Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
File:                     C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft (raw, json)
Hash identifier:          z+IYLo5eOJgAOwu9OsLILoQY4nsHl9HKEqSd6LZ67lc=
Subject key identifier:   FC:60:79:BD:C5:66:F2:7F:29:B0:07:59:B5:B5:B3:25:4E:36:AD:20
Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
Certificate issuer:       /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Certificate serial:       3FCCD724148EEADA948C43210C9C52E28A30EC4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
Manifest number:          059F
Signing time:             Mon 02 Mar 2026 03:52:44 +0000
Manifest this update:     Mon 02 Mar 2026 03:47:44 +0000
Manifest next update:     Thu 05 Mar 2026 05:50:44 +0000
Files and hashes:         1: 32372e35302e31362e302f32302d3234203d3e20313331313131.roa (hash: K0Qyq4TQNm4Gb6O7QApcWBMQFh1hlsrrhE70FrRZJng=)
                          2: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl (hash: 53KcEZNiwqt0qDuiuKLeclPdvilCcEzFNmnzVphglco=)
                          3: 3130332e32322e3234382e302f32322d3234203d3e20313331313131.roa (hash: /xCTIh9hwcxKjknnAI3eSpvSHoqSTZNnozfD2XT8CVw=)
                          4: 3230332e3137362e3138302e302f32322d3234203d3e20313331313131.roa (hash: VU0ZIZ2pkWLbL/yZX6A7PXJh4wAgz1Lfo/SmUnfVxjs=)
                          5: 3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa (hash: 516xDtvKLseki+IBX6h+mKjxbuiKgwqfJB4LmOXicXw=)
                          6: 3130332e32322e3234392e302f32342d3234203d3e20313331313131.roa (hash: aY0anTpEZIat4/VeI01P3kjwTwtzNISJMDgT1crbBNU=)
                          7: 3230322e34332e3137362e302f32302d3234203d3e20313331313131.roa (hash: EI/U6V5bg24RVZ09I8vLipweFogO+Ea7cNH372pUyZY=)
                          8: 3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa (hash: bNy3O3/D8sze1XtEAGH5p80v+qY7OivRx/ulln1yeBc=)
                          9: 3130332e32322e3234382e302f32342d3234203d3e20313331313131.roa (hash: UtJjITDA9JHQ6VJXBVisu99jt556rMiuNEZSGObwvAc=)
                          10: 34332e3234332e3134302e302f32322d3234203d3e20313331313131.roa (hash: Ln/zBXifrR3kRN5QO8V+SWT6tpUWR1WnEob5sCVgP4s=)
                          11: 3130332e32322e3235312e302f32342d3234203d3e20313331313131.roa (hash: FQpoIAC9AkHOj7gF3JsxAlTSaEMd9sYKYRZgoHuK7yw=)
                          12: 3230322e34332e3137362e302f32322d3234203d3e20313331313131.roa (hash: o4EuiIX65DjYa3ywyHTPaQSCo34pp+K8+jEM2BCf1A4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
                          rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 05:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cc:d7:24:14:8e:ea:da:94:8c:43:21:0c:9c:52:e2:8a:30:ec:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
        Validity
            Not Before: Mar  2 03:47:44 2026 GMT
            Not After : Mar  5 05:50:44 2026 GMT
        Subject: CN=FC6079BDC566F27F29B00759B5B5B3254E36AD20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:4b:73:1b:8c:f5:3a:f0:86:ad:4c:4d:35:
                    55:c0:38:56:24:e4:c9:e2:83:89:1a:16:3b:b7:e9:
                    26:f9:a3:bf:1b:ec:f1:18:ee:6a:13:de:3c:18:51:
                    4b:5b:fd:42:1c:a8:c2:07:4e:ef:07:6d:c2:90:49:
                    59:e0:86:e9:e4:ee:f8:20:38:96:ad:77:30:97:77:
                    b2:d0:6f:b3:c2:c5:a3:ca:f5:36:07:ca:9c:e7:d5:
                    4e:64:83:92:64:2c:22:ad:80:e4:7b:d8:71:9b:f5:
                    10:06:b6:41:19:81:12:70:22:78:70:c4:32:f6:62:
                    61:86:da:2a:fc:af:f8:0e:ee:92:2e:d0:1a:51:37:
                    d7:05:66:2e:8a:c7:cb:c8:92:10:31:93:bc:bb:66:
                    5f:98:e8:34:cb:6d:e3:af:12:63:cf:af:3d:06:e5:
                    66:d4:28:cd:d8:ce:0f:0c:d7:60:c6:71:b1:67:bc:
                    38:f9:bb:88:c9:a2:85:00:20:10:f4:14:1f:57:45:
                    4e:4e:f4:ca:5a:fe:53:fb:ce:70:a9:1a:5f:38:08:
                    40:b1:38:72:6d:73:12:e6:41:ad:52:cc:99:6e:c3:
                    6c:ed:e2:d8:ac:ba:c9:b8:30:44:14:d8:ba:d0:27:
                    e5:b8:67:29:40:c6:9a:f5:0e:bc:be:af:a1:53:3b:
                    ee:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:60:79:BD:C5:66:F2:7F:29:B0:07:59:B5:B5:B3:25:4E:36:AD:20
            X509v3 Authority Key Identifier:
                keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:37:e5:c7:4c:80:aa:41:46:d3:e8:85:f0:a0:75:ea:11:b4:
         88:f1:b7:f9:af:ed:46:7f:a6:7f:81:75:fd:9a:ef:5b:18:e2:
         45:2c:ff:73:37:16:db:2e:9b:dc:33:ff:d0:a8:87:9a:10:ef:
         f8:1b:3b:1a:b5:4a:3b:fa:9c:60:81:75:e2:33:b1:5c:34:bf:
         3e:34:23:f2:29:09:70:02:d1:1d:d6:6d:0b:ce:54:5b:64:91:
         b0:cb:af:22:1f:0e:50:e3:da:88:91:4d:e8:db:3e:22:92:d2:
         2b:9c:23:4a:de:af:a6:05:79:93:37:be:cd:8e:20:1a:ec:3a:
         62:7b:ca:9c:f2:a2:c5:81:52:34:d8:e5:09:96:1b:60:34:38:
         24:82:65:e3:a9:5f:ed:d7:7f:dc:8d:48:4a:87:22:17:3f:b1:
         5d:f7:22:b6:42:7d:b3:01:6c:06:c4:34:e4:55:62:c8:2e:cc:
         13:a0:f3:15:b5:5e:94:54:42:15:fe:ee:40:99:77:30:28:f3:
         95:20:e1:68:04:1e:f4:73:13:0f:3a:9a:d5:d2:6e:e6:3b:eb:
         ed:9f:9f:09:b8:9c:22:85:7c:e4:e2:34:07:73:ea:e7:95:1c:
         d6:dc:a2:42:32:28:b5:e0:5d:fc:fa:ca:5e:b1:07:ac:89:08:
         61:78:9a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:59 2026 by rpki-client