Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
File:                     5F22D2084F774B68D9DE9763397B5657A96F36CE.mft (raw, json)
Hash identifier:          7pd2HscZaUSHa9Ui1vFP8/2QZJ6VjbOU5VrdhRuF+vI=
Subject key identifier:   BC:9C:FF:65:D2:1F:1A:13:A6:FF:74:9E:85:E1:FD:FA:3D:72:80:0D
Authority key identifier: 5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE
Certificate issuer:       /CN=5F22D2084F774B68D9DE9763397B5657A96F36CE
Certificate serial:       741EB86978A4A1999BFF684DB3734703518D09DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
Manifest number:          4B
Signing time:             Thu 12 Mar 2026 02:51:12 +0000
Manifest this update:     Thu 12 Mar 2026 02:46:12 +0000
Manifest next update:     Sun 15 Mar 2026 09:14:12 +0000
Files and hashes:         1: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: PjhwIz9l+vRy5TLqiXRBoCVwL6OIIOTNL//mqDM3w9A=)
                          2: 5F22D2084F774B68D9DE9763397B5657A96F36CE.crl (hash: ik23zo0AsCPljwqFaJZsmTzXamKhSfyyvrwJNe/irHQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl
                          rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Mar 2026 09:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1e:b8:69:78:a4:a1:99:9b:ff:68:4d:b3:73:47:03:51:8d:09:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F22D2084F774B68D9DE9763397B5657A96F36CE
        Validity
            Not Before: Mar 12 02:46:12 2026 GMT
            Not After : Mar 15 09:14:12 2026 GMT
        Subject: CN=BC9CFF65D21F1A13A6FF749E85E1FDFA3D72800D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:46:b4:90:20:74:f5:c6:d1:fd:bd:97:32:
                    af:03:d9:e3:11:6b:d2:77:5f:9c:2b:21:9f:5a:be:
                    2f:36:39:9c:ba:d8:75:79:3e:de:f5:c0:a7:dd:66:
                    14:9a:f8:67:f1:04:27:6a:c9:60:b0:38:08:b5:f6:
                    bb:6a:f5:71:e9:e4:a1:ec:75:38:5f:dd:59:3c:56:
                    42:ba:11:e7:1f:ae:cb:96:07:60:61:69:64:f8:4d:
                    92:cb:e0:e2:aa:4f:32:45:29:01:e7:86:1c:65:5a:
                    9f:fe:94:7e:a8:90:4c:51:55:77:7d:a5:81:63:de:
                    3b:26:10:5b:5e:68:ea:0c:2f:79:f6:ee:ec:83:22:
                    92:52:db:59:2d:f8:55:df:a2:8f:0b:92:bc:10:21:
                    53:7f:64:0c:a6:5d:7c:7e:51:71:30:26:58:2b:7b:
                    f1:fc:ee:59:fa:89:5e:8a:47:9c:5d:0b:da:0f:07:
                    bc:0e:a1:07:fe:92:4b:c8:5f:d1:06:58:bb:e9:9a:
                    9f:c4:a7:a5:56:d8:22:14:35:50:a5:dc:06:ba:d0:
                    75:fd:c2:cd:28:aa:05:b0:7c:ed:24:1d:f9:da:e1:
                    94:df:50:52:64:f3:48:ee:47:6e:3c:7c:0b:af:2d:
                    10:14:c1:3c:17:5a:44:34:4e:92:6e:1a:f1:fb:fa:
                    66:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9C:FF:65:D2:1F:1A:13:A6:FF:74:9E:85:E1:FD:FA:3D:72:80:0D
            X509v3 Authority Key Identifier:
                keyid:5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ff:cb:46:60:63:54:07:5d:51:12:87:80:b0:c5:a4:55:29:
         c4:10:67:b8:10:cc:e4:34:7f:b7:99:3e:bd:55:7f:1b:ba:55:
         73:73:56:cb:fe:24:86:e0:bb:e6:15:7f:df:ec:32:e3:1f:1c:
         69:22:e3:cd:b5:a5:e6:ad:87:71:f3:82:a1:ca:63:1e:89:2e:
         97:30:28:a4:bb:1d:34:3e:64:53:89:ac:50:a2:60:72:58:87:
         87:c7:9a:24:d8:79:1b:bd:c7:07:30:a5:1b:6a:38:cc:11:f9:
         96:ae:8e:28:4b:be:68:76:44:a5:0a:49:a3:f5:a3:87:58:5e:
         b8:4f:fb:83:36:2f:aa:4b:21:19:b1:14:54:b9:54:d5:e9:04:
         4e:08:19:f2:4e:f6:d9:e7:ee:12:df:e3:06:ee:1a:70:85:eb:
         4c:db:b1:2e:8f:ea:36:4a:1f:a2:11:f9:6b:b2:11:73:39:be:
         f8:d1:d6:c5:22:f2:7f:2a:b8:73:b3:7e:39:24:15:1b:3c:ac:
         5a:96:fb:59:61:b9:0c:df:cb:05:b5:3b:cb:45:87:d0:d0:b8:
         43:6e:2d:79:e5:2e:8a:2f:4a:e5:1b:da:83:b5:5b:9d:b9:ea:
         fd:2a:9d:ec:b2:fc:01:5b:b6:05:d7:d8:fc:c7:a1:75:0c:6a:
         3a:1c:f9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:54:32 2026 by rpki-client