Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft
File:                     D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft (raw, json)
Hash identifier:          5Vxvdz411t5Tx1sHX8Coa998qQZTPtMphfWtuq+Q36Q=
Subject key identifier:   86:3F:A7:18:99:B7:E3:A0:C3:06:C9:66:81:EA:54:43:7B:02:37:58
Authority key identifier: D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62
Certificate issuer:       /CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162
Certificate serial:       3293063B5F4FCF42A01E63723CAC40A868EC8160
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft
Manifest number:          0147
Signing time:             Sun 01 Mar 2026 13:22:37 +0000
Manifest this update:     Sun 01 Mar 2026 13:17:37 +0000
Manifest next update:     Wed 04 Mar 2026 19:35:37 +0000
Files and hashes:         1: D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl (hash: 3WisoOmHFL4CoFiwrsZ3yIJxsZq4u6RnMFx8xrCimNM=)
                          2: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: 7Oi5j12RVi3qx9bBfzHfHE0vUABfTWWODw/d5Ig7GBE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl
                          rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 19:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:93:06:3b:5f:4f:cf:42:a0:1e:63:72:3c:ac:40:a8:68:ec:81:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162
        Validity
            Not Before: Mar  1 13:17:37 2026 GMT
            Not After : Mar  4 19:35:37 2026 GMT
        Subject: CN=863FA71899B7E3A0C306C96681EA54437B023758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:81:ea:db:9e:ff:e1:ba:b9:76:86:d8:18:f1:
                    11:d9:b0:c2:d0:35:33:41:cc:6b:4a:05:f4:8b:85:
                    b1:4e:65:43:1e:ff:f4:1e:8d:2b:c5:8a:d2:ad:8a:
                    e9:64:eb:d0:01:17:70:ee:39:73:1f:cd:83:52:b4:
                    af:88:e8:02:ea:cd:ce:ba:d9:7c:5d:c3:41:af:04:
                    c2:22:58:05:38:7e:ef:03:84:f8:cc:85:8c:92:33:
                    10:8a:f6:c6:bd:13:91:a2:cb:db:22:77:b3:9f:ce:
                    d0:4d:43:59:4a:4d:93:d7:0d:b2:63:5e:f3:eb:c2:
                    85:4f:3f:94:6f:95:c3:b2:7d:34:c5:60:48:2d:af:
                    d6:a0:d7:d6:29:6e:7d:db:15:90:fd:19:d0:b1:db:
                    2a:1a:22:b3:cb:9d:18:26:17:34:66:68:d9:0c:fe:
                    13:38:27:8b:a7:11:2e:57:51:76:b5:ce:9f:40:fe:
                    17:18:5d:e5:14:9c:18:8a:9d:dc:02:33:3a:1e:73:
                    bd:c5:8e:46:ac:f1:28:ea:b6:fa:c9:8b:6f:b6:3e:
                    75:6e:04:f0:5c:d2:d6:17:f0:4b:ef:2d:f1:ac:f2:
                    54:a2:3c:8f:f9:a8:30:71:91:c6:c6:4b:21:44:cf:
                    bc:bf:15:7c:d9:c9:5d:9d:fe:51:4c:1c:62:c7:56:
                    bb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3F:A7:18:99:B7:E3:A0:C3:06:C9:66:81:EA:54:43:7B:02:37:58
            X509v3 Authority Key Identifier:
                keyid:D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:df:d0:83:4f:27:25:35:b1:89:02:22:34:fa:c0:c0:15:83:
         e9:c4:e4:b8:ff:2b:ab:02:8f:bd:34:a9:2f:09:c2:bd:67:c0:
         f0:22:39:22:3f:8a:07:24:ee:07:ac:9d:bd:b7:bd:80:b8:14:
         e3:4b:83:fe:15:51:c3:7d:99:f3:87:e6:a0:39:81:88:9f:75:
         da:fa:84:37:97:f3:92:a2:47:58:f0:74:3b:f9:9f:ed:1e:f3:
         58:0b:16:af:8d:92:94:ff:90:f5:47:e1:40:85:a3:36:30:40:
         8a:d9:2f:72:0a:ce:24:c6:08:15:b8:d4:9a:0d:6d:3c:1d:05:
         50:f4:d0:4f:0e:f2:cb:62:37:05:74:01:5d:63:32:80:55:d0:
         15:6d:9b:a2:78:23:fd:e8:1f:89:00:ec:63:56:5d:a6:5d:4f:
         cf:84:1d:4f:2c:a7:49:9b:35:f3:08:ae:60:0d:3f:3f:89:0c:
         2b:a1:90:62:14:bb:05:a3:84:34:66:3e:cb:df:6c:f6:21:7b:
         7c:36:d6:a2:8e:87:cb:60:9d:1e:fd:c2:c6:62:2f:5c:86:35:
         63:96:4f:26:65:b0:b9:c2:7e:ec:28:60:5a:2f:27:8e:af:ca:
         75:d3:c1:18:0f:bb:55:a0:bd:b5:ca:54:e6:74:16:7d:f7:36:
         32:48:51:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:16 2026 by rpki-client