Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft
File:                     45FD71C7EFF830D20E960225B4A971A14B081364.mft (raw, json)
Hash identifier:          0+1DD3VzZ1vQiYbbZosIzWWiFCUanlv+sLKXWpfMXSo=
Subject key identifier:   4A:30:F1:77:DB:D2:8E:61:C5:14:4E:04:13:09:0E:3C:E2:83:C2:4B
Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64
Certificate issuer:       /CN=45FD71C7EFF830D20E960225B4A971A14B081364
Certificate serial:       5CBD3C97CDAFBFE85F9BAD24D1AE41DF0D98DA76
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft
Manifest number:          0578
Signing time:             Fri 17 Apr 2026 17:21:02 +0000
Manifest this update:     Fri 17 Apr 2026 17:16:02 +0000
Manifest next update:     Tue 21 Apr 2026 01:03:02 +0000
Files and hashes:         1: 3131372e3132312e3230342e302f32342d3234203d3e203436303239.roa (hash: mX1IV8SWQfww0lnFZpUVo9NgbZqOb9CNshtNFVh8AC4=)
                          2: 3131372e3132312e3230372e302f32342d3234203d3e203436303239.roa (hash: gDGb08hvTI2y3QINHMIdweQWZuE2Ud13GHUXJ6Kzlok=)
                          3: 3131372e3132312e3230312e302f32342d3234203d3e203436303239.roa (hash: DX38fpxpc+mA6ZlLNcNyHZoYPw6/HKLzAPuzu7R51qY=)
                          4: 3131372e3132312e3230352e302f32342d3234203d3e203436303239.roa (hash: CsmV40ocTK34FNVOX+s7UPnrEI3dHc6tk2OpZ2/axkU=)
                          5: 3131372e3132312e3230332e302f32342d3234203d3e203436303239.roa (hash: P8aS68geJajJn/yE+GCIxgmIL0p3n8dBmSKrsBdYFiE=)
                          6: 3131372e3132312e3230322e302f32342d3234203d3e203436303239.roa (hash: uCVdhpUsXkY2vTA+CtUPwSxBBPlp/rsE9zyq5sT/ToI=)
                          7: 45FD71C7EFF830D20E960225B4A971A14B081364.crl (hash: aVwRso/XuxbZriinZPRITXX0uKYr09/Ub352aVYsVQM=)
                          8: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: kVr4SbJNPOjRvwiHc+hgo6K4HzE1wOJqmCs09GwhV5A=)
                          9: 3131372e3132312e3230302e302f32342d3234203d3e203436303239.roa (hash: DHL4d041Sf/kJHzZXuM4k8WmQe2xV2CBZ5GVTmyU7rc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl
                          rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 20:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:bd:3c:97:cd:af:bf:e8:5f:9b:ad:24:d1:ae:41:df:0d:98:da:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364
        Validity
            Not Before: Apr 17 17:16:02 2026 GMT
            Not After : Apr 21 01:03:02 2026 GMT
        Subject: CN=4A30F177DBD28E61C5144E0413090E3CE283C24B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d4:ac:dd:90:db:b4:63:d3:ed:79:04:7d:16:
                    b9:39:83:c6:66:ca:de:cd:1e:21:c6:7d:80:b2:5e:
                    9d:31:ec:44:6c:1a:8a:ba:60:04:92:2a:e0:32:41:
                    f9:bb:92:73:12:5b:95:61:0f:ce:73:e8:fd:8c:cb:
                    77:21:18:4b:70:8d:db:9a:c1:d0:25:db:47:84:bf:
                    4d:7b:11:8e:90:a0:66:f5:9e:47:f8:66:32:df:4e:
                    6f:9a:e3:01:fc:90:4b:c4:8e:75:27:b6:31:6e:c0:
                    8b:84:29:ad:4c:16:fc:94:69:3d:74:87:49:f8:4b:
                    9b:19:4a:3d:a6:a8:fb:1b:39:23:ae:d4:09:e6:e7:
                    6d:52:21:64:f7:ee:99:3b:42:02:8d:b0:b7:7d:91:
                    2b:36:3b:47:04:ea:92:55:0e:57:79:ce:6e:4b:0c:
                    d4:07:0e:fe:04:48:4b:fe:ab:4d:5c:3c:d9:69:15:
                    da:eb:3e:9c:22:7a:88:8d:c6:0e:2a:be:37:17:f8:
                    9c:74:4c:ae:fb:30:34:f6:96:98:96:35:64:a4:17:
                    4e:c4:ca:23:6d:0c:37:8f:86:ca:7d:e6:61:2d:bc:
                    4f:98:2d:89:60:f8:c1:e1:3a:3c:7a:c3:84:f2:62:
                    1a:ec:be:cc:ba:49:d6:36:f5:94:a7:e1:60:c6:19:
                    6f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:30:F1:77:DB:D2:8E:61:C5:14:4E:04:13:09:0E:3C:E2:83:C2:4B
            X509v3 Authority Key Identifier:
                keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:19:ba:96:15:e5:db:95:59:70:f7:da:a2:6b:a0:10:4b:21:
         8f:91:38:ca:50:9e:e5:bd:1b:b5:df:9d:db:16:16:4f:ef:e4:
         23:f2:e7:6c:dd:93:79:97:c6:85:43:d0:c0:b0:41:86:43:39:
         b3:bf:88:d6:b2:9f:d4:10:8e:9c:f6:54:34:f4:dc:f3:ea:d3:
         15:bf:30:41:d6:04:53:c8:7b:ed:04:c3:71:f5:ff:68:2d:d2:
         5a:73:72:7d:9f:5d:58:2f:fd:b2:c1:ee:e2:29:ee:f5:e5:ab:
         1c:46:07:27:1d:8f:a8:70:a9:ab:0e:5e:7e:6a:6f:96:09:45:
         8a:61:41:1c:89:9d:c7:3c:4f:86:41:5f:66:e1:17:7d:ae:2e:
         95:c4:2a:e7:07:6d:4a:48:02:0d:1d:14:65:b5:a2:11:e9:96:
         92:59:c0:fd:3f:0b:cb:0d:28:b8:ac:1f:ef:20:a0:11:37:04:
         ca:0b:a4:67:72:25:43:c1:48:aa:0c:51:92:4c:c3:da:93:7b:
         f6:39:db:7e:0b:96:24:52:e9:7f:26:2b:93:34:2f:a7:22:d3:
         e6:97:e1:c9:9d:9d:1d:3d:bf:ef:f6:11:50:ae:62:16:3c:5c:
         d8:bd:0e:05:2f:15:79:8f:d9:25:ae:f5:1c:72:7e:87:2a:c2:
         a1:55:9b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:32 2026 by rpki-client