Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft
File:                     3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft (raw, json)
Hash identifier:          5trI9SwiGOTSWMSrHe3q1pacLvptPuuCaatxE6caUcA=
Subject key identifier:   62:AD:A5:6B:B5:17:BB:36:44:13:03:8D:8B:0C:8F:5C:4D:4A:36:6B
Authority key identifier: 3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25
Certificate issuer:       /CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525
Certificate serial:       7D9A5A98A361F100243215079A24766F20B7EBFA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft
Manifest number:          0402
Signing time:             Sun 19 Apr 2026 07:41:21 +0000
Manifest this update:     Sun 19 Apr 2026 07:36:21 +0000
Manifest next update:     Wed 22 Apr 2026 09:04:21 +0000
Files and hashes:         1: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl (hash: ni50dMfHDihK2N1l8SF95wfN2n1zdPi1sg6y9L2A+QU=)
                          2: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: 6/s2KAnQCmxKlD3EU03jhWpXfqnY8gSv1EFXD611Zco=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl
                          rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 20:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9a:5a:98:a3:61:f1:00:24:32:15:07:9a:24:76:6f:20:b7:eb:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525
        Validity
            Not Before: Apr 19 07:36:21 2026 GMT
            Not After : Apr 22 09:04:21 2026 GMT
        Subject: CN=62ADA56BB517BB364413038D8B0C8F5C4D4A366B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:f2:c5:64:60:85:5a:ea:0f:06:d6:b1:f8:
                    f8:fe:4b:08:8f:ff:99:a5:3b:cd:dc:b7:19:1e:d0:
                    5e:b9:b6:c3:c4:55:ee:0e:b8:cd:f8:8a:e0:ac:11:
                    ff:e8:88:0d:33:53:6b:1c:ca:4f:72:2d:a7:b7:04:
                    db:d0:59:c5:0a:db:43:4f:33:44:1c:90:ad:ff:f9:
                    93:56:c1:9c:de:4b:2b:c5:f2:0d:01:a7:58:22:5e:
                    ec:9a:2b:75:be:d2:06:7c:4d:7d:27:ce:f2:18:63:
                    11:b0:d5:39:0f:e9:ef:7f:c7:55:08:61:87:21:5c:
                    03:8e:c7:07:70:49:31:8e:31:85:9a:de:e3:ac:90:
                    e4:5d:90:af:5d:b0:7e:89:a0:85:2b:11:d2:3e:b7:
                    6b:b9:5b:2e:8d:f3:06:e9:b3:38:48:97:ba:be:1a:
                    af:e2:9a:3b:65:54:dc:5c:eb:dc:8f:0f:7e:9f:58:
                    b8:f1:1c:e3:e1:97:66:d4:57:91:c9:a0:ea:95:53:
                    dd:bd:9e:73:5a:36:fc:f4:ed:6b:da:b1:c3:e6:26:
                    1d:fc:ab:27:29:c9:33:36:cf:6c:07:b8:47:ab:cb:
                    dd:1e:fe:d7:ca:ee:e5:46:9f:09:f7:c2:18:10:17:
                    90:09:f5:2e:5a:d3:7f:af:5c:49:34:7c:fa:9d:d2:
                    d8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AD:A5:6B:B5:17:BB:36:44:13:03:8D:8B:0C:8F:5C:4D:4A:36:6B
            X509v3 Authority Key Identifier:
                keyid:3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7e:35:3f:fc:e4:7c:5b:76:33:53:19:07:49:94:5d:ef:ac:
         0a:d1:fa:94:50:d5:a5:61:7e:25:78:78:3e:28:0a:3e:e5:de:
         c0:c3:15:b3:d1:31:6c:0a:c1:07:32:f2:4c:5c:ec:66:60:22:
         bb:a4:de:49:35:b2:5f:0e:ac:66:9a:c4:a1:a8:38:2b:d3:b3:
         b4:b8:b2:37:82:a9:ff:47:6e:ba:e8:15:43:74:19:ac:80:d5:
         a8:35:e5:67:5c:ee:87:27:e6:7f:b8:49:ea:19:2e:91:da:07:
         f5:c8:51:a3:93:93:8b:1b:e8:2b:30:4e:b6:88:19:3d:b7:6f:
         93:53:96:79:11:3b:89:22:19:53:94:1b:51:a1:a0:8d:28:de:
         6c:fd:63:9d:a5:41:f6:5c:d0:77:c0:98:a9:fd:5d:ac:a5:09:
         10:19:0c:9a:76:ea:e2:64:d5:0d:93:7b:3b:b1:51:b4:5c:e2:
         52:07:8f:b2:3a:71:30:2a:23:65:01:39:f6:5c:9a:cf:2e:f1:
         09:81:a0:1a:2d:49:dc:a0:ea:6f:f5:42:d1:25:38:5e:30:4d:
         48:fc:64:80:7e:94:89:49:1e:1c:36:dc:41:3f:97:47:65:d5:
         9c:af:36:be:3c:bb:40:e0:8d:51:e7:88:ea:c4:ca:ec:63:ce:
         17:93:bb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:22:19 2026 by rpki-client