Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
File:                     90508FF980097E19CEF65ED72A856616A6F690AB.mft (raw, json)
Hash identifier:          fEjGmtAO5pbUTn+gPgLP/HJIvTF5m5bgo/z93EBr4so=
Subject key identifier:   7A:64:D0:7B:09:17:2A:F2:4E:A6:9B:8A:C9:EF:F1:ED:85:28:B3:5A
Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB
Certificate issuer:       /CN=90508FF980097E19CEF65ED72A856616A6F690AB
Certificate serial:       4841CBD3F48FFE40272B9C19ADB03D2CAB93520B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
Manifest number:          0569
Signing time:             Fri 17 Apr 2026 18:02:19 +0000
Manifest this update:     Fri 17 Apr 2026 17:57:19 +0000
Manifest next update:     Mon 20 Apr 2026 19:05:19 +0000
Files and hashes:         1: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: 7pdp3iomZV1Sl4nuURLGWWHMiPLMkvx/Ece8HW9MQqg=)
                          2: 90508FF980097E19CEF65ED72A856616A6F690AB.crl (hash: oaLBJr78jKmvz/AjQrXN8AzTdojvmmdeRNy/j8oPawk=)
                          3: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: NUlokuFe9GARtT8KTw9qoKUuu+MeiOKu86jOn++3TJ0=)
                          4: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: JNjDlAZZhJPbXz9QnoPN2kXEdVorueRNiZ3y4BzRO+s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl
                          rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 19:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:41:cb:d3:f4:8f:fe:40:27:2b:9c:19:ad:b0:3d:2c:ab:93:52:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB
        Validity
            Not Before: Apr 17 17:57:19 2026 GMT
            Not After : Apr 20 19:05:19 2026 GMT
        Subject: CN=7A64D07B09172AF24EA69B8AC9EFF1ED8528B35A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:c8:04:30:bc:3e:37:23:a1:80:a6:f6:04:
                    8d:fc:ed:a5:ea:bc:e0:57:6d:89:9f:42:73:69:cd:
                    67:93:7f:0a:46:eb:f6:7e:22:cb:72:85:8e:9a:85:
                    e8:95:cb:de:2f:5f:bb:5c:bd:19:0a:a0:a5:66:15:
                    aa:31:fd:dd:e6:dc:30:42:1d:da:87:a9:04:3c:c6:
                    e2:98:66:f5:fa:24:a7:e1:de:73:49:3e:1e:f9:32:
                    37:0f:95:66:45:44:c9:a5:37:52:e5:ca:ba:66:26:
                    96:d7:79:30:b3:d8:d4:39:66:1a:46:a9:30:76:d2:
                    77:af:42:b2:04:7c:c4:4d:2a:f5:2b:15:03:cf:16:
                    c7:00:f4:3d:bc:97:03:70:63:9e:c0:9a:ce:95:bf:
                    f7:62:50:1b:79:01:dc:dc:43:d2:dd:a3:5c:42:0b:
                    4d:05:a9:06:90:e1:4e:2b:07:a5:36:99:66:8e:6c:
                    42:ab:2c:80:07:99:97:d6:85:4d:ff:a2:60:45:b6:
                    4e:3b:74:e7:cc:2a:77:b3:c7:2b:f7:15:88:78:16:
                    67:15:4c:f5:a8:25:0d:0a:88:0d:35:97:09:f7:82:
                    dc:25:82:b3:c6:07:26:04:71:0a:29:71:de:ac:86:
                    3e:5a:c0:96:36:f3:af:60:b0:03:58:bd:e3:9b:73:
                    7e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:64:D0:7B:09:17:2A:F2:4E:A6:9B:8A:C9:EF:F1:ED:85:28:B3:5A
            X509v3 Authority Key Identifier:
                keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8d:23:9d:21:91:68:d8:11:27:54:0b:6e:2a:54:1a:67:b1:
         70:54:48:02:fb:2b:54:98:e0:c8:4d:a0:3f:35:9e:f2:ef:c6:
         ec:de:dc:d7:e7:8b:c1:4a:8c:03:3f:6d:ed:f6:95:17:5c:cf:
         4c:17:08:f6:1a:d1:ab:cb:6d:b6:a4:a3:91:bd:60:e8:5d:15:
         b4:68:b0:1f:2e:12:2b:21:27:f2:0a:8d:36:e3:1e:6c:26:74:
         5d:06:8b:5f:2c:9f:eb:12:dd:20:57:a6:90:3c:5d:4a:61:b0:
         8d:37:ac:a3:7a:80:51:34:90:5b:50:da:d3:5d:43:7f:a2:ac:
         e0:8c:8d:45:8c:f8:a9:41:64:52:82:7f:44:fe:71:f0:7d:c7:
         29:74:4a:1c:32:a5:90:c4:97:11:3a:f1:fe:de:62:09:2d:77:
         6a:7f:49:73:e8:eb:de:54:f1:34:42:84:e8:c2:2a:95:7c:c7:
         7d:23:86:8c:e2:35:09:00:a4:8b:27:34:33:ec:2a:d2:b0:3b:
         92:be:2c:01:e3:de:74:02:5e:d4:68:29:7a:bf:2a:31:c6:31:
         96:eb:27:06:31:48:9e:55:09:b1:58:b1:36:04:27:96:6d:31:
         1d:45:95:c8:ae:cc:a8:b0:82:24:ed:34:3f:b4:98:58:98:22:
         55:0f:0f:a8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSEHL0/SP/kAnK5wZrbA9LKuTUgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZB
NkY2OTBBQjAeFw0yNjA0MTcxNzU3MTlaFw0yNjA0MjAxOTA1MTlaMDMxMTAvBgNV
BAMTKDdBNjREMDdCMDkxNzJBRjI0RUE2OUI4QUM5RUZGMUVEODUyOEIzNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+MgEMLw+NyOhgKb2BI387aXq
vOBXbYmfQnNpzWeTfwpG6/Z+IstyhY6aheiVy94vX7tcvRkKoKVmFaox/d3m3DBC
HdqHqQQ8xuKYZvX6JKfh3nNJPh75MjcPlWZFRMmlN1LlyrpmJpbXeTCz2NQ5ZhpG
qTB20nevQrIEfMRNKvUrFQPPFscA9D28lwNwY57Ams6Vv/diUBt5AdzcQ9Ldo1xC
C00FqQaQ4U4rB6U2mWaObEKrLIAHmZfWhU3/omBFtk47dOfMKnezxyv3FYh4FmcV
TPWoJQ0KiA01lwn3gtwlgrPGByYEcQopcd6shj5awJY2869gsANYveObc34pAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUemTQewkXKvJOppuKye/x7YUos1owHwYDVR0j
BBgwFoAUkFCP+YAJfhnO9l7XKoVmFqb2kKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ODgzZTNiZS01N2UyLTQxMjUtYTBjNS05YTllYTUwMWJmMDUvMC85MDUwOEZGOTgw
MDk3RTE5Q0VGNjVFRDcyQTg1NjYxNkE2RjY5MEFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZBNkY2
OTBBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw
YzUtOWE5ZWE1MDFiZjA1LzAvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2
MTZBNkY2OTBBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH6NI50hkWjYESdUC24qVBpnsXBUSAL7K1SY
4MhNoD81nvLvxuze3Nfni8FKjAM/be32lRdcz0wXCPYa0avLbbako5G9YOhdFbRo
sB8uEishJ/IKjTbjHmwmdF0Gi18sn+sS3SBXppA8XUphsI03rKN6gFE0kFtQ2tNd
Q3+irOCMjUWM+KlBZFKCf0T+cfB9xyl0ShwypZDElxE68f7eYgktd2p/SXPo695U
8TRChOjCKpV8x30jhoziNQkApIsnNDPsKtKwO5K+LAHj3nQCXtRoKXq/KjHGMZbr
JwYxSJ5VCbFYsTYEJ5ZtMR1FlciuzKiwgiTtND+0mFiYIlUPD6g=
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:01:53 2026 by rpki-client