Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
File:                     7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft (raw, json)
Hash identifier:          LzbJFAhRSFfGaV/QmTXiDg8o+aL2kBES5IROdQ9DDUc=
Subject key identifier:   C2:54:42:DD:6D:94:8B:25:A2:30:7F:22:CD:C8:75:20:D1:2F:2D:04
Authority key identifier: 7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6
Certificate issuer:       /CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
Certificate serial:       51512A8937B6072C00D721EC02825DEFCE4573E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
Manifest number:          02D3
Signing time:             Wed 18 Mar 2026 20:21:01 +0000
Manifest this update:     Wed 18 Mar 2026 20:16:01 +0000
Manifest next update:     Sun 22 Mar 2026 08:20:01 +0000
Files and hashes:         1: 3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa (hash: bgLc0wXOVn9w5v/YbQRRsK2+epF0KGKuwlh4tr4ebCY=)
                          2: 7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl (hash: RcN20vUN7AW7euLogXqXnLeQt8wWS2xtUIv1BtMLp1M=)
                          3: 3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa (hash: pb2t7SBeTp32K0Tjh6odZI2irDPZNgzYkTCAyS4mxhU=)
                          4: 3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (hash: gQUi+SSlZWbgtxREEtY9XyZ6mEDQwkMmGKLNXyWWZlc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl
                          rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Mar 2026 08:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:51:2a:89:37:b6:07:2c:00:d7:21:ec:02:82:5d:ef:ce:45:73:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
        Validity
            Not Before: Mar 18 20:16:01 2026 GMT
            Not After : Mar 22 08:20:01 2026 GMT
        Subject: CN=C25442DD6D948B25A2307F22CDC87520D12F2D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:6d:0b:50:48:dc:73:76:f2:22:5a:92:25:
                    4b:d1:98:6b:76:d8:74:c6:2a:e4:3d:b5:3b:c4:3e:
                    3c:bf:84:99:0e:83:78:53:26:6b:12:ca:2f:b3:62:
                    fb:94:49:75:26:98:aa:d0:72:42:54:62:44:9d:bc:
                    56:02:0a:67:15:01:c3:31:8b:56:e4:28:df:0b:93:
                    95:df:50:3a:6d:94:67:e2:b1:5e:f4:e1:cc:a8:37:
                    51:bf:f2:b0:5f:32:e5:28:3d:6e:66:e8:26:5b:de:
                    33:fb:88:78:49:dd:4c:e6:43:ae:dc:8a:5c:0d:49:
                    aa:e4:c0:e2:11:78:2e:d3:9a:03:8b:87:7e:58:a2:
                    b2:32:2b:8c:80:9a:13:f7:d7:33:96:aa:a9:9a:75:
                    bb:eb:b8:0c:73:de:72:13:23:a5:94:e2:aa:72:88:
                    a4:df:b7:db:ea:09:54:f4:a8:f6:09:8f:22:5e:b7:
                    b4:25:d8:d4:4a:4b:52:34:bf:ef:b9:77:12:f6:ec:
                    0d:f9:bf:41:31:b5:ed:2d:74:c2:18:d2:db:82:8b:
                    ea:a2:90:f1:ee:de:98:f7:c1:d8:e9:dc:fd:4e:33:
                    00:b5:c7:1f:23:96:46:ff:b5:ff:de:4c:68:ea:cb:
                    f9:15:64:8a:fe:e7:38:7f:1b:50:c6:09:3b:a2:b3:
                    38:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:54:42:DD:6D:94:8B:25:A2:30:7F:22:CD:C8:75:20:D1:2F:2D:04
            X509v3 Authority Key Identifier:
                keyid:7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:33:a8:46:b4:1f:b6:62:ed:f8:58:f8:5f:26:c3:e1:0c:a7:
         78:f5:7c:f6:a0:71:66:99:8b:ec:ce:dd:ce:3b:01:0d:3c:e7:
         a8:56:aa:5f:4e:3d:5b:1d:ef:92:66:9f:b6:fc:57:77:38:a9:
         d2:50:be:b5:47:45:b5:90:1d:6b:0a:be:3d:74:03:90:76:28:
         fa:1d:5e:7c:3a:7f:ee:5e:34:4c:2f:45:1c:8e:56:e8:1b:c0:
         ba:c5:0d:1b:1d:a8:04:c1:86:3f:24:7f:7f:62:fd:22:3f:75:
         35:f1:47:eb:c6:66:bd:a1:9c:33:2a:7a:c8:89:a4:1c:8b:3a:
         20:54:12:7f:bb:93:09:d5:27:47:54:d3:4f:83:be:2f:05:5a:
         e7:3f:f3:56:57:c3:9e:f7:4d:1b:d9:09:49:0d:2a:bf:e9:1e:
         28:6e:9b:4c:e2:ac:64:f2:e7:36:e8:02:10:e7:b2:53:d2:3f:
         81:1c:4c:f7:1a:3e:cc:dc:b6:66:a7:b5:a1:92:dc:b0:92:c6:
         ae:20:48:73:e8:d1:5d:6e:fc:53:f4:e8:00:39:3b:8c:31:63:
         57:1e:52:9f:48:d0:8e:09:62:b9:10:82:92:6a:1c:a9:22:8a:
         3c:5e:37:0c:75:dd:9e:62:b5:62:3d:55:a0:3a:6d:16:67:3d:
         99:d4:71:dd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUVEqiTe2BywA1yHsAoJd785Fc+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0MyMjRE
Q0U5NzRCNjAeFw0yNjAzMTgyMDE2MDFaFw0yNjAzMjIwODIwMDFaMDMxMTAvBgNV
BAMTKEMyNTQ0MkRENkQ5NDhCMjVBMjMwN0YyMkNEQzg3NTIwRDEyRjJEMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNFm0LUEjcc3byIlqSJUvRmGt2
2HTGKuQ9tTvEPjy/hJkOg3hTJmsSyi+zYvuUSXUmmKrQckJUYkSdvFYCCmcVAcMx
i1bkKN8Lk5XfUDptlGfisV704cyoN1G/8rBfMuUoPW5m6CZb3jP7iHhJ3UzmQ67c
ilwNSarkwOIReC7TmgOLh35YorIyK4yAmhP31zOWqqmadbvruAxz3nITI6WU4qpy
iKTft9vqCVT0qPYJjyJet7Ql2NRKS1I0v++5dxL27A35v0Exte0tdMIY0tuCi+qi
kPHu3pj3wdjp3P1OMwC1xx8jlkb/tf/eTGjqy/kVZIr+5zh/G1DGCTuiszgbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwlRC3W2UiyWiMH8izch1INEvLQQwHwYDVR0j
BBgwFoAUeh0ZLWW37q3EarRFIIzCJNzpdLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NzFiZjk4MC0yNGRhLTQ4NjUtYTk4OS0yZDQ0ODllM2E1MDUvMC83QTFEMTkyRDY1
QjdFRUFEQzQ2QUI0NDUyMDhDQzIyNERDRTk3NEI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0MyMjREQ0U5
NzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTcxYmY5ODAtMjRkYS00ODY1LWE5
ODktMmQ0NDg5ZTNhNTA1LzAvN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0My
MjREQ0U5NzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACczqEa0H7Zi7fhY+F8mw+EMp3j1fPagcWaZ
i+zO3c47AQ0856hWql9OPVsd75Jmn7b8V3c4qdJQvrVHRbWQHWsKvj10A5B2KPod
Xnw6f+5eNEwvRRyOVugbwLrFDRsdqATBhj8kf39i/SI/dTXxR+vGZr2hnDMqesiJ
pByLOiBUEn+7kwnVJ0dU00+Dvi8FWuc/81ZXw573TRvZCUkNKr/pHihum0zirGTy
5zboAhDnslPSP4EcTPcaPszctmantaGS3LCSxq4gSHPo0V1u/FP06AA5O4wxY1ce
Up9I0I4JYrkQgpJqHKkiijxeNwx13Z5itWI9VaA6bRZnPZnUcd0=
-----END CERTIFICATE-----
Generated at Thu Mar 19 09:59:02 2026 by rpki-client