Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
File:                     F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft (raw, json)
Hash identifier:          W8JBN228kCbuYM6bW9bYXZX6JvRLQS+tPnA0I2WtVz0=
Subject key identifier:   69:9F:BA:70:A9:D2:2F:09:E0:AB:44:17:81:18:AA:EE:C5:C0:AC:59
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       40E75679358E6901369369D938FA9BFC04A855E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
Manifest number:          0324
Signing time:             Fri 17 Apr 2026 08:32:33 +0000
Manifest this update:     Fri 17 Apr 2026 08:27:33 +0000
Manifest next update:     Mon 20 Apr 2026 09:07:33 +0000
Files and hashes:         1: 3130332e33392e31322e302f32322d3232203d3e203633383237.roa (hash: PN+b+5feyRtAVNGObwKfKSHcsxt0nVVvm7PSPSm411E=)
                          2: 3130332e33392e31322e302f32332d3233203d3e203633383237.roa (hash: NFgbHOWF09e2UJQTu6ELDWDZsspY1ki/AkPp6Ba87/o=)
                          3: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: A/k45s19FefdLANTjaU2DJdWu18m3PvvvLFNqzKTYEk=)
                          4: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: f4T+onCxZDveeFTCMzFwwEAIgiLhuur5vB8ungh3o6Q=)
                          5: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: tPL8LGFCeScODEGc8A8pbjQLA1tS07qIShgIss5wh6Y=)
                          6: 34332e3234332e3138362e302f32332d3233203d3e203633383237.roa (hash: yqQnWTr36Q+9IOq0gEzqGc62R4aFD9e9lomWkv5xJj4=)
                          7: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: /BVYixhjCRvqFjUFmXC//F/0kY3GQUw+CgUs6eD3lKE=)
                          8: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: zTXz6ViHpuUnydIo3u7N32sUnlV7Ga/gyh5w07AZqAI=)
                          9: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: Df4ylZ+0W3N4EtnLalY+zYatkTr7lHaj8iG3DxNbv+w=)
                          10: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: pRKe+kXmByJ2JQdqGwZqDIIAk5V2EZK8ohpT3QljbGE=)
                          11: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: ihkQzGAO8DoG0WnuEPJGIoHev84I28N1A3HWiNGFa0Q=)
                          12: 34332e3234332e3138342e302f32322d3232203d3e203633383237.roa (hash: 8DzkDXJ0hjv41WhOioNYW4aCuQ61HA42qiPoGr3H0A0=)
                          13: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: +aCt5+OXK6i1mR1vUsqsKmaPLobmcj6xpzHFr2y248I=)
                          14: F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl (hash: TcQRqjhS+s66RgCMbLZ5nXMdeGi2iUPjTc3mNzQz29A=)
                          15: 3130332e33392e31342e302f32332d3233203d3e203633383237.roa (hash: /MRMfiUThW9lIqFQqwoyGRpjuxEJIvMy57nFzNfDNLg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 09:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e7:56:79:35:8e:69:01:36:93:69:d9:38:fa:9b:fc:04:a8:55:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Apr 17 08:27:33 2026 GMT
            Not After : Apr 20 09:07:33 2026 GMT
        Subject: CN=699FBA70A9D22F09E0AB44178118AAEEC5C0AC59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:64:8e:83:73:38:e9:87:53:cc:6e:1a:d5:c1:
                    75:b2:e3:32:99:d2:b7:74:d3:fc:02:d2:df:a7:58:
                    c2:cc:71:97:8a:b6:9e:4b:c2:fe:76:10:28:67:f0:
                    22:57:08:be:18:f4:5e:44:77:7c:c5:17:35:65:06:
                    3b:67:cc:cc:bf:54:b3:04:da:9c:b4:a4:33:e8:ab:
                    2d:0a:26:ef:64:0c:2d:7e:64:1f:17:e6:5b:eb:4f:
                    db:f7:d1:19:b6:d3:bc:19:dc:00:ff:17:ac:f9:28:
                    01:74:15:dc:59:08:a7:f4:8f:7c:94:7a:60:2d:3a:
                    8a:d5:29:a2:6c:13:f9:ef:fb:7e:e0:43:ec:35:98:
                    81:77:78:b4:d1:af:d9:00:ba:cf:42:92:e0:55:57:
                    9e:6a:2c:8b:d1:8e:9d:99:82:ca:8f:d3:cd:0f:b5:
                    1d:d5:67:08:47:66:b9:21:93:78:5b:46:ce:fe:19:
                    27:06:f7:c4:4b:ee:9b:5f:60:f0:d8:18:06:32:20:
                    64:2e:dc:0e:d7:a1:c6:f4:b7:9f:aa:30:4e:5b:96:
                    66:5b:81:f7:ce:bd:e1:d5:08:04:72:7d:ff:51:ca:
                    6e:66:e9:39:1d:dc:2a:27:07:01:3c:d4:78:22:e7:
                    3b:e3:14:4f:e3:b7:b7:83:40:40:85:30:0b:0b:3c:
                    3c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9F:BA:70:A9:D2:2F:09:E0:AB:44:17:81:18:AA:EE:C5:C0:AC:59
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:cc:06:e6:c8:6c:3a:89:21:5b:d5:58:06:26:e9:8b:76:93:
         89:82:c5:02:16:13:3f:d4:84:cd:dd:b7:bd:2b:ae:01:84:49:
         8e:31:e3:20:ca:24:e3:35:d4:08:70:d7:0e:6b:b4:51:1a:d1:
         c7:6d:f8:0a:be:1a:71:3c:c3:33:89:4e:71:76:b7:c2:91:2e:
         b4:a7:35:40:2f:5b:09:cf:75:80:02:92:b4:d2:26:70:18:10:
         16:6f:87:04:6a:8d:49:61:05:31:af:73:b2:13:a2:b7:f2:14:
         06:f1:b9:e6:43:bd:3f:c3:f5:3b:77:c7:d0:8e:6a:ff:ed:82:
         06:5f:78:97:f8:01:88:2b:7d:04:19:52:d9:95:13:46:c8:b9:
         fa:a0:78:59:07:4d:f8:57:19:68:fd:c1:90:b9:fa:05:6d:65:
         05:89:be:ae:8a:bb:94:f3:8e:36:18:e2:b0:86:fa:21:4a:08:
         a6:33:5a:ee:f6:25:b2:0b:51:a6:34:cc:9c:22:3f:5b:1b:68:
         49:df:d0:24:9c:f7:2b:38:a7:17:0d:cd:27:02:76:6c:4b:15:
         6a:ac:18:a8:63:90:3e:a3:b4:ab:58:ba:dc:1c:b3:02:eb:c3:
         9e:ad:37:f5:a4:88:28:fe:ac:a7:d2:11:15:8e:0a:03:d3:cb:
         fe:58:6f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:21 2026 by rpki-client