Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft
File:                     1762D22131EE967D86536D2B475A9A8C08CE6003.mft (raw, json)
Hash identifier:          r5kZhlnvk3pPjKBCDlPThXsDpyDxL31OmnxLtxqfYG4=
Subject key identifier:   DB:96:88:2E:EC:5D:CA:F0:24:A7:2F:11:DA:9B:E4:63:07:46:1D:0F
Authority key identifier: 17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03
Certificate issuer:       /CN=1762D22131EE967D86536D2B475A9A8C08CE6003
Certificate serial:       7CC288EAF659D7387919AF7A8962F9518845D645
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft
Manifest number:          0387
Signing time:             Fri 20 Mar 2026 04:31:33 +0000
Manifest this update:     Fri 20 Mar 2026 04:26:33 +0000
Manifest next update:     Mon 23 Mar 2026 12:06:33 +0000
Files and hashes:         1: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: uumiLUQfphgqskF7mpd6oqfDDTxMSTqQ7X8YmHylWvY=)
                          2: 1762D22131EE967D86536D2B475A9A8C08CE6003.crl (hash: F/s3rU9VkkeFcG+2bl2Yumaf9yhHdBONFAQ+TRZFFnk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl
                          rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Mar 2026 12:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c2:88:ea:f6:59:d7:38:79:19:af:7a:89:62:f9:51:88:45:d6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1762D22131EE967D86536D2B475A9A8C08CE6003
        Validity
            Not Before: Mar 20 04:26:33 2026 GMT
            Not After : Mar 23 12:06:33 2026 GMT
        Subject: CN=DB96882EEC5DCAF024A72F11DA9BE46307461D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:48:26:f5:6c:7a:b3:c1:46:56:8e:1c:77:88:
                    64:30:da:52:a0:2a:eb:96:41:cf:3f:14:b7:b0:d0:
                    bd:1d:f0:cc:d2:2b:cf:06:42:bd:3f:18:f9:3f:85:
                    ad:a1:6d:08:63:4c:97:73:a6:4b:1b:87:bf:c6:8e:
                    ba:06:a5:4c:c6:c5:f8:06:e2:a0:d4:28:cf:bf:b6:
                    36:7d:9a:57:e0:6c:53:51:c8:a8:bc:07:a7:39:35:
                    73:10:e1:dd:25:00:bb:3b:4c:74:25:53:ea:2e:67:
                    76:ba:91:09:96:94:70:8c:86:5e:b5:4e:44:4d:0b:
                    70:14:4e:a6:e7:02:4e:55:c6:f7:da:ac:45:a6:25:
                    70:3a:e5:f8:b1:ce:0c:06:5b:c7:dc:82:da:8b:12:
                    73:4e:da:32:fe:d9:7d:ae:2d:2c:5e:b3:26:f0:1e:
                    9b:72:02:77:7d:87:15:8f:12:84:bc:08:ec:91:69:
                    36:86:05:da:e7:5b:f7:1a:91:f3:e2:ca:29:4b:6d:
                    c6:20:65:ec:10:79:d7:93:c0:bf:24:13:70:ff:c1:
                    80:e8:ef:64:12:97:e3:17:74:60:f4:4d:58:04:82:
                    50:07:e8:73:a0:56:e0:64:e5:8b:80:d3:08:6f:1d:
                    06:53:64:81:88:bb:e2:d4:16:4f:82:fe:61:b9:2a:
                    bc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:96:88:2E:EC:5D:CA:F0:24:A7:2F:11:DA:9B:E4:63:07:46:1D:0F
            X509v3 Authority Key Identifier:
                keyid:17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d1:d2:2d:9a:b2:1c:2e:03:c3:e0:32:fb:1a:e2:8f:f1:32:
         0f:a2:9e:5e:21:e0:58:60:ca:04:48:7e:95:97:52:00:da:9d:
         cc:c6:f2:5e:01:0d:80:99:1e:4a:6a:61:72:13:04:68:cc:3b:
         c0:52:e4:9b:bf:f5:fd:2b:50:2c:af:dc:93:7b:f0:b9:6c:4d:
         3f:37:82:e5:aa:71:46:11:77:97:95:fd:78:7e:8c:f7:bf:52:
         d0:8a:7d:8b:93:df:c9:98:dc:9a:8e:0d:9d:3b:b4:07:77:3b:
         e7:12:27:81:fb:4b:e4:b2:ce:89:43:85:14:31:a9:c4:ac:12:
         c0:a6:79:a9:f0:98:df:a2:bc:f0:ec:16:2e:e9:76:45:78:72:
         1f:25:47:86:89:5a:1a:b2:b3:d8:e3:a4:da:43:28:60:76:b5:
         53:65:23:04:84:81:66:9f:a1:be:2a:75:ce:f1:3e:ae:d6:ec:
         b1:5e:e8:72:3a:10:00:98:94:df:4e:5e:af:32:9f:c5:73:59:
         1e:f4:1f:35:3f:d2:5d:90:f8:64:c9:9f:77:c2:4c:65:90:ec:
         9a:ba:ba:fb:a0:a3:6d:8f:86:e0:30:2a:26:31:79:a9:01:15:
         c6:d8:e9:8e:34:73:40:64:cb:3a:04:55:d3:86:f4:47:db:80:
         82:2e:14:3a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfMKI6vZZ1zh5Ga96iWL5UYhF1kUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlBOEMw
OENFNjAwMzAeFw0yNjAzMjAwNDI2MzNaFw0yNjAzMjMxMjA2MzNaMDMxMTAvBgNV
BAMTKERCOTY4ODJFRUM1RENBRjAyNEE3MkYxMURBOUJFNDYzMDc0NjFEMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgSCb1bHqzwUZWjhx3iGQw2lKg
KuuWQc8/FLew0L0d8MzSK88GQr0/GPk/ha2hbQhjTJdzpksbh7/GjroGpUzGxfgG
4qDUKM+/tjZ9mlfgbFNRyKi8B6c5NXMQ4d0lALs7THQlU+ouZ3a6kQmWlHCMhl61
TkRNC3AUTqbnAk5VxvfarEWmJXA65fixzgwGW8fcgtqLEnNO2jL+2X2uLSxesybw
HptyAnd9hxWPEoS8COyRaTaGBdrnW/cakfPiyilLbcYgZewQedeTwL8kE3D/wYDo
72QSl+MXdGD0TVgEglAH6HOgVuBk5YuA0whvHQZTZIGIu+LUFk+C/mG5KryFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU25aILuxdyvAkpy8R2pvkYwdGHQ8wHwYDVR0j
BBgwFoAUF2LSITHuln2GU20rR1qajAjOYAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MjBmYTE0YS1hYWFjLTQwZjQtOWM4NC02OTI1Nzg2OGYyY2IvMC8xNzYyRDIyMTMx
RUU5NjdEODY1MzZEMkI0NzVBOUE4QzA4Q0U2MDAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlBOEMwOENF
NjAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIwZmExNGEtYWFhYy00MGY0LTlj
ODQtNjkyNTc4NjhmMmNiLzAvMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlB
OEMwOENFNjAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFnR0i2ashwuA8PgMvsa4o/xMg+inl4h4Fhg
ygRIfpWXUgDanczG8l4BDYCZHkpqYXITBGjMO8BS5Ju/9f0rUCyv3JN78LlsTT83
guWqcUYRd5eV/Xh+jPe/UtCKfYuT38mY3JqODZ07tAd3O+cSJ4H7S+SyzolDhRQx
qcSsEsCmeanwmN+ivPDsFi7pdkV4ch8lR4aJWhqys9jjpNpDKGB2tVNlIwSEgWaf
ob4qdc7xPq7W7LFe6HI6EACYlN9OXq8yn8VzWR70HzU/0l2Q+GTJn3fCTGWQ7Jq6
uvugo22PhuAwKiYxeakBFcbY6Y40c0BkyzoEVdOG9EfbgIIuFDo=
-----END CERTIFICATE-----
Generated at Fri Mar 20 21:58:49 2026 by rpki-client