:37:2f:66:39:3b:38:df:
                    9a:05:c9:b0:e7:82:d1:16:74:8f:bc:75:20:73:9c:
                    07:5b:80:8d:b5:5b:4d:fe:65:89:46:5f:93:bc:6f:
                    b2:29:6d:16:e0:55:2e:f2:e0:bb:ea:9c:17:1b:a3:
                    f0:f4:41:94:73:7a:ad:4a:ab:97:ea:ed:9a:7a:21:
                    63:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E9:32:E0:03:21:FC:7E:BA:1A:32:7F:2C:9B:6F:6F:18:4E:91:2B
            X509v3 Authority Key Identifier:
                keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:30:f1:b0:e4:2e:a2:9c:2a:e2:02:7b:1d:78:50:1d:84:6f:
         c9:32:f8:9c:da:78:1b:fd:34:4d:62:2c:c6:da:9d:83:23:4e:
         c0:9b:90:6d:e2:d3:e3:70:74:bb:63:1b:0c:09:86:32:6e:7f:
         27:2b:5e:b8:e8:db:54:d7:59:76:d6:18:58:de:c6:a9:a0:20:
         d9:1e:4d:c5:96:79:2a:08:96:25:4b:a4:c0:60:43:a5:ed:9e:
         e4:88:15:09:db:8f:85:e9:0f:fb:96:88:9d:32:1a:84:ba:a2:
         75:54:7b:23:9b:11:38:4d:68:9d:85:ad:08:61:9b:2e:87:41:
         1d:c3:7d:29:60:9f:21:c2:9c:79:3d:93:6c:3f:a3:aa:bc:eb:
         25:68:c8:5b:2d:83:e2:e6:e4:ba:b6:79:55:74:35:33:ba:44:
         ba:68:a7:26:21:d6:0d:f6:26:6d:62:52:a1:5c:37:df:d2:a1:
         0c:ae:cc:a7:1c:c6:aa:b9:53:da:26:76:cf:67:1e:1f:6f:e5:
         a0:87:63:c3:0a:b0:7f:0f:a5:a8:bd:24:bf:f2:df:57:fe:49:
         ff:88:63:67:93:ee:2a:31:85:68:41:8b:da:52:32:c9:44:69:
         6f:d1:60:e6:84:06:37:17:6a:ba:11:38:30:d3:ef:74:13:b3:
         f1:4b:a4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 01:33:35 2026 by rpki-client