Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft
File:                     9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft (raw, json)
Hash identifier:          QRk1YvgNIbve2zHXqlUO5wnUmzoXcCVCpMOPRlRLImk=
Subject key identifier:   43:13:41:32:F5:38:0F:8A:E2:70:0F:45:EB:E3:A4:2D:E5:28:75:0B
Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21
Certificate issuer:       /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821
Certificate serial:       0C8E8C5B55CF95D1F6334213679960052FF416D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft
Manifest number:          033A
Signing time:             Fri 17 Apr 2026 15:52:36 +0000
Manifest this update:     Fri 17 Apr 2026 15:47:36 +0000
Manifest next update:     Tue 21 Apr 2026 00:44:36 +0000
Files and hashes:         1: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl (hash: XRIxRuwmZRfsHhM5U0cm9H8E/wSvzpSd3dAaXNLlXNI=)
                          2: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: 1P+PQQB102TZART/oZnwB0CXGgNgBobig9IZy6mAuUM=)
                          3: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: XcReqzCko69+a8GUZBIxgx2X6G3V6UQGka2FfNCmX/c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl
                          rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 00:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8e:8c:5b:55:cf:95:d1:f6:33:42:13:67:99:60:05:2f:f4:16:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821
        Validity
            Not Before: Apr 17 15:47:36 2026 GMT
            Not After : Apr 21 00:44:36 2026 GMT
        Subject: CN=43134132F5380F8AE2700F45EBE3A42DE528750B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:9f:8d:79:84:8a:74:09:ec:ce:a2:c3:6b:
                    fa:34:ff:e9:a4:c0:a4:8a:31:0a:27:d1:5f:cf:08:
                    83:60:2a:0e:f0:e8:0a:49:95:24:24:90:80:ec:33:
                    94:b5:97:9f:c3:7a:3b:ae:0a:0e:c1:b3:91:a4:90:
                    29:48:a4:09:b9:19:39:e4:ad:13:3a:57:a1:6d:7d:
                    4c:e3:44:21:be:7f:8a:94:38:3b:6f:e2:97:e9:88:
                    89:ac:9a:0d:58:9b:4a:0f:d2:c0:3b:14:d1:0d:10:
                    3e:8a:83:9d:48:5e:34:c3:b0:c3:ae:39:e2:56:4e:
                    78:dc:1a:a5:db:c3:b6:94:d0:3c:45:f9:63:4a:01:
                    29:e5:4a:81:fa:90:f3:11:c5:ff:02:6f:b6:6f:e7:
                    00:00:7d:34:c7:13:53:4f:5a:3e:8d:a3:4d:a2:96:
                    28:bd:97:85:e4:c4:13:d4:d5:62:37:c2:80:f7:da:
                    4e:e9:f7:77:57:3c:81:18:5b:91:bb:46:f5:ec:0f:
                    19:78:61:7d:e5:ad:d8:27:46:6c:71:cc:70:66:6b:
                    f5:9d:7e:58:04:16:68:4f:45:27:36:50:55:0b:2a:
                    1d:54:20:91:45:55:23:14:ac:d7:70:89:a1:90:1e:
                    6b:89:c1:ea:12:94:8c:74:b5:8f:81:f0:f0:49:a6:
                    94:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:13:41:32:F5:38:0F:8A:E2:70:0F:45:EB:E3:A4:2D:E5:28:75:0B
            X509v3 Authority Key Identifier:
                keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:81:e7:4c:2f:90:1d:4e:51:54:8b:c8:b9:62:69:50:3a:bb:
         03:35:3d:80:4e:b1:02:16:48:a0:6d:4b:02:33:17:f3:1b:bb:
         44:40:19:92:58:95:b4:ad:e0:b9:69:03:fe:ef:ae:f6:ac:75:
         f3:f9:a2:ca:1b:35:c9:a8:2b:12:6f:70:37:35:af:e8:75:17:
         04:46:27:d5:52:a3:b6:fb:d3:9f:b5:ba:3d:7d:36:ef:13:9d:
         c9:8e:a1:63:e5:6d:b6:f5:ed:9a:db:09:f8:ce:8f:3d:45:39:
         65:1b:0b:7e:94:d0:6e:13:9d:a3:74:d8:dd:93:47:4a:7d:ff:
         1a:12:dd:60:f2:e8:57:54:9d:40:54:39:db:9c:6f:1b:30:c7:
         ab:10:1a:34:63:76:92:ae:f7:35:6d:0f:3a:3e:ab:d3:74:72:
         69:d2:ff:44:c9:af:44:e0:d2:6a:ac:e7:52:f7:6f:67:3e:64:
         7b:46:a3:c1:c7:8a:63:ac:ea:34:23:39:ee:db:85:79:89:10:
         71:9c:ec:ba:1f:d0:fc:3d:b7:4d:e2:49:32:4c:99:46:2f:9c:
         f9:2a:ab:ed:10:bb:fc:d0:18:a8:8c:85:42:c6:00:04:10:18:
         58:0a:04:3c:73:71:4b:b5:87:93:97:94:05:b4:e7:55:19:3f:
         03:72:d1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:05:21 2026 by rpki-client