Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft
File:                     E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft (raw, json)
Hash identifier:          Rv1Kh31a5+KVK4GLZZcZnHkp80vGxZh25UTn5j59kRo=
Subject key identifier:   EF:50:E1:1A:0E:8E:F7:A3:88:24:B3:70:94:35:1E:38:8B:83:40:7C
Authority key identifier: E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4
Certificate issuer:       /CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4
Certificate serial:       15A392FD1272D0FA262F0CFB54F24852A4618380
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft
Manifest number:          0559
Signing time:             Mon 02 Mar 2026 07:52:36 +0000
Manifest this update:     Mon 02 Mar 2026 07:47:36 +0000
Manifest next update:     Thu 05 Mar 2026 16:45:36 +0000
Files and hashes:         1: 3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa (hash: hCqKQAmBft8A8taUBcT8sOYve7SjkWXpgzjj9NA6B/s=)
                          2: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl (hash: McsQhbBf38+Ntvo/rs9a9EnSu5sEF3SqXR6pRYPgBvQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl
                          rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a3:92:fd:12:72:d0:fa:26:2f:0c:fb:54:f2:48:52:a4:61:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4
        Validity
            Not Before: Mar  2 07:47:36 2026 GMT
            Not After : Mar  5 16:45:36 2026 GMT
        Subject: CN=EF50E11A0E8EF7A38824B37094351E388B83407C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:77:7f:f0:e4:17:7b:83:87:99:0b:c2:fe:cf:
                    d0:8d:e9:a2:44:cd:36:13:3a:45:8a:24:98:94:65:
                    12:a7:cd:e9:e4:22:5b:a1:d6:27:5d:74:38:c0:8c:
                    fe:50:9a:45:3b:e3:3e:ee:e0:6b:6b:46:77:09:af:
                    2b:72:84:75:07:d9:70:88:a4:62:89:08:c6:a2:90:
                    3b:eb:67:1f:3a:16:20:01:8e:e7:60:b9:4d:06:da:
                    7c:bb:36:e6:f5:53:a0:78:0e:31:82:33:ef:ee:ce:
                    7e:87:27:d9:f4:c7:cb:cb:fa:be:f3:af:f3:d9:f0:
                    78:dc:62:c3:34:60:4d:a7:d0:4b:d4:cc:41:9f:b4:
                    ec:e8:62:89:bb:c8:b9:48:73:66:1a:23:c3:cb:4f:
                    43:84:ab:bc:9f:84:81:aa:43:ed:c6:93:f4:4a:38:
                    a8:48:d6:c3:71:19:72:18:a7:ca:94:d7:42:70:ee:
                    d5:32:aa:75:ed:6a:99:53:2a:93:ff:91:3b:84:d4:
                    4a:57:2b:9d:fc:e9:51:ee:bd:ab:48:31:26:6d:7f:
                    19:11:fb:8d:be:60:17:a4:f0:69:fc:72:a1:bf:ef:
                    12:89:d4:2e:94:b2:cc:19:74:12:f5:7f:9f:6f:79:
                    ef:96:ad:df:e0:ab:44:32:87:fc:d2:47:02:25:09:
                    ef:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:50:E1:1A:0E:8E:F7:A3:88:24:B3:70:94:35:1E:38:8B:83:40:7C
            X509v3 Authority Key Identifier:
                keyid:E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:86:6e:7f:a5:cc:03:fe:76:6c:bb:f1:aa:c6:1a:74:a7:d2:
         ae:24:67:d6:0c:04:eb:b3:3c:42:ec:e5:1f:fc:23:1d:e0:a6:
         61:2b:56:f5:e7:8a:5e:01:dc:34:4f:7c:94:ce:32:08:70:93:
         77:75:33:1f:10:d5:de:c1:c2:dc:12:e1:ff:07:46:d7:d2:29:
         1a:c2:fc:49:ce:f2:00:22:8c:84:e9:6b:cf:f1:32:09:46:68:
         46:5e:0d:b6:bf:1b:b0:2c:98:3f:45:5f:34:13:ae:ea:5a:07:
         1b:1b:f8:1a:9b:f3:e4:2e:5c:95:be:ef:99:7e:53:7a:a6:c5:
         e7:3b:8f:3b:0d:83:93:41:69:4d:5a:c5:a2:2f:0f:56:61:27:
         a4:0b:df:ae:87:d7:11:55:a8:c6:6b:aa:7f:fe:cf:37:13:ca:
         cd:cd:5b:6d:40:42:49:35:5b:0b:2d:51:1c:dc:ce:0f:6e:bc:
         fd:6b:ce:38:28:b1:08:8c:b8:ca:2a:c0:d2:4f:f4:8a:b8:50:
         d0:a1:a9:5a:e0:a1:01:bd:0f:d9:89:44:33:f7:0a:3e:92:23:
         f6:f0:c3:3d:8f:5e:de:46:b9:8e:72:41:46:d0:07:73:57:4b:
         82:e5:ad:e1:13:78:7a:10:4a:b6:9d:12:2f:fe:95:d3:9e:a1:
         c0:31:9c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:47 2026 by rpki-client