Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
File:                     2042008AEC80152F373D2A04DFD3893EE2F92166.mft (raw, json)
Hash identifier:          Q++VQN0mAud4I6/KtaKfHfMnZmtsf2Jr4yAnIy3+jW0=
Subject key identifier:   F5:8C:BE:2A:22:A6:E5:FA:DD:CD:F8:6D:94:F0:1B:84:CF:8F:BD:02
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Certificate issuer:       /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial:       16122F87BB579A5D410E9C8C5A788DE76EB6B913
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
Manifest number:          0211
Signing time:             Thu 16 Apr 2026 11:11:42 +0000
Manifest this update:     Thu 16 Apr 2026 11:06:42 +0000
Manifest next update:     Sun 19 Apr 2026 12:54:42 +0000
Files and hashes:         1: 3130332e3234382e35372e302f32342d3234203d3e203538383136.roa (hash: 0V5Fro7RDuZ50SZ8nyINvAin+y6VQoPMCRHhDarRRMA=)
                          2: 3130332e3234382e35362e302f32342d3234203d3e203538383136.roa (hash: WKrMoI06/p5+G+xllObLjjqyxyOkWyvvq+1tJPmPHZo=)
                          3: 3230322e37332e32322e302f32342d3234203d3e203538383136.roa (hash: 92gMMhd+Gkfp9JvKTKRzEZUnEBDuEW+cld6SLZk7Ch0=)
                          4: 3230322e37332e31372e302f32342d3234203d3e203538383136.roa (hash: tIzQ0fE2t5htIEimJtucpSpR/DIQVl9j/kAVCJL7yGU=)
                          5: 3230322e37332e32302e302f32342d3234203d3e203538383136.roa (hash: ibMCbvRmujOjjKM1ZMmmc3qZwnyhuI2nbsEkJjHoxDY=)
                          6: 34332e3235322e3138372e302f32342d3234203d3e203538383136.roa (hash: u1OWVFREqAcpAaKhBDvotN6/FLB+6CJXG2VYGZmR91M=)
                          7: 3230322e37332e32312e302f32342d3234203d3e203538383136.roa (hash: iFyu0RvIHIUxWpTx5iIUKX8JKYiR6jVxgsobha6SsLM=)
                          8: 3230322e37332e31362e302f32312d3231203d3e203538383136.roa (hash: UTxUdswuTF+ox6a5oV05W2D3Jcdyj/c1haTTHi/3q+U=)
                          9: 3230322e37332e31362e302f32322d3232203d3e203538383136.roa (hash: ZqPK1HKbxGKM6vESgL5zXUqVRLE1KpGBZ+2gXnpqzvE=)
                          10: 34332e3235322e3138342e302f32322d3232203d3e203538383136.roa (hash: SEJtrFMzCIxaL5HsTowHqKeGBeSHdUF6h109MbSr1hY=)
                          11: 34332e3235322e3138342e302f32342d3234203d3e203538383136.roa (hash: 6MaTCwYtKpnx6eg3KSD1AYOyXHo3i56ljG0wVGw46pk=)
                          12: 2042008AEC80152F373D2A04DFD3893EE2F92166.crl (hash: PC8w1kpvSSnQXs/oJBSStOlUUF00cNvKGsoZ91xbgj0=)
                          13: 3230322e37332e31392e302f32342d3234203d3e203538383136.roa (hash: V7M1zpL5HWqjtqGN2V+pt/B4+kIX52JBUVO8WeQYP+0=)
                          14: 34332e3235322e3138352e302f32342d3234203d3e203538383136.roa (hash: 6BAqv/xiDIdcXbsrmi/VI3hokjpdNRLqss/M7jAv0Ng=)
                          15: 3130332e3234382e35382e302f32342d3234203d3e203538383136.roa (hash: HErtndUjZ/ozeEwhpzkSIbCXdzX9M3k2UTeU3D4OhMc=)
                          16: 3230322e37332e31382e302f32342d3234203d3e203538383136.roa (hash: tlFSnjt/7Il42+Z8+JdWz5/D5UHpSeVUkEDH7qf0tyo=)
                          17: 3130332e3234382e35392e302f32342d3234203d3e203538383136.roa (hash: nuaGJGZ3YXO78mNDVOo1HOsr1j0BBeisM+PdT4vV70U=)
                          18: 3130332e3234382e35382e302f32332d3233203d3e203538383136.roa (hash: zc4ykLGcjnNqveO2/L+gaoTsTtypUdw4BR4ukEt5D9o=)
                          19: 3230322e37332e31362e302f32342d3234203d3e203538383136.roa (hash: Fqdl1sb+h6leJuhfojKOfkvGAlovkHlBo0ChmPhMVvw=)
                          20: 34332e3235322e3138362e302f32342d3234203d3e203538383136.roa (hash: NEMz93mwD3naCevcMJlDXLjtSbxK/YWuzVt1EzrH4HQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
                          rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 12:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:12:2f:87:bb:57:9a:5d:41:0e:9c:8c:5a:78:8d:e7:6e:b6:b9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
        Validity
            Not Before: Apr 16 11:06:42 2026 GMT
            Not After : Apr 19 12:54:42 2026 GMT
        Subject: CN=F58CBE2A22A6E5FADDCDF86D94F01B84CF8FBD02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:e8:8a:33:41:2b:af:9c:8d:c2:79:75:10:
                    96:fe:7a:fd:3d:4a:23:ef:92:c3:87:3f:ba:f5:73:
                    3f:c2:a2:40:4c:5a:d8:2b:31:3f:98:35:a3:c6:f2:
                    6f:0b:d0:24:59:38:2d:9f:6d:b2:16:a3:53:fd:71:
                    0e:58:de:2d:05:ba:3c:6e:dd:34:91:ae:f3:7f:ef:
                    6e:ee:9f:e5:1b:d3:e8:22:8a:4b:70:54:c0:7a:29:
                    3a:b5:15:c3:f5:68:66:93:05:03:62:f3:df:b9:65:
                    4a:58:bd:5e:84:af:e9:02:a6:fa:7e:bb:a5:eb:0b:
                    a0:b1:53:6d:9d:48:a9:b1:cd:eb:66:93:93:d2:4a:
                    ee:8d:4b:6c:bb:ca:18:1c:88:f1:f6:f9:b1:67:a9:
                    7b:8f:83:eb:ab:0e:70:2e:d5:51:44:b1:77:94:39:
                    35:d1:e7:61:7a:38:c4:e3:53:84:6c:5f:0d:30:96:
                    76:87:88:a5:6e:f1:ec:16:e4:ad:9c:26:84:db:e3:
                    a5:7a:54:b9:36:f5:18:8b:b4:dc:0d:2a:f4:80:26:
                    77:d2:6f:0f:ae:14:37:20:0f:e4:62:9e:03:1b:01:
                    37:4b:48:ed:bf:80:c9:cc:e5:8d:89:fe:0f:a7:04:
                    95:68:6c:ac:50:93:22:2c:30:cf:c5:2e:cb:67:6a:
                    90:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8C:BE:2A:22:A6:E5:FA:DD:CD:F8:6D:94:F0:1B:84:CF:8F:BD:02
            X509v3 Authority Key Identifier:
                keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1c:ad:45:62:08:9d:59:ab:88:6f:5c:7b:1d:ae:94:12:22:
         60:7a:e9:3e:fb:76:2c:60:8d:a3:a6:69:92:12:89:df:10:b5:
         08:81:c3:a7:63:20:60:b0:dd:cb:6e:15:be:9c:51:f1:42:58:
         5c:68:60:a7:1e:b0:be:ca:0d:c9:48:a9:9d:f0:84:b3:85:db:
         e6:3a:07:2e:2b:4e:cd:93:19:55:e3:e2:2d:6e:2a:0c:b2:5e:
         8a:99:ab:d4:c3:bb:e3:18:b0:f5:9c:ef:ae:00:4c:d0:1c:45:
         25:dc:9f:82:ff:24:99:09:49:fb:c5:e1:0c:d1:b7:19:f3:d3:
         de:98:81:b8:16:27:b5:be:28:74:92:c9:38:78:9e:94:2a:be:
         35:74:cf:a5:64:38:43:76:6a:a6:e0:1e:8d:46:14:06:ae:56:
         f4:75:c8:6c:a2:c0:02:80:96:c0:bb:80:18:9b:16:a3:f9:85:
         d6:8d:f2:bd:70:1b:07:f2:f1:de:3f:0c:f0:f2:a3:fb:77:aa:
         09:ef:62:70:75:aa:9b:0d:56:58:cf:77:ce:fe:9f:10:98:50:
         05:0d:aa:e1:62:6d:b2:a2:34:87:5a:a3:e0:6a:ce:51:4b:81:
         a6:a6:95:a1:a2:ff:53:8d:52:0b:4e:e1:7a:5f:b8:cc:b0:4c:
         8f:b3:d9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:57:42 2026 by rpki-client