Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft
File:                     73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft (raw, json)
Hash identifier:          xaz/tKcpMh+29pUpg2MysW6ilqxtB806WXUczXuGhDw=
Subject key identifier:   B1:4E:FA:06:76:70:B3:BB:FC:AC:37:09:41:0D:3F:DA:7D:9C:21:20
Authority key identifier: 73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6
Certificate issuer:       /CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6
Certificate serial:       64920425F83A31B0315ACA52F292FC662B1C83A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft
Manifest number:          011F
Signing time:             Fri 17 Apr 2026 05:41:26 +0000
Manifest this update:     Fri 17 Apr 2026 05:36:26 +0000
Manifest next update:     Mon 20 Apr 2026 12:01:26 +0000
Files and hashes:         1: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: bCp+hfr7ROEtQWyvQHaGucdWFI7N+d4ip6n9SavuoOk=)
                          2: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: mWn5DPCiekSxGNB8RumBKf5syIxB4d7+KUn6ZNJHctk=)
                          3: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uOA4jTwlkcqlsjP32WwaK900NFV6wePG9q2fIgGqlJw=)
                          4: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl (hash: fdm0u7xsZOCn28OY5i1a1IsbNl4KpoM8LiIzCMQT27g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl
                          rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 12:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:92:04:25:f8:3a:31:b0:31:5a:ca:52:f2:92:fc:66:2b:1c:83:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6
        Validity
            Not Before: Apr 17 05:36:26 2026 GMT
            Not After : Apr 20 12:01:26 2026 GMT
        Subject: CN=B14EFA067670B3BBFCAC3709410D3FDA7D9C2120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bc:24:4b:0f:6a:90:3a:38:22:4e:c1:a0:6d:
                    3e:a4:9e:b1:78:70:5e:6c:a9:f3:0e:cb:17:5b:fb:
                    ff:9a:ad:c3:93:6b:0f:88:ab:12:54:9c:d0:ae:67:
                    ad:fb:ea:a2:04:52:d9:3e:89:3e:54:5c:2f:f1:dc:
                    5e:e1:94:79:d1:39:74:61:ce:e0:ab:fb:ee:dc:fc:
                    73:de:5c:1c:d4:62:ce:aa:86:3a:3f:23:00:f4:ac:
                    14:26:30:5e:4c:82:c6:29:be:d1:44:53:60:ed:81:
                    3a:70:66:6a:d8:ab:8c:24:f7:69:e0:ca:40:3c:42:
                    21:30:16:36:70:65:19:aa:de:2e:cd:dd:c3:44:00:
                    e1:7c:d5:0e:7c:53:66:75:ff:fc:0a:1e:cb:56:06:
                    ef:4c:6e:15:ef:9a:be:3f:95:6a:5a:f7:56:26:c7:
                    2e:fe:f2:2c:2a:6a:02:e1:59:16:70:68:ce:86:b2:
                    7b:8f:ec:c5:ca:4b:3a:f8:29:03:06:5f:1b:35:10:
                    39:1d:d7:7c:c1:37:c1:d9:7d:96:5b:ec:de:86:98:
                    5c:d8:ab:c4:04:01:da:66:b3:4d:7c:bd:fa:5e:7d:
                    cd:3d:57:3c:d4:2f:e2:04:a7:f7:84:c0:99:e7:95:
                    ef:89:a0:fb:6f:1e:dd:1b:bb:ee:70:38:76:02:39:
                    1f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4E:FA:06:76:70:B3:BB:FC:AC:37:09:41:0D:3F:DA:7D:9C:21:20
            X509v3 Authority Key Identifier:
                keyid:73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:2a:df:8b:3d:ca:bf:97:b3:9b:8a:b7:d9:4b:48:11:be:16:
         06:8e:f7:42:c1:0c:d9:48:0a:25:b2:9f:82:85:b6:27:7b:ae:
         66:ca:98:94:8c:6b:39:db:11:e2:f2:4f:54:56:cf:ea:a3:50:
         70:35:c2:c1:2c:a1:79:be:04:c7:3f:1b:d7:4f:cc:7e:1b:a8:
         64:ad:cc:22:eb:89:aa:03:30:fa:78:98:98:97:f9:04:08:d5:
         74:d4:a2:8a:d3:57:25:24:3a:7c:6a:0a:7f:e2:99:c5:d6:ad:
         e7:64:79:a2:38:e2:a3:fc:5c:a1:58:10:25:22:b3:2e:4d:b4:
         f6:bd:7a:88:a3:86:5f:5f:83:0f:c4:4a:54:70:3b:85:85:53:
         f6:4b:26:ac:21:40:d9:31:87:db:f0:62:fd:73:de:fb:f3:b1:
         2d:d5:6a:f9:c6:8f:39:14:39:da:f9:e2:96:fe:03:39:e1:20:
         7e:5e:02:f8:94:f4:b1:6a:b8:e6:67:65:a8:16:61:e4:b8:ce:
         30:46:85:8a:02:00:3c:07:70:58:79:04:b3:d3:08:d1:c6:37:
         94:04:f3:ce:1f:7b:da:7d:6f:bd:db:1f:4d:58:9f:dd:91:a6:
         07:8b:48:70:da:97:67:0e:9d:06:ce:85:7e:7a:49:05:af:0d:
         f9:67:5d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:37 2026 by rpki-client