Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft
File:                     E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft (raw, json)
Hash identifier:          g86wmgLRn0iucsO01pNhNVsQRDxDeWE0Qj/25HhiyVE=
Subject key identifier:   C1:61:AA:09:41:95:F0:6B:49:62:88:BC:C6:13:3D:C9:EE:AF:7B:9C
Authority key identifier: E4:C5:17:8B:DB:BD:EF:7B:7D:D4:1B:AF:58:EB:3D:25:B2:13:27:71
Certificate issuer:       /CN=E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771
Certificate serial:       097620FD987C68B7242EB1ABFEDA30E351A89D9C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft
Manifest number:          022C
Signing time:             Sun 01 Mar 2026 19:31:28 +0000
Manifest this update:     Sun 01 Mar 2026 19:26:28 +0000
Manifest next update:     Thu 05 Mar 2026 02:13:28 +0000
Files and hashes:         1: 3130332e36362e33362e302f32342d3234203d3e20313530323233.roa (hash: ajl2EFm0qBhjAXALIOJlI8I7dBianNhiyu03BfEHE4I=)
                          2: E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl (hash: f27iMvB7O/6N4UK7+M1o0bmG0G/e+u8TBGELghsyTHM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl
                          rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:76:20:fd:98:7c:68:b7:24:2e:b1:ab:fe:da:30:e3:51:a8:9d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771
        Validity
            Not Before: Mar  1 19:26:28 2026 GMT
            Not After : Mar  5 02:13:28 2026 GMT
        Subject: CN=C161AA094195F06B496288BCC6133DC9EEAF7B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:92:68:d0:33:6e:a5:64:51:f8:06:3f:d6:
                    d5:2f:41:0f:e9:63:01:43:36:1a:15:5e:8d:25:e1:
                    44:8b:1c:4b:0c:51:80:c2:52:64:4b:a7:df:97:e0:
                    fc:ae:d1:1f:ec:be:73:31:6e:23:50:64:f0:57:25:
                    7f:bb:28:47:27:cd:86:5c:55:69:58:af:97:75:7f:
                    ea:1f:78:cc:91:93:11:b9:81:d9:50:c5:f0:b1:f7:
                    6e:a8:a3:b7:a0:fb:5a:3d:31:ab:e9:68:a6:49:25:
                    76:60:ba:d1:16:ed:f9:d2:df:3a:9a:0f:41:ad:94:
                    9c:15:f8:6e:3c:08:4d:e2:12:14:69:f6:f2:6e:ea:
                    fd:27:8f:9d:13:38:23:28:5f:a4:98:22:f1:45:a9:
                    62:ad:68:c0:2c:85:84:78:d4:22:ce:89:2e:f6:e7:
                    1a:89:d6:68:16:fc:19:3d:d2:90:67:ed:66:53:67:
                    9d:f2:3e:1b:4a:5b:25:ef:3e:43:62:30:2c:a0:e0:
                    91:95:b9:8e:c5:2b:0f:eb:37:d8:be:93:5b:ec:cf:
                    92:d8:07:e2:7e:67:9f:12:b9:2c:dc:c0:02:40:1f:
                    17:bf:8b:35:f2:bb:38:c4:64:46:44:90:1e:03:60:
                    0f:92:5f:b0:84:3f:8e:94:b9:25:8f:7e:94:d7:bc:
                    cb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:61:AA:09:41:95:F0:6B:49:62:88:BC:C6:13:3D:C9:EE:AF:7B:9C
            X509v3 Authority Key Identifier:
                keyid:E4:C5:17:8B:DB:BD:EF:7B:7D:D4:1B:AF:58:EB:3D:25:B2:13:27:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ff:ce:c5:2e:94:9d:f3:e1:5e:1d:7a:66:51:af:64:a7:fa:
         49:15:0f:24:66:9d:fd:60:c2:6a:49:f7:a2:9d:4e:27:92:2b:
         88:ac:f2:b8:c4:f1:93:4d:a1:cf:eb:dc:8f:40:a2:04:32:18:
         eb:2c:a5:62:84:8d:af:3f:63:76:94:d8:67:21:07:d4:13:75:
         c4:bd:8e:20:36:9c:44:b5:4e:f4:96:f6:2a:c3:32:95:f9:a9:
         85:8b:96:ae:bb:4f:5b:58:a1:20:68:2a:95:c2:1f:3c:5d:31:
         de:c0:dc:b5:76:d8:6a:42:d8:3b:2d:57:bd:ac:03:8e:e5:50:
         f1:ea:ca:e5:eb:df:6d:cc:d0:01:15:7c:3d:8e:fb:36:68:ea:
         ba:96:ee:e5:0b:ac:a6:3b:44:c5:75:a2:f7:9d:32:d1:4a:b4:
         2a:89:b8:29:32:f0:5e:a9:c1:5d:39:25:36:82:1e:fe:42:94:
         9f:66:40:70:7e:80:ea:ef:b4:29:4e:34:76:2f:7d:2b:91:f6:
         12:b9:e5:2d:8a:cb:d3:d9:9e:9f:f7:20:9b:2f:fd:6a:8d:b9:
         41:ad:36:04:03:8d:90:59:ed:2b:b4:8c:a6:68:8c:37:99:ad:
         23:a2:b8:cb:58:d6:7f:b5:dc:e1:94:9e:96:a5:24:a0:8d:16:
         7c:2f:88:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:30 2026 by rpki-client