Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
File:                     15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft (raw, json)
Hash identifier:          OQcviuxmNSX9qaY8JrAYhacHfE+BZsa8XahMdY8HAdI=
Subject key identifier:   85:9D:E5:B4:24:F9:41:9E:8E:CB:35:B1:6A:17:93:46:EE:2C:3B:86
Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35
Certificate issuer:       /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
Certificate serial:       05B6119BB68EE136ADC2A33F64F3B55DE2890018
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
Manifest number:          04FE
Signing time:             Fri 20 Mar 2026 12:01:28 +0000
Manifest this update:     Fri 20 Mar 2026 11:56:28 +0000
Manifest next update:     Mon 23 Mar 2026 13:17:28 +0000
Files and hashes:         1: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: K1B+8ghkTLIZ5AJ6fsYXvRX9s2r1jX+7WBmIft8mUyc=)
                          2: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: yIuwDJ7Q95tfvD77KhegvlF4CTHEd3Lu6i61741Xn4E=)
                          3: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: MItE47EaO9IAk0e+oiW0dyxlfEYvief1VP6PIxAt77c=)
                          4: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl (hash: 8EzcSNtYN3ZJUyAJfNIAeTwkYwbupIiHfGy67SMHxy8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl
                          rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Mar 2026 13:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b6:11:9b:b6:8e:e1:36:ad:c2:a3:3f:64:f3:b5:5d:e2:89:00:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
        Validity
            Not Before: Mar 20 11:56:28 2026 GMT
            Not After : Mar 23 13:17:28 2026 GMT
        Subject: CN=859DE5B424F9419E8ECB35B16A179346EE2C3B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:fa:13:82:38:20:91:f8:f2:52:3f:37:dd:
                    f7:1c:5f:ff:e6:74:5f:3d:ff:c2:ee:1f:14:ff:be:
                    a9:3e:48:dc:cf:35:41:57:1d:61:e1:1a:8e:b9:33:
                    06:97:8a:fe:59:13:fb:c8:15:f1:6e:ea:84:58:6e:
                    e0:01:c4:29:35:3e:71:da:ff:ea:7d:1e:75:82:bf:
                    01:39:9d:6a:14:44:1a:b9:33:62:d3:7e:36:82:cc:
                    cf:23:4c:d1:86:8b:f9:1f:08:40:d3:e7:97:c0:9d:
                    37:b4:ff:89:c5:a1:7a:67:67:67:dd:69:c7:11:b6:
                    3d:94:66:a9:03:90:82:f0:cd:2b:2c:4b:1b:b1:4a:
                    44:7f:57:80:19:44:65:aa:e2:8c:8d:88:65:08:52:
                    f8:6b:15:d8:2a:04:48:bf:23:4f:fb:6d:11:02:89:
                    38:74:87:09:d6:d9:c5:a7:f4:7a:05:13:1f:87:bf:
                    6a:17:ae:11:83:52:3e:f0:63:d1:06:77:e2:36:46:
                    ad:17:e8:51:6a:3b:dd:36:3e:d4:82:c8:7f:65:81:
                    4a:75:35:70:49:f0:2c:a4:43:4d:7e:11:79:c8:00:
                    e8:70:29:ed:a3:ac:bd:96:67:fb:cc:93:a4:13:53:
                    5c:dd:c4:c2:ea:33:77:a5:b4:a4:e6:e0:3b:2a:1e:
                    95:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9D:E5:B4:24:F9:41:9E:8E:CB:35:B1:6A:17:93:46:EE:2C:3B:86
            X509v3 Authority Key Identifier:
                keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:29:26:b6:7c:9c:b8:04:18:0a:81:96:eb:f8:28:0b:06:e2:
         06:9b:95:2b:f8:89:1b:aa:51:c3:94:95:fa:95:fa:35:ef:a0:
         a5:d3:59:9b:42:52:fb:ca:8f:c0:d9:60:0b:0d:18:74:d3:02:
         bf:db:9f:d1:d9:72:e5:da:f6:e0:d9:fb:39:da:f2:7d:f7:e2:
         8d:91:3a:41:56:d4:bf:2f:f3:49:7f:ea:cd:ad:b0:1f:5e:6a:
         aa:7c:5b:2a:d1:32:fe:33:80:9d:71:b6:fe:f5:c1:d4:cc:d4:
         4b:51:2b:93:95:29:bc:9c:b0:18:7f:30:5a:5b:df:48:a7:74:
         f1:c2:64:dc:14:c7:b6:2b:f3:98:de:e5:12:9b:99:17:ee:d1:
         5a:bf:e2:bc:0e:6d:c7:0b:21:98:14:2b:9a:f1:0f:8c:05:dc:
         63:6a:70:fd:f6:cf:13:c0:84:d1:98:64:4f:1a:ad:b3:dc:b5:
         6f:75:c1:24:ac:6e:10:23:8e:50:71:ab:96:4a:76:ab:37:e8:
         1f:e5:39:37:c8:b9:d3:0f:ea:de:83:ee:fa:e0:29:e8:16:72:
         f4:89:cc:44:89:7c:4c:48:6a:02:f4:a9:e7:75:23:57:ce:28:
         8f:17:1c:cf:6b:37:10:4b:11:a1:3e:f6:05:13:94:87:7a:aa:
         a5:82:a5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 00:17:49 2026 by rpki-client