Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft
File:                     1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft (raw, json)
Hash identifier:          5yF6SBSFZHp1rQHeWlwXNDbzaiHaVy7xfnXyoQTIPbA=
Subject key identifier:   A4:D9:B9:1C:40:D5:16:96:1C:3D:15:63:A3:35:79:65:3B:38:9E:F4
Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5
Certificate issuer:       /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
Certificate serial:       4886A6C0BFD8020CCF4BD9955B675FC3C7A45B26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft
Manifest number:          056F
Signing time:             Mon 20 Apr 2026 04:11:05 +0000
Manifest this update:     Mon 20 Apr 2026 04:06:05 +0000
Manifest next update:     Thu 23 Apr 2026 08:02:05 +0000
Files and hashes:         1: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl (hash: GDZEN/pTR4XZaY8VgdXIivPhtHmk+L3bg13+wpX+RDw=)
                          2: 3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (hash: 3lKziCGfog5xq/tcpvDi0XNRN3r/T9hwdAmibroahAI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl
                          rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 08:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:86:a6:c0:bf:d8:02:0c:cf:4b:d9:95:5b:67:5f:c3:c7:a4:5b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
        Validity
            Not Before: Apr 20 04:06:05 2026 GMT
            Not After : Apr 23 08:02:05 2026 GMT
        Subject: CN=A4D9B91C40D516961C3D1563A33579653B389EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:fd:e7:8a:16:42:21:04:14:ff:de:4e:60:
                    5d:1a:1c:4a:45:0f:05:26:77:37:d9:92:f6:90:ba:
                    5d:cd:6a:b7:17:e6:7c:59:34:ae:d9:ea:ad:f0:20:
                    86:87:ca:36:2d:a2:97:b8:83:f0:6d:77:c9:2f:b1:
                    e0:f1:46:9d:98:e4:80:94:ff:38:ab:87:81:d8:34:
                    1c:94:0c:b7:c4:d7:df:30:65:fd:bc:0a:f1:d6:52:
                    07:80:8c:32:e6:ba:3e:11:81:c8:b2:ed:db:56:17:
                    be:cf:47:cb:03:9c:e8:1c:24:88:ed:0e:b5:26:4d:
                    ee:2b:6a:66:fa:d4:c3:f9:0b:9c:a0:74:89:cd:6c:
                    34:a4:2e:e7:63:b1:3b:6f:e0:1a:bf:37:30:34:f6:
                    bf:78:16:26:d3:38:2b:ff:f0:7b:33:1f:05:61:ff:
                    5b:c5:d9:36:49:58:97:6d:d6:2f:e6:24:89:e8:f9:
                    14:be:07:c3:e4:af:48:eb:9a:98:dc:3a:8c:6d:f4:
                    bb:02:47:bf:db:ea:b2:65:fe:ea:95:29:9b:48:a8:
                    b0:04:29:13:af:9d:53:50:d2:e0:b4:36:26:e7:a4:
                    a2:1b:32:f6:5b:c8:1c:1f:ce:f4:d8:76:0d:91:09:
                    1b:5a:56:f9:62:fe:0f:39:02:9e:9d:b6:26:ce:1c:
                    59:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D9:B9:1C:40:D5:16:96:1C:3D:15:63:A3:35:79:65:3B:38:9E:F4
            X509v3 Authority Key Identifier:
                keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:37:80:e4:85:c5:16:69:3d:26:c8:58:4d:53:ba:fc:a8:ef:
         1f:c8:93:39:fc:0e:1e:7e:27:f2:24:29:37:5e:62:f6:4c:ed:
         e7:a0:6b:24:2d:ec:9a:b6:eb:31:53:3c:9b:83:85:56:1a:de:
         c5:8b:4e:4d:37:f1:30:54:ec:43:fb:97:61:21:86:0d:db:59:
         21:82:53:d7:eb:17:9e:37:76:23:e4:67:a5:3a:02:67:eb:37:
         0a:94:fb:87:f3:00:8e:12:83:7c:82:0d:f7:8e:a1:b9:66:14:
         d8:73:84:57:8e:7b:f7:e6:32:7d:28:e2:3c:70:56:b9:29:8d:
         d2:df:ac:56:85:3c:c9:57:46:01:94:06:5c:f1:6a:72:c9:f2:
         26:6d:58:7d:5f:82:2f:62:f8:ba:3d:22:cb:11:4d:f3:00:63:
         cc:54:ba:9b:b0:46:f2:c6:12:f4:95:09:22:42:ba:27:ac:cc:
         0e:c2:41:ee:f6:6e:01:5b:ca:0a:c2:84:21:e2:b6:a3:e7:f5:
         f9:f6:0d:6a:3b:c9:aa:9c:9a:07:90:3b:ac:98:68:68:ac:99:
         f0:1c:b9:5d:30:20:8f:e6:e0:cc:39:24:e3:c5:6e:6a:87:3d:
         77:0b:85:3a:df:f1:c0:5f:0a:71:cd:db:6a:83:c0:d9:9d:8b:
         73:cd:81:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:25:31 2026 by rpki-client