Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft
File:                     1391AB90F1BF56A92FBDF7B8F48207992410775E.mft (raw, json)
Hash identifier:          4dIqoQHEjq53YgHyb9+VbaC6OMb6XF2Y/amvAR4H5Yg=
Subject key identifier:   EF:6D:3F:F3:29:C2:6A:CE:A4:D5:2C:D5:A2:8B:82:D9:CB:C1:2F:17
Authority key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E
Certificate issuer:       /CN=1391AB90F1BF56A92FBDF7B8F48207992410775E
Certificate serial:       0EAEE464E0B3BB07C216B724662B237772152C36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft
Manifest number:          0134
Signing time:             Thu 16 Apr 2026 16:00:42 +0000
Manifest this update:     Thu 16 Apr 2026 15:55:42 +0000
Manifest next update:     Mon 20 Apr 2026 00:03:42 +0000
Files and hashes:         1: 1391AB90F1BF56A92FBDF7B8F48207992410775E.crl (hash: 0Tu69RHUQgXkA/LLTO3/Uyyo6ZMmZAmKhbKDvCXGLWw=)
                          2: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: KqfiAsqedp1jTN5MJJRXQeZ9izmOQOboRC1ur5qsBHw=)
                          3: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: wpy96Czy5F/nzDP8R5DbJxynZ45/sg3wvq9eZTmuQ4k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl
                          rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 00:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ae:e4:64:e0:b3:bb:07:c2:16:b7:24:66:2b:23:77:72:15:2c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E
        Validity
            Not Before: Apr 16 15:55:42 2026 GMT
            Not After : Apr 20 00:03:42 2026 GMT
        Subject: CN=EF6D3FF329C26ACEA4D52CD5A28B82D9CBC12F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:ea:a2:21:5d:d1:b5:47:11:f4:17:00:9f:
                    34:49:3e:d7:55:6d:58:19:b3:74:ed:58:0f:f1:51:
                    e3:5c:cb:02:44:53:00:0b:b5:4f:51:63:eb:96:a1:
                    4c:a5:67:f6:6c:b0:9f:73:dd:1c:ec:a8:5c:93:ac:
                    d8:1e:28:c0:46:4d:c8:55:97:3f:05:5b:ec:7c:29:
                    98:8d:8d:8c:a1:61:d7:7f:9d:17:fa:19:e8:6d:f1:
                    58:c3:e9:32:1c:fa:ce:b9:37:de:aa:e5:0a:8e:5e:
                    59:e2:04:b8:ea:d4:00:65:67:46:49:a4:b5:a8:a0:
                    1a:97:92:84:42:e1:78:42:d4:f0:07:15:05:8e:e2:
                    83:aa:17:29:fa:eb:b0:28:c4:47:11:52:b5:ef:39:
                    a9:98:89:43:47:1f:97:03:16:cb:c3:1c:9d:c2:b7:
                    ad:73:75:00:02:8e:06:01:aa:e3:55:69:bd:54:00:
                    b9:d2:29:c1:5e:27:7a:1c:4b:46:e6:57:01:6c:bd:
                    53:b3:99:7d:0b:e2:c3:41:32:d0:0c:8d:71:5f:79:
                    19:a7:d1:35:84:2a:99:71:43:f8:75:16:d5:05:cf:
                    41:25:02:99:18:f4:e2:92:3a:b9:65:0d:d6:96:65:
                    34:86:b1:d0:33:7b:c7:21:72:6b:28:08:96:01:58:
                    95:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6D:3F:F3:29:C2:6A:CE:A4:D5:2C:D5:A2:8B:82:D9:CB:C1:2F:17
            X509v3 Authority Key Identifier:
                keyid:13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:47:3e:09:44:92:a1:ea:45:bf:af:68:55:38:72:8c:67:09:
         95:e1:79:b5:af:93:91:ea:b8:9d:88:46:f0:b8:b3:9e:1f:80:
         25:fc:78:ae:0e:9d:4c:27:b2:2f:c8:32:3e:03:a7:55:37:55:
         f7:89:78:f9:54:f6:b2:35:21:86:ea:c5:a2:d9:51:2b:8c:3e:
         20:78:12:84:e7:bb:f8:8b:00:3d:8b:40:a8:10:b8:20:dc:cb:
         67:ef:f4:2a:7a:26:c9:f0:e3:59:55:1d:b7:57:35:59:38:3b:
         9f:c0:e8:63:99:78:20:80:3b:01:9b:4a:5a:bb:1f:f7:40:c0:
         73:bc:ce:4d:2a:b8:41:29:96:e0:d9:8d:ae:1b:92:c9:a2:5e:
         45:31:b4:97:96:6e:2c:82:cb:3d:f4:aa:38:54:b1:c8:92:c4:
         d7:7a:25:19:fc:5d:77:ed:2f:78:eb:d1:d7:0d:10:5e:c3:91:
         25:28:e7:73:cc:b7:26:33:b9:16:c8:94:4a:61:65:94:f6:80:
         62:f6:7d:4e:af:61:c6:e7:4c:05:55:b1:19:bb:45:39:8f:5f:
         96:9f:9c:96:f5:3b:b2:0a:47:92:d3:9b:cb:2b:3d:6b:eb:7b:
         f1:fb:05:45:7c:84:59:af:4c:db:cc:30:6d:18:4a:3e:34:e5:
         77:8b:9d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:48:29 2026 by rpki-client