Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/80481D732EEF797A2712002607F81D7DAF1F1F60.mft
File:                     80481D732EEF797A2712002607F81D7DAF1F1F60.mft (raw, json)
Hash identifier:          +MHdLtSGhjOkq4q7s7wHlh+CWqQ5OsO85OVyyPC03aE=
Subject key identifier:   28:F8:49:69:39:BB:94:9E:9B:07:6E:11:F0:A8:2E:BC:C3:9C:9B:3B
Authority key identifier: 80:48:1D:73:2E:EF:79:7A:27:12:00:26:07:F8:1D:7D:AF:1F:1F:60
Certificate issuer:       /CN=80481D732EEF797A2712002607F81D7DAF1F1F60
Certificate serial:       41CDDC1B3882AC7D3FC2D9A2E436FBB614417D1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80481D732EEF797A2712002607F81D7DAF1F1F60.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/80481D732EEF797A2712002607F81D7DAF1F1F60.mft
Manifest number:          0252
Signing time:             Wed 18 Mar 2026 12:42:32 +0000
Manifest this update:     Wed 18 Mar 2026 12:37:32 +0000
Manifest next update:     Sat 21 Mar 2026 21:44:32 +0000
Files and hashes:         1: 80481D732EEF797A2712002607F81D7DAF1F1F60.crl (hash: X0CUYZa+Vbjql/L+Z5prxop+eQZfmrx2vquTVFPfrRA=)
                          2: 3130332e36362e3139362e302f32322d3234203d3e20313331313131.roa (hash: H9yypLZLv8tpa7hHED33tyal4OpWf1DZSDERyCxUu54=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/80481D732EEF797A2712002607F81D7DAF1F1F60.crl
                          rsync://repo-rpki.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/80481D732EEF797A2712002607F81D7DAF1F1F60.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80481D732EEF797A2712002607F81D7DAF1F1F60.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 21:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:cd:dc:1b:38:82:ac:7d:3f:c2:d9:a2:e4:36:fb:b6:14:41:7d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80481D732EEF797A2712002607F81D7DAF1F1F60
        Validity
            Not Before: Mar 18 12:37:32 2026 GMT
            Not After : Mar 21 21:44:32 2026 GMT
        Subject: CN=28F8496939BB949E9B076E11F0A82EBCC39C9B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:2d:fe:b5:60:d0:0a:79:46:75:8e:45:ff:3d:
                    cd:08:31:f6:ef:ef:b3:12:2f:69:5e:2b:4d:9c:2f:
                    a0:98:39:82:fd:77:34:0a:b4:b1:dd:0b:a4:5b:3c:
                    32:c4:ef:c1:a9:5f:08:f2:3e:87:af:88:45:db:b3:
                    79:49:28:73:57:16:74:d5:63:29:a9:26:bd:5e:b6:
                    79:85:61:71:e9:35:b8:21:46:ad:2e:de:17:c3:b9:
                    cf:68:e3:30:5f:bd:ac:f0:53:01:9d:e1:12:2d:90:
                    1a:d7:4e:2b:30:e9:c7:3d:7e:f2:d1:02:c6:c2:f7:
                    ed:3f:02:c6:11:6f:65:bc:78:71:1e:39:09:ac:d4:
                    0b:30:11:d8:49:8e:86:e8:4c:36:ff:35:e3:bf:1c:
                    7c:95:3f:f2:17:29:49:65:fd:06:cf:65:a6:25:91:
                    c1:56:e1:ea:44:0c:09:43:a2:77:e1:71:5f:40:06:
                    ca:6b:15:f7:85:e0:a0:fb:79:81:b1:f7:3c:4c:c3:
                    b2:79:cd:69:3e:db:27:0b:33:b7:bc:29:f9:4c:c1:
                    17:dd:5f:d0:68:79:e9:43:3b:a3:8b:d5:15:e9:a7:
                    55:69:7e:2d:49:8f:9d:f8:8e:07:41:14:c3:4a:85:
                    59:70:c6:f8:88:49:4d:77:76:e6:cf:33:3e:14:d5:
                    f4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F8:49:69:39:BB:94:9E:9B:07:6E:11:F0:A8:2E:BC:C3:9C:9B:3B
            X509v3 Authority Key Identifier:
                keyid:80:48:1D:73:2E:EF:79:7A:27:12:00:26:07:F8:1D:7D:AF:1F:1F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/80481D732EEF797A2712002607F81D7DAF1F1F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80481D732EEF797A2712002607F81D7DAF1F1F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/80481D732EEF797A2712002607F81D7DAF1F1F60.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f7:98:8b:16:c7:99:b3:9f:a2:5d:61:a1:60:20:6d:40:83:
         a2:38:f9:8c:07:e4:a2:bc:60:86:40:2c:21:a4:d8:db:25:a1:
         32:77:68:57:89:f5:42:68:12:a9:89:08:44:45:61:9b:4e:38:
         3c:55:86:cb:5c:8d:f1:dd:fc:ac:08:20:45:98:f9:db:e6:1c:
         45:c6:89:2c:76:7b:c5:89:8f:06:98:49:a3:94:0c:bf:1a:79:
         14:01:d4:e4:52:6f:ab:55:6e:56:44:e4:84:4d:ea:34:5a:37:
         51:f6:7d:16:2e:c0:6e:fb:c3:ba:33:5c:d0:e3:10:52:d0:90:
         f0:fc:34:f7:ac:f8:c3:32:62:c9:39:06:22:37:56:62:c6:93:
         48:80:81:dc:37:bc:ab:81:0b:cb:f7:cc:8d:e1:38:85:4a:24:
         da:66:f5:a1:62:07:67:1b:c8:a6:ef:6d:16:72:33:b5:e0:a2:
         3a:1f:b6:ca:8c:af:3f:a2:02:0d:7d:b3:63:06:f8:3b:b1:a0:
         4f:0b:d1:12:2c:77:16:82:35:d5:d5:fe:25:5b:ed:22:ff:55:
         44:7a:48:57:31:9d:6f:fa:b1:18:f9:c2:98:8a:3e:59:85:78:
         08:6b:09:a6:c2:c9:4d:04:2e:e8:66:5a:db:65:72:44:2d:88:
         58:5b:99:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 21:56:33 2026 by rpki-client