Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft
File:                     69FEA3D523BC4635AE385A6D91412834159FF34B.mft (raw, json)
Hash identifier:          yni2RUjGm6UZQzB/gp6z7hcBGpysKblA2rpOngFDo7E=
Subject key identifier:   FB:A4:08:3C:6E:F4:59:0A:25:E9:A7:33:15:14:27:20:B6:E1:95:23
Authority key identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B
Certificate issuer:       /CN=69FEA3D523BC4635AE385A6D91412834159FF34B
Certificate serial:       1052F57BEC654EF4399C5603DE7903742F4D4A28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft
Manifest number:          0117
Signing time:             Wed 15 Apr 2026 12:12:17 +0000
Manifest this update:     Wed 15 Apr 2026 12:07:17 +0000
Manifest next update:     Sat 18 Apr 2026 19:19:17 +0000
Files and hashes:         1: 69FEA3D523BC4635AE385A6D91412834159FF34B.crl (hash: Fw7WYszLO+joj60wkS0np5GvORSXtiIOHeFd1bKON/Y=)
                          2: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: 2H9ugvO1mqNF5HVzGPvvJyo9xLTxDYsuZlPEZxpIFQg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl
                          rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 19:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:52:f5:7b:ec:65:4e:f4:39:9c:56:03:de:79:03:74:2f:4d:4a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA3D523BC4635AE385A6D91412834159FF34B
        Validity
            Not Before: Apr 15 12:07:17 2026 GMT
            Not After : Apr 18 19:19:17 2026 GMT
        Subject: CN=FBA4083C6EF4590A25E9A73315142720B6E19523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:5d:de:e4:0e:f3:61:81:b9:d3:4c:51:32:
                    14:20:42:a5:09:a2:e2:5a:16:db:0b:b4:a5:f8:48:
                    68:54:12:50:38:d8:10:fb:ab:e7:ad:42:b7:38:68:
                    5e:1e:35:ce:9a:12:6e:c2:49:17:fa:39:b6:de:82:
                    41:d6:6f:66:05:21:e8:0b:6d:4f:b4:a2:6c:d4:46:
                    ac:00:d3:0c:ff:0e:6e:11:84:3c:1e:25:f7:e4:50:
                    a9:25:08:03:8e:88:5d:e0:7f:79:43:2b:c9:a5:fc:
                    0c:82:ae:0c:19:ad:d0:a9:05:ca:01:23:66:65:61:
                    cd:ec:cc:f1:af:ac:d0:f7:a6:6b:52:b9:33:08:d1:
                    a2:e3:bb:3e:f8:36:0d:e3:54:d3:d1:54:5b:a4:91:
                    5a:a9:94:6b:0f:d1:82:45:1c:1a:5a:d2:6f:1d:dd:
                    8c:fd:45:ed:b2:c4:68:61:b0:be:dc:3d:a2:e2:5e:
                    e0:fe:ca:d2:66:fd:23:da:53:b2:4c:67:75:4f:c7:
                    21:2d:59:a8:58:dd:7e:d5:fc:7e:ae:b6:c5:e5:dd:
                    b1:86:6a:b7:ab:3b:24:19:a5:71:8f:5b:e0:7e:d3:
                    ac:87:86:1f:3c:bb:8e:79:29:9a:0c:64:7b:f5:13:
                    01:c8:0e:a4:10:dd:3f:7f:68:15:17:c8:be:58:c3:
                    66:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A4:08:3C:6E:F4:59:0A:25:E9:A7:33:15:14:27:20:B6:E1:95:23
            X509v3 Authority Key Identifier:
                keyid:69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:47:8f:61:6c:4c:3e:9d:77:16:0a:00:e0:e3:ca:d3:2b:3d:
         a9:7c:87:7b:30:9a:b5:79:b4:90:90:9b:d0:84:4c:1a:34:ac:
         ab:e6:0d:1a:05:3e:fd:09:f8:10:12:ad:84:ed:31:45:28:f7:
         0c:94:45:8d:f8:79:d4:de:dc:84:c4:07:2c:55:07:97:9a:f0:
         eb:dd:dc:d3:a2:42:00:8a:83:60:92:d5:79:64:eb:e8:ef:70:
         3a:bd:e3:1a:b8:c0:47:fb:60:f1:10:1d:12:24:77:4e:fa:9e:
         6f:9c:8e:34:0e:2b:69:21:21:82:b6:8c:fb:48:3e:24:92:09:
         33:0f:89:3a:33:8d:de:d6:c1:a3:98:f1:99:da:d6:af:8a:83:
         2a:1b:73:51:b6:3d:2f:c5:ba:36:f3:d3:32:83:8b:f9:08:25:
         cb:4c:43:c9:26:d7:a1:4a:81:b6:65:2c:60:ad:c3:e2:e4:7c:
         92:9e:67:29:21:fa:b7:d5:30:f7:60:49:97:05:94:bb:40:b2:
         3c:3b:e6:92:bc:58:26:8f:46:25:3b:a7:57:a0:6f:b1:f4:3d:
         27:69:46:df:76:5d:37:89:d8:20:07:04:c9:03:86:37:a9:47:
         b1:3c:e7:9a:a6:a5:8e:9e:09:70:c8:49:4a:23:09:b0:25:dd:
         dc:80:8e:22
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEFL1e+xlTvQ5nFYD3nkDdC9NSigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQx
NTlGRjM0QjAeFw0yNjA0MTUxMjA3MTdaFw0yNjA0MTgxOTE5MTdaMDMxMTAvBgNV
BAMTKEZCQTQwODNDNkVGNDU5MEEyNUU5QTczMzE1MTQyNzIwQjZFMTk1MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKml3e5A7zYYG500xRMhQgQqUJ
ouJaFtsLtKX4SGhUElA42BD7q+etQrc4aF4eNc6aEm7CSRf6ObbegkHWb2YFIegL
bU+0omzURqwA0wz/Dm4RhDweJffkUKklCAOOiF3gf3lDK8ml/AyCrgwZrdCpBcoB
I2ZlYc3szPGvrND3pmtSuTMI0aLjuz74Ng3jVNPRVFukkVqplGsP0YJFHBpa0m8d
3Yz9Re2yxGhhsL7cPaLiXuD+ytJm/SPaU7JMZ3VPxyEtWahY3X7V/H6utsXl3bGG
arerOyQZpXGPW+B+06yHhh88u455KZoMZHv1EwHIDqQQ3T9/aBUXyL5Yw2YRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+6QIPG70WQol6aczFRQnILbhlSMwHwYDVR0j
BBgwFoAUaf6j1SO8RjWuOFptkUEoNBWf80swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMC82OUZFQTNENTIz
QkM0NjM1QUUzODVBNkQ5MTQxMjgzNDE1OUZGMzRCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQxNTlG
RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi
MjgtOTE0MmUxYmFhMGJhLzAvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4
MzQxNTlGRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD5Hj2FsTD6ddxYKAODjytMrPal8h3swmrV5
tJCQm9CETBo0rKvmDRoFPv0J+BASrYTtMUUo9wyURY34edTe3ITEByxVB5ea8Ovd
3NOiQgCKg2CS1Xlk6+jvcDq94xq4wEf7YPEQHRIkd076nm+cjjQOK2khIYK2jPtI
PiSSCTMPiTozjd7WwaOY8Zna1q+Kgyobc1G2PS/Fujbz0zKDi/kIJctMQ8km16FK
gbZlLGCtw+LkfJKeZykh+rfVMPdgSZcFlLtAsjw75pK8WCaPRiU7p1egb7H0PSdp
Rt92XTeJ2CAHBMkDhjepR7E855qmpY6eCXDISUojCbAl3dyAjiI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:37 2026 by rpki-client