Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft
File:                     5DFC46925E2D4B3FB044F284111222A8B4C78392.mft (raw, json)
Hash identifier:          D5rVf5bZEYvHYMP1VVCReydIcqEpdCsPEEm5fXzcZyc=
Subject key identifier:   5A:DC:EE:AC:02:B0:FA:39:54:E9:AA:F4:10:8E:F5:79:3A:DB:4F:4F
Authority key identifier: 5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92
Certificate issuer:       /CN=5DFC46925E2D4B3FB044F284111222A8B4C78392
Certificate serial:       50AB334BF3DEF0A646B21EA33E8EA05861F9AC97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft
Manifest number:          020E
Signing time:             Sat 18 Apr 2026 01:51:12 +0000
Manifest this update:     Sat 18 Apr 2026 01:46:12 +0000
Manifest next update:     Tue 21 Apr 2026 06:49:12 +0000
Files and hashes:         1: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: r4lFs0TNiF7PlJS0PWYOEttBGGT47VYExK2RXJ6gyEo=)
                          2: 5DFC46925E2D4B3FB044F284111222A8B4C78392.crl (hash: GxmxXJye6bfasDnPvzBoASNJwCo+grU549BHvz3WcYU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl
                          rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 06:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ab:33:4b:f3:de:f0:a6:46:b2:1e:a3:3e:8e:a0:58:61:f9:ac:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DFC46925E2D4B3FB044F284111222A8B4C78392
        Validity
            Not Before: Apr 18 01:46:12 2026 GMT
            Not After : Apr 21 06:49:12 2026 GMT
        Subject: CN=5ADCEEAC02B0FA3954E9AAF4108EF5793ADB4F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:b6:76:ea:95:52:94:bf:04:31:99:30:d8:
                    1b:c7:b0:71:e8:da:83:71:67:94:54:a7:d9:d6:37:
                    ce:93:28:74:8c:f1:3b:cf:c2:64:bd:48:98:6f:1f:
                    73:5f:68:08:20:a3:35:eb:71:46:25:a4:24:9b:79:
                    10:6b:cc:d2:53:63:aa:c9:ea:72:9a:b5:c6:1e:1e:
                    08:70:78:fe:66:3a:20:79:3d:1e:a9:10:c9:de:e2:
                    90:8d:ee:da:12:84:82:9a:f8:1f:3f:da:61:42:61:
                    f0:30:a0:1a:ca:d5:5b:b6:2b:d9:27:1a:3d:cc:d4:
                    fd:9c:c7:17:41:46:78:37:66:47:3c:fb:55:ed:2c:
                    6e:83:25:88:f1:dd:7f:f7:ec:4d:39:cc:87:77:94:
                    d6:75:a4:dd:ff:46:27:27:94:29:39:aa:8a:0e:78:
                    cb:66:24:36:34:aa:d4:4b:85:b1:53:a8:5e:10:94:
                    b1:85:19:ae:ae:b1:1b:ed:59:d4:2d:2e:a5:37:66:
                    77:a6:79:90:02:80:d8:df:c7:70:c2:9c:2d:ce:ef:
                    96:04:88:21:0d:1d:d5:33:9a:63:46:3c:84:d5:4a:
                    c1:80:a1:5a:eb:15:b1:b1:fa:8b:9e:2d:6f:18:63:
                    36:2f:56:7a:52:88:a1:07:2a:79:f5:90:3f:11:eb:
                    f1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DC:EE:AC:02:B0:FA:39:54:E9:AA:F4:10:8E:F5:79:3A:DB:4F:4F
            X509v3 Authority Key Identifier:
                keyid:5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:95:ca:95:df:08:9b:3b:f6:33:23:6a:f4:5d:46:53:54:12:
         ca:69:44:8d:2b:7c:e9:19:08:c1:29:30:92:1e:1d:89:3f:bd:
         11:9c:e2:18:55:5a:3d:fa:b0:c4:7e:24:01:03:41:03:11:08:
         36:e6:4e:39:28:38:96:0c:cf:4f:f8:93:2e:2a:5c:dc:60:e8:
         7a:92:c0:92:27:6d:6a:31:fa:7d:74:e1:0b:a0:5e:7c:6f:65:
         1f:67:c7:1a:8f:85:98:75:95:5f:ee:fe:0b:4c:9d:d4:1f:ac:
         ab:26:2e:64:84:c0:bf:01:69:da:8b:1c:bf:31:58:09:75:c6:
         73:00:85:f5:e5:c3:d4:ff:af:ac:0c:04:cc:5e:3b:ba:5c:47:
         a9:2f:ed:f0:36:6b:d5:fd:58:05:e0:a3:f7:6a:65:60:7d:57:
         be:76:b3:7c:c7:d3:ee:01:75:62:8c:3e:3d:61:cf:56:e7:f2:
         d4:07:01:3d:a7:13:7a:e5:cd:df:87:16:cd:73:3c:03:03:80:
         42:a0:e3:5d:a7:5b:62:ce:f4:9a:bc:d8:9c:eb:08:06:82:fd:
         fa:e1:6c:24:0f:70:c9:09:92:86:d9:6e:e4:e8:75:a4:e0:50:
         7f:14:77:35:ea:0d:db:bc:3a:69:b2:ec:e6:cc:6a:77:df:c1:
         eb:6b:c6:4f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUKszS/Pe8KZGsh6jPo6gWGH5rJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThC
NEM3ODM5MjAeFw0yNjA0MTgwMTQ2MTJaFw0yNjA0MjEwNjQ5MTJaMDMxMTAvBgNV
BAMTKDVBRENFRUFDMDJCMEZBMzk1NEU5QUFGNDEwOEVGNTc5M0FEQjRGNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QrZ26pVSlL8EMZkw2BvHsHHo
2oNxZ5RUp9nWN86TKHSM8TvPwmS9SJhvH3NfaAggozXrcUYlpCSbeRBrzNJTY6rJ
6nKatcYeHghweP5mOiB5PR6pEMne4pCN7toShIKa+B8/2mFCYfAwoBrK1Vu2K9kn
Gj3M1P2cxxdBRng3Zkc8+1XtLG6DJYjx3X/37E05zId3lNZ1pN3/RicnlCk5qooO
eMtmJDY0qtRLhbFTqF4QlLGFGa6usRvtWdQtLqU3ZnemeZACgNjfx3DCnC3O75YE
iCENHdUzmmNGPITVSsGAoVrrFbGx+oueLW8YYzYvVnpSiKEHKnn1kD8R6/EhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWtzurAKw+jlU6ar0EI71eTrbT08wHwYDVR0j
BBgwFoAUXfxGkl4tSz+wRPKEERIiqLTHg5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NzAxYjI3Ny1jODBjLTQ1ZDUtODA4OS1hOWVmYTM0MDU0MmEvMC81REZDNDY5MjVF
MkQ0QjNGQjA0NEYyODQxMTEyMjJBOEI0Qzc4MzkyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThCNEM3
ODM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw
ODktYTllZmEzNDA1NDJhLzAvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIy
QThCNEM3ODM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFyVypXfCJs79jMjavRdRlNUEsppRI0rfOkZ
CMEpMJIeHYk/vRGc4hhVWj36sMR+JAEDQQMRCDbmTjkoOJYMz0/4ky4qXNxg6HqS
wJInbWox+n104QugXnxvZR9nxxqPhZh1lV/u/gtMndQfrKsmLmSEwL8BadqLHL8x
WAl1xnMAhfXlw9T/r6wMBMxeO7pcR6kv7fA2a9X9WAXgo/dqZWB9V752s3zH0+4B
dWKMPj1hz1bn8tQHAT2nE3rlzd+HFs1zPAMDgEKg412nW2LO9Jq82JzrCAaC/frh
bCQPcMkJkobZbuTodaTgUH8UdzXqDdu8Ommy7ObManffwetrxk8=
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:44 2026 by rpki-client