Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
File:                     11D0290B4630192458231FFEA93A463483E71D15.mft (raw, json)
Hash identifier:          aGFjsN2RNXpHYe1eTkYHKQaa9NeQA30BtXQTvc1uBDo=
Subject key identifier:   B0:41:02:C6:73:67:F1:62:C4:4B:2F:80:C9:DF:A6:65:68:96:B3:96
Authority key identifier: 11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15
Certificate issuer:       /CN=11D0290B4630192458231FFEA93A463483E71D15
Certificate serial:       0CBE85A0381BF71BC34441DEE755746EA8B9F4BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
Manifest number:          020C
Signing time:             Fri 17 Apr 2026 15:42:18 +0000
Manifest this update:     Fri 17 Apr 2026 15:37:18 +0000
Manifest next update:     Mon 20 Apr 2026 20:19:18 +0000
Files and hashes:         1: 11D0290B4630192458231FFEA93A463483E71D15.crl (hash: 3y8uznKj3p0QDDbRcPimXOaJm0tTLZTqPhBH78jh69A=)
                          2: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: u+vUasuo+Igy3NmWXga5XKWPQhhkbM5VIPkZA+eRxSc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl
                          rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 20:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:be:85:a0:38:1b:f7:1b:c3:44:41:de:e7:55:74:6e:a8:b9:f4:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11D0290B4630192458231FFEA93A463483E71D15
        Validity
            Not Before: Apr 17 15:37:18 2026 GMT
            Not After : Apr 20 20:19:18 2026 GMT
        Subject: CN=B04102C67367F162C44B2F80C9DFA6656896B396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:27:33:67:a8:5b:0e:86:22:58:f3:e1:28:
                    55:76:1c:4d:67:62:5f:69:e6:c1:ab:ab:26:07:e8:
                    e2:b7:94:f9:23:e9:4d:4f:90:ca:1b:a7:7b:90:56:
                    2a:8e:07:45:e8:ee:98:dd:b1:38:f3:46:a9:ed:59:
                    75:6d:3d:66:c2:2a:d9:7f:26:9d:40:ce:34:fc:b5:
                    c4:b4:27:10:6b:9a:9a:7a:78:21:bf:17:dd:84:0f:
                    9b:44:dd:4c:7a:38:2d:d6:ef:01:18:54:c7:b6:b2:
                    3a:c7:4f:71:b5:bf:d0:32:29:06:df:03:74:30:82:
                    5a:cd:c3:6f:2c:ab:06:b0:7f:08:06:00:c8:15:25:
                    e5:15:49:21:d4:48:1a:76:9c:3c:5b:d4:98:d0:f1:
                    da:c4:37:8b:6c:34:57:7e:0b:e6:9f:03:7b:56:ee:
                    4b:85:b3:5b:01:51:34:37:55:f6:4f:84:ca:e2:a4:
                    2e:61:2f:cb:44:15:d0:20:b8:5a:06:4e:d1:f3:dd:
                    bb:7b:10:f8:50:cf:e2:61:1f:a3:7e:71:0a:c8:27:
                    1c:16:d6:a0:32:5c:ba:f5:b6:29:65:d2:62:a7:8e:
                    59:7e:6e:94:62:c3:f3:d3:20:91:33:9b:62:65:5d:
                    9f:db:e1:9b:02:22:e9:c3:c3:6b:96:98:28:a6:0c:
                    20:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:41:02:C6:73:67:F1:62:C4:4B:2F:80:C9:DF:A6:65:68:96:B3:96
            X509v3 Authority Key Identifier:
                keyid:11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ce:ce:49:88:09:68:a4:23:06:95:20:0f:b9:ad:a9:2a:8c:
         c0:39:7b:8c:26:6c:a9:99:11:27:ac:a3:1d:12:1f:75:97:ef:
         cc:c3:69:dd:b4:81:31:70:cc:8a:8b:e5:1c:d7:54:b3:cc:dc:
         22:e1:b2:94:e1:40:02:b8:6b:10:ac:ad:ba:3f:fc:fc:1c:b3:
         ae:dd:e4:c7:0e:da:50:f4:f6:48:5a:c7:e3:64:cf:54:a7:8d:
         57:1b:e3:62:98:6c:2c:70:57:77:de:3e:09:e2:be:f1:cb:31:
         99:35:99:69:9b:97:2e:58:10:62:85:c5:bd:9b:6e:63:8f:10:
         16:1b:d4:83:33:09:2e:db:2b:ad:1e:a3:30:89:5e:06:11:c6:
         f6:6f:54:90:c8:a1:44:17:c2:be:d5:b3:aa:8f:77:a7:07:00:
         de:0a:96:ac:3f:af:f4:ff:7e:22:18:cd:8b:a4:f7:6f:ff:9b:
         cc:2a:ff:b8:4b:ae:fb:bf:8e:ec:07:ab:61:02:72:fd:73:c0:
         91:31:52:43:44:7c:2f:cd:6e:af:2c:35:f1:ee:93:d5:2d:43:
         34:bb:55:23:39:b7:52:55:bf:24:ff:ec:d4:46:04:3f:bc:a8:
         d8:12:bc:e5:e6:56:d1:86:7d:83:8e:dd:39:12:ea:5e:33:3d:
         50:a1:d1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:45 2026 by rpki-client