Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
File:                     F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json)
Hash identifier:          UBXmBjsIiD9yKVNxPlQlyKfWygGcRCC4X9kJTIyoqmU=
Subject key identifier:   7E:A2:E1:24:BF:D2:A7:F9:8E:94:95:E6:59:B6:A4:B3:5D:20:C1:57
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Certificate issuer:       /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial:       300D6B648F56DA7469F77CA374F296FC5F435BF1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
Manifest number:          0577
Signing time:             Sat 18 Apr 2026 20:31:17 +0000
Manifest this update:     Sat 18 Apr 2026 20:26:17 +0000
Manifest next update:     Wed 22 Apr 2026 00:51:17 +0000
Files and hashes:         1: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: 6tYZRHS1gp6lxrRLkcMQOZpyzT7UZqMxo9oLwoeh2Kk=)
                          2: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: lsw9Lj4TdivwiY9urFVLBPCnaQDyjQIHv9L2rFNGJcY=)
                          3: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: AZYO50pcht7zbgRleVLHSfxxSeX3cLrYkpQk4y4IB8g=)
                          4: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: addoLGX7l1qN9yrFfHEwbDZZ1vggnAx8LkSg4qCXPoA=)
                          5: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: PAUNyFLoTuXnyzJaaygCGIoZ2kkR7s3iDrCXWwkOWpM=)
                          6: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: HhAj5FXKG+WPBMJHSmfCQ5YyDXmhJH0Hqke8PTIqGvE=)
                          7: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: I9Xm1cEngTYg6WB2t4U5k+twc9OnUGEq5Opc/dfrZDc=)
                          8: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: VSjVNeF6CQhhuIMP9VzYdgPpAyYTICUyURNkkRPZvf0=)
                          9: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: +kWoeqncIsg2yG08LA8FNhnez+6IikrA0zXpF5e1dxk=)
                          10: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: cMLchsrMSipVG4swR2i0gRjvxNDPexoCdCkQOKZDNiI=)
                          11: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: X871KmxDisPDxaQpNaNmNV8uKTNCiB9DC630xRuhDpo=)
                          12: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: YHfOb3XSEMDVEIcVfiAIW6kLWlhlW9/hxOsVCiJWMDg=)
                          13: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: YN/2s31112uMwq4KT5YT8EMIK9P8Spv9BQ+gu6aYN4g=)
                          14: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: yvTVsKwfMbm9/tZX55oqWjXKQNBRGzzlj+jV8XkeY/A=)
                          15: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: 9ttsEv8xyQdIj2ysOYcOeKd2yqYa6sGhfUajffTzKd4=)
                          16: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: dn2LxIR2i9f98oBHTTzMm7c0l11yZxH5BdOjGXs/ET8=)
                          17: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: qZ2majG5cGcPiPcNAPu4jGy/H5NlD9ILAfwhNapK3KI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
                          rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 00:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0d:6b:64:8f:56:da:74:69:f7:7c:a3:74:f2:96:fc:5f:43:5b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
        Validity
            Not Before: Apr 18 20:26:17 2026 GMT
            Not After : Apr 22 00:51:17 2026 GMT
        Subject: CN=7EA2E124BFD2A7F98E9495E659B6A4B35D20C157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7e:d4:62:0e:a2:9a:08:54:ab:ef:59:6c:62:
                    92:90:af:3f:dd:e8:60:e4:32:f2:74:ef:e5:9c:e2:
                    07:ee:07:a7:23:42:f7:85:59:a6:0d:63:49:1c:3f:
                    cf:e3:df:a1:3f:ba:7c:76:a3:8a:f9:eb:a0:9f:b2:
                    ac:ae:fb:79:48:37:f8:96:5d:2d:12:af:a8:66:cb:
                    79:93:70:e6:13:7e:c5:4d:d9:f4:55:c1:5d:a8:e5:
                    76:8d:c1:14:d2:7b:8c:9c:ac:e7:ac:b4:08:70:9d:
                    cb:d6:35:14:0b:97:3c:34:5c:94:47:1b:37:55:a5:
                    f3:34:00:b1:dd:01:b1:b5:59:0b:e0:ab:37:2f:ea:
                    f7:b1:bb:43:ea:73:8d:d3:9e:16:b8:08:00:11:66:
                    4e:14:d3:c5:23:e9:3b:7c:46:63:cb:c7:1d:8e:5b:
                    38:37:93:70:31:c4:39:0e:24:cf:f5:14:cd:93:55:
                    45:32:6e:d0:2f:42:a5:74:61:7b:dc:6a:c9:70:40:
                    fb:41:ba:68:ac:d1:a8:2f:bb:7e:fc:9d:a6:62:ac:
                    29:12:d8:29:f1:9f:d9:35:9a:06:07:34:b7:49:b1:
                    ff:fb:ac:c8:92:8d:8b:6c:94:d7:e8:3a:55:01:be:
                    9e:b4:78:03:aa:40:07:28:d2:07:16:e9:e1:12:e0:
                    cd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A2:E1:24:BF:D2:A7:F9:8E:94:95:E6:59:B6:A4:B3:5D:20:C1:57
            X509v3 Authority Key Identifier:
                keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6b:7e:ce:ef:59:b4:ce:7f:8b:2f:92:db:5b:f5:98:e6:d2:
         ab:d4:4e:b4:8c:ae:25:3a:1c:61:b5:04:9a:fd:2a:d4:e5:c1:
         d0:bd:fc:f8:19:a3:53:d7:af:bb:9e:61:11:21:13:89:16:ae:
         ce:f5:28:93:39:1e:92:45:cd:58:cf:22:aa:78:75:9c:ac:bb:
         24:a8:1e:55:6b:a1:45:16:81:6e:d3:dd:00:30:e4:1e:8c:9e:
         ab:ff:b5:3f:d5:6c:6b:8a:b2:73:f3:25:75:4a:51:4f:05:3f:
         1d:a7:d1:d2:af:de:06:70:e7:1f:b5:d8:a7:41:10:01:71:26:
         6a:20:e5:fa:aa:78:a0:b9:90:5f:ec:ac:d3:ff:c8:df:99:60:
         b0:f1:b8:ef:3a:f8:7d:ac:83:01:89:da:4d:f7:ec:f7:52:f8:
         5f:86:62:7e:c6:c4:3c:8a:34:80:ed:e6:4c:87:86:ce:3d:a9:
         18:23:5c:95:90:5c:04:72:44:eb:ce:9a:81:6f:30:b3:ae:ed:
         4d:85:53:f3:cc:0e:c3:29:69:62:50:66:4d:2b:a3:38:59:90:
         b2:c2:f1:d6:e3:db:8d:d0:30:5a:6f:8f:96:30:d1:17:cb:c1:
         27:20:bc:9d:57:46:51:70:a7:46:3d:f6:52:bf:bd:95:ea:cb:
         80:3d:a7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:43 2026 by rpki-client