Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft
File:                     D8F283D13C79D458461D8E83A481638975B3D90B.mft (raw, json)
Hash identifier:          1a3lBSuiR/nJXROSPweglJjrjcjrc9yGOwkcwt4ncNI=
Subject key identifier:   75:44:90:34:6E:AF:48:F4:A9:C8:E9:7A:E5:05:EE:57:57:2F:8F:E5
Authority key identifier: D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B
Certificate issuer:       /CN=D8F283D13C79D458461D8E83A481638975B3D90B
Certificate serial:       346CAC1D1648D53E84E13C5B3AA49C6066CD22D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft
Manifest number:          0305
Signing time:             Thu 16 Apr 2026 03:42:40 +0000
Manifest this update:     Thu 16 Apr 2026 03:37:40 +0000
Manifest next update:     Sun 19 Apr 2026 07:42:40 +0000
Files and hashes:         1: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: K0k+hTBsNJncES2akZnEP3mlQpVqZGGF0g7QmATvqxQ=)
                          2: D8F283D13C79D458461D8E83A481638975B3D90B.crl (hash: hVkD8JUokqQcrVwKlBepMtPdYgGYbxtWTDDWFGaG4l0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl
                          rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 07:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6c:ac:1d:16:48:d5:3e:84:e1:3c:5b:3a:a4:9c:60:66:cd:22:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F283D13C79D458461D8E83A481638975B3D90B
        Validity
            Not Before: Apr 16 03:37:40 2026 GMT
            Not After : Apr 19 07:42:40 2026 GMT
        Subject: CN=754490346EAF48F4A9C8E97AE505EE57572F8FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c2:f1:ab:1d:66:aa:af:af:c1:fd:be:3c:c8:
                    bc:39:4f:58:00:38:e0:82:4d:7d:ba:3c:e4:3d:06:
                    b0:70:8b:1d:0b:d7:6e:b6:8b:b8:58:74:3b:c4:35:
                    14:c1:89:28:f4:84:04:4a:82:3e:4d:d8:3b:d8:b9:
                    60:a9:eb:65:f1:7a:ea:91:e6:c6:ad:c4:0b:c4:06:
                    7d:b0:05:00:1d:4f:17:67:a7:ab:a0:8e:13:ee:59:
                    1a:9c:b0:ad:1c:f3:2d:74:9f:09:3c:c1:7c:14:44:
                    6d:f6:0b:17:b3:ec:be:7b:b9:e0:73:65:82:7f:c4:
                    b2:94:49:cc:9c:be:bb:ca:a3:7c:7d:7d:f0:d0:90:
                    ab:79:18:ee:f8:59:78:40:87:99:e4:81:b6:f7:73:
                    24:d8:70:3d:4b:d9:f6:31:2d:58:a9:a6:1a:44:ab:
                    24:90:23:88:57:03:ca:f1:5c:b0:7f:d7:db:9b:07:
                    79:1c:55:2c:0f:f5:82:85:6b:ec:42:35:cd:8b:ae:
                    3a:69:0d:d2:0f:9d:04:00:fd:ec:26:d7:58:70:f7:
                    f5:13:9d:a1:0c:fe:c2:99:38:33:7a:d6:04:53:26:
                    18:87:3b:a4:bd:10:c4:37:b9:53:8b:9a:df:c3:92:
                    0d:f5:20:e3:7a:d1:4e:d0:df:64:d4:a4:b2:70:a8:
                    c3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:44:90:34:6E:AF:48:F4:A9:C8:E9:7A:E5:05:EE:57:57:2F:8F:E5
            X509v3 Authority Key Identifier:
                keyid:D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:92:13:3a:d0:98:3d:76:29:f5:40:f8:03:44:1b:84:f9:fa:
         4b:3c:09:1a:b6:f6:04:3b:24:15:e8:05:38:a3:98:63:8b:c6:
         90:58:ca:e9:85:da:db:fc:40:2d:55:b0:d7:8b:c7:59:24:0b:
         9f:f4:df:ad:29:1d:73:6f:64:7d:84:7a:79:c8:20:cf:b0:7a:
         a0:ea:b6:ab:a9:3b:87:15:43:5f:1e:fe:27:8c:49:87:a8:eb:
         d4:03:c0:3f:ed:19:df:56:c6:af:99:60:dd:cc:d3:23:70:2d:
         39:b5:ee:ad:67:1a:9d:13:48:66:95:4d:54:20:69:10:c2:4a:
         54:fd:70:1c:53:21:c8:a9:21:ad:3c:35:55:97:9f:05:ec:16:
         ea:1f:46:cb:03:12:d3:f4:e9:3a:87:74:db:5e:0a:23:84:de:
         e8:04:19:ba:b0:b8:87:b9:b6:dc:bb:33:b6:cf:31:8d:92:ee:
         1c:ff:45:fc:3a:3f:9b:c1:5f:70:b1:c4:b1:64:ca:bd:d7:f3:
         c9:f3:cc:4a:44:7a:ee:ad:a7:3d:50:92:1b:ee:af:1b:be:a7:
         c4:11:ce:4d:b5:8d:c7:79:b9:b8:a8:92:99:6e:94:93:7c:96:
         76:3f:21:ad:b9:bd:38:72:47:2e:82:f1:6b:52:54:07:ef:8b:
         91:02:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:54 2026 by rpki-client