Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft
File:                     1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json)
Hash identifier:          GPBxiT3l2l5DPAwh4fkEs1V+QJuLd63Jagz+7d+cX7w=
Subject key identifier:   7D:38:0A:67:2D:25:74:E7:57:AE:79:38:76:46:A7:E8:23:06:84:12
Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6
Certificate issuer:       /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6
Certificate serial:       7E3ADD02357D7FC5A2381BE8DD14F9241DCAA1A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft
Manifest number:          0267
Signing time:             Wed 15 Apr 2026 22:41:19 +0000
Manifest this update:     Wed 15 Apr 2026 22:36:19 +0000
Manifest next update:     Sun 19 Apr 2026 05:01:19 +0000
Files and hashes:         1: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: Hk9QRmIGnLmOj8q0rSsWs18WVjVSZhp2AEPBmLDYG+0=)
                          2: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: xKO2CXnPQI2NViGwkl0YgPqxk11jmuJGUEqkoy47iBc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl
                          rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 05:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3a:dd:02:35:7d:7f:c5:a2:38:1b:e8:dd:14:f9:24:1d:ca:a1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6
        Validity
            Not Before: Apr 15 22:36:19 2026 GMT
            Not After : Apr 19 05:01:19 2026 GMT
        Subject: CN=7D380A672D2574E757AE79387646A7E823068412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:06:9d:f4:c5:8a:4b:c8:1c:c1:9c:55:bb:3b:
                    ec:18:77:41:9e:ed:65:38:48:6f:7e:9d:ad:1f:43:
                    e9:3a:cd:42:79:f0:07:75:53:1b:cb:36:e9:f2:5a:
                    3a:22:e2:3e:5b:bc:2b:bb:00:72:fb:48:f1:79:16:
                    1a:25:b7:0f:54:56:32:44:8c:7b:b0:1f:94:8e:3e:
                    27:75:ed:61:f6:10:bb:2b:a8:ad:87:f4:97:d9:8a:
                    93:43:f0:6e:6c:75:ec:eb:98:fe:9c:47:20:1b:81:
                    a8:e9:c3:62:b2:fd:ec:ed:d8:27:6f:8a:0a:2e:38:
                    5c:20:b4:82:e7:f5:3d:5f:e8:47:7a:d9:9a:45:23:
                    dc:34:7e:6b:3e:ee:5d:10:3e:ea:43:78:4d:39:35:
                    46:98:65:c6:a4:56:7e:7b:37:0b:97:af:0c:5d:44:
                    1e:9f:c0:50:8f:a5:43:4e:fe:78:53:1f:df:d4:54:
                    b1:6b:ca:a4:37:02:ad:ab:d0:8c:57:fb:89:86:01:
                    56:af:4a:15:cc:66:6c:54:45:21:cd:3d:8e:b7:ef:
                    c2:25:db:58:0f:5c:0e:e7:c1:96:f5:1d:ae:e7:86:
                    27:a9:1d:39:e9:ac:0d:74:1b:81:fc:ae:d7:41:34:
                    5d:63:a1:a0:3a:6c:a4:00:99:05:6c:c2:f8:5e:39:
                    37:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:38:0A:67:2D:25:74:E7:57:AE:79:38:76:46:A7:E8:23:06:84:12
            X509v3 Authority Key Identifier:
                keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:88:26:bb:22:22:91:a8:86:ec:dc:41:1b:c8:c3:de:aa:92:
         77:cc:77:2b:0a:6a:df:3a:07:53:4a:cb:bb:5a:12:70:19:dd:
         5c:a6:1f:cd:eb:44:b0:8c:71:0b:9b:fe:2a:bf:16:94:3b:eb:
         b4:81:f3:e6:d7:fd:57:a3:a5:3c:b8:94:28:dd:c0:a3:76:f2:
         72:06:4f:7d:a6:d4:73:0c:c3:cc:58:ff:06:f1:a6:f0:55:96:
         14:2b:63:08:79:61:1b:21:f9:a2:58:14:45:cd:e5:b2:9b:45:
         36:f5:76:9a:0d:12:93:b7:da:0a:b3:2a:0f:17:cc:73:f2:da:
         9a:77:97:e5:59:28:ce:1c:d5:d0:04:3a:cf:f8:24:9b:d1:db:
         99:d2:1b:11:93:4b:23:44:f9:cc:0c:3f:19:ff:02:13:ee:79:
         d9:df:6d:89:73:bc:2e:73:6e:6c:7e:f1:09:71:40:29:ce:52:
         f7:ac:69:18:14:fb:38:90:70:63:4f:48:f5:69:6a:c8:c3:5d:
         2f:0e:04:8c:36:49:08:d8:1a:3f:02:e1:1e:e8:03:9d:6d:cc:
         9c:63:5b:1b:6b:ba:2d:3f:f4:28:e5:26:9d:70:03:ed:d4:1d:
         7d:11:58:80:7b:3e:51:af:c8:c4:f2:ff:b2:9d:5a:40:ad:76:
         ec:13:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:23 2026 by rpki-client