Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
File:                     47571F0366875B7351B244D25CB7E8258FB33E93.mft (raw, json)
Hash identifier:          Us0UQk4pNRUg5LYC0xGddvb9e/PjT6+wH3K0fmySi3o=
Subject key identifier:   DA:0C:E5:41:A2:FB:69:AD:80:F9:CC:19:44:EE:93:7D:2D:C0:FD:57
Authority key identifier: 47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93
Certificate issuer:       /CN=47571F0366875B7351B244D25CB7E8258FB33E93
Certificate serial:       4B3EDC356308B43BD857CDE23AC5150053E69B6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
Manifest number:          EC
Signing time:             Mon 20 Apr 2026 21:42:41 +0000
Manifest this update:     Mon 20 Apr 2026 21:37:41 +0000
Manifest next update:     Fri 24 Apr 2026 02:59:41 +0000
Files and hashes:         1: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: EQmwZNedUjq2O/AJCi3gmfSvtjSzhrTVmBFbfysjDew=)
                          2: 47571F0366875B7351B244D25CB7E8258FB33E93.crl (hash: gOr6+0abywKPYDoikgoTVfRw2SRrvTv5ql40mFj2zE4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl
                          rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3e:dc:35:63:08:b4:3b:d8:57:cd:e2:3a:c5:15:00:53:e6:9b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47571F0366875B7351B244D25CB7E8258FB33E93
        Validity
            Not Before: Apr 20 21:37:41 2026 GMT
            Not After : Apr 24 02:59:41 2026 GMT
        Subject: CN=DA0CE541A2FB69AD80F9CC1944EE937D2DC0FD57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ff:12:11:d8:46:8f:ed:fd:9f:78:fc:fe:56:
                    70:f1:a8:f7:e1:a4:95:2c:14:64:0c:46:87:7d:43:
                    31:a2:02:be:05:3b:fd:84:bd:2d:ba:af:3c:c4:47:
                    18:bc:ad:02:dc:e9:37:2b:83:0b:50:a5:dd:10:9f:
                    48:45:b7:49:8d:99:cd:36:c0:b9:c8:3b:ff:09:cd:
                    fd:19:67:eb:07:f1:88:5c:98:c2:f8:f6:0b:ed:2e:
                    70:4d:f5:0b:fe:3c:70:ac:18:c4:a9:77:a9:8c:b6:
                    31:ff:81:97:af:64:c7:a3:18:ec:36:32:c5:b7:dd:
                    8d:aa:a1:c1:b1:47:c6:5f:26:a8:c1:b7:b6:17:ff:
                    b5:79:4c:19:88:4d:26:fd:be:68:f6:e0:fb:b0:58:
                    e6:81:20:19:04:94:f6:13:fb:df:df:4c:7c:c0:2f:
                    71:18:b2:c1:f7:37:d1:34:a5:4c:bd:29:72:07:e9:
                    f8:8e:25:58:a3:1e:e6:0a:50:53:b5:2d:96:77:2b:
                    19:ab:b3:46:d0:7c:4e:25:5f:05:26:ef:a4:48:2e:
                    11:44:c0:86:90:24:80:fa:17:b7:9c:45:2e:79:89:
                    f7:0c:ee:5c:6e:93:ed:10:42:f1:36:2a:06:87:4d:
                    c6:fa:36:34:ec:7f:48:e2:b3:fc:e1:4c:da:08:c6:
                    13:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0C:E5:41:A2:FB:69:AD:80:F9:CC:19:44:EE:93:7D:2D:C0:FD:57
            X509v3 Authority Key Identifier:
                keyid:47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:75:a7:f5:51:87:d2:d1:22:4e:c9:bd:01:bf:11:1e:a1:74:
         75:30:25:09:a6:a0:0f:ab:2b:2a:e9:c4:82:d1:f8:ef:43:6f:
         15:61:0c:a0:08:7d:36:af:1c:69:ed:7a:13:43:24:f9:ec:a9:
         24:e1:06:55:b4:42:4f:0c:af:91:58:3e:7d:da:4c:dc:36:b8:
         dd:7e:c2:1d:f7:a8:03:0f:d1:71:06:bc:f2:e0:b8:77:03:f8:
         58:74:d9:1d:5d:c4:22:a5:dd:ec:c2:a0:18:f6:06:f1:31:16:
         61:37:d3:88:f6:58:3b:e3:e8:57:08:46:03:ff:ac:de:18:bf:
         9d:22:58:7e:f1:73:b4:e5:e3:58:b1:4d:39:a4:09:02:07:30:
         ce:53:bf:11:74:cf:2a:bb:f9:31:1e:32:0c:43:4d:b7:b5:9b:
         e7:6c:91:15:66:51:b5:03:87:bc:cb:c9:ab:5f:a2:98:74:1f:
         fb:99:e0:a6:27:39:eb:a0:3b:a0:07:05:64:54:43:8b:6d:c2:
         62:10:2f:0a:a2:35:bc:a8:44:2e:6e:cc:35:ef:fa:a4:e5:d2:
         b8:9d:6b:82:47:08:0e:72:cb:d4:56:6b:48:9c:c2:cd:7d:a1:
         af:57:10:34:c0:87:ba:4a:67:a1:91:4c:75:d2:bd:e3:96:f8:
         6b:7b:8a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:55:17 2026 by rpki-client