Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
File:                     F38DFF094E16843854EAC1403C69FD7F77809D02.mft (raw, json)
Hash identifier:          T43ZssDsGQQMPYgdL5vqdc0YliXcmvF7qufa4JUVRh8=
Subject key identifier:   AE:90:01:DB:86:91:03:A9:7A:EB:F0:E2:25:F2:10:30:E5:8F:74:43
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       638A0257618C2038691A2C5AE6E644AC59932C98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
Manifest number:          058D
Signing time:             Mon 27 Apr 2026 05:12:14 +0000
Manifest this update:     Mon 27 Apr 2026 05:07:14 +0000
Manifest next update:     Thu 30 Apr 2026 15:44:14 +0000
Files and hashes:         1: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: 9c49vJ806rinKU2yZDXFYCFMBIoAnvTzCxv8zv5wDgg=)
                          2: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: wK8oxn2N67S1lQBDAIk3IqEYA0FuTaT4t8uoS7Qxu2Y=)
                          3: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: h8u7SrJg5ku6Yo95VNwdkXmyCuJqQtraeAvM3Te6q9c=)
                          4: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: pTD6ntCSNPwtG4NHQ69qWa7mmsEOdj99qhIPIzZeDUQ=)
                          5: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: nP5ghc/w9D/B5ENDC9cSkfzoaC33TZbwzsOf4OkDm5Q=)
                          6: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: flGSxQD++NqarnKtTxSlBovOQhcEWH2Yg3wz5JBQPvM=)
                          7: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: 5smgeJbhaO6g1/D8vxJXxrAUN8TIT7sSh2lLWbL38WY=)
                          8: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: +0TglIi2p7jwKSstfwGK7HxpA9aZK4fp6xgZ4tfuSJ0=)
                          9: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: ivkwwboxp97krml3NHZ+/mc1/AhS1A0qIb6B1JYBu0M=)
                          10: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: OK+88Ri2S1j7t5uyTgwV5tm/HaBgeRc4OL38vU7TJFc=)
                          11: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: HilnfBfyMvNFPQVFJ8bMdWO7V80Cp99wsDpOjOBytPM=)
                          12: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: +ULriNL1i1nU37Wxup/0FyWzsRtKq1c09nU9dI4qvF4=)
                          13: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: yp7YYUGfEi7m0LLSnf3xhw/IgYSZYGNpCN1qo/q9Vug=)
                          14: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: hceiRn1k+oO/x+5WpC4OSWhZbFgi/4V0uwvwpTc+nOA=)
                          15: F38DFF094E16843854EAC1403C69FD7F77809D02.crl (hash: u0rb9KpUYzVUKzvPJVgNEeGwNKLh+pv3CVV3wXg6jAE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Apr 2026 15:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8a:02:57:61:8c:20:38:69:1a:2c:5a:e6:e6:44:ac:59:93:2c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Apr 27 05:07:14 2026 GMT
            Not After : Apr 30 15:44:14 2026 GMT
        Subject: CN=AE9001DB869103A97AEBF0E225F21030E58F7443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:d2:aa:a0:4f:9d:c8:17:e1:ab:6a:1f:bf:
                    f2:2d:58:9e:08:dc:88:59:42:b1:92:f9:84:20:ea:
                    09:20:27:f6:ad:b7:a3:df:83:e6:75:ad:6d:d6:cb:
                    2d:86:c3:b4:61:6c:6b:4a:dc:83:c8:6c:b0:1c:c1:
                    aa:ed:ca:3b:cb:d6:35:2e:97:2d:19:1d:c9:81:fe:
                    1a:a0:97:b2:1a:40:e0:ae:d1:45:be:52:1d:f0:a4:
                    eb:c6:12:6a:14:a8:e1:20:db:f9:d3:ed:8e:1a:18:
                    74:7f:cc:7e:0e:83:ac:6a:42:49:77:78:e2:ae:e6:
                    1b:ad:3c:19:2b:2f:44:e4:8f:9a:17:ad:0d:0d:e8:
                    8e:ef:0d:07:a2:ff:6d:fb:97:a4:5f:59:b4:a1:53:
                    f4:bd:0c:13:13:f8:04:00:66:cd:d9:a7:1c:cd:a0:
                    16:57:55:c0:24:2e:29:e1:9f:56:0d:01:82:b0:44:
                    0f:70:9b:d2:46:df:f8:8f:33:9e:a0:ca:e9:88:e9:
                    77:38:9f:c3:cd:92:68:73:7f:fd:2a:55:70:9a:76:
                    2b:02:a6:c8:87:dd:db:1b:51:77:80:11:ca:ec:20:
                    71:f5:f5:10:39:a6:7d:8e:ba:99:91:ab:a3:39:a5:
                    b9:f6:3e:8d:39:fb:bf:65:79:0f:a7:55:49:f2:72:
                    e1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:90:01:DB:86:91:03:A9:7A:EB:F0:E2:25:F2:10:30:E5:8F:74:43
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ed:8c:3a:3d:d1:c5:5a:b6:90:b3:03:85:17:74:b2:09:2d:
         8d:43:13:d1:06:05:17:bb:b6:ba:f7:12:d0:4c:91:fb:f0:cd:
         dc:cf:3a:8b:a0:2d:e2:2a:a2:61:13:15:3f:60:f7:7f:a8:c4:
         b0:ae:11:a5:56:04:2e:71:a9:6f:5d:d5:89:c5:c9:f6:ed:0b:
         3c:d2:6e:62:3c:b8:b2:93:62:d3:f3:60:81:02:dc:c9:01:01:
         c9:55:8a:db:34:be:a4:91:08:d5:c1:46:c3:ec:ce:82:5e:ca:
         8f:5d:ae:24:bc:d3:5d:b8:a6:d6:58:c4:69:9b:d6:82:c2:8b:
         4b:56:52:cd:72:2f:58:1e:08:a5:9a:61:d5:93:b0:31:33:31:
         32:07:e8:68:ca:73:89:91:e2:3b:6b:81:f4:b5:64:06:2d:f4:
         a6:08:19:c1:fb:68:8f:3e:0d:eb:b6:2f:ef:62:7e:16:ef:6a:
         04:b4:4f:2f:fb:f5:0f:d9:39:71:48:9e:b6:94:42:42:85:68:
         8d:10:7d:08:d5:6a:6c:02:bf:f1:77:9f:f2:81:87:9b:52:3a:
         23:7b:62:f9:85:d8:61:39:8a:ad:b4:fc:8a:67:7c:f4:af:9c:
         9b:d0:6d:20:11:5e:67:ea:ba:73:a3:1a:57:26:f8:ab:2c:81:
         1f:4a:5e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:31:23 2026 by rpki-client