Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
File:                     F38DFF094E16843854EAC1403C69FD7F77809D02.mft (raw, json)
Hash identifier:          ay6O83mLg2OwekyUg62gcPgAoQ8Km7hl5Uw0+B4oVpM=
Subject key identifier:   F2:EA:AF:F3:66:04:6B:54:66:D3:06:3A:80:88:37:3E:31:F4:7F:E4
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       77B5CD037E4B1BE5D2D8D9930FF7F1E4AA3B474D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
Manifest number:          0579
Signing time:             Thu 12 Mar 2026 16:01:46 +0000
Manifest this update:     Thu 12 Mar 2026 15:56:46 +0000
Manifest next update:     Sun 15 Mar 2026 17:01:46 +0000
Files and hashes:         1: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: 5smgeJbhaO6g1/D8vxJXxrAUN8TIT7sSh2lLWbL38WY=)
                          2: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: +0TglIi2p7jwKSstfwGK7HxpA9aZK4fp6xgZ4tfuSJ0=)
                          3: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: wK8oxn2N67S1lQBDAIk3IqEYA0FuTaT4t8uoS7Qxu2Y=)
                          4: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: hceiRn1k+oO/x+5WpC4OSWhZbFgi/4V0uwvwpTc+nOA=)
                          5: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: yp7YYUGfEi7m0LLSnf3xhw/IgYSZYGNpCN1qo/q9Vug=)
                          6: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: ivkwwboxp97krml3NHZ+/mc1/AhS1A0qIb6B1JYBu0M=)
                          7: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: nP5ghc/w9D/B5ENDC9cSkfzoaC33TZbwzsOf4OkDm5Q=)
                          8: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: OK+88Ri2S1j7t5uyTgwV5tm/HaBgeRc4OL38vU7TJFc=)
                          9: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: pTD6ntCSNPwtG4NHQ69qWa7mmsEOdj99qhIPIzZeDUQ=)
                          10: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: HilnfBfyMvNFPQVFJ8bMdWO7V80Cp99wsDpOjOBytPM=)
                          11: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: flGSxQD++NqarnKtTxSlBovOQhcEWH2Yg3wz5JBQPvM=)
                          12: F38DFF094E16843854EAC1403C69FD7F77809D02.crl (hash: fWXAk4XYWy04lXdLIyYr4T4AQpPKosfH0/3z398MyD0=)
                          13: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: +ULriNL1i1nU37Wxup/0FyWzsRtKq1c09nU9dI4qvF4=)
                          14: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: h8u7SrJg5ku6Yo95VNwdkXmyCuJqQtraeAvM3Te6q9c=)
                          15: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: 9c49vJ806rinKU2yZDXFYCFMBIoAnvTzCxv8zv5wDgg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Mar 2026 17:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b5:cd:03:7e:4b:1b:e5:d2:d8:d9:93:0f:f7:f1:e4:aa:3b:47:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Mar 12 15:56:46 2026 GMT
            Not After : Mar 15 17:01:46 2026 GMT
        Subject: CN=F2EAAFF366046B5466D3063A8088373E31F47FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:09:28:fc:17:5e:b2:a1:17:a1:14:74:dd:66:
                    5b:55:f6:7c:4e:46:49:3b:2c:d4:9d:76:f3:72:fe:
                    94:a0:db:7a:05:28:58:83:19:d2:56:bc:a4:08:28:
                    20:f6:20:d7:2a:61:75:7b:a7:7a:39:a0:37:f8:1e:
                    64:b4:95:ed:1f:2b:57:54:d9:6e:69:87:99:b9:a9:
                    0c:73:01:a5:8b:8d:1a:2b:78:a5:4c:a8:cf:87:2c:
                    ad:0c:d7:57:8a:9b:5a:f1:60:4f:c8:ce:b9:28:56:
                    74:ac:f6:4b:d6:d8:13:af:e3:8d:b5:6e:4f:ed:80:
                    57:4a:72:73:3c:94:5e:f7:e3:02:4f:e9:86:9a:ed:
                    2e:35:5a:88:78:d0:d3:25:b2:ec:66:22:83:78:05:
                    75:38:75:05:be:2e:b7:7c:48:32:12:d7:3f:c2:6c:
                    01:76:c9:88:71:df:31:5f:64:fb:45:62:67:dd:53:
                    88:c8:f8:66:0b:a9:2d:90:7b:a2:ab:d0:65:04:81:
                    cd:99:21:e1:7d:8f:a9:fc:3f:16:63:04:de:bc:bb:
                    a4:2b:16:af:81:1b:66:a5:ca:59:ec:10:ce:06:01:
                    46:56:ef:6d:db:a8:6b:f5:df:f0:af:a3:07:70:c3:
                    97:65:e2:45:56:23:6e:00:2b:f9:c9:95:b0:9c:2c:
                    be:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EA:AF:F3:66:04:6B:54:66:D3:06:3A:80:88:37:3E:31:F4:7F:E4
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:97:18:60:7d:30:1d:6b:94:05:4b:13:c0:42:1f:30:ff:2b:
         bb:4d:a6:21:d9:a1:4e:93:ea:30:b8:21:a5:cc:6b:6c:74:2d:
         f1:43:29:d0:ff:0c:b6:5f:6f:05:96:68:ff:5f:06:73:db:86:
         12:a3:fd:e2:b9:9c:c2:37:f6:2c:9c:4d:83:24:0c:01:54:b1:
         28:ad:ae:3f:d4:ea:a3:be:b5:3a:63:0e:19:71:ab:ba:35:7d:
         fd:c8:39:f2:23:5d:7d:45:46:44:51:b0:e3:9f:07:70:76:fa:
         ee:15:40:a3:2d:1d:75:40:42:14:0b:5b:27:c9:34:88:ca:ab:
         72:47:e2:d6:16:bc:f3:ef:15:54:aa:b0:dc:ee:d9:a9:9d:76:
         e8:04:1e:b2:06:a5:7b:c0:a7:dd:55:6a:a2:f6:d0:f1:bf:73:
         53:73:d8:a3:24:10:f6:10:4d:64:df:85:d6:c0:0c:5c:f3:a7:
         3a:92:86:19:33:1c:51:aa:0c:5f:eb:b8:3e:25:75:df:a6:34:
         6f:ec:42:7c:e0:de:eb:73:09:4e:b5:b1:f8:c5:8f:c3:0e:2c:
         a7:38:4d:d0:f7:86:b3:68:0c:ed:41:e9:f0:6b:05:a4:69:e2:
         04:34:d7:2c:84:11:5f:df:00:11:15:2e:ac:16:7b:dc:12:25:
         86:29:fd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:35:11 2026 by rpki-client