Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
File:                     1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft (raw, json)
Hash identifier:          VrENS+jiszwaO/fh/XtgLasr8R98TrfCPPJV97BoV4Q=
Subject key identifier:   B9:B7:94:68:B2:44:0F:E6:8C:0F:F3:49:57:89:B0:FF:1C:40:90:8A
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Certificate issuer:       /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial:       30B5F99ABB72D39E35EC709593F84C1A214DA0B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
Manifest number:          020E
Signing time:             Wed 15 Apr 2026 22:10:05 +0000
Manifest this update:     Wed 15 Apr 2026 22:05:05 +0000
Manifest next update:     Sun 19 Apr 2026 02:32:05 +0000
Files and hashes:         1: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: rfAEDfb98EmJrbbYSOsJh0R3GKeVtrdV920jQ6JYXXk=)
                          2: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: vo3txQHD1GP/JznijvlkQTtQaeBbi729kAiguRxIkyE=)
                          3: 3131342e3134312e39352e302f32342d3234203d3e20313338383138.roa (hash: qVIOTxzkHoMtUEEPyvvgBkFKT9oB5BtmkPkZiQLq0ng=)
                          4: 3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa (hash: p/6KK4JMbgCv5VkdanC2JpAp7VpmlbyPcWCjqL4KniM=)
                          5: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 31rqAW06+FuDJELvsb/0uxq0ocORo684ERfMQVWzj54=)
                          6: 3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa (hash: YqkCvMl0PPv/SjM86CmSE7YV2BzpnMMQxQbEuJOY7ws=)
                          7: 3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (hash: 8bb25AjKY+CfhaHD2T35vRoSHcpGFrksD2snYFX7/PA=)
                          8: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl (hash: s6yO27ptOjxG7UHuQytMeFKwRaEYaO41JEiqenbf+pE=)
                          9: 3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (hash: FBwLiD7U4sCYynBhJGjAu+VAe5YUj9+FUjVO+L+zaEo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
                          rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 02:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b5:f9:9a:bb:72:d3:9e:35:ec:70:95:93:f8:4c:1a:21:4d:a0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
        Validity
            Not Before: Apr 15 22:05:05 2026 GMT
            Not After : Apr 19 02:32:05 2026 GMT
        Subject: CN=B9B79468B2440FE68C0FF3495789B0FF1C40908A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:96:a4:e3:d4:12:a8:af:ad:16:aa:80:c7:6e:
                    61:cf:14:de:32:13:ed:09:dd:47:76:da:3a:31:f9:
                    c8:cc:c2:76:76:2f:f6:09:8f:7e:fc:2a:5e:8e:29:
                    c8:b6:8a:50:71:bd:0a:83:75:a3:d0:cf:52:77:d4:
                    a8:5e:a7:c4:e4:0b:41:af:fd:83:ec:25:3a:c2:da:
                    fa:8f:e4:7d:6d:d7:2d:3f:82:aa:17:a6:5b:c6:36:
                    c7:83:a7:12:20:83:a8:5d:83:17:59:c1:a2:44:5b:
                    1a:cc:b8:18:76:02:36:ef:e2:e1:50:66:16:6b:04:
                    4c:4d:d7:9f:49:50:02:20:4d:dd:c4:88:06:31:01:
                    3a:dd:ca:4f:be:0a:81:6b:ec:96:1c:13:5b:8e:2f:
                    b3:ab:48:d4:17:7e:da:f7:45:c3:7b:20:82:d1:01:
                    bd:86:a8:b6:2c:36:97:3f:cd:60:6b:2c:5e:8b:ee:
                    11:de:e8:7d:36:d6:fd:7a:52:0d:85:67:5f:95:a1:
                    7f:9d:ac:57:c3:48:79:40:a5:90:3e:a5:63:bb:3c:
                    67:7f:26:71:f8:2a:62:5a:c1:94:0c:49:7d:74:6d:
                    71:e4:5e:06:0b:a7:6f:fd:8e:5e:97:72:dc:08:c5:
                    ec:70:95:ad:88:ab:eb:75:f0:ed:40:cf:f2:b1:46:
                    c3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B7:94:68:B2:44:0F:E6:8C:0F:F3:49:57:89:B0:FF:1C:40:90:8A
            X509v3 Authority Key Identifier:
                keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:df:86:96:01:d1:c6:9f:7d:14:4b:83:b2:6e:8e:09:3a:f3:
         9a:ab:9c:42:52:1f:60:e1:f7:f0:87:5f:b2:91:93:98:11:63:
         bc:59:ba:33:27:30:07:50:b9:0d:15:b4:7d:96:21:4a:ad:7b:
         83:0d:a3:1d:6a:50:54:9d:b9:c0:72:3c:5d:4b:9b:16:6a:2f:
         54:c4:dd:38:5a:58:e1:c9:fd:b9:06:a7:e9:da:38:72:0d:99:
         ce:a1:84:bf:17:9e:cc:28:8f:6d:b3:e0:84:59:91:f6:fb:46:
         27:ab:96:6e:7b:09:41:b2:46:cf:2a:e2:1a:03:b5:8b:d9:69:
         f9:93:8f:30:bd:84:c9:e5:0c:70:ad:e5:bf:a6:59:ab:f9:1f:
         14:c5:57:db:54:54:3a:36:f4:e2:55:dd:9a:e8:8b:0c:97:b5:
         83:c3:6b:13:e5:18:c9:21:6f:53:14:59:4a:52:dc:77:96:cc:
         39:5a:30:53:50:8f:44:62:d6:43:fc:67:03:db:c0:5b:3d:6a:
         77:c4:2f:df:93:4a:10:d1:3e:75:9b:ed:c3:1f:a7:f3:23:4c:
         c2:8e:41:6f:2a:da:8d:14:51:a1:0a:c0:02:49:54:e6:46:e4:
         b4:4b:45:f7:ec:63:19:13:e8:c0:cc:98:73:7f:86:bd:a9:04:
         b1:62:4d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:34:46 2026 by rpki-client