Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft
File:                     BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft (raw, json)
Hash identifier:          4inZdUE8dQz1Q+vcGCGOuOksEQFeOVLLaDFMygtM/eA=
Subject key identifier:   4E:0D:FA:1E:E8:CA:4F:ED:61:B5:D9:DA:F6:14:6F:8C:48:58:F8:89
Authority key identifier: BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB
Certificate issuer:       /CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB
Certificate serial:       2783B5277DB8278492031CE2AE3E87DBBD3824D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft
Manifest number:          E4
Signing time:             Wed 15 Apr 2026 15:01:12 +0000
Manifest this update:     Wed 15 Apr 2026 14:56:12 +0000
Manifest next update:     Sun 19 Apr 2026 02:59:12 +0000
Files and hashes:         1: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: SeJIZiTXDjba/24vDFwUassgzTgVWzwJ94ejAOzdpPE=)
                          2: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: +o6+ngIFA4hU6bMKlAFkTNxS1BaRiBEB0UhCbvig7rE=)
                          3: BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl (hash: AYv014Qj4mdPtnD+MLJ/1sX6icqmcrXXoW1c3kT+wsE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl
                          rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 02:59:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:83:b5:27:7d:b8:27:84:92:03:1c:e2:ae:3e:87:db:bd:38:24:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB
        Validity
            Not Before: Apr 15 14:56:12 2026 GMT
            Not After : Apr 19 02:59:12 2026 GMT
        Subject: CN=4E0DFA1EE8CA4FED61B5D9DAF6146F8C4858F889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:51:8f:b4:5a:41:43:b3:12:0d:07:88:db:39:
                    5a:fa:cb:1b:93:e6:38:0b:87:38:cb:e2:86:38:fa:
                    86:47:30:c0:ad:76:cb:f3:37:de:a6:dd:cb:6e:e5:
                    ea:44:9d:15:17:97:71:41:b7:9b:74:f3:74:cd:f7:
                    71:f0:36:43:e9:7a:70:c0:cf:dc:e5:65:81:e1:4d:
                    9c:3e:dc:67:cc:ed:d7:6f:46:d9:c8:ec:28:7b:b6:
                    3b:06:34:33:bc:00:1c:4a:82:7b:ba:24:86:ac:c5:
                    6e:fc:3f:af:2f:90:2a:4f:5a:90:6a:cb:4c:ab:5e:
                    84:9c:cd:61:08:64:f7:77:91:d6:2e:33:a0:b5:b8:
                    1e:a0:55:63:7d:44:2e:6d:e1:cf:74:ba:ab:f4:3f:
                    21:a2:42:37:ec:49:f1:23:e3:70:f1:b9:ad:fb:9c:
                    2c:4a:2a:21:9a:4a:28:c9:6e:0e:5c:1c:9b:4e:5a:
                    42:54:28:96:62:1d:19:2f:80:d3:9f:59:46:ed:8c:
                    3b:9e:c1:9f:38:54:ca:e3:08:19:76:d0:6d:84:8c:
                    41:8a:51:65:ea:02:f7:0f:00:f6:b1:c9:6c:f3:c0:
                    e2:de:4d:e7:b7:3b:d1:77:1c:48:0d:f6:67:5f:17:
                    9e:c2:c9:91:5a:26:6e:c3:a3:bc:0e:7d:f7:d3:dd:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0D:FA:1E:E8:CA:4F:ED:61:B5:D9:DA:F6:14:6F:8C:48:58:F8:89
            X509v3 Authority Key Identifier:
                keyid:BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:80:99:8c:6a:05:b6:97:72:32:5b:2f:fd:c3:05:99:38:b0:
         06:58:6a:29:5e:f6:82:19:6f:06:6e:ba:f5:27:b2:fe:98:0e:
         2f:2a:82:2b:3f:c2:5d:0f:f0:99:54:30:a7:8c:20:b6:95:aa:
         ec:4a:58:f6:40:4d:81:e3:e5:31:60:5d:53:ac:46:8d:70:73:
         2d:03:cc:c9:be:a1:60:2f:07:f6:a4:56:20:77:d9:2a:7e:0e:
         91:1b:8a:a4:5a:ff:c8:4c:ae:ee:f7:7d:21:70:7d:de:be:7c:
         d7:67:a4:19:5a:7a:d5:ef:6e:20:e8:04:8c:b3:65:bf:7b:0c:
         15:fb:f8:66:96:4d:de:d3:a2:14:aa:c0:99:c6:62:35:fb:b6:
         e2:ed:06:af:82:a7:4b:02:39:1d:2e:ed:cc:ec:6d:11:f9:6c:
         11:14:d8:ba:a3:38:c2:75:6a:43:af:8b:d0:a9:1b:78:6c:be:
         92:88:9c:42:45:92:b0:20:c7:d8:82:8e:da:57:62:24:49:c9:
         fc:23:40:e5:c7:5b:14:cd:51:4d:d3:88:63:98:13:aa:a4:df:
         c8:e7:63:0e:b7:86:28:5e:d2:12:dc:db:eb:5a:1a:51:a5:e5:
         37:7f:e5:2d:03:af:e3:a9:6a:12:d0:b2:d2:54:a9:3f:ee:00:
         2a:82:cd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:57:56 2026 by rpki-client