Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
File:                     945AD192B10F71CE48362295A9C6281FE3395786.mft (raw, json)
Hash identifier:          xS2+RAL+fT0DvpcWrjFshIFwQ85OEisAL+XlG+LVOoo=
Subject key identifier:   CC:6E:3F:C2:E2:53:48:C7:02:AF:CC:29:5A:45:F3:B9:AE:8A:13:A3
Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86
Certificate issuer:       /CN=945AD192B10F71CE48362295A9C6281FE3395786
Certificate serial:       3972532F519F2EF3E8CA88BCB88DCF3157D2FB77
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
Manifest number:          025D
Signing time:             Fri 06 Mar 2026 19:02:27 +0000
Manifest this update:     Fri 06 Mar 2026 18:57:27 +0000
Manifest next update:     Mon 09 Mar 2026 19:55:27 +0000
Files and hashes:         1: 945AD192B10F71CE48362295A9C6281FE3395786.crl (hash: SHNBvanGOGpQOPgY2Gwv7hmjm6M2C5Z61XVuszHhKAQ=)
                          2: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: wuBJwpKwOiGhlkXr5a00YrNTyDMK7HD3QVMHitGSpjk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl
                          rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 19:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:72:53:2f:51:9f:2e:f3:e8:ca:88:bc:b8:8d:cf:31:57:d2:fb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786
        Validity
            Not Before: Mar  6 18:57:27 2026 GMT
            Not After : Mar  9 19:55:27 2026 GMT
        Subject: CN=CC6E3FC2E25348C702AFCC295A45F3B9AE8A13A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:cc:0f:0d:2d:bd:90:5f:41:ef:98:00:b1:
                    ed:09:e6:fb:15:50:19:0b:f4:1b:7e:5d:5f:6e:e0:
                    bc:47:0e:14:fe:22:b8:a6:d7:9a:46:b3:af:91:41:
                    39:e9:7f:1c:5c:6b:15:c5:0f:30:72:a0:b0:a0:42:
                    96:3e:54:19:af:c0:7c:2f:be:3c:99:76:81:eb:dc:
                    16:9f:dd:4d:ef:c9:0b:fa:5b:d1:4f:81:70:f2:12:
                    2c:53:52:9f:cc:30:7b:04:cc:0c:52:73:ea:78:c5:
                    72:1a:31:e1:0f:bc:df:d3:0c:a0:eb:0a:94:bd:19:
                    78:1f:67:e1:41:a3:9f:3b:5b:e5:bb:70:ce:28:fc:
                    88:a4:88:d7:73:0d:45:4c:f4:54:cd:1d:c6:75:a8:
                    ef:39:a5:39:ca:72:27:00:5b:e2:8d:6d:73:76:c3:
                    e1:f1:ac:5d:1f:df:9e:4d:4d:b3:80:44:81:a9:fb:
                    6f:c9:42:78:f8:32:68:6d:38:3d:8f:b6:15:3e:a0:
                    7e:0f:49:fe:4f:bf:b5:3d:81:c5:84:bc:75:36:e5:
                    df:3f:03:46:3c:5c:98:c5:7f:6d:c0:b2:7a:d6:8c:
                    3b:c0:42:8c:77:93:b6:e5:74:44:14:0f:32:ca:15:
                    c4:5a:1b:3d:20:9e:8d:6c:1b:fc:66:fc:e5:71:bf:
                    59:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6E:3F:C2:E2:53:48:C7:02:AF:CC:29:5A:45:F3:B9:AE:8A:13:A3
            X509v3 Authority Key Identifier:
                keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:11:cf:b0:ec:c6:b5:a3:e6:7b:8e:b9:f9:dc:ba:ac:36:91:
         16:48:7b:74:56:c5:3f:0c:56:d1:bb:69:7c:31:59:df:70:63:
         fb:75:f8:12:df:52:39:73:67:c8:a9:62:db:d4:91:3f:a4:17:
         4b:ff:66:57:44:75:28:d6:d5:a0:d1:7b:e9:8a:38:43:2d:43:
         22:72:7e:20:57:d0:96:63:a0:9b:10:b3:27:7b:c3:64:f5:34:
         93:34:54:99:57:7d:fb:a9:92:11:fa:44:0d:af:d3:e0:e3:52:
         56:ba:f8:e8:32:0e:5c:f8:05:3e:c7:a5:62:df:c7:51:9c:d0:
         49:d4:b1:58:50:c1:c3:69:d1:da:2c:05:96:7e:ac:52:38:94:
         bf:5f:d0:1d:0e:10:b5:4b:bc:75:5d:c0:13:2a:29:f4:d5:4b:
         03:8e:8a:b3:54:2b:45:30:28:2a:32:90:7d:cc:96:f6:b6:3f:
         aa:3d:6a:fc:79:68:3e:09:b7:ea:99:78:04:6e:0a:07:df:b3:
         54:86:db:bf:98:79:cb:d8:81:d5:d9:45:b1:b4:af:41:8a:a2:
         75:4e:53:2a:dd:e0:3b:99:60:fa:f5:ab:3a:22:df:e6:06:27:
         a4:99:c9:c4:c2:c1:e2:53:34:48:22:c9:46:97:90:4c:ca:3f:
         fc:c2:66:40
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOXJTL1GfLvPoyoi8uI3PMVfS+3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZF
MzM5NTc4NjAeFw0yNjAzMDYxODU3MjdaFw0yNjAzMDkxOTU1MjdaMDMxMTAvBgNV
BAMTKENDNkUzRkMyRTI1MzQ4QzcwMkFGQ0MyOTVBNDVGM0I5QUU4QTEzQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpkcwPDS29kF9B75gAse0J5vsV
UBkL9Bt+XV9u4LxHDhT+Irim15pGs6+RQTnpfxxcaxXFDzByoLCgQpY+VBmvwHwv
vjyZdoHr3Baf3U3vyQv6W9FPgXDyEixTUp/MMHsEzAxSc+p4xXIaMeEPvN/TDKDr
CpS9GXgfZ+FBo587W+W7cM4o/IikiNdzDUVM9FTNHcZ1qO85pTnKcicAW+KNbXN2
w+HxrF0f355NTbOARIGp+2/JQnj4MmhtOD2PthU+oH4PSf5Pv7U9gcWEvHU25d8/
A0Y8XJjFf23AsnrWjDvAQox3k7bldEQUDzLKFcRaGz0gno1sG/xm/OVxv1kLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUzG4/wuJTSMcCr8wpWkXzua6KE6MwHwYDVR0j
BBgwFoAUlFrRkrEPcc5INiKVqcYoH+M5V4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
M2E1MjA0NS1hNmZjLTQ1YjEtYmU1OS04MjU3MzVjOTZmNTQvMC85NDVBRDE5MkIx
MEY3MUNFNDgzNjIyOTVBOUM2MjgxRkUzMzk1Nzg2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZFMzM5
NTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhNTIwNDUtYTZmYy00NWIxLWJl
NTktODI1NzM1Yzk2ZjU0LzAvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4
MUZFMzM5NTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI8Rz7DsxrWj5nuOufncuqw2kRZIe3RWxT8M
VtG7aXwxWd9wY/t1+BLfUjlzZ8ipYtvUkT+kF0v/ZldEdSjW1aDRe+mKOEMtQyJy
fiBX0JZjoJsQsyd7w2T1NJM0VJlXffupkhH6RA2v0+DjUla6+OgyDlz4BT7HpWLf
x1Gc0EnUsVhQwcNp0dosBZZ+rFI4lL9f0B0OELVLvHVdwBMqKfTVSwOOirNUK0Uw
KCoykH3Mlva2P6o9avx5aD4Jt+qZeARuCgffs1SG27+YecvYgdXZRbG0r0GKonVO
Uyrd4DuZYPr1qzoi3+YGJ6SZycTCweJTNEgiyUaXkEzKP/zCZkA=
-----END CERTIFICATE-----
Generated at Sat Mar 7 21:19:13 2026 by rpki-client