Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
File:                     B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft (raw, json)
Hash identifier:          tmfUGLP1vWaPoYvh6ycjKqG/BYJM63wEtjrQsJfHfjo=
Subject key identifier:   10:68:48:10:D0:3F:43:A8:64:27:9E:E0:99:EF:86:00:AA:58:26:EB
Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD
Certificate issuer:       /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD
Certificate serial:       71979B7968F3DF99968919FD654A160C013E40CC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
Manifest number:          024D
Signing time:             Wed 15 Apr 2026 15:11:55 +0000
Manifest this update:     Wed 15 Apr 2026 15:06:55 +0000
Manifest next update:     Sun 19 Apr 2026 01:41:55 +0000
Files and hashes:         1: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: nzGXD+WO9jNdAgLBDWw3XXsmMEFx1ERW+wySreu0Q7o=)
                          2: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: qwBhVFJ/29JkjYJBmiXis9vZ9dZgJ/dBqQTkQKD7IUk=)
                          3: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (hash: n/ZxzBzZ2gRpYTiml4oQKNkriGvajLH2YwRAWcXMQ3M=)
                          4: 323430353a663234303a3a2f33322d3332203d3e20313430333834.roa (hash: jCC55QoiailnQ1RFdBW81Arc7TozD6cSp8bDswcvT9g=)
                          5: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl (hash: X2a6fMFNlChbq3KyWPm44+bBR5uy10DpXWW3npw/ctw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl
                          rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 01:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:97:9b:79:68:f3:df:99:96:89:19:fd:65:4a:16:0c:01:3e:40:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD
        Validity
            Not Before: Apr 15 15:06:55 2026 GMT
            Not After : Apr 19 01:41:55 2026 GMT
        Subject: CN=10684810D03F43A864279EE099EF8600AA5826EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:ab:37:bf:da:fe:8a:84:d5:1d:38:32:48:
                    57:5f:f8:bb:55:89:93:3a:76:0e:24:9c:af:1c:d6:
                    e9:72:57:f9:b4:41:0c:a4:30:c5:10:61:a5:bd:27:
                    d8:84:bd:f6:21:18:65:e6:33:b1:be:5f:bb:93:ea:
                    32:f4:d5:c8:e4:ab:0a:2c:9d:04:44:2b:cf:3e:dc:
                    b8:9a:64:50:58:20:7d:98:71:f7:6f:e6:57:5d:d2:
                    76:21:7d:19:a0:39:f6:70:08:63:f8:09:ed:35:03:
                    e6:9c:ab:6c:35:fb:96:6a:9b:51:bd:7c:55:5b:da:
                    58:ed:74:a2:b5:2a:1e:b2:48:1e:3b:2e:99:30:9d:
                    0a:87:9d:52:59:0f:35:60:52:1d:28:01:35:bf:52:
                    03:b7:65:bb:a1:5d:96:21:23:5b:aa:b2:cd:2a:02:
                    21:71:9f:4c:8c:6d:65:e4:bb:9e:b5:69:4c:80:d6:
                    1a:62:75:03:35:8e:46:22:21:bc:22:c9:b9:5c:60:
                    86:cb:12:83:8f:a9:15:34:59:b3:1f:40:44:17:31:
                    27:47:03:ff:35:11:11:50:d2:09:53:00:b1:60:62:
                    b9:b2:6b:17:a2:7f:02:f8:77:4f:13:ed:53:a6:ac:
                    6a:ac:62:0b:5d:7b:7b:96:6e:88:00:a4:1a:5a:ab:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:68:48:10:D0:3F:43:A8:64:27:9E:E0:99:EF:86:00:AA:58:26:EB
            X509v3 Authority Key Identifier:
                keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:36:bf:3a:86:04:f2:84:db:a6:e5:1e:7e:77:5c:31:c1:a9:
         cb:f2:d8:53:ce:e3:f8:12:3f:dc:38:75:78:72:37:a7:a5:36:
         6c:11:1c:02:c6:c7:e2:31:73:ce:e3:00:9a:b9:2f:55:d3:62:
         5b:7f:49:d3:da:99:2a:24:e6:d4:18:10:69:b1:47:3e:a9:f7:
         6f:29:ae:91:81:d2:e2:56:d5:5d:b8:ca:01:af:88:77:f2:0a:
         fc:b7:5e:fb:e9:85:f8:8a:3d:db:dc:38:78:2c:f8:db:6b:9c:
         65:b0:60:0f:ee:44:bc:15:70:8b:b8:e8:18:2e:e7:7c:e9:e9:
         36:14:8f:5a:57:fd:71:35:47:0b:d8:fe:3a:4b:b9:31:ac:2c:
         60:c6:39:0f:cf:b2:68:bb:0d:b6:39:ff:3a:95:ef:ce:35:88:
         0f:17:1a:e7:7f:3e:9b:d3:6f:25:ad:ab:37:d2:63:33:c0:7d:
         b0:3f:6c:d2:d9:74:f5:dd:71:45:b4:11:40:84:1a:e5:20:d6:
         b1:f1:a9:43:cf:46:6c:98:11:6d:e9:92:39:6d:22:c4:b2:1c:
         08:68:80:83:88:b2:b1:ca:ea:ec:9b:ce:a8:5e:ba:a6:06:c4:
         c4:e7:44:4d:45:e3:41:f0:58:67:42:be:c3:96:0b:be:60:79:
         5c:7f:20:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:29 2026 by rpki-client