Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
File:                     9B123580240DE1580D07828D18D711FDE8163C25.mft (raw, json)
Hash identifier:          /gB0vjWheOD9LtH+EXoJaNzgGFXbNZ7RW3im5uPzxaE=
Subject key identifier:   3E:AE:78:C6:88:03:FF:8B:A4:78:94:52:8D:C1:B7:C4:77:F8:1A:EE
Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25
Certificate issuer:       /CN=9B123580240DE1580D07828D18D711FDE8163C25
Certificate serial:       16338045531A0586DAB9F85DBF0A4A5AB9F0BECC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
Manifest number:          01E8
Signing time:             Sun 01 Mar 2026 16:51:21 +0000
Manifest this update:     Sun 01 Mar 2026 16:46:21 +0000
Manifest next update:     Wed 04 Mar 2026 21:41:21 +0000
Files and hashes:         1: 323030313a6466373a626230303a3a2f34382d3438203d3e20313338303531.roa (hash: 5qf4yfdtRFxDwTXbS5Sd8oS1lIYlWxfJ25SqGelkTSo=)
                          2: 9B123580240DE1580D07828D18D711FDE8163C25.crl (hash: J/MPVhITq2RBvK7O/30F9fkXN4j4gvNOiweIr8dz5uI=)
                          3: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (hash: LI4oNjcJfbE/Yzr7G/KxIrW20ZM4hPrDcoUuP8eNTj0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl
                          rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 21:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:33:80:45:53:1a:05:86:da:b9:f8:5d:bf:0a:4a:5a:b9:f0:be:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25
        Validity
            Not Before: Mar  1 16:46:21 2026 GMT
            Not After : Mar  4 21:41:21 2026 GMT
        Subject: CN=3EAE78C68803FF8BA47894528DC1B7C477F81AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:13:a2:e0:0a:9c:87:ae:ca:70:69:f1:9c:9d:
                    d7:f8:c6:66:88:8c:e9:d3:e7:fc:36:ea:36:df:6b:
                    40:1a:75:8d:8e:0d:29:bc:16:b7:13:d4:7c:fb:f4:
                    33:fa:7a:a2:21:52:8e:a0:5b:5d:0e:48:d9:15:27:
                    fe:a4:48:69:e2:1e:84:dd:9b:09:8d:5c:d6:33:17:
                    30:63:35:4c:07:15:94:10:94:8b:c1:8e:98:8b:8c:
                    a6:68:fc:e3:e2:dc:4f:44:e2:a2:11:dc:64:36:1f:
                    9d:46:f2:e5:31:9d:fe:98:55:fe:c3:3d:4f:dc:cb:
                    0b:a0:60:ef:52:48:dd:06:d1:8c:77:32:2b:c6:70:
                    d5:c3:7f:34:20:f3:47:a7:a1:1b:a5:80:db:0d:7c:
                    88:eb:63:df:2f:93:93:ef:59:ab:17:d5:7b:b5:8d:
                    67:4e:54:78:c8:51:9a:22:97:32:c8:56:e3:0d:eb:
                    50:c8:a6:94:b0:ad:e1:a5:7c:3f:30:b3:b7:b3:a6:
                    96:c1:be:1b:1d:03:7c:8d:64:d5:20:50:f0:aa:90:
                    64:6e:d5:13:81:27:74:5a:6e:20:7e:2c:e0:01:62:
                    2e:72:b3:79:2a:53:fc:8a:01:33:03:7b:e7:68:30:
                    b2:5d:c4:06:5c:e1:e5:d9:ec:4f:51:9c:fb:5b:19:
                    3f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AE:78:C6:88:03:FF:8B:A4:78:94:52:8D:C1:B7:C4:77:F8:1A:EE
            X509v3 Authority Key Identifier:
                keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:0f:da:63:37:42:78:dc:1c:e7:6d:64:43:2c:f1:b7:2b:be:
         af:5d:8f:51:95:71:7a:72:c6:b6:3f:54:bc:98:f9:d8:2b:de:
         54:93:1b:32:df:af:9c:1e:9d:87:85:0f:b4:95:7c:09:8d:0d:
         3b:2f:9e:e3:18:f1:03:bf:d2:36:a5:32:10:11:87:71:ed:47:
         19:31:6a:e5:46:e5:5b:70:c1:6b:57:fd:85:95:fc:9d:8a:5a:
         77:da:38:3f:87:cc:14:f0:03:f1:a0:e2:98:bd:6b:4f:c5:b4:
         da:ea:79:80:f3:25:7e:3d:c0:2f:49:1f:da:d6:4b:77:0a:61:
         58:8f:0c:68:6c:b5:c3:ea:38:ed:5d:b9:34:cf:40:d0:e7:8b:
         ee:67:b2:9f:7b:9d:fc:60:e8:62:28:45:23:b7:01:a0:b7:a6:
         39:19:e0:df:5c:7b:c2:5c:01:3c:61:d2:cc:67:b8:85:77:4e:
         5e:a5:86:92:6d:af:cd:8a:69:af:ba:03:ed:4a:59:6c:23:36:
         bc:90:9b:63:66:88:50:c0:7b:e9:25:69:ae:39:10:9f:17:a6:
         1d:7a:4d:3e:b0:22:a9:63:1f:3c:ae:f4:cc:19:42:b5:9a:01:
         01:d1:fe:2d:db:e3:96:82:87:dc:ef:a7:8a:64:1b:07:76:50:
         2c:f1:b5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:43:34 2026 by rpki-client