Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
File:                     BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft (raw, json)
Hash identifier:          PY1Uxeo6XX0f2MsITJt0XBDWxuhoZOfPSdmWYtRwe8o=
Subject key identifier:   9B:85:E3:AB:A0:F3:6D:E0:E0:E3:82:98:5A:39:DD:34:5B:F9:67:CB
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       2071CC773DC947E461CCA9FF22E653CCB6D1F59C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
Manifest number:          0576
Signing time:             Thu 16 Apr 2026 16:12:46 +0000
Manifest this update:     Thu 16 Apr 2026 16:07:46 +0000
Manifest next update:     Sun 19 Apr 2026 17:46:46 +0000
Files and hashes:         1: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: TQgzpMcLfaNgOb2UQ22DmepvwTBX2ZphizKn7sBXlfU=)
                          2: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: /ZSyzzH4osQQo8OEYTUKDqHS0TOIh680hRVxT7riSK4=)
                          3: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl (hash: gT+Bqp6+RSLjr8FeZLGhDO30JMK6y2k6V/WWLBd0Vyw=)
                          4: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: q6kGIkTw1IEwFZ8E1rrhCKF72eKLzmU0iFvN+CMeGms=)
                          5: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: duzHqAm6QedJQSgIxWwqnRHJ98BpWQZp6Vy/UDaP+2w=)
                          6: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: WtJvSkSMcWIFCYDWJoeYFOWIHYYIU2e63ZAjyF2Lb8o=)
                          7: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: sLI9kyH4UUKtJ48DuSDvIEt/kI9PlelTvUCSLOep6GI=)
                          8: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: a8mTP5wqsK0/6i33hi9F2fx0vcrLrr8F0sXVOsBm+uM=)
                          9: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: 6r7ytzVqOZCu9ltnazdoDFZyu1sN5kdyWtk6OiFCZME=)
                          10: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: LN/QrtLQN7eBHDeVxv+de8QzLZrhiGE5e9eCTFW2W9s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 17:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:71:cc:77:3d:c9:47:e4:61:cc:a9:ff:22:e6:53:cc:b6:d1:f5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Apr 16 16:07:46 2026 GMT
            Not After : Apr 19 17:46:46 2026 GMT
        Subject: CN=9B85E3ABA0F36DE0E0E382985A39DD345BF967CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f7:e2:f1:83:81:83:59:80:fb:e6:84:38:99:
                    fd:aa:03:be:ad:3d:3e:48:3a:ba:65:a3:9b:a5:6f:
                    87:41:ce:1d:de:61:5a:29:c0:47:11:b2:6c:13:0d:
                    cc:a4:ad:7f:02:14:6b:0e:77:02:76:16:58:16:2f:
                    d2:21:03:03:d7:a6:0c:f5:2d:ea:9d:37:ba:59:5b:
                    59:2a:59:f7:b6:fd:b6:c5:ab:5b:79:ea:9f:8b:9f:
                    77:58:50:97:6e:b0:25:a8:6e:bc:f9:3c:0a:bf:a0:
                    b2:01:20:49:61:cd:eb:32:8a:e6:6d:9f:ef:de:f0:
                    10:9f:f2:9a:de:7b:cc:08:a6:c3:22:ba:76:8b:c8:
                    41:72:9e:44:33:a2:fd:c8:db:b4:54:0e:40:c4:01:
                    80:cc:ae:7f:ad:b1:01:ac:79:1d:26:b4:4e:79:ee:
                    9f:da:cb:a9:2a:cd:89:73:a3:9a:ac:f8:a3:4b:1c:
                    37:31:4d:1a:e6:b2:77:0c:fd:70:b5:b3:6a:72:17:
                    7d:37:4c:dc:bd:e3:a2:0f:e9:67:e4:de:b1:d6:45:
                    57:ef:a8:d7:c3:c3:bc:3f:96:97:5a:57:1f:dc:01:
                    c8:38:e0:9e:d3:47:e1:4e:c2:95:85:26:0e:59:b6:
                    ae:85:52:6e:1c:1f:bf:4e:a0:e3:d6:28:c1:f3:56:
                    dd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:85:E3:AB:A0:F3:6D:E0:E0:E3:82:98:5A:39:DD:34:5B:F9:67:CB
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:31:17:4b:af:4c:fa:11:af:84:d3:59:2d:99:5c:dd:46:a6:
         4f:69:98:f7:eb:a7:c5:72:ec:d3:62:6c:41:1e:2c:7f:7a:19:
         cc:f8:45:44:6c:70:61:94:b2:d5:d9:79:b6:45:41:a7:0d:91:
         8e:f3:e0:85:f7:19:a0:e9:9a:90:90:85:87:e5:36:e4:c1:25:
         d5:17:a6:d2:97:9e:fc:75:58:3e:00:1d:5d:59:57:d7:1a:7a:
         9d:77:45:ea:93:56:15:d2:d5:4c:3c:7c:dc:41:4b:f8:c3:85:
         e0:a6:fd:a6:47:d1:ec:4c:ce:7b:92:fe:6a:46:eb:13:3f:e6:
         4c:38:c0:21:7e:61:9b:0d:b4:90:60:7f:b0:7f:de:c9:70:e0:
         39:3c:d7:ab:63:3e:84:25:47:9a:ed:24:05:2f:31:ac:35:a2:
         0f:85:76:d1:45:65:e8:b9:a2:b6:f2:8e:68:0f:f8:98:03:52:
         44:25:69:ef:63:de:0f:b1:1a:3d:6f:f6:fc:40:ee:53:f3:8b:
         3a:17:5c:c4:02:1e:3d:60:2b:f5:cb:36:90:25:36:5f:4e:df:
         c6:81:99:0e:70:6c:2c:8e:b4:f2:bd:bb:89:dc:e2:cf:e5:6a:
         17:b8:d6:9b:1d:fb:fe:3b:b1:cf:d3:7e:c5:5e:f0:11:9d:86:
         c9:f5:97:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:49:10 2026 by rpki-client