Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
File:                     3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft (raw, json)
Hash identifier:          5IApvEfSUBbwVfRJgM297M2s1OTHFE00PTpv6gCd8/8=
Subject key identifier:   77:3A:BC:16:CD:64:C7:0F:1D:BA:3C:77:92:45:73:4C:08:42:D7:1F
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Certificate issuer:       /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial:       02BBD987B94D6F5326657FF2030A429386876FF3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
Manifest number:          027D
Signing time:             Sun 01 Mar 2026 12:22:36 +0000
Manifest this update:     Sun 01 Mar 2026 12:17:36 +0000
Manifest next update:     Wed 04 Mar 2026 21:17:36 +0000
Files and hashes:         1: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: kpYH6pkPfG3ly0aK9MFNOJx2Os8AcuGthnzkfl0MEeU=)
                          2: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: TwtuOdFbOmuGSiYWtbwZ1uQh0l9S7wmozR9F9oj2vO4=)
                          3: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: YLdmpoGwseRdvkERTvIA0a5PWJe/uQGzq/1tFv4WuUc=)
                          4: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: CxJ4hxnplLzbB6pwhFxT3HS+r/REisJiHUMYV4z0aDo=)
                          5: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: P3vCG1eFCyYSS9LnEKWdiNtZlxHi5gwLg+zU1gklVa8=)
                          6: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: MfIpRbDFsLXG7r+gaPn+k51+pDkVoYxO4kfKQbaBZic=)
                          7: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: UZSj1gbIEphe1mWnvI396dxPxD/E5WStBcGb1wpBcZo=)
                          8: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: MzI0JKvb+gG5ZW7LD7zcT6Ff/HYQKP31Hdz7lrIhDQk=)
                          9: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: ftR/aIoDxynVS6qBsO4B8Q2lDsNYJt3pQB7ABoEc86s=)
                          10: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl (hash: PeMdNZiT4rhmHqXsFKk9XhYPbCtXXlRouxK5SRmb51Q=)
                          11: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: YGy0DWIan0m6cHj+i356tb49y0BOxHi+yJ0Q2w1l+a8=)
                          12: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: WokSKV1NyKPp5JmVhTT7RX9X4V0DteRntg1alBFixWo=)
                          13: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: nmYMdBmJi2dLE67aggA0wkg2W+WeeYl9g1CRUjC4EIE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
                          rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 21:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bb:d9:87:b9:4d:6f:53:26:65:7f:f2:03:0a:42:93:86:87:6f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
        Validity
            Not Before: Mar  1 12:17:36 2026 GMT
            Not After : Mar  4 21:17:36 2026 GMT
        Subject: CN=773ABC16CD64C70F1DBA3C779245734C0842D71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:ac:1f:e1:ba:46:0c:86:d5:5d:73:63:67:
                    e3:2a:b3:ee:ba:74:e7:c5:88:ad:2b:8b:50:71:d1:
                    71:8d:02:d8:12:f2:6e:28:6f:11:55:ce:52:8f:98:
                    1d:c1:8a:b3:6e:ac:81:7c:b1:b8:3c:c0:c5:ec:17:
                    4c:57:5e:f6:35:20:e9:47:ba:c6:ae:23:ff:1a:24:
                    4a:45:d2:70:ba:cc:eb:1d:9e:0e:4a:a0:a3:d3:98:
                    f3:b3:ca:5b:19:a4:12:1e:ab:5a:bb:dc:7c:d3:20:
                    3d:ae:c9:c5:1c:03:9e:b5:3c:1f:b7:bc:1b:3b:13:
                    31:81:19:f2:d4:e1:ab:c1:23:0a:47:30:d4:00:54:
                    94:4e:9b:e9:d3:21:a8:af:5b:1a:e2:62:67:60:71:
                    a3:2c:cf:c3:fb:c7:b6:a3:64:22:3c:dd:03:19:43:
                    62:ce:d8:ab:85:1d:33:d4:ba:67:d5:d0:3f:56:68:
                    29:9f:83:af:a2:bb:42:dd:f5:c2:84:e7:10:26:cc:
                    5a:d9:df:0b:c9:4d:89:49:7b:05:3a:03:08:c7:4f:
                    aa:f1:75:e3:03:9a:01:60:4c:19:e1:38:40:23:12:
                    bf:0b:d0:b9:e4:a9:dd:cd:32:83:92:d7:3a:65:11:
                    a1:bf:5a:2e:cf:2c:9d:50:c7:3d:aa:4b:d8:d7:0b:
                    63:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3A:BC:16:CD:64:C7:0F:1D:BA:3C:77:92:45:73:4C:08:42:D7:1F
            X509v3 Authority Key Identifier:
                keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6e:58:34:73:92:d7:0f:59:bb:63:dc:d7:21:81:3e:46:17:
         b9:ac:7f:f9:b7:a9:79:b2:40:d0:9d:92:0e:42:56:72:5c:cc:
         45:8e:2d:11:b1:ea:72:d1:ac:fb:13:9d:a5:99:0a:de:74:30:
         bc:2b:0b:94:5b:a4:03:d9:b2:33:65:3b:84:c5:fe:5d:35:cb:
         3b:ee:39:46:00:8c:d8:59:4c:c4:98:4a:16:eb:08:68:a5:ab:
         e2:bd:7d:ab:fe:2f:3b:ee:3c:79:da:7a:ba:b5:13:f4:68:b1:
         2e:24:b7:c4:d5:aa:fa:e3:62:9d:61:e0:3c:03:91:7a:4e:1e:
         42:9a:5e:4a:60:19:5a:51:fe:e9:31:49:49:4e:12:03:0a:8b:
         d5:78:80:5f:df:94:b2:a7:56:f2:5d:52:b3:f4:27:d2:29:0c:
         70:4a:71:83:c7:3e:37:83:51:16:f2:33:a4:cd:40:e9:5c:da:
         3e:a6:35:04:01:25:d3:ea:02:38:92:c4:e5:e8:84:85:12:62:
         0f:c5:c9:35:0d:98:41:f7:9b:c7:03:64:5c:2e:35:b6:aa:2a:
         d4:bf:2e:a8:95:ec:dd:e1:5b:5e:4b:80:7a:14:fa:bb:40:03:
         1d:d9:69:e5:c3:1d:17:ca:de:b3:3f:65:f1:0c:b4:3b:25:ae:
         7a:7d:04:b3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUArvZh7lNb1MmZX/yAwpCk4aHb/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3
QUM2NkE4QzAeFw0yNjAzMDExMjE3MzZaFw0yNjAzMDQyMTE3MzZaMDMxMTAvBgNV
BAMTKDc3M0FCQzE2Q0Q2NEM3MEYxREJBM0M3NzkyNDU3MzRDMDg0MkQ3MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDrqwf4bpGDIbVXXNjZ+Mqs+66
dOfFiK0ri1Bx0XGNAtgS8m4obxFVzlKPmB3BirNurIF8sbg8wMXsF0xXXvY1IOlH
usauI/8aJEpF0nC6zOsdng5KoKPTmPOzylsZpBIeq1q73HzTID2uycUcA561PB+3
vBs7EzGBGfLU4avBIwpHMNQAVJROm+nTIaivWxriYmdgcaMsz8P7x7ajZCI83QMZ
Q2LO2KuFHTPUumfV0D9WaCmfg6+iu0Ld9cKE5xAmzFrZ3wvJTYlJewU6AwjHT6rx
deMDmgFgTBnhOEAjEr8L0Lnkqd3NMoOS1zplEaG/Wi7PLJ1Qxz2qS9jXC2NNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdzq8Fs1kxw8dujx3kkVzTAhC1x8wHwYDVR0j
BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx
RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2
NkE4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU1NDAxNjQtM2Q0Ni00Nzk0LWJm
NTUtYjZiMTM0ZDlhYjEzLzAvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTRE
MzU3QUM2NkE4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACNuWDRzktcPWbtj3NchgT5GF7msf/m3qXmy
QNCdkg5CVnJczEWOLRGx6nLRrPsTnaWZCt50MLwrC5RbpAPZsjNlO4TF/l01yzvu
OUYAjNhZTMSYShbrCGilq+K9fav+LzvuPHnaerq1E/RosS4kt8TVqvrjYp1h4DwD
kXpOHkKaXkpgGVpR/ukxSUlOEgMKi9V4gF/flLKnVvJdUrP0J9IpDHBKcYPHPjeD
URbyM6TNQOlc2j6mNQQBJdPqAjiSxOXohIUSYg/FyTUNmEH3m8cDZFwuNbaqKtS/
LqiV7N3hW15LgHoU+rtAAx3ZaeXDHRfK3rM/ZfEMtDslrnp9BLM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:30 2026 by rpki-client