Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft
File:                     4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft (raw, json)
Hash identifier:          2aZ9yV0ghtJMJezwJDKXfQ6EIvEmVsK6H/rLvPxqpLc=
Subject key identifier:   24:AC:F3:C3:6A:6A:A2:03:18:FC:78:82:0B:F4:2F:17:73:5B:F0:5E
Authority key identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B
Certificate issuer:       /CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B
Certificate serial:       1A34F69816B04AAD02693ABF9EF8B42ADDF30FC1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft
Manifest number:          018B
Signing time:             Sat 21 Mar 2026 03:42:06 +0000
Manifest this update:     Sat 21 Mar 2026 03:37:06 +0000
Manifest next update:     Tue 24 Mar 2026 10:32:06 +0000
Files and hashes:         1: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (hash: s9YO6rgovPFygVKDvxvdCQqCqWD4vEgIZoUoDmMCbHA=)
                          2: 3130332e3233392e32332e302f32342d3234203d3e20313336383635.roa (hash: fDXMTAj/S8oQs6LhTEcvx+m4yd6GabWyid1nJ3v2IOc=)
                          3: 4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl (hash: rGyqWgXu0b95+G8EWtgdDAoqsluEYwr/Gb+3vqvb0hs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl
                          rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Mar 2026 10:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:34:f6:98:16:b0:4a:ad:02:69:3a:bf:9e:f8:b4:2a:dd:f3:0f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B
        Validity
            Not Before: Mar 21 03:37:06 2026 GMT
            Not After : Mar 24 10:32:06 2026 GMT
        Subject: CN=24ACF3C36A6AA20318FC78820BF42F17735BF05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:0c:5d:f0:25:c2:23:cd:5b:bf:96:f2:12:
                    b2:88:05:b6:39:0a:b5:0e:d1:54:fc:d6:4b:06:96:
                    00:e1:21:de:69:91:24:32:08:8c:1e:9a:2a:dd:23:
                    b5:29:21:3f:74:a1:b9:57:47:6d:77:e0:f4:0f:e4:
                    2e:19:87:53:4f:f7:a3:1f:6b:3f:d8:25:4c:5a:b4:
                    06:5f:c8:ec:71:80:9f:e3:1e:0d:31:ad:ea:54:57:
                    60:2d:82:fe:6a:c5:0e:7a:41:44:bb:fd:40:68:da:
                    bb:83:8c:65:1b:f4:4a:d1:6a:fb:26:47:0a:7f:e7:
                    75:6d:fd:92:b9:4f:9a:b1:b7:39:b8:fd:72:41:ed:
                    6a:56:9d:ca:2d:d1:de:2f:65:e1:30:0b:85:fb:4a:
                    32:e7:a9:0f:26:43:cc:34:31:82:38:9a:ad:05:60:
                    96:1b:83:c6:21:2c:63:c1:aa:a7:58:73:3f:ba:f6:
                    71:94:46:dd:a3:91:84:1b:32:d9:18:81:44:67:e5:
                    bb:3e:90:d8:86:7c:bb:47:79:b6:db:39:06:e2:4b:
                    20:01:4b:6a:cb:dc:84:01:4b:9c:7f:b1:9a:d0:80:
                    59:da:4b:62:81:60:44:c2:fe:99:23:cc:be:2f:94:
                    d3:95:72:60:d2:04:ff:52:22:ab:e5:5a:1c:da:f6:
                    de:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AC:F3:C3:6A:6A:A2:03:18:FC:78:82:0B:F4:2F:17:73:5B:F0:5E
            X509v3 Authority Key Identifier:
                keyid:4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3c:21:ad:cf:c6:0f:e2:fc:0f:b9:b7:a1:82:74:55:a3:e7:
         03:a6:99:a6:29:47:d8:34:f7:f9:3c:f2:3f:96:da:92:fa:28:
         88:82:28:6d:0d:02:d0:5d:57:f2:24:b7:9e:02:6a:4a:99:bb:
         99:10:0c:7a:21:fd:05:e0:d2:c0:fe:c4:f7:5b:30:fa:14:30:
         17:70:6e:75:99:e6:59:9e:8f:7e:17:3d:d5:aa:0a:2b:61:52:
         c4:85:2d:57:e4:8c:cb:23:b2:9e:bd:bc:ca:60:08:f9:b0:73:
         b8:97:4e:a8:14:27:fe:86:18:17:4b:f2:96:3f:cb:98:ef:f9:
         84:d5:b6:09:58:f1:e3:50:0e:ad:1f:eb:30:ec:9d:24:85:df:
         97:e4:80:dc:38:8a:bf:a0:a7:c3:b2:2f:70:33:4d:b6:97:58:
         9a:34:04:1b:0a:9a:62:18:05:92:13:62:18:21:d7:f5:30:a6:
         62:c9:1c:6a:3c:1d:d9:a4:7b:18:b3:5e:6a:2a:aa:26:63:02:
         c3:25:8a:a7:a8:db:0d:4e:7e:2b:e3:f1:35:b4:43:d7:75:75:
         6d:59:c5:8e:e6:79:45:b5:6d:d0:19:a0:46:e7:48:03:d5:a0:
         7b:56:0f:42:b8:62:f9:9e:dd:a2:d4:53:5f:8b:af:f3:b9:fd:
         cd:16:e5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 06:56:20 2026 by rpki-client