Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
File:                     0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json)
Hash identifier:          9btFuCU/Hw11lOn0ekpwvUQLQ26jnL+uPx0Zqs1aZs4=
Subject key identifier:   4B:0F:DD:58:98:9C:E5:4A:B4:E6:27:9F:B5:BC:DA:9A:7B:22:0E:00
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       263BCEFDF19D0D0E129FA98BAE0ABA9D6267B0F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
Manifest number:          059C
Signing time:             Thu 16 Apr 2026 22:11:00 +0000
Manifest this update:     Thu 16 Apr 2026 22:06:00 +0000
Manifest next update:     Mon 20 Apr 2026 04:41:00 +0000
Files and hashes:         1: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: JNQ343i5OALYy6+PPMTF9ZMCDVDR/l5G+uGpk10x6iY=)
                          2: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: l79vjEoCDRYp7Imq4o09nFUUOawBLUlHdvJpjB5kQuE=)
                          3: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: wSzeEeUlQ9dVeDBBx0XlYcJDAiPM7sQsbdx5J/YQ+rE=)
                          4: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: +XLAGZaO1CUhgIfOrcy+sNRJJiCj6bewjgriX63Ik2M=)
                          5: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: 75E5/wNg1gW13NP4pidyseZpfPgC9bQlFJMQWGidUN4=)
                          6: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: 7+x27RozP05Mow/v71/arzwRB7igxk2bu99eo7MB2+g=)
                          7: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: 78N/7/lN6fFcNxTsBAhwu2aVo0YPMpRgQPsTAmxhqAM=)
                          8: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: zHFuXcJsHRS8oU5g73vyR9ezkdJAc6jv+r1NZhBGTU4=)
                          9: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: Mo+ywRg/G9o+M5ufzONjfakS+qPVaicNW0HrvAATwhk=)
                          10: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: QhseuehbmAg1CgvzVHn3OnXvEwbOGfNyxdByQxi2PSM=)
                          11: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: 6L28DKU2IWYtA3lRV3VTpPyJ/UkW+g97L32zaXfZ124=)
                          12: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: yc5NmKqgc087/1Q1aK0xzmJOjZX9anqvOxLY60HOjzI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 04:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3b:ce:fd:f1:9d:0d:0e:12:9f:a9:8b:ae:0a:ba:9d:62:67:b0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: Apr 16 22:06:00 2026 GMT
            Not After : Apr 20 04:41:00 2026 GMT
        Subject: CN=4B0FDD58989CE54AB4E6279FB5BCDA9A7B220E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0c:e6:29:f0:91:e7:d2:1b:96:34:34:c3:72:
                    e3:38:9a:36:23:da:50:0c:a7:4b:56:30:cd:56:6b:
                    9a:ec:74:0e:13:77:72:9c:ac:9c:ce:91:c5:f8:1a:
                    83:0f:2c:5f:ea:52:c8:e3:9a:9d:c1:79:fc:c3:34:
                    c1:12:64:9d:57:cd:7a:60:7e:66:f2:5e:56:63:d8:
                    83:91:83:40:5a:5e:e8:ee:12:28:5e:6c:51:95:31:
                    45:04:48:60:1f:fc:6d:86:4f:5c:a7:d3:c7:ec:ff:
                    f5:19:e3:ed:08:9c:1c:de:f9:b9:d6:99:15:aa:da:
                    75:05:5e:af:cb:be:f9:15:0f:bb:c1:ee:97:e5:3c:
                    b6:47:45:ec:ad:11:b5:7a:a8:18:b1:17:43:d4:e9:
                    a9:08:e1:12:1f:aa:da:4d:69:71:8b:ce:5a:27:3d:
                    4d:c2:86:f2:cf:91:67:c1:b6:ff:e4:f9:69:82:15:
                    db:f6:5d:d4:6b:69:21:ef:36:7c:ac:82:c6:a6:1a:
                    6b:66:3f:63:c6:a2:82:af:8c:83:07:73:67:7a:fd:
                    6b:a2:5d:e8:c7:9c:38:58:58:6f:26:56:d4:22:0e:
                    69:35:8e:9f:7f:e1:8c:fc:0b:b7:6d:c7:7f:54:c5:
                    7c:d2:67:38:9f:22:b1:24:4c:7a:03:a4:90:c1:c1:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0F:DD:58:98:9C:E5:4A:B4:E6:27:9F:B5:BC:DA:9A:7B:22:0E:00
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:99:7f:f9:2e:c9:99:ee:7a:e8:8a:ed:2a:7b:06:f4:24:94:
         9b:b8:ff:f2:10:53:29:c2:5d:a4:5d:a0:da:4b:ff:c8:13:ef:
         4f:10:ac:35:43:71:2f:ad:5a:c0:68:99:db:df:b2:2b:19:6b:
         40:be:31:9d:d9:61:3d:5c:07:d4:5d:74:c6:ac:a0:98:6f:84:
         d1:c9:e3:dd:fd:ce:1b:49:12:49:d4:45:3f:ba:c2:13:db:ec:
         dc:ac:1d:fa:a1:81:59:f6:cf:a4:1e:4e:67:82:dd:bf:b7:6b:
         e7:33:13:f1:04:8a:ca:d4:0c:9c:a0:9b:04:39:d0:53:2e:4d:
         72:a1:cb:43:0d:6d:ca:65:6d:69:29:7d:06:1f:95:ab:09:b6:
         d0:42:b7:e9:2d:f3:c4:7c:83:54:02:b4:98:e9:4d:b7:d1:c8:
         fd:3e:0d:4e:da:3d:0c:9f:fa:9c:2a:da:48:98:a4:4d:c4:da:
         7b:2f:da:4f:cf:6b:15:f6:81:d4:66:2d:a2:69:bf:4b:3b:1f:
         4c:4a:03:9e:2e:18:27:5e:e6:c1:0a:fa:f0:9a:f1:2e:b1:79:
         50:fa:f2:23:1c:c0:07:84:4a:d0:ad:e5:88:3e:4b:99:f1:18:
         cb:ea:66:bf:f3:96:3d:5e:45:99:6c:61:29:67:78:c9:f3:24:
         75:dd:45:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:29:15 2026 by rpki-client