Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft
File:                     4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json)
Hash identifier:          ziknboZgDKu/7E+xUn5r8dz/wT9kIo1/qg0vowRGSL0=
Subject key identifier:   3A:76:55:23:EB:A5:FF:72:29:C4:AA:76:E1:C9:CB:CF:A2:00:DA:38
Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
Certificate issuer:       /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Certificate serial:       0B8779E6005D238F095B6CE3501014B5C6F0657B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft
Manifest number:          0272
Signing time:             Fri 17 Apr 2026 19:30:53 +0000
Manifest this update:     Fri 17 Apr 2026 19:25:53 +0000
Manifest next update:     Tue 21 Apr 2026 02:16:53 +0000
Files and hashes:         1: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: vXm+tlKEOgYJdDJAnCZPMlPqVOnTLqMF+c5MoOwzwbY=)
                          2: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: Uce528/KV3oCstaRCZguiOogFuox/yiwX1g2nJn55uk=)
                          3: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: UrGzpQyb4OcG13ECSRKSWIFvQeDrPkoBtijveesvtFQ=)
                          4: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: 3PeI4c1+04C9ghzq6F40f5013YnnignJ8PNDhSKl9BY=)
                          5: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: 1IuZ+1sb5CuVWfx/fjE2EJ1GmWjRaqNz5VL2CGRsg+c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl
                          rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 02:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:87:79:e6:00:5d:23:8f:09:5b:6c:e3:50:10:14:b5:c6:f0:65:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
        Validity
            Not Before: Apr 17 19:25:53 2026 GMT
            Not After : Apr 21 02:16:53 2026 GMT
        Subject: CN=3A765523EBA5FF7229C4AA76E1C9CBCFA200DA38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:d1:98:34:55:c7:46:c4:6a:69:73:09:40:
                    ce:f3:ff:2b:7c:e9:92:e7:49:63:ec:ec:0e:bc:ad:
                    cd:d8:15:f2:63:49:aa:8c:03:58:f1:34:b6:2c:cd:
                    f5:ae:ce:c3:2f:c3:40:76:dc:8c:de:1b:77:e2:ba:
                    95:5d:1d:c5:9f:33:33:90:1e:7a:9c:79:b6:37:5d:
                    ed:23:80:fa:29:01:06:cf:65:e8:a7:5f:18:34:a1:
                    23:cb:41:53:66:3e:4c:bb:4e:07:9e:38:48:98:90:
                    ee:16:61:c4:f9:ed:f2:ca:00:b1:a7:d7:ed:ca:5c:
                    54:0f:5d:03:11:69:9b:88:5f:9a:2b:37:aa:0c:97:
                    5e:e4:43:39:0f:2f:37:9b:41:32:76:03:d3:96:ae:
                    5a:27:9d:15:71:9b:1e:ef:e5:6c:5f:10:68:d6:14:
                    28:f8:4a:81:11:70:b3:45:0f:0c:31:b5:4d:19:3f:
                    5e:8f:11:d1:2d:7a:38:dc:bf:13:53:2a:bf:9e:27:
                    7e:e1:74:de:87:a6:f8:6c:78:ec:04:d9:98:d2:1d:
                    ad:1c:4b:c0:38:6e:5f:96:d3:a7:4f:cb:36:2b:98:
                    98:e8:67:67:32:9b:65:e7:02:94:bb:5d:5b:f4:85:
                    ba:3a:9d:7a:5b:9a:f1:07:00:a5:95:a6:dd:b8:e2:
                    60:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:76:55:23:EB:A5:FF:72:29:C4:AA:76:E1:C9:CB:CF:A2:00:DA:38
            X509v3 Authority Key Identifier:
                keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:09:ac:7e:4c:56:ec:c3:dc:85:ed:da:67:dc:28:52:50:6b:
         0e:ca:25:9f:12:86:27:71:fe:93:ff:d9:78:04:b8:9d:10:96:
         6c:78:26:59:e5:09:c8:42:68:a7:af:12:b1:7e:e7:99:7c:c6:
         4e:1b:a5:d4:97:c3:ab:60:ee:d3:ed:04:80:83:ad:f0:47:94:
         2b:fe:ad:5f:32:4b:93:55:94:85:37:8c:24:24:df:85:5a:23:
         88:d8:6c:af:d4:07:fd:51:a7:5c:02:91:bd:12:f5:28:13:f3:
         82:64:f3:99:c4:97:12:87:3e:58:5d:68:ea:65:e2:36:05:f8:
         67:0b:a3:74:f0:ea:62:d6:97:0c:e9:8e:04:45:8e:4d:31:e2:
         31:39:96:dd:9b:03:ab:82:77:56:96:20:dd:c1:36:54:44:e6:
         0e:57:90:b1:5d:c1:c4:78:d1:0f:98:e2:5d:78:9f:87:c4:23:
         7d:0a:4f:13:cc:14:d1:2c:64:32:c7:15:9b:10:a5:98:71:e7:
         f3:33:2d:f0:d9:39:10:31:08:98:7d:bb:08:bb:2a:47:08:2c:
         aa:82:a5:2c:69:e7:27:ab:78:e8:60:95:18:72:be:3b:81:99:
         f0:f0:c3:a8:a4:0a:68:ed:91:93:36:f1:ee:64:0f:78:e0:bc:
         2a:87:cc:73
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUC4d55gBdI48JW2zjUBAUtcbwZXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx
NjM4QTcwNzAeFw0yNjA0MTcxOTI1NTNaFw0yNjA0MjEwMjE2NTNaMDMxMTAvBgNV
BAMTKDNBNzY1NTIzRUJBNUZGNzIyOUM0QUE3NkUxQzlDQkNGQTIwMERBMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/yNGYNFXHRsRqaXMJQM7z/yt8
6ZLnSWPs7A68rc3YFfJjSaqMA1jxNLYszfWuzsMvw0B23IzeG3fiupVdHcWfMzOQ
HnqcebY3Xe0jgPopAQbPZeinXxg0oSPLQVNmPky7TgeeOEiYkO4WYcT57fLKALGn
1+3KXFQPXQMRaZuIX5orN6oMl17kQzkPLzebQTJ2A9OWrlonnRVxmx7v5WxfEGjW
FCj4SoERcLNFDwwxtU0ZP16PEdEtejjcvxNTKr+eJ37hdN6HpvhseOwE2ZjSHa0c
S8A4bl+W06dPyzYrmJjoZ2cym2XnApS7XVv0hbo6nXpbmvEHAKWVpt244mAHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUOnZVI+ul/3IpxKp24cnLz6IA2jgwHwYDVR0j
BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC
MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4
QTcwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx
YTAtMmVjNjcwODM2YzQyLzAvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4
NjkxNjM4QTcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKEJrH5MVuzD3IXt2mfcKFJQaw7KJZ8Shidx
/pP/2XgEuJ0Qlmx4JlnlCchCaKevErF+55l8xk4bpdSXw6tg7tPtBICDrfBHlCv+
rV8yS5NVlIU3jCQk34VaI4jYbK/UB/1Rp1wCkb0S9SgT84Jk85nElxKHPlhdaOpl
4jYF+GcLo3Tw6mLWlwzpjgRFjk0x4jE5lt2bA6uCd1aWIN3BNlRE5g5XkLFdwcR4
0Q+Y4l14n4fEI30KTxPMFNEsZDLHFZsQpZhx5/MzLfDZORAxCJh9uwi7KkcILKqC
pSxp5yereOhglRhyvjuBmfDww6ikCmjtkZM28e5kD3jgvCqHzHM=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:03 2026 by rpki-client