Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft
File:                     73238FE50473DF8F457921BE1B0C04764209BBF1.mft (raw, json)
Hash identifier:          8Ux5nBMZx2wK1cPbPz2FnP6FUdexC5+iWYtGi2Rji8c=
Subject key identifier:   3A:8E:C7:7E:43:19:48:6C:B1:FC:AB:C3:80:D4:50:51:87:C5:3D:7C
Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1
Certificate issuer:       /CN=73238FE50473DF8F457921BE1B0C04764209BBF1
Certificate serial:       14D06BBAC03A085B6404FFF0A63AC81F0262458E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft
Manifest number:          0107
Signing time:             Sun 01 Mar 2026 04:01:13 +0000
Manifest this update:     Sun 01 Mar 2026 03:56:13 +0000
Manifest next update:     Wed 04 Mar 2026 08:48:13 +0000
Files and hashes:         1: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 6ESo4EJBYW+TZiA7AQCDdrC7W+O2u7DLGxOGwrnalLc=)
                          2: 73238FE50473DF8F457921BE1B0C04764209BBF1.crl (hash: RT/TzNQaNtYDeXJxkVRusrWM1o88Lldghn8BTeI/xh4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl
                          rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 08:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d0:6b:ba:c0:3a:08:5b:64:04:ff:f0:a6:3a:c8:1f:02:62:45:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1
        Validity
            Not Before: Mar  1 03:56:13 2026 GMT
            Not After : Mar  4 08:48:13 2026 GMT
        Subject: CN=3A8EC77E4319486CB1FCABC380D4505187C53D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:93:5b:54:a4:c9:12:a8:b6:f1:6c:b6:bd:fd:
                    b5:cb:00:82:9b:21:d4:d6:92:be:14:3f:cb:67:d5:
                    ad:61:ed:68:72:b4:db:45:78:b4:8e:bc:35:1a:00:
                    ab:ae:81:26:a8:f1:18:af:c2:eb:54:23:d8:2a:e0:
                    a4:2b:a0:e0:c5:54:a2:49:4d:03:92:92:73:69:38:
                    7b:0e:3f:5d:12:ea:0b:32:c5:54:c0:a9:e8:84:85:
                    4f:8a:45:5b:1a:2c:e6:d7:bb:9e:d4:ea:a5:27:23:
                    57:26:27:81:e6:8c:fe:a3:3a:76:74:55:c5:df:37:
                    93:f0:d5:4f:a5:03:56:21:aa:0a:12:90:58:5d:0a:
                    8a:da:10:ee:6d:d2:ff:ec:28:b8:28:0c:ed:1f:51:
                    f6:e5:0d:ac:a2:04:41:91:ea:a7:66:31:83:68:44:
                    a4:c9:00:8b:01:ec:4e:7e:83:6f:ea:49:01:19:c9:
                    52:fe:fd:94:5b:3f:60:07:a0:bc:44:26:a8:2d:b6:
                    19:f8:56:25:a3:8e:fa:bd:39:31:e3:5d:da:99:f1:
                    7e:14:69:96:d2:55:17:bf:80:45:3d:3b:71:41:76:
                    42:0b:c3:3d:63:d9:0c:73:bd:87:9b:89:7c:65:70:
                    3f:c3:d7:31:81:99:75:8c:70:3e:7f:7d:8b:72:3b:
                    10:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8E:C7:7E:43:19:48:6C:B1:FC:AB:C3:80:D4:50:51:87:C5:3D:7C
            X509v3 Authority Key Identifier:
                keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ce:46:59:1c:f6:19:79:89:dd:27:4d:6c:fa:17:dc:27:e4:
         d8:08:9e:4f:ff:5b:10:20:05:4a:bc:d2:8e:4d:a3:6d:1e:ca:
         9b:4c:c2:3e:dd:5e:24:48:56:9e:67:f9:18:4b:22:ba:2e:8e:
         67:df:94:7e:56:0f:91:c2:61:a7:aa:41:9e:ff:65:f1:02:68:
         6b:eb:8a:28:0e:53:ed:02:04:00:18:43:a2:43:99:26:66:db:
         8a:82:40:aa:c0:6f:68:6c:e5:a2:c9:23:cb:97:fd:a3:8a:d4:
         61:d9:16:21:13:1b:ba:0c:ee:89:a4:72:55:56:35:af:37:5b:
         ae:b7:78:14:9d:04:db:d5:f8:c3:52:e7:d9:67:3e:29:34:55:
         18:3d:c8:c7:03:99:72:80:1c:21:22:29:66:8a:63:c9:0d:b2:
         5d:cb:0b:08:03:6a:87:ea:f8:c1:d6:88:1c:74:60:87:2e:c9:
         23:de:46:eb:45:3f:3b:1b:d0:b4:78:d8:74:ad:aa:8e:7a:8b:
         fe:42:03:41:f9:34:85:ea:d9:44:27:65:d5:f5:16:07:e7:8f:
         29:b2:51:d1:bb:3b:b1:c2:f7:5e:79:6f:8f:4b:58:33:ca:12:
         0c:61:1d:ba:a9:92:26:e0:93:16:18:0c:39:80:4c:3e:91:62:
         9a:31:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:09 2026 by rpki-client