Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
File:                     12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json)
Hash identifier:          kZgqpqDe7VjT53EDG+g/gF5hREQXHUdI9A/u2Vgt37s=
Subject key identifier:   F7:ED:E2:06:FC:E4:9E:1B:2D:BF:AB:EC:F2:AF:AA:ED:FC:C8:23:48
Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Certificate issuer:       /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Certificate serial:       365DCA474D42B9CDF5161E158B2127A40BCD0DD9
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
Manifest number:          0564
Signing time:             Sat 07 Mar 2026 06:20:41 +0000
Manifest this update:     Sat 07 Mar 2026 06:15:41 +0000
Manifest next update:     Tue 10 Mar 2026 07:02:41 +0000
Files and hashes:         1: 38322e3135382e3132382e302f31392d3234203d3e2039333431.roa (hash: kXLN0HaZu/PhLPiFi30mit71JHQuO6u1X5gZIB305jg=)
                          2: 3135312e3135382e3138362e302f32342d3234203d3e20313338393930.roa (hash: FbCxZ9NqNkRJEcyQ+Z9e28f1jgxdu0y84ManyawEjFs=)
                          3: 3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa (hash: IT9x0P/3RDDAHWuOeI/lOb1Fh67e62i5Nd9Bu80+ylI=)
                          4: 3135312e3135382e3230332e302f32342d3234203d3e20313336373833.roa (hash: NPFmuPD5p1q4xsC0OUpbrvvz76wi/OaRGYsWFjn+/80=)
                          5: 3135312e3135382e31302e302f32332d3234203d3e20313331303735.roa (hash: cqvatD7Cg6pNEzgIw2WwWbtZBJHhttbVP+mmzWaLbBQ=)
                          6: 3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa (hash: TL6kftFt7vP2GTuixxW6r7zs8Ky4SmBEeLPTG5yr9A0=)
                          7: 1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer (hash: fewpVNLy6/HRvoDNDTlZwpVW2bZGk39++Q7XR4HP7Tk=)
                          8: 3135312e3135382e3138372e302f32342d3234203d3e20313432353434.roa (hash: L/WdMdCAwsC0GOHs4/vQ2hYemSSZju15ZjyEZqkYmxU=)
                          9: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=)
                          10: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: pKXZNlEb5Jv/EkHTt6dyNS2nttBQDP3hB07Pb+YKmng=)
                          11: 3135312e3135382e3133322e302f32332d3234203d3e20313334373238.roa (hash: 5lVjSKtWrmhtWPL47yMhwEDIaCukaKyrxLX70Wi5Smo=)
                          12: 3135312e3135382e33362e302f32332d3234203d3e20313432323330.roa (hash: JlCq+CeQI0IRGssW+fbcqNZoEnvUp/ZiGtyW7tWM+TY=)
                          13: 3135312e3135382e35362e302f32332d3234203d3e20313432323538.roa (hash: eQeLFKLBPCDpd3UM2/Z4NimaOA9d7w4AVtrEMyVO6ds=)
                          14: 3135312e3135382e3230342e302f32332d3234203d3e20313534353232.roa (hash: DjXkhi3atbqk0A2teZVs4TmRpsS8LWjuJgAMaAjN4zY=)
                          15: 3135312e3135382e3233342e302f32342d3234203d3e20313534353230.roa (hash: /mPQp0zRLRixv4ruZ9YF3ierQjYd2QtemmGEIe6D21s=)
                          16: 3135312e3135382e3233362e302f32332d3234203d3e20313534353233.roa (hash: 52qrDnM09tRZ9PTF92Y51pJWQ24eofPJfXULRl1uZ6c=)
                          17: 3135312e3135382e342e302f32332d3234203d3e20313432313938.roa (hash: AFjW+EEHhzoA6cLg/0TGjATfpii/CqiAmCZUF80TZ90=)
                          18: 3135312e3135382e3234302e302f32332d3234203d3e20313534353237.roa (hash: dM4L9Ic4RBC7usWTGbce/eZBXoOgJht8T0TuRtZKZGg=)
                          19: 24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer (hash: t0TI2xUV9CSJIC6Ugf/2mUDyvpKoJrWf1xg05ApUJ+s=)
                          20: 3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa (hash: snY8hCWpMQz3894nERSOV1ZUgmPo7DqaG6a4ucnpn8M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5d:ca:47:4d:42:b9:cd:f5:16:1e:15:8b:21:27:a4:0b:cd:0d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
        Validity
            Not Before: Mar  7 06:15:41 2026 GMT
            Not After : Mar 10 07:02:41 2026 GMT
        Subject: CN=F7EDE206FCE49E1B2DBFABECF2AFAAEDFCC82348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:a0:96:9b:2b:1e:a7:c0:37:50:da:19:19:
                    58:92:42:cf:02:51:df:e3:ca:35:cb:fe:85:37:13:
                    b5:42:20:ea:70:b9:8a:73:7b:a0:3f:09:12:f6:c2:
                    0a:45:1d:bd:a9:95:b4:fc:62:50:8e:5d:e8:4a:88:
                    30:82:0a:a3:6a:fb:14:b0:d7:9b:bf:f9:71:2e:2a:
                    dc:15:9c:65:ef:e3:1e:2d:cd:c5:d8:44:d6:7e:d5:
                    a1:57:07:23:75:c7:f3:11:c0:a4:91:f8:a3:0a:2b:
                    99:d5:43:32:92:d2:66:a5:2b:4e:75:92:85:85:9e:
                    d2:62:69:df:84:43:c6:38:fd:29:c8:f5:d0:df:fd:
                    3e:37:d6:67:b6:a2:a7:71:04:6d:78:02:b8:3d:fb:
                    97:09:b3:f2:90:84:12:38:70:ce:66:70:be:c2:9c:
                    c0:2d:04:3e:20:8f:83:b4:90:be:06:89:d7:7d:d1:
                    a2:47:fa:b7:30:85:34:11:2b:62:fb:c7:8b:73:fa:
                    01:57:32:06:97:49:52:15:72:15:1e:96:7d:7a:b8:
                    bf:a1:fb:6f:31:97:11:51:8c:ea:fb:ec:08:32:0e:
                    88:93:d8:4e:aa:92:a6:04:12:ba:39:09:e1:1f:05:
                    d2:85:28:c6:f4:b8:45:6b:a2:15:15:46:cc:cc:3c:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:ED:E2:06:FC:E4:9E:1B:2D:BF:AB:EC:F2:AF:AA:ED:FC:C8:23:48
            X509v3 Authority Key Identifier:
                keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0d:c4:9a:ac:e4:cb:52:a3:38:d6:00:65:a0:c6:9f:f3:0f:
         cd:60:52:e7:15:63:cf:91:ce:28:56:07:c3:a3:b4:15:dc:a4:
         29:52:15:b5:96:71:8a:0a:b7:82:57:09:67:5d:87:86:5e:52:
         5d:d0:19:6b:b8:13:dc:b9:4d:84:a7:27:3b:ca:cb:47:2f:ab:
         79:ab:4a:ea:47:f7:c4:da:b7:3e:af:98:ec:93:d1:82:21:ed:
         d8:d6:83:f3:c7:4f:c3:7d:f3:ad:79:34:dc:f8:d9:45:fe:82:
         05:3f:d5:40:e2:01:39:f6:cd:93:de:47:6f:79:0d:ef:d5:f5:
         12:53:e1:4b:19:33:6c:e7:1d:ea:e9:54:8a:1d:84:0b:ed:3c:
         98:a7:04:ba:23:46:32:5e:e5:44:63:24:8f:57:dc:61:44:6e:
         92:56:00:93:2e:18:f7:a5:15:04:8f:b9:8a:5d:89:b1:79:2f:
         67:10:0a:c2:bd:24:d6:56:7c:86:ef:26:01:5a:cb:81:a4:74:
         08:99:61:59:ce:82:1e:53:50:98:d8:01:f5:a8:50:1f:85:7b:
         3b:0e:ab:6e:d5:1e:52:e0:15:9e:fc:a6:2d:ba:42:96:0a:03:
         1d:24:92:84:77:5b:e5:ba:d2:48:44:cf:52:61:fb:f1:bf:51:
         7e:ed:2d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:36:11 2026 by rpki-client