Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
File:                     3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json)
Hash identifier:          HYv4gc7ksgJLtsFfF2vwn1FdMpZBafuE/z/Kl2EHDdU=
Subject key identifier:   F1:91:31:2C:F8:CF:0C:B2:36:31:E0:19:8D:B9:F7:22:51:36:9F:06
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Certificate issuer:       /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial:       524B3131C4FF4C07EC3B92FA926F56E4C88C5608
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
Manifest number:          027E
Signing time:             Sun 01 Mar 2026 05:52:27 +0000
Manifest this update:     Sun 01 Mar 2026 05:47:27 +0000
Manifest next update:     Wed 04 Mar 2026 08:20:27 +0000
Files and hashes:         1: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: naME29BjJNXWcG5xS5OYZKvtjsmmITu0eSf0OkwWWqI=)
                          2: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: 7rOBqdW1agF9dBw3fRamvagOmk08sI35tJ8kKP60kio=)
                          3: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: oP5w04R+DVBIXz7VN32/pUudJby5Bdnn9OzpJHzqMrY=)
                          4: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 7h+0gopoSFJ2M48QEyz8CL99eJtVxfcZjzTpUAYVTZo=)
                          5: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: C6l6zdsNHMzfA4VroXv38wYjaYdlZyMXfkyZpHinjgQ=)
                          6: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: wr6UHliebQd7p9YyHhYQ444oA44R+pMzEhtNFNELTlg=)
                          7: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sYsKqli8EUEzTvSQXavM3oM1AVTdmnNeXY5Ib9nTkXk=)
                          8: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: FWaIS2C5y+tF+eXrrfhUKvMiaO2hbKHJ6PXu+XjlFjU=)
                          9: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: KM8HCAE941ny+NeclcPdlUg9VIqsSih6MjHoa5IqXb8=)
                          10: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: cJFNfS5UPmik4Tu/P1Y8olkkeC16bO4wOvGv71A6WXE=)
                          11: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: QBM9H9rd8+lS4gn1TV/zjjSpwBwL7sSfYx4yVL1I50s=)
                          12: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: znbfpwqo/RqJTtKokVQJprWVfIE6ZeyWhe8h0U97wlw=)
                          13: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: /v/t0LVvwP8ItAgvAEV4d3ird2OFydIuyNvk7Hjv9rU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
                          rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 08:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4b:31:31:c4:ff:4c:07:ec:3b:92:fa:92:6f:56:e4:c8:8c:56:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
        Validity
            Not Before: Mar  1 05:47:27 2026 GMT
            Not After : Mar  4 08:20:27 2026 GMT
        Subject: CN=F191312CF8CF0CB23631E0198DB9F72251369F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5a:3e:45:ef:e2:5c:a9:a7:b7:07:c4:f0:e2:
                    5b:0c:93:2a:0e:26:fd:ae:94:d1:76:29:99:f2:9b:
                    e1:5a:66:9d:c2:5c:0a:5f:ff:64:04:e9:44:fd:a6:
                    bd:e0:35:86:57:99:fa:bd:f4:95:d0:d1:21:b6:86:
                    c4:d4:cd:2c:fe:a8:7c:f8:25:cd:66:b7:1b:62:24:
                    f0:ae:59:13:99:bd:5a:60:d3:d3:07:5e:a5:81:42:
                    d6:62:b2:a1:e8:71:fd:d0:10:cd:80:47:2e:f1:0f:
                    2c:91:86:63:1c:d3:21:72:2c:bd:1c:8e:8b:73:93:
                    6d:e0:0a:a7:6b:14:dd:76:ee:e7:ac:72:d3:4c:53:
                    f7:c0:c9:19:d8:d5:41:c1:ff:b7:58:39:25:dc:6a:
                    d7:b9:d6:9d:e6:97:2b:51:51:e1:f1:38:e5:30:d0:
                    55:d7:b2:2d:49:de:df:50:c7:a9:86:97:1c:97:57:
                    16:07:e2:28:b3:e9:ad:82:f6:f9:57:a3:a8:80:5f:
                    99:33:96:46:97:22:e9:7e:6d:52:e1:9e:73:8e:53:
                    a6:33:38:e9:1c:fb:23:ec:2e:a2:79:d3:84:5e:09:
                    74:f7:ce:b8:5d:48:c6:30:76:54:d9:6c:74:94:c2:
                    59:54:a7:63:8b:cc:d8:f1:6c:41:18:0a:a3:39:b9:
                    1e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:91:31:2C:F8:CF:0C:B2:36:31:E0:19:8D:B9:F7:22:51:36:9F:06
            X509v3 Authority Key Identifier:
                keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:3c:71:b3:e7:a6:38:46:32:fa:bf:61:60:ee:87:58:8a:fc:
         ef:3a:86:71:13:52:3a:bd:3e:db:1d:ec:3b:4f:6c:ca:e9:cd:
         7f:23:b9:23:ba:9c:03:e8:d6:88:66:0f:6e:7d:8a:b4:81:72:
         5f:f5:23:e8:eb:2c:e7:c8:26:21:04:f0:27:84:77:eb:a4:52:
         60:32:24:f5:52:2d:92:34:f4:b8:64:b6:75:2f:39:ec:c7:15:
         40:95:b2:80:a4:10:8c:6c:6e:f8:57:53:68:f4:64:f1:b3:e9:
         85:96:3a:e5:34:86:10:59:a8:e2:7b:4e:d5:30:17:ca:7d:00:
         51:f9:11:6a:13:3a:09:1b:1b:13:5c:1c:8e:b6:42:6d:df:0e:
         5a:77:1b:d1:7d:62:ac:56:bc:38:b5:a3:ed:f5:48:c7:ba:22:
         ae:b1:e1:64:eb:fe:ef:0f:04:df:04:de:4d:ca:35:01:43:93:
         c0:16:2c:7c:75:f9:e9:89:62:33:3b:c2:b5:ef:26:e9:41:43:
         b4:75:f5:76:9b:8c:16:c7:6d:a8:fc:98:36:93:99:e8:45:54:
         4a:f7:36:b2:0f:c0:11:16:74:ae:3e:99:19:2e:09:13:3a:c4:
         58:02:ae:d1:6f:02:6f:26:b4:fa:5e:e0:56:e9:b8:82:5b:7b:
         ab:4f:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:39 2026 by rpki-client