Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
File:                     940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json)
Hash identifier:          jaNkzgEjkIQ6KCfVr13QBOqX1TfYSq7piqYTF/vgqcg=
Subject key identifier:   37:3B:A0:F1:51:34:65:C4:6C:A8:E6:6C:E5:C2:3C:2D:79:2C:E5:D3
Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB
Certificate issuer:       /CN=940E05E54E6B685EFBC6114D1E913804318364AB
Certificate serial:       10524DC3414F416672AB3B09A26E357091D9D405
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
Manifest number:          01FC
Signing time:             Thu 16 Apr 2026 07:30:51 +0000
Manifest this update:     Thu 16 Apr 2026 07:25:51 +0000
Manifest next update:     Sun 19 Apr 2026 15:53:51 +0000
Files and hashes:         1: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: jE2ohNgy/CPY/CEYi0FxGiP6mjLy6jMKHwfofo7/qoU=)
                          2: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: NqLs/FneIiTV/W/DgkmvwBtBvCh5S71ZEnAkqfC2LTI=)
                          3: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: rsfEnPVSsycki+njgiCyWYWgAdgVcyumzNfOTNHS8n4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl
                          rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 15:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:52:4d:c3:41:4f:41:66:72:ab:3b:09:a2:6e:35:70:91:d9:d4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB
        Validity
            Not Before: Apr 16 07:25:51 2026 GMT
            Not After : Apr 19 15:53:51 2026 GMT
        Subject: CN=373BA0F1513465C46CA8E66CE5C23C2D792CE5D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c8:c6:8b:c0:86:1a:51:53:f3:75:83:61:dc:
                    75:af:4b:a2:83:f4:45:b5:01:7c:ed:db:ba:25:4f:
                    9d:08:86:85:37:b0:e8:c1:97:14:f1:ce:2c:ae:89:
                    cb:ca:32:c1:ad:ad:ef:51:0c:96:78:5e:80:7d:31:
                    08:3a:be:c0:97:1b:5f:22:15:7b:e7:71:35:38:30:
                    09:f3:ab:ea:8a:57:f7:f1:1d:c8:bf:08:ed:08:02:
                    58:0a:6f:9c:d7:f8:32:62:6e:41:d2:32:aa:ef:0a:
                    a7:c4:46:9e:7b:06:e5:b3:40:a4:27:87:c1:7a:f1:
                    16:9f:06:0e:f8:09:66:56:13:d3:b3:a7:16:cf:a5:
                    fc:e1:94:a3:3c:37:f5:9b:e3:76:53:c9:ed:78:e2:
                    1c:2d:f2:34:f2:b4:48:2e:c9:b6:df:46:4b:4f:f1:
                    4a:fa:ec:79:19:e9:11:2f:44:28:b5:fa:2b:72:76:
                    74:b2:0c:58:7f:0b:f9:ab:d7:c8:bd:7b:cf:49:52:
                    bb:b9:c0:d0:38:3b:99:b2:3b:37:a2:7e:5c:12:7e:
                    f9:c5:ee:19:64:71:00:83:fc:47:b3:47:b5:c2:f0:
                    53:dc:56:dc:dd:22:50:53:b0:d1:02:b2:65:6f:b2:
                    de:bd:45:0b:21:71:63:6a:c3:85:83:34:15:79:2e:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3B:A0:F1:51:34:65:C4:6C:A8:E6:6C:E5:C2:3C:2D:79:2C:E5:D3
            X509v3 Authority Key Identifier:
                keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:95:c9:a4:f5:1a:ba:48:6d:8d:d1:d5:d6:c6:9f:21:f2:04:
         50:3d:a7:f5:f5:82:d5:2c:1e:29:02:0e:91:1a:d0:d5:d4:c6:
         6d:dd:c3:2b:b9:0b:27:b2:9d:75:66:de:ad:b6:1a:43:60:a6:
         20:e3:df:bf:02:a5:06:b6:97:57:0b:fc:a5:3b:12:b4:a6:5b:
         dd:db:d6:c9:6e:ae:fe:ca:ed:b5:ee:18:1d:70:4f:48:7b:be:
         11:5a:01:b7:31:d7:d5:78:7a:2f:c6:0c:1b:3f:8e:20:fa:5b:
         c3:7d:36:f2:fb:49:06:44:4b:2f:bc:0d:db:c8:1d:a6:bc:c2:
         ca:8d:a5:e0:b8:37:29:51:35:42:09:7c:8c:d4:60:4e:ae:2c:
         eb:82:a8:72:be:a4:bc:3c:c3:21:2e:fa:0a:b6:9f:2a:8c:de:
         5a:de:71:4f:29:04:54:d8:03:ad:cc:da:8d:ba:40:ac:80:05:
         aa:72:4d:b2:83:c9:c0:e5:45:5e:8b:d9:c7:c1:77:65:9b:4f:
         2c:31:8c:6c:cd:e3:20:f2:e3:98:96:70:c6:33:8b:f6:4e:0c:
         69:67:33:c0:ac:7e:65:77:c9:dc:5c:c7:cc:84:ef:d8:56:0d:
         18:16:c6:dd:21:1f:99:03:40:bb:72:d2:65:2e:7a:3b:7a:fe:
         c5:21:64:54
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEFJNw0FPQWZyqzsJom41cJHZ1AUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz
MTgzNjRBQjAeFw0yNjA0MTYwNzI1NTFaFw0yNjA0MTkxNTUzNTFaMDMxMTAvBgNV
BAMTKDM3M0JBMEYxNTEzNDY1QzQ2Q0E4RTY2Q0U1QzIzQzJENzkyQ0U1RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyMaLwIYaUVPzdYNh3HWvS6KD
9EW1AXzt27olT50IhoU3sOjBlxTxziyuicvKMsGtre9RDJZ4XoB9MQg6vsCXG18i
FXvncTU4MAnzq+qKV/fxHci/CO0IAlgKb5zX+DJibkHSMqrvCqfERp57BuWzQKQn
h8F68RafBg74CWZWE9OzpxbPpfzhlKM8N/Wb43ZTye144hwt8jTytEguybbfRktP
8Ur67HkZ6REvRCi1+itydnSyDFh/C/mr18i9e89JUru5wNA4O5myOzeiflwSfvnF
7hlkcQCD/EezR7XC8FPcVtzdIlBTsNECsmVvst69RQshcWNqw4WDNBV5LuZJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNzug8VE0ZcRsqOZs5cI8LXks5dMwHwYDVR0j
BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF
NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz
NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz
YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4
MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAmVyaT1GrpIbY3R1dbGnyHyBFA9p/X1gtUs
HikCDpEa0NXUxm3dwyu5CyeynXVm3q22GkNgpiDj378CpQa2l1cL/KU7ErSmW93b
1slurv7K7bXuGB1wT0h7vhFaAbcx19V4ei/GDBs/jiD6W8N9NvL7SQZESy+8DdvI
Haa8wsqNpeC4NylRNUIJfIzUYE6uLOuCqHK+pLw8wyEu+gq2nyqM3lrecU8pBFTY
A63M2o26QKyABapyTbKDycDlRV6L2cfBd2WbTywxjGzN4yDy45iWcMYzi/ZODGln
M8CsfmV3ydxcx8yE79hWDRgWxt0hH5kDQLty0mUuejt6/sUhZFQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:01:45 2026 by rpki-client