Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft
File:                     FFD09495181408CBE83FD333EACEF29FBCDAD633.mft (raw, json)
Hash identifier:          YZUY7w8EmuuQ9zKuWQY1Q17XLXwWGVJeQg32BWz6y4M=
Subject key identifier:   87:ED:46:10:00:76:D8:93:30:F8:7E:DF:6F:F4:68:B9:CF:92:F5:D3
Authority key identifier: FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33
Certificate issuer:       /CN=FFD09495181408CBE83FD333EACEF29FBCDAD633
Certificate serial:       34C68EFAE184890918572F70845FD9A40DD0109A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft
Manifest number:          49
Signing time:             Sat 18 Apr 2026 21:41:56 +0000
Manifest this update:     Sat 18 Apr 2026 21:36:56 +0000
Manifest next update:     Wed 22 Apr 2026 09:03:56 +0000
Files and hashes:         1: 3131362e3230342e3235302e302f32332d3233203d3e20313332363434.roa (hash: EFxWA7vxSgHBwram8ylJUW5n68a3XpYhbkZqHyGTFPU=)
                          2: 3131362e3230342e3234382e302f32332d3233203d3e20313332363434.roa (hash: 2dbUHoYqjRohW3IHxlUvKZf6dq91UB5nDLAXnYGv67o=)
                          3: 3130332e32342e31322e302f32332d3233203d3e20313332363434.roa (hash: /NCGV+SwtDLnV3TMTVLORuZVELyx2f18pHCo9yoVgIU=)
                          4: 3131362e3230342e3133302e302f32342d3234203d3e20313332363434.roa (hash: xioTUNg3YtC13S6Cj3SPOGks7jmJZPc/QomqvXyPDT0=)
                          5: FFD09495181408CBE83FD333EACEF29FBCDAD633.crl (hash: cqeCcoim65DxxWSJVb/ThhqQni7/sv48glCHT3mpx2g=)
                          6: 34352e3132362e3133322e302f32322d3232203d3e20313332363434.roa (hash: nEvjJAuLU5NVHyPCkT4t36RWeV+PULX/Gg0P3xFzBdA=)
                          7: 3131362e3230342e3133312e302f32342d3234203d3e20313332363434.roa (hash: bD3z2MHh1z8AA6G7X+ZWEL+ijpSpYsmo1zxz1oUdyZ4=)
                          8: 3130332e3235332e36382e302f32332d3233203d3e20313332363434.roa (hash: 5LnPe1qqPi1/xX5VnvEUwwekWCcAbF1I2gMcXgA6ERo=)
                          9: 3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa (hash: P1YBvGHSMw2KSmorZM6GVpNPSOsIMTGTDkbnAUEcz4U=)
                          10: 3131362e3230342e3132392e302f32342d3234203d3e20313332363434.roa (hash: 9dGh3Dmwfr7Qg1VTty4nQgm98lmd64c7x7uG+kRxXvs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl
                          rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 09:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c6:8e:fa:e1:84:89:09:18:57:2f:70:84:5f:d9:a4:0d:d0:10:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD09495181408CBE83FD333EACEF29FBCDAD633
        Validity
            Not Before: Apr 18 21:36:56 2026 GMT
            Not After : Apr 22 09:03:56 2026 GMT
        Subject: CN=87ED46100076D89330F87EDF6FF468B9CF92F5D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:80:33:c6:67:04:2c:9e:81:7e:02:69:ea:ef:
                    0b:87:0b:41:58:ac:4f:32:20:8c:2f:ba:fe:46:9e:
                    f5:b1:3e:e6:23:91:d9:5d:3c:a8:d5:9a:fb:b6:37:
                    46:23:b6:20:d9:9b:07:42:fe:50:b1:d9:0b:05:87:
                    f8:cf:9f:44:bf:a2:0d:dc:a9:36:63:9e:35:eb:82:
                    70:c6:f6:4e:6f:94:60:bb:83:4f:c9:7b:45:8f:d0:
                    15:34:73:12:4a:e7:32:db:65:c3:8f:3d:2f:9d:e2:
                    2d:e3:bc:91:73:e9:65:b7:cd:2a:f3:91:d2:ee:67:
                    7a:5a:d4:cd:0c:bf:f4:ac:5b:b2:9e:c8:e7:a7:3a:
                    4f:34:76:49:c3:13:6c:f5:83:56:e7:db:1c:aa:e3:
                    86:1a:ee:b7:aa:3a:a6:b1:3b:ea:d4:3a:59:75:c6:
                    48:15:fe:dc:f7:09:bb:3d:cd:63:9e:7c:4d:61:63:
                    46:9c:33:31:31:dc:31:4e:b9:34:6f:c3:cb:a6:94:
                    98:b8:f8:67:28:d8:53:77:5f:7c:98:e9:eb:7a:78:
                    52:97:c5:84:9b:a3:39:d3:71:59:eb:ed:1c:3f:b9:
                    c6:c6:75:22:db:bc:b0:4c:3e:d4:77:b3:af:71:c4:
                    58:c1:0a:a3:a2:60:5b:a8:ae:a8:26:bf:a2:7e:c8:
                    ce:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:ED:46:10:00:76:D8:93:30:F8:7E:DF:6F:F4:68:B9:CF:92:F5:D3
            X509v3 Authority Key Identifier:
                keyid:FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:bc:fb:3c:44:0f:25:a5:0e:1e:d1:9b:39:fc:4d:b2:81:80:
         2d:b4:9d:ea:65:5f:86:20:02:60:5e:91:2d:1e:80:7e:88:e4:
         1b:83:a6:8b:3d:d3:46:e2:bd:0b:e1:da:34:c4:9c:d6:ea:af:
         f9:9c:ff:89:44:9f:9e:b5:ba:34:35:30:75:38:4b:b4:6e:8e:
         58:f5:f1:90:aa:a9:25:99:ee:09:90:de:f7:da:c4:5b:a7:c2:
         31:d6:fb:a0:d8:de:09:9a:a4:94:e7:bb:40:33:09:51:02:74:
         3e:f8:ea:38:c3:3a:87:da:21:1a:a0:f2:09:c9:fb:27:06:3e:
         68:5a:18:7b:27:23:51:b8:da:02:24:c8:5c:12:ba:1e:6f:7f:
         3b:3b:eb:3d:23:a4:4f:ec:2f:90:c1:02:84:df:e0:5e:e2:03:
         cd:4e:b7:8b:65:04:17:ab:ae:d7:be:76:77:9f:d1:bc:b6:8d:
         a0:b8:7f:30:72:b4:16:c2:e9:ea:27:26:ce:4c:af:78:d4:2a:
         80:a6:aa:2a:79:9c:7b:69:f4:f3:e8:83:46:6a:18:99:88:7d:
         47:82:20:10:85:83:08:6b:3c:e8:3d:28:ae:cd:66:97:c2:b8:
         6d:e8:94:aa:e5:73:58:2f:82:34:1f:c7:c8:30:21:30:73:c5:
         c2:27:ca:28
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNMaO+uGEiQkYVy9whF/ZpA3QEJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZEMDk0OTUxODE0MDhDQkU4M0ZEMzMzRUFDRUYyOUZC
Q0RBRDYzMzAeFw0yNjA0MTgyMTM2NTZaFw0yNjA0MjIwOTAzNTZaMDMxMTAvBgNV
BAMTKDg3RUQ0NjEwMDA3NkQ4OTMzMEY4N0VERjZGRjQ2OEI5Q0Y5MkY1RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQgDPGZwQsnoF+Amnq7wuHC0FY
rE8yIIwvuv5GnvWxPuYjkdldPKjVmvu2N0YjtiDZmwdC/lCx2QsFh/jPn0S/og3c
qTZjnjXrgnDG9k5vlGC7g0/Je0WP0BU0cxJK5zLbZcOPPS+d4i3jvJFz6WW3zSrz
kdLuZ3pa1M0Mv/SsW7KeyOenOk80dknDE2z1g1bn2xyq44Ya7reqOqaxO+rUOll1
xkgV/tz3Cbs9zWOefE1hY0acMzEx3DFOuTRvw8umlJi4+Gco2FN3X3yY6et6eFKX
xYSboznTcVnr7Rw/ucbGdSLbvLBMPtR3s69xxFjBCqOiYFuorqgmv6J+yM73AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUh+1GEAB22JMw+H7fb/Rouc+S9dMwHwYDVR0j
BBgwFoAU/9CUlRgUCMvoP9Mz6s7yn7za1jMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MTM5YWMxZi0zOGUyLTQ1YWEtOTdkYy05OTI3OTY0MTFjYzEvMC9GRkQwOTQ5NTE4
MTQwOENCRTgzRkQzMzNFQUNFRjI5RkJDREFENjMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkZEMDk0OTUxODE0MDhDQkU4M0ZEMzMzRUFDRUYyOUZCQ0RB
RDYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTEzOWFjMWYtMzhlMi00NWFhLTk3
ZGMtOTkyNzk2NDExY2MxLzAvRkZEMDk0OTUxODE0MDhDQkU4M0ZEMzMzRUFDRUYy
OUZCQ0RBRDYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEG8+zxEDyWlDh7Rmzn8TbKBgC20neplX4Yg
AmBekS0egH6I5BuDpos900bivQvh2jTEnNbqr/mc/4lEn561ujQ1MHU4S7Rujlj1
8ZCqqSWZ7gmQ3vfaxFunwjHW+6DY3gmapJTnu0AzCVECdD746jjDOofaIRqg8gnJ
+ycGPmhaGHsnI1G42gIkyFwSuh5vfzs76z0jpE/sL5DBAoTf4F7iA81Ot4tlBBer
rte+dnef0by2jaC4fzBytBbC6eonJs5Mr3jUKoCmqip5nHtp9PPog0ZqGJmIfUeC
IBCFgwhrPOg9KK7NZpfCuG3olKrlc1gvgjQfx8gwITBzxcInyig=
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:44 2026 by rpki-client