Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft
File:                     1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft (raw, json)
Hash identifier:          oFPDklKcPW0m39pYXyMUOEnGNDz2acY4pSceFSCJl/E=
Subject key identifier:   10:0D:86:88:9A:3D:AE:16:CA:51:09:35:43:78:67:35:70:8F:63:52
Authority key identifier: 1D:A6:81:83:1B:93:B4:18:17:14:87:CF:65:FA:A0:EC:34:CD:5A:FB
Certificate issuer:       /CN=1DA681831B93B418171487CF65FAA0EC34CD5AFB
Certificate serial:       5D53254B9A6B23BB6064108230B7EF97EFBD7B33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft
Manifest number:          05
Signing time:             Thu 05 Mar 2026 19:41:52 +0000
Manifest this update:     Thu 05 Mar 2026 19:36:52 +0000
Manifest next update:     Mon 09 Mar 2026 02:52:52 +0000
Files and hashes:         1: 1DA681831B93B418171487CF65FAA0EC34CD5AFB.crl (hash: zvOqJc0Tx9zvA/3bGemMN5VEw5TJ/IFlY3ebVRTNTik=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.crl
                          rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:53:25:4b:9a:6b:23:bb:60:64:10:82:30:b7:ef:97:ef:bd:7b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA681831B93B418171487CF65FAA0EC34CD5AFB
        Validity
            Not Before: Mar  5 19:36:52 2026 GMT
            Not After : Mar  9 02:52:52 2026 GMT
        Subject: CN=100D86889A3DAE16CA51093543786735708F6352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ef:07:88:6a:60:87:51:46:f6:f4:58:7c:97:
                    12:87:fb:0e:94:47:e9:fd:cc:05:31:bd:05:48:9c:
                    33:3f:e2:05:a7:08:a5:ac:d0:83:d8:4e:cc:61:67:
                    26:3f:e2:ad:7f:43:34:99:c8:66:f4:4d:a1:09:7d:
                    60:9b:a9:79:b4:25:03:50:99:34:b1:2d:d3:f1:a4:
                    2c:72:33:b6:f7:46:ee:69:ed:49:96:e4:6c:00:6d:
                    f4:ff:7b:17:1c:d1:8f:21:a0:2b:7b:32:2f:9e:f8:
                    97:91:61:6e:82:80:87:84:3b:61:68:26:46:95:0c:
                    b1:d4:40:65:1d:45:41:e7:d4:1f:f4:91:52:2b:47:
                    dc:04:52:50:7c:28:84:c6:b0:35:b3:8d:b2:4d:f7:
                    a0:ef:13:28:f1:31:ef:46:3f:06:9d:f1:38:1c:d4:
                    b2:92:7f:06:0c:62:38:5f:5c:08:52:b8:a5:f7:23:
                    98:9f:6c:f2:e1:3f:8f:49:86:9b:bc:a6:6e:49:a7:
                    f5:b4:96:d1:25:d7:e7:b2:5d:1f:22:73:24:a9:e6:
                    78:82:1a:c4:9c:f3:3b:8a:d9:eb:e9:36:42:73:29:
                    fa:37:28:b8:d2:e4:a5:e3:31:43:0a:e5:c7:ca:1d:
                    d6:3b:9c:99:fb:8d:8f:f9:a0:04:71:66:f7:70:ea:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0D:86:88:9A:3D:AE:16:CA:51:09:35:43:78:67:35:70:8F:63:52
            X509v3 Authority Key Identifier:
                keyid:1D:A6:81:83:1B:93:B4:18:17:14:87:CF:65:FA:A0:EC:34:CD:5A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:35:b4:dc:23:39:b5:f4:09:9f:b0:9e:8d:6e:45:02:42:21:
         65:e8:9c:43:5f:09:56:86:86:d4:4d:1b:71:cd:97:61:3e:46:
         00:c7:04:17:f9:dd:78:94:c0:6f:fe:b4:47:3a:82:8f:01:fb:
         c8:07:b4:63:33:44:0a:b1:83:2c:c8:4a:11:4a:40:b4:20:02:
         ce:ef:7f:32:fe:f9:2c:b4:7e:c7:f6:7d:3c:8d:92:56:2c:90:
         1c:17:c2:5e:6b:04:a4:51:43:4d:28:04:85:5e:55:9b:30:60:
         6e:4d:5d:6d:46:d5:94:4b:b8:68:4d:2e:45:f3:b4:94:49:89:
         9b:fd:9f:47:38:89:64:62:49:e6:87:21:89:8a:7b:04:1a:31:
         70:78:41:c4:f3:5b:d3:f2:02:ac:d8:56:f2:5c:0a:cc:a2:52:
         4f:62:45:31:d7:84:66:e1:bc:95:a5:0f:64:46:54:18:42:b5:
         c1:79:b9:00:16:9a:45:65:9a:42:32:51:09:e8:74:c3:36:8a:
         97:5f:80:41:fa:c9:c4:46:a0:91:9c:48:c5:e3:83:c3:c0:24:
         d5:25:7b:8b:4a:ee:80:f6:05:3c:f3:a0:b5:52:34:c7:8a:2f:
         54:27:72:7e:1e:bf:82:98:2b:fd:46:1c:2b:99:42:f7:cb:c9:
         ba:ec:6f:1e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXVMlS5prI7tgZBCCMLfvl++9ezMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURBNjgxODMxQjkzQjQxODE3MTQ4N0NGNjVGQUEwRUMz
NENENUFGQjAeFw0yNjAzMDUxOTM2NTJaFw0yNjAzMDkwMjUyNTJaMDMxMTAvBgNV
BAMTKDEwMEQ4Njg4OUEzREFFMTZDQTUxMDkzNTQzNzg2NzM1NzA4RjYzNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc7weIamCHUUb29Fh8lxKH+w6U
R+n9zAUxvQVInDM/4gWnCKWs0IPYTsxhZyY/4q1/QzSZyGb0TaEJfWCbqXm0JQNQ
mTSxLdPxpCxyM7b3Ru5p7UmW5GwAbfT/excc0Y8hoCt7Mi+e+JeRYW6CgIeEO2Fo
JkaVDLHUQGUdRUHn1B/0kVIrR9wEUlB8KITGsDWzjbJN96DvEyjxMe9GPwad8Tgc
1LKSfwYMYjhfXAhSuKX3I5ifbPLhP49Jhpu8pm5Jp/W0ltEl1+eyXR8icySp5niC
GsSc8zuK2evpNkJzKfo3KLjS5KXjMUMK5cfKHdY7nJn7jY/5oARxZvdw6sM1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEA2GiJo9rhbKUQk1Q3hnNXCPY1IwHwYDVR0j
BBgwFoAUHaaBgxuTtBgXFIfPZfqg7DTNWvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MDY0OWVmNS1jNDg0LTRmNDEtYTA1NC1kNmNlMzljMWY1MDYvMS8xREE2ODE4MzFC
OTNCNDE4MTcxNDg3Q0Y2NUZBQTBFQzM0Q0Q1QUZCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzAvMURBNjgxODMxQjkzQjQxODE3MTQ4N0NGNjVGQUEwRUMzNENE
NUFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw
NTQtZDZjZTM5YzFmNTA2LzEvMURBNjgxODMxQjkzQjQxODE3MTQ4N0NGNjVGQUEw
RUMzNENENUFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACs1tNwjObX0CZ+wno1uRQJCIWXonENfCVaG
htRNG3HNl2E+RgDHBBf53XiUwG/+tEc6go8B+8gHtGMzRAqxgyzIShFKQLQgAs7v
fzL++Sy0fsf2fTyNklYskBwXwl5rBKRRQ00oBIVeVZswYG5NXW1G1ZRLuGhNLkXz
tJRJiZv9n0c4iWRiSeaHIYmKewQaMXB4QcTzW9PyAqzYVvJcCsyiUk9iRTHXhGbh
vJWlD2RGVBhCtcF5uQAWmkVlmkIyUQnodMM2ipdfgEH6ycRGoJGcSMXjg8PAJNUl
e4tK7oD2BTzzoLVSNMeKL1Qncn4ev4KYK/1GHCuZQvfLybrsbx4=
-----END CERTIFICATE-----
Generated at Sat Mar 7 17:43:56 2026 by rpki-client