Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
File:                     90508FF980097E19CEF65ED72A856616A6F690AB.mft (raw, json)
Hash identifier:          UGbRzaaVAlEuw5zOd20CcfMIlFfjKrAvoZmAAlDiLmQ=
Subject key identifier:   8D:D4:42:DB:D6:F0:35:4B:09:38:A5:2E:D5:BB:3C:F4:6F:97:C9:D1
Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB
Certificate issuer:       /CN=90508FF980097E19CEF65ED72A856616A6F690AB
Certificate serial:       195C1AF2F6F6A6DCE0CF55972B5D959BA524E5F2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
Manifest number:          0567
Signing time:             Mon 13 Apr 2026 12:22:16 +0000
Manifest this update:     Mon 13 Apr 2026 12:17:16 +0000
Manifest next update:     Thu 16 Apr 2026 17:10:16 +0000
Files and hashes:         1: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: JNjDlAZZhJPbXz9QnoPN2kXEdVorueRNiZ3y4BzRO+s=)
                          2: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: NUlokuFe9GARtT8KTw9qoKUuu+MeiOKu86jOn++3TJ0=)
                          3: 90508FF980097E19CEF65ED72A856616A6F690AB.crl (hash: QjWVzNkub9vS1t4Zlsxh9r8MMaPltdfPFWOgo2UBvLg=)
                          4: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: 7pdp3iomZV1Sl4nuURLGWWHMiPLMkvx/Ece8HW9MQqg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl
                          rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Apr 2026 17:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5c:1a:f2:f6:f6:a6:dc:e0:cf:55:97:2b:5d:95:9b:a5:24:e5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB
        Validity
            Not Before: Apr 13 12:17:16 2026 GMT
            Not After : Apr 16 17:10:16 2026 GMT
        Subject: CN=8DD442DBD6F0354B0938A52ED5BB3CF46F97C9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8e:f4:43:f4:7c:ab:cd:e0:28:01:75:76:57:
                    a8:cd:90:f6:ef:f2:7b:ea:cf:a4:32:98:38:68:6e:
                    ef:90:42:89:3e:6b:5c:b8:70:56:3c:33:55:ca:40:
                    8b:df:ab:11:a6:c1:e5:71:fd:a6:46:f9:92:de:a7:
                    61:32:6e:9c:e1:ff:ff:1c:7d:4a:b2:ae:28:a7:20:
                    03:e3:89:57:e1:ca:c0:e4:c8:b1:dd:0a:e0:94:5c:
                    3e:ff:c8:48:69:c8:9a:5d:a5:1d:ac:ab:57:ce:e8:
                    41:12:e9:5d:02:93:29:2e:57:7e:39:d2:05:03:16:
                    1b:b9:07:3e:ac:3f:a6:40:dd:86:2b:4b:ae:0f:a3:
                    d6:26:2f:ce:b9:07:a7:2b:97:a1:08:76:93:4f:39:
                    5f:3f:88:e9:bb:d7:a6:e0:1a:75:19:c1:59:8d:b4:
                    60:e5:59:74:6f:e1:6b:75:ea:2b:7a:89:f0:05:a2:
                    10:6b:c7:76:24:f0:b8:ce:71:b4:d1:9e:d7:00:b5:
                    fa:34:5a:c9:c0:7c:fa:db:84:cb:8e:72:7b:f0:53:
                    b3:06:58:f0:6b:a6:e3:17:a6:57:03:e2:bb:8c:20:
                    6b:17:5c:9e:b7:a0:46:1c:d2:ce:ac:8f:0c:53:b9:
                    e7:c2:c3:2e:2a:13:d8:15:1d:d5:c0:4b:ed:5f:02:
                    25:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D4:42:DB:D6:F0:35:4B:09:38:A5:2E:D5:BB:3C:F4:6F:97:C9:D1
            X509v3 Authority Key Identifier:
                keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:4e:f4:98:21:45:4b:15:f8:1d:7d:65:65:2c:86:53:51:b6:
         30:68:ad:57:ae:02:50:17:ac:4f:66:f0:72:8f:31:76:90:91:
         f7:14:af:76:de:a7:c7:9f:f0:be:07:8a:88:15:c0:70:f0:6f:
         75:b5:d5:71:26:e8:db:03:b6:0a:34:88:fc:b2:ee:7f:90:f5:
         f3:cb:77:af:bc:9c:7c:7a:06:7a:ef:6b:e9:ba:7d:e4:f4:bb:
         62:19:c3:82:cc:dd:db:31:67:2b:09:80:fa:93:bb:5e:20:6d:
         fc:3e:49:2c:4b:63:e3:42:fc:aa:dc:cc:0f:37:d2:1e:30:24:
         58:db:4d:f2:de:93:c5:95:cb:3b:75:c0:f4:7b:a0:75:84:da:
         e4:8c:66:8d:ee:d8:52:1f:58:a0:83:55:71:2f:da:85:44:b7:
         17:29:52:4c:da:ae:fc:c5:8a:9e:26:1d:9b:a6:c1:c2:9d:d4:
         f6:67:3d:52:f3:26:f4:92:1c:75:80:08:fc:8d:80:a1:c5:44:
         71:40:8e:b8:01:c2:07:67:b6:db:3e:9b:fb:80:e9:8c:5b:e1:
         4b:da:58:fe:31:6c:9b:18:04:b7:7a:9b:eb:ba:35:8f:8a:48:
         10:4a:7d:56:6c:7b:06:46:05:ab:68:66:ba:14:d5:8b:52:a2:
         ea:23:0a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 08:44:42 2026 by rpki-client