Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft
File:                     D714F468978E86AB39DC1CFD7B22A6CED936605D.mft (raw, json)
Hash identifier:          TWpVV2QIBjVis04315gMi6xcHi4B0e4sqVo6spAVO+Y=
Subject key identifier:   2F:1B:85:29:25:18:EB:8E:09:D3:8E:41:4B:5B:2A:F2:F4:75:35:EC
Authority key identifier: D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D
Certificate issuer:       /CN=D714F468978E86AB39DC1CFD7B22A6CED936605D
Certificate serial:       15159B83907F91991C228EB37F41F7CCA92BC98E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft
Manifest number:          020C
Signing time:             Thu 16 Apr 2026 00:22:35 +0000
Manifest this update:     Thu 16 Apr 2026 00:17:35 +0000
Manifest next update:     Sun 19 Apr 2026 04:23:35 +0000
Files and hashes:         1: 3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa (hash: +CdAlYM7nun1wI/1nBpguFrXp8lMNDu4i4cocPNWO9s=)
                          2: D714F468978E86AB39DC1CFD7B22A6CED936605D.crl (hash: rbM0rHI6IOAmwG4jzzeJ3phRUGkLA+YmoPCbFhnZqZU=)
                          3: 3130332e3132312e3134362e302f32332d3234203d3e20313335343738.roa (hash: nWVhYRUUcfc8aYv1wy6ZUuBKnCS0BHar4Lt91zGFRLk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl
                          rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 04:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:15:9b:83:90:7f:91:99:1c:22:8e:b3:7f:41:f7:cc:a9:2b:c9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D714F468978E86AB39DC1CFD7B22A6CED936605D
        Validity
            Not Before: Apr 16 00:17:35 2026 GMT
            Not After : Apr 19 04:23:35 2026 GMT
        Subject: CN=2F1B85292518EB8E09D38E414B5B2AF2F47535EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ae:5e:bb:4a:33:fb:5e:63:8f:fb:e2:56:36:
                    aa:b8:04:a7:a6:4a:49:00:87:83:8a:83:72:22:b4:
                    d0:ff:4e:4b:ed:fb:4e:f7:e4:4a:38:0a:a9:b8:b5:
                    d6:66:0e:12:c7:9e:6a:cf:9a:59:02:51:57:d1:34:
                    a3:82:50:bd:b9:a8:6b:8f:a5:5f:60:98:31:b6:f1:
                    3d:1d:0d:99:94:47:1f:62:86:1c:2e:ab:7f:7a:af:
                    9b:07:97:33:19:4f:a7:b8:5a:a6:e7:e3:ef:ec:a7:
                    3f:b2:e3:28:22:6e:29:eb:e9:f0:69:ef:3b:eb:a5:
                    f8:4f:7c:2f:77:c1:66:56:39:ae:c9:e2:fe:34:c3:
                    16:05:23:c7:74:e0:7f:53:82:79:6e:50:96:d4:5e:
                    7d:a3:e4:b2:bf:bc:8d:85:79:0a:8b:7b:f6:91:1b:
                    3e:ba:9e:98:7b:11:6a:ba:ff:9a:a0:14:b8:16:db:
                    a5:20:c7:a4:00:75:b0:7a:5a:df:a9:56:bc:42:eb:
                    12:d4:6d:13:6d:6c:9a:c7:83:16:a4:d2:81:c9:05:
                    d5:b2:87:4d:26:36:8b:fd:33:f8:2e:da:2b:06:8a:
                    2e:e2:ad:90:d3:bb:fe:67:b5:f3:25:cd:e3:59:c0:
                    29:75:95:58:82:28:5d:fc:1c:cd:bc:67:36:4d:17:
                    71:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1B:85:29:25:18:EB:8E:09:D3:8E:41:4B:5B:2A:F2:F4:75:35:EC
            X509v3 Authority Key Identifier:
                keyid:D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c4:00:77:2c:65:e4:39:52:a5:a6:93:4d:84:a6:78:9d:4f:
         c3:7c:89:a1:6e:ca:2b:51:3d:25:ef:0b:b3:53:e4:43:39:70:
         45:8a:72:b1:92:db:9c:ba:ce:26:ba:3a:1f:93:17:78:7e:38:
         5e:a8:c0:41:86:b2:2f:86:d4:21:25:3e:ab:14:77:3b:46:1a:
         b9:b4:f3:1b:60:cf:b7:ae:e3:af:41:ed:ad:a7:c5:84:01:03:
         d9:42:0a:7d:84:df:13:d9:f6:8b:ef:03:25:5b:12:ed:a7:5c:
         29:07:da:aa:16:1a:67:2e:6b:c1:04:bc:5b:ad:c0:bf:6d:30:
         d3:11:33:8b:5f:95:33:74:c1:29:bd:b0:0f:9a:17:d8:81:4d:
         fd:1d:e5:fd:ee:60:56:b7:78:c5:d5:97:dd:26:2a:30:1d:c8:
         52:4f:f9:d9:0d:ff:3d:52:98:18:ec:72:0c:50:44:0b:18:dc:
         93:76:7a:6e:07:c0:3b:b6:11:d5:b4:d9:de:aa:78:6c:24:fa:
         9d:78:2c:4d:a0:84:f7:ca:4e:3f:b3:4a:d7:4a:f7:81:4d:a4:
         d3:e9:f0:63:89:c6:be:8f:8b:59:da:cc:d0:ee:57:b8:c9:f7:
         d0:86:b3:ce:cb:66:0d:f0:1f:68:03:6e:82:c3:a6:91:41:ef:
         52:48:6a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:32:55 2026 by rpki-client