Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft
File:                     408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft (raw, json)
Hash identifier:          Jl811Mj9wb0DbFHNoxWArRRqLPOe2g7WQo7WFZ+Apq8=
Subject key identifier:   83:55:38:07:19:17:D6:8A:74:C0:7E:4D:E8:ED:CA:76:FD:DD:77:33
Authority key identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2
Certificate issuer:       /CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2
Certificate serial:       778EFC0AA1D801D6AF8CE135FEFCED42593AD144
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft
Manifest number:          04F4
Signing time:             Wed 15 Apr 2026 11:21:12 +0000
Manifest this update:     Wed 15 Apr 2026 11:16:12 +0000
Manifest next update:     Sat 18 Apr 2026 22:02:12 +0000
Files and hashes:         1: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: KCTbEne5sAEJgzltW4gEKsISpQ0m8wEifogPI/+bnQs=)
                          2: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl (hash: W+niKAHm7J7PSI7/TdDnvjRYtqAyIXw6sW0AqtQcH3g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl
                          rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 22:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8e:fc:0a:a1:d8:01:d6:af:8c:e1:35:fe:fc:ed:42:59:3a:d1:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2
        Validity
            Not Before: Apr 15 11:16:12 2026 GMT
            Not After : Apr 18 22:02:12 2026 GMT
        Subject: CN=835538071917D68A74C07E4DE8EDCA76FDDD7733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:52:e8:c7:db:6f:3d:7c:6e:04:bd:5b:a3:d6:
                    16:a3:99:6a:9d:f0:60:38:15:1d:c0:8c:b5:52:29:
                    e3:28:a5:ba:0c:d7:c2:20:d3:0c:ad:2d:0c:6d:82:
                    29:db:0c:b7:17:0a:8b:6c:f1:dd:7d:a7:77:53:07:
                    41:03:3f:a0:40:03:81:71:39:12:81:6a:d1:6b:5c:
                    b6:69:e5:52:16:1e:ff:dd:d5:dc:28:ba:56:48:47:
                    01:f1:90:57:1b:9b:af:da:a2:ba:4e:c2:d5:ad:be:
                    48:3b:f7:50:b0:19:01:1e:2a:91:de:72:60:de:cf:
                    c2:ff:d0:67:24:0c:8f:27:ab:b9:3d:cd:16:fc:4c:
                    5e:22:22:20:77:10:5f:14:20:e4:13:7a:c6:dd:e9:
                    b5:a9:d5:c7:92:9a:90:48:30:bc:7a:69:cd:d4:24:
                    a0:f9:49:cf:5d:8a:d7:5b:c3:27:7a:bb:93:2c:23:
                    3f:92:d7:7d:df:3e:eb:84:6b:75:37:dc:cb:8f:20:
                    ad:8c:1e:57:99:d1:62:0a:91:22:99:46:71:2d:0a:
                    4f:23:ab:c8:83:b7:4a:4c:be:8d:a7:9a:ec:41:08:
                    22:fc:a3:66:fc:df:3d:17:ac:50:3b:22:7b:35:ce:
                    8b:04:4d:2b:2f:09:01:87:ae:a8:62:4c:8e:d1:a7:
                    38:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:55:38:07:19:17:D6:8A:74:C0:7E:4D:E8:ED:CA:76:FD:DD:77:33
            X509v3 Authority Key Identifier:
                keyid:40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:81:5d:0e:72:80:9c:1b:55:a7:35:da:cb:5d:73:c2:11:1b:
         fe:1f:da:f3:43:76:52:4e:25:b2:db:50:79:8e:9a:bc:20:50:
         33:f4:ad:22:69:bf:bb:20:a9:92:e1:fb:8d:c4:c1:33:89:83:
         99:05:bd:ff:11:97:f3:68:c5:5e:f4:68:ae:92:28:32:ca:ca:
         aa:4f:25:be:0e:5d:88:e1:a6:57:6a:c0:ad:25:b5:2a:ad:46:
         4a:5a:46:91:d1:eb:37:88:96:40:11:12:6a:99:a6:5e:25:c2:
         4a:22:70:04:18:6a:9c:5f:36:e3:fb:f0:41:76:7a:4f:e3:30:
         cd:b5:11:57:c0:3b:0b:09:84:c1:b7:9f:b8:ab:75:08:45:5a:
         89:cf:80:f3:ee:c1:24:88:01:38:27:06:eb:cd:f7:64:bf:c1:
         65:86:2d:52:a2:bc:14:11:a7:b8:0e:42:aa:00:bd:07:a4:01:
         1b:a4:0b:a0:1b:82:84:20:ca:50:67:69:52:ee:a7:be:8a:01:
         db:e5:e2:54:9c:a4:67:90:6b:46:7d:a7:fa:8f:0a:b5:c1:09:
         c6:9e:ae:28:70:3f:41:13:35:78:55:aa:f6:7e:ca:ca:13:d8:
         98:f6:6e:94:6e:b3:66:5b:4b:31:e6:54:3c:fd:39:5c:d4:ae:
         b8:36:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:35:37 2026 by rpki-client