Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
File:                     39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft (raw, json)
Hash identifier:          P2KGMM3RIUvUGIBvz5XT7z+KxUhHY6ljuBLe4MY5/kM=
Subject key identifier:   7E:8B:6F:32:07:69:5A:3E:7E:68:85:FC:D5:31:42:11:83:DF:E2:5B
Authority key identifier: 39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A
Certificate issuer:       /CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A
Certificate serial:       79EB4F654F5713870773F1B3F061C03C85471678
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
Manifest number:          1D
Signing time:             Sun 01 Mar 2026 01:10:43 +0000
Manifest this update:     Sun 01 Mar 2026 01:05:43 +0000
Manifest next update:     Wed 04 Mar 2026 05:58:43 +0000
Files and hashes:         1: 323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa (hash: e44E7s4PRD9CCUk2jY7ZZ7l5t8KM/OqUwkHUrfkkOcg=)
                          2: 3230322e302e39322e302f32332d3234203d3e203535363935.roa (hash: MqAwWrLiifg0NVQLvNMyPUe2lZOdrumhHENCKuLcOOQ=)
                          3: 323430353a326434303a3a2f33322d3332203d3e203535363935.roa (hash: gxDcNPkVDSFdZ41agLUQg+G8pCeb+5J4nXDU0DZLJ2Q=)
                          4: 3130332e32352e35342e302f32332d3234203d3e203535363935.roa (hash: 71yRknNPky7gIICGHwyWcufvVOlV/QSbdNUKr/ErIcc=)
                          5: 39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl (hash: rgBA+gKJsP3gfILWqFo9QchbNYNmveIZyFfmUhM8T3o=)
                          6: 323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa (hash: rPxNyJ1z70O0nMqBth9k9AL54wxNqFDgED4SxkwBthU=)
                          7: 323430353a326434303a35343a3a2f34382d3438203d3e203535363935.roa (hash: FnkUHZBrG989K95SzJmPZ3VlJE7bRu6MxYgvfXPwI1I=)
                          8: 323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa (hash: xhA/2CTOIWfVDpHM1NkVlpPmJHY6UZcMtq24fqHi4DE=)
                          9: 323430353a326434303a36343a3a2f34382d3438203d3e203535363935.roa (hash: w6Pa9H6dXhB2Rk0qIagT2ApTDekMkBQRHE2JtUHHFYM=)
                          10: 3131372e3130332e36342e302f32332d3234203d3e203535363935.roa (hash: KyBKzIQsEpd0PgxrEi5EeRSnZ5mxNIfKVnq+jHAVmuQ=)
                          11: 323430353a326434303a39333a3a2f34382d3438203d3e203535363935.roa (hash: pk+TPwqQgroDMciGoscp5z8cID/jM70gaJIC3nV7COg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl
                          rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 05:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:eb:4f:65:4f:57:13:87:07:73:f1:b3:f0:61:c0:3c:85:47:16:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A
        Validity
            Not Before: Mar  1 01:05:43 2026 GMT
            Not After : Mar  4 05:58:43 2026 GMT
        Subject: CN=7E8B6F3207695A3E7E6885FCD531421183DFE25B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:a4:1b:4f:3f:c7:a8:51:8b:e0:67:54:ea:
                    b6:b9:1b:95:6d:51:34:8e:b6:58:0d:72:98:09:92:
                    fa:98:f3:27:4e:46:df:4b:8c:1c:be:20:aa:78:cb:
                    79:ac:ce:92:40:a1:5f:26:9a:bd:44:28:c5:3b:bc:
                    60:99:f2:d0:73:c4:0e:c7:99:90:97:02:8f:bf:4b:
                    23:d4:48:98:d4:3d:24:47:bd:82:51:1e:b7:ee:3c:
                    30:cb:24:ff:5a:2c:56:bf:5a:71:7f:77:1c:63:26:
                    97:d0:85:88:94:9e:cb:fd:75:1a:8e:e6:04:fa:86:
                    77:d4:33:1a:87:c0:a5:cb:73:b8:4f:45:01:fe:8e:
                    d3:38:0c:c4:86:f4:60:bb:7f:1f:94:f5:dc:32:0e:
                    9b:9c:14:c1:ec:6b:d3:55:6d:3a:fc:74:16:04:a3:
                    bb:4d:e7:3f:8d:7e:04:00:fe:46:d6:35:63:8b:00:
                    be:93:38:b4:3f:35:e3:8a:db:87:2e:d3:e8:42:52:
                    69:6a:e8:e8:c1:a9:43:2a:cf:8e:e2:54:a1:f1:3c:
                    03:69:66:d5:17:ae:d1:a8:31:d4:53:4a:98:e5:57:
                    d6:53:72:a0:4b:e9:52:d7:5e:e3:01:81:93:24:14:
                    ce:b1:e5:03:3e:88:22:fc:ea:00:6f:d7:32:88:34:
                    30:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8B:6F:32:07:69:5A:3E:7E:68:85:FC:D5:31:42:11:83:DF:E2:5B
            X509v3 Authority Key Identifier:
                keyid:39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:89:db:59:48:ba:22:4b:18:b1:ca:d2:bc:55:ba:9a:bd:89:
         b1:80:fd:bc:a5:d3:f2:86:ad:7e:22:b6:c8:1a:41:8b:b0:3e:
         08:f6:d7:10:8e:e8:f6:e8:a4:c7:3a:6e:19:aa:ea:37:fe:60:
         db:6d:cf:f8:f2:de:4b:9d:2e:35:17:d5:05:a6:e6:a2:52:4b:
         66:ad:56:ab:1c:f6:97:0b:6b:91:00:7f:fc:ba:5c:ce:08:5e:
         dd:3d:8f:af:e6:22:94:9a:27:b1:e1:d5:6d:4d:e5:4a:44:ce:
         a6:ee:61:dd:01:e8:17:f5:43:0f:ad:31:8d:b1:91:ab:f4:15:
         4a:91:71:91:e0:42:73:02:eb:d8:c8:1b:0d:58:a5:91:30:7c:
         dc:e1:b9:59:15:ed:b8:22:c5:0d:d4:d4:bc:db:c4:65:a4:30:
         94:5a:59:12:cd:4f:e1:16:d1:f8:23:e5:bf:3b:e9:c5:df:25:
         6e:f5:42:1e:a9:0f:7f:af:61:d8:1e:bb:2f:fb:b7:9a:d5:dc:
         f3:a3:09:d5:cd:33:a3:e5:e5:9c:fa:97:f4:2e:55:15:44:02:
         ab:df:66:f5:8d:59:62:5f:ab:bf:d3:2b:de:85:ad:ec:6c:b4:
         9c:42:e0:1e:0f:53:d8:72:f5:68:79:03:c1:0d:8a:79:c8:e3:
         33:91:2f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:28:20 2026 by rpki-client