Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
File:                     0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft (raw, json)
Hash identifier:          wUsSS/u8UMTMzvsl/1EoFR8DGyH1fCCOhIKzi4sNttM=
Subject key identifier:   20:D3:53:E5:29:3B:60:5B:36:CB:9A:EC:D0:4C:FC:79:3A:B8:83:F2
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Certificate issuer:       /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial:       5801422190DF3297FF76E968277624265EFA5700
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
Manifest number:          0290
Signing time:             Thu 12 Mar 2026 12:21:31 +0000
Manifest this update:     Thu 12 Mar 2026 12:16:31 +0000
Manifest next update:     Sun 15 Mar 2026 21:20:31 +0000
Files and hashes:         1: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: KZ/MfJDGlUF+5FRxy7S8cNkPyicIqb4wdkx7H0nRfJc=)
                          2: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: uU+RiPAP5rA80po/0W6dMPifTVUm5kY6ALP/Ca/ACi0=)
                          3: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: I9GyAIe3s6r5o1IVue8LyW9A/cEmB+1nHgZeZ+VKm1g=)
                          4: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: 2VTD3WI/p1+3+37bAKEOPoRJrNamvZNDqASz/hNbToE=)
                          5: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: NRTKisssuBxZObjpfMlPvnnfb3JZpeBG9KHtEvhVsJY=)
                          6: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: FJlkjy7Zh6RrMJcyoFN5uq7ubbcgdbOVveGSZgScDgQ=)
                          7: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: O51+yh/myhmzBLnFSKrmxNaOkN9zLMNSiLH+jGUuyWg=)
                          8: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: vwui1qpHSvDVofVRy/Tt5fu+EupEaZj/9/a37EvMSjI=)
                          9: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: TdPV1Ae9NsfX/q2I6yHzDhMS8SBCOPuv6qM2EykOC0U=)
                          10: 0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl (hash: Id9+p03rJKVxjr9TbUw40Q0PriskabXhCgPG18+uKow=)
                          11: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: DRnLhFvj0XZm0VXEZ42TGDJPOpd0ZTUBf7MwJZ8bqOE=)
                          12: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: k78QygJvZC5uoGv2K0v+mQ5YwQ0X8MznZdn5hmtLPD8=)
                          13: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: AAfAK41bYgm/zJnOAM99b/7VZxCthhr1nADRxL8QtvA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
                          rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Mar 2026 21:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:01:42:21:90:df:32:97:ff:76:e9:68:27:76:24:26:5e:fa:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
        Validity
            Not Before: Mar 12 12:16:31 2026 GMT
            Not After : Mar 15 21:20:31 2026 GMT
        Subject: CN=20D353E5293B605B36CB9AECD04CFC793AB883F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ca:fa:45:cc:f0:b0:c1:5b:06:33:fd:48:8a:
                    e9:e0:4a:73:cb:b5:ae:e2:30:c6:a4:ff:78:d1:9f:
                    03:f1:aa:70:4e:ce:d6:80:56:b1:cc:72:de:84:67:
                    78:38:66:dc:74:38:02:f3:77:b2:3d:b4:14:62:44:
                    5f:0a:65:99:42:84:ca:09:06:8a:11:ce:0e:a7:89:
                    99:74:46:6f:0f:cb:93:8b:c0:7a:1d:81:3c:1e:f4:
                    21:54:3c:4f:47:84:73:35:74:91:1c:35:8a:49:9e:
                    fc:c5:d7:1c:a6:ea:db:4c:15:a9:99:fa:3e:54:88:
                    b5:da:cb:c7:02:24:1c:3d:a7:5d:a0:63:f6:e2:cb:
                    7c:61:9f:20:0d:a1:35:70:23:38:9b:22:d7:8e:d4:
                    d7:6a:75:f6:fc:2a:ad:1f:df:46:df:46:7f:7b:30:
                    43:04:4d:3c:33:28:78:0a:4d:2c:b5:d3:7b:19:08:
                    d7:d1:cd:b9:7f:f4:19:3e:03:18:9e:fd:1c:f2:7d:
                    c5:26:57:e5:8c:f4:9e:3a:0b:20:e9:a3:ea:8c:d4:
                    fe:66:ae:ab:29:73:91:3d:e3:b0:be:b7:ce:a2:cb:
                    31:5f:ac:4c:f7:1f:a9:f9:6f:c9:6e:1f:b1:c7:d3:
                    00:6f:8d:aa:d7:ba:a0:e5:48:34:78:9b:71:48:67:
                    3d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D3:53:E5:29:3B:60:5B:36:CB:9A:EC:D0:4C:FC:79:3A:B8:83:F2
            X509v3 Authority Key Identifier:
                keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:fe:43:85:dc:02:13:af:84:7a:0f:12:10:a8:bd:8d:c5:e3:
         8d:9c:9f:f6:f2:39:4c:2b:52:c7:42:26:76:f0:9d:cd:df:78:
         89:73:f9:26:7c:87:4a:5d:9b:74:41:a3:7d:af:18:69:32:fd:
         1c:cf:83:db:ef:4e:15:60:1c:72:bf:dc:af:ab:fe:87:92:97:
         52:97:ea:8a:88:a8:18:10:f6:c2:1e:dc:e4:b9:35:66:21:fd:
         d0:a2:ab:b0:7a:aa:c5:94:d7:4e:18:0f:8e:2b:48:34:90:26:
         11:31:43:b0:de:77:fc:a7:4e:95:eb:cf:c2:bf:1c:98:2a:b7:
         13:56:78:07:ad:6f:01:0a:86:1d:6f:90:3f:04:58:c3:6c:bb:
         ba:b6:28:62:35:a1:51:db:87:e9:88:56:2d:60:8c:ac:bb:89:
         94:cf:00:16:72:ac:3c:e3:c3:ec:c0:c7:8b:8d:1a:90:65:b6:
         3d:cd:4f:e4:8b:d4:7c:6e:b1:f4:e6:5d:6e:5f:ba:be:e5:cf:
         05:04:62:b4:fd:e9:fc:24:76:ee:81:16:3e:77:c6:e0:33:52:
         75:db:e8:c3:52:b6:72:5f:55:80:48:5d:3b:a5:32:a4:cc:45:
         fd:02:45:52:7c:07:72:a2:d6:7f:69:28:14:99:b2:4c:19:49:
         3e:ee:82:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:55:28 2026 by rpki-client