Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft
File:                     8790EFE9518BF8664B34E1227585F3516FDC5367.mft (raw, json)
Hash identifier:          +5GV7bIkMPGpTKs6uT+sFRCBwyObIssdJdfKoR0X01Y=
Subject key identifier:   3E:77:F2:11:9A:1E:CF:66:B8:05:56:47:56:B6:E9:9B:19:97:B5:98
Authority key identifier: 87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67
Certificate issuer:       /CN=8790EFE9518BF8664B34E1227585F3516FDC5367
Certificate serial:       1874E3C699319862F739535E2CCF5B5F39426128
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft
Manifest number:          0267
Signing time:             Fri 17 Apr 2026 10:11:43 +0000
Manifest this update:     Fri 17 Apr 2026 10:06:43 +0000
Manifest next update:     Mon 20 Apr 2026 19:13:43 +0000
Files and hashes:         1: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: lCrSGb9Pjnp7V6TAgWPW62qRYjPVwTbgeqKcWoynx5M=)
                          2: 8790EFE9518BF8664B34E1227585F3516FDC5367.crl (hash: ecvJK+/VqqTDJExNwHYQJk1TfEbv+cSluy3pIegxwPc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl
                          rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 19:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:74:e3:c6:99:31:98:62:f7:39:53:5e:2c:cf:5b:5f:39:42:61:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8790EFE9518BF8664B34E1227585F3516FDC5367
        Validity
            Not Before: Apr 17 10:06:43 2026 GMT
            Not After : Apr 20 19:13:43 2026 GMT
        Subject: CN=3E77F2119A1ECF66B805564756B6E99B1997B598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:65:14:f3:2d:12:4c:17:41:12:36:e9:67:
                    b2:d5:6e:7a:ed:81:37:eb:63:ea:c8:70:bf:50:ef:
                    35:10:6d:0c:f4:dd:bb:53:c0:89:79:1d:3d:85:54:
                    31:6e:e4:9f:4d:08:8e:1a:a7:43:8a:73:8b:b4:a9:
                    78:0e:62:e3:4b:74:8c:84:a6:2b:0c:b6:4e:e6:c8:
                    64:9f:96:82:bf:86:db:bb:80:94:87:2e:fc:23:83:
                    df:09:d6:2d:bc:3b:b1:6b:a1:3b:ff:66:70:04:1b:
                    b5:d7:5e:96:30:bc:0d:81:72:aa:37:4d:ae:eb:86:
                    1b:dd:5b:9d:58:6a:be:0d:81:78:b4:16:a1:c8:34:
                    c3:ef:6f:a5:72:61:d1:b3:bd:16:81:cd:7f:47:c0:
                    32:d9:6e:1c:d6:7f:35:7e:8d:01:ac:d9:45:17:88:
                    22:5f:09:e3:41:89:dd:69:87:39:90:0d:50:20:fd:
                    5e:13:79:fb:c4:dc:58:6d:56:a6:7d:36:1b:7f:d0:
                    78:17:c1:d8:2a:88:10:c7:86:ce:43:9f:f8:04:11:
                    67:e4:50:68:a9:ee:fd:ee:e3:2a:33:b7:e7:cb:26:
                    16:ee:14:af:f8:0e:7a:df:9d:74:da:44:31:b9:2a:
                    2d:49:45:ca:de:08:3a:6a:ed:9a:69:db:c5:0c:18:
                    9a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:77:F2:11:9A:1E:CF:66:B8:05:56:47:56:B6:E9:9B:19:97:B5:98
            X509v3 Authority Key Identifier:
                keyid:87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:b9:56:41:0a:11:25:c1:9b:b8:f8:44:cd:9c:47:56:f2:8f:
         8e:3c:71:2f:6f:3c:d3:24:92:82:b5:5d:c0:a9:42:c3:be:59:
         28:d2:27:67:96:b5:69:22:89:e5:6a:fa:ec:68:39:7d:00:c3:
         cf:85:75:a9:a6:d9:02:51:db:00:1c:23:fd:47:49:55:f3:4e:
         52:07:ed:7d:07:29:65:19:64:0d:b7:c2:24:e3:20:5f:33:09:
         d2:2f:e0:7b:42:f9:9e:bc:34:66:38:11:4c:fd:33:1e:f4:ca:
         ff:53:21:e1:6d:5f:0f:bc:10:f7:84:25:d6:4d:fc:2a:b8:83:
         a9:b3:87:d0:f8:cf:01:50:37:5a:e5:f4:af:d7:ae:f8:8b:1a:
         dd:65:9f:48:f1:91:12:5d:1f:3a:12:1d:19:72:13:3f:45:19:
         63:d6:02:a4:aa:d9:ef:6f:77:ba:43:98:55:2f:dd:44:11:a4:
         07:cf:73:c3:54:29:3a:54:1a:46:7d:0f:21:f7:50:0c:fb:7b:
         05:ed:0e:6f:2b:3f:a9:e2:67:b8:6f:26:34:e8:66:96:72:17:
         b0:79:36:a8:20:20:53:ea:fd:a9:2d:6b:1e:51:eb:11:49:8c:
         04:8b:5c:18:d8:e5:db:da:c0:fb:5a:ef:1e:2b:0c:02:47:73:
         42:82:9d:1d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGHTjxpkxmGL3OVNeLM9bXzlCYSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2
RkRDNTM2NzAeFw0yNjA0MTcxMDA2NDNaFw0yNjA0MjAxOTEzNDNaMDMxMTAvBgNV
BAMTKDNFNzdGMjExOUExRUNGNjZCODA1NTY0NzU2QjZFOTlCMTk5N0I1OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8VmUU8y0STBdBEjbpZ7LVbnrt
gTfrY+rIcL9Q7zUQbQz03btTwIl5HT2FVDFu5J9NCI4ap0OKc4u0qXgOYuNLdIyE
pisMtk7myGSfloK/htu7gJSHLvwjg98J1i28O7FroTv/ZnAEG7XXXpYwvA2Bcqo3
Ta7rhhvdW51Yar4NgXi0FqHINMPvb6VyYdGzvRaBzX9HwDLZbhzWfzV+jQGs2UUX
iCJfCeNBid1phzmQDVAg/V4TefvE3FhtVqZ9Nht/0HgXwdgqiBDHhs5Dn/gEEWfk
UGip7v3u4yozt+fLJhbuFK/4DnrfnXTaRDG5Ki1JRcreCDpq7Zpp28UMGJr/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPnfyEZoez2a4BVZHVrbpmxmXtZgwHwYDVR0j
BBgwFoAUh5Dv6VGL+GZLNOEidYXzUW/cU2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZThjYmRjOC1kMTk1LTRjN2QtYjNlOC0wYThmYmFlOGMyODQvMC84NzkwRUZFOTUx
OEJGODY2NEIzNEUxMjI3NTg1RjM1MTZGREM1MzY3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2RkRD
NTM2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz
ZTgtMGE4ZmJhZThjMjg0LzAvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYz
NTE2RkRDNTM2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAOC5VkEKESXBm7j4RM2cR1byj448cS9vPNMk
koK1XcCpQsO+WSjSJ2eWtWkiieVq+uxoOX0Aw8+Fdamm2QJR2wAcI/1HSVXzTlIH
7X0HKWUZZA23wiTjIF8zCdIv4HtC+Z68NGY4EUz9Mx70yv9TIeFtXw+8EPeEJdZN
/Cq4g6mzh9D4zwFQN1rl9K/XrviLGt1ln0jxkRJdHzoSHRlyEz9FGWPWAqSq2e9v
d7pDmFUv3UQRpAfPc8NUKTpUGkZ9DyH3UAz7ewXtDm8rP6niZ7hvJjToZpZyF7B5
NqggIFPq/aktax5R6xFJjASLXBjY5dvawPta7x4rDAJHc0KCnR0=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:58 2026 by rpki-client