Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft
File:                     1E40BE2B668DAE3E7271E835148386D785E3724C.mft (raw, json)
Hash identifier:          LE4SsP71zFVr5lMA1xH4BdoA2ts3UtvWBjquuadIHTE=
Subject key identifier:   0D:D2:2F:0D:2E:8D:2B:97:31:4D:21:72:2E:CD:73:C9:A4:7F:30:EA
Authority key identifier: 1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C
Certificate issuer:       /CN=1E40BE2B668DAE3E7271E835148386D785E3724C
Certificate serial:       35AF48D6F9C0707F2A68812E1A7CEA669548C87B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft
Manifest number:          012A
Signing time:             Mon 20 Apr 2026 09:52:23 +0000
Manifest this update:     Mon 20 Apr 2026 09:47:23 +0000
Manifest next update:     Thu 23 Apr 2026 19:35:23 +0000
Files and hashes:         1: 3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (hash: 6NYs/G1xdGsUC1/WqjKklC2SAb8XsfqjqDKSyuRji20=)
                          2: 1E40BE2B668DAE3E7271E835148386D785E3724C.crl (hash: 7p9iJ8SPqh/a+70aZiENxOUFL+3HIy9g+aNBumxAcqI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl
                          rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:af:48:d6:f9:c0:70:7f:2a:68:81:2e:1a:7c:ea:66:95:48:c8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E40BE2B668DAE3E7271E835148386D785E3724C
        Validity
            Not Before: Apr 20 09:47:23 2026 GMT
            Not After : Apr 23 19:35:23 2026 GMT
        Subject: CN=0DD22F0D2E8D2B97314D21722ECD73C9A47F30EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9e:0f:67:ed:64:9c:0c:9d:b3:45:5f:02:e3:
                    2e:d8:3b:8b:71:6b:f1:3b:bc:00:30:f5:61:d9:3c:
                    01:b3:96:6a:0e:57:1e:ac:51:31:4c:f1:7e:04:e9:
                    44:12:68:08:01:5e:66:35:0d:e5:61:99:5f:b8:55:
                    75:40:cd:0d:0f:15:70:48:16:65:6a:50:69:da:cf:
                    f1:75:61:a3:77:34:7a:0d:0e:85:bd:08:6e:b3:58:
                    a2:e5:33:2e:14:e0:c3:b5:66:35:ff:72:37:ac:ed:
                    43:eb:40:b1:20:c0:44:6c:2a:95:2b:95:a8:67:77:
                    a0:25:a7:60:8d:8e:cf:47:05:23:1a:3b:db:aa:ae:
                    55:a9:f5:94:a7:bf:4b:fd:05:fa:e5:9f:8b:8c:66:
                    fc:fb:77:fa:a5:12:66:b0:45:0c:6e:55:8c:ca:16:
                    4c:e6:3f:6b:9a:ba:54:47:75:46:95:2a:55:99:bb:
                    a6:e7:2d:91:7a:3a:74:49:2a:62:8d:a8:ef:02:07:
                    fc:d1:f2:df:86:b6:58:88:c2:2d:57:17:0d:d6:2e:
                    1d:25:96:cb:df:91:a8:ef:68:e0:f1:a1:22:dc:79:
                    87:ed:09:a6:81:5f:a9:b7:72:46:86:28:26:27:87:
                    ec:32:a4:2c:4e:e3:bd:96:3f:29:70:74:09:e3:7b:
                    da:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D2:2F:0D:2E:8D:2B:97:31:4D:21:72:2E:CD:73:C9:A4:7F:30:EA
            X509v3 Authority Key Identifier:
                keyid:1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:f9:9b:f3:93:9c:bd:b4:11:c5:f3:a0:f8:2e:ec:eb:a0:60:
         5f:3a:ba:74:79:6b:9c:e2:5f:a9:8c:ef:72:3d:55:73:a6:17:
         b2:c3:35:cf:11:1c:17:aa:a0:26:d9:d3:f4:24:bb:4f:e1:45:
         f2:84:38:74:3f:62:db:d0:67:5f:45:69:49:dd:11:cf:b7:05:
         f6:f1:82:84:98:28:62:ce:1b:69:00:ae:27:e6:e9:33:a2:4f:
         22:d4:b1:f6:13:c8:51:2e:ba:14:7a:a0:3d:5c:cf:07:50:57:
         2f:77:40:4a:f9:10:87:c1:c9:59:5d:28:1b:6c:ac:bc:3b:c4:
         68:4c:2f:6d:35:c3:4d:35:5c:a5:17:1f:ed:f4:dd:02:1a:0b:
         f3:04:21:1e:9b:45:82:be:05:e9:de:19:8c:50:35:5f:a8:82:
         af:91:7b:87:be:8c:47:49:3f:ff:2f:4e:0b:b6:42:2f:ef:a4:
         8e:eb:9c:e4:2c:26:71:9c:f2:31:3f:74:42:5d:94:34:2e:fd:
         bd:98:82:f4:aa:b1:c0:54:c7:7e:84:8f:50:f9:dc:af:a4:74:
         34:96:b2:a9:9c:e8:37:85:a0:47:67:53:c5:26:5e:32:fb:85:
         cb:b9:42:02:c2:26:6a:43:4b:71:1d:4c:cd:81:8b:3d:39:97:
         e4:5d:9f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:54:20 2026 by rpki-client