Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft
File:                     E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft (raw, json)
Hash identifier:          Q88GfuEfnDyp+0W7kzlER4bhbfnC4bvnjFk1Vf1IfWk=
Subject key identifier:   FD:88:A2:79:FF:CD:2C:30:8D:4B:76:7A:29:2C:A1:A6:5E:E0:61:39
Authority key identifier: E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F
Certificate issuer:       /CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F
Certificate serial:       1886274953890FFEBF494BF8EFD97333ADAB9594
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft
Manifest number:          CA
Signing time:             Sat 28 Feb 2026 16:41:01 +0000
Manifest this update:     Sat 28 Feb 2026 16:36:01 +0000
Manifest next update:     Tue 03 Mar 2026 18:10:01 +0000
Files and hashes:         1: E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl (hash: DLScKrUSAVuJBWrAFdFml1+IS685/r+bspHWnDAcGGQ=)
                          2: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: dSXAsb0EYxBUtM1CoaRZWop2Ld4yRUPCa2RHmQsYyhU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl
                          rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 18:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:86:27:49:53:89:0f:fe:bf:49:4b:f8:ef:d9:73:33:ad:ab:95:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F
        Validity
            Not Before: Feb 28 16:36:01 2026 GMT
            Not After : Mar  3 18:10:01 2026 GMT
        Subject: CN=FD88A279FFCD2C308D4B767A292CA1A65EE06139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:72:f4:01:1f:0a:81:a7:14:1a:e2:68:e6:
                    37:ac:5b:71:eb:b2:32:2a:cc:42:73:d8:8f:3e:19:
                    c8:7f:34:c5:81:f5:d4:c7:05:ca:88:4a:07:9f:d8:
                    05:ce:6d:f0:c3:17:90:af:40:ab:89:c9:92:01:77:
                    dc:96:b9:cd:cd:9e:e1:95:91:a1:29:0e:30:7e:e5:
                    45:de:46:01:aa:f0:bf:0f:a6:2e:25:d1:05:fe:4f:
                    6a:6a:f1:2c:de:2c:45:3e:8a:14:b4:a0:b4:ae:2c:
                    26:14:99:78:ad:07:8b:4f:da:c9:2f:2a:60:40:1f:
                    46:05:86:55:b8:3f:65:27:2d:14:68:3a:6f:c3:35:
                    1b:0e:d8:da:aa:e1:db:a8:5f:49:29:df:e5:a0:6c:
                    66:72:9c:fe:e8:75:71:d8:a1:99:61:1c:a0:08:b2:
                    6d:40:5b:5c:57:18:5d:04:30:da:18:e4:58:7e:c1:
                    0d:a4:b9:da:bc:93:e3:6c:0c:7b:d7:45:de:71:61:
                    07:ac:e6:37:63:27:56:84:8f:87:bb:11:bc:73:57:
                    c2:62:19:09:77:f1:e4:26:02:a2:da:53:9e:bc:76:
                    d3:25:28:a6:b8:fe:c7:5a:23:9a:89:76:5b:37:08:
                    fe:e6:9c:fb:15:ae:16:91:77:3b:a3:4d:89:19:ba:
                    4b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:88:A2:79:FF:CD:2C:30:8D:4B:76:7A:29:2C:A1:A6:5E:E0:61:39
            X509v3 Authority Key Identifier:
                keyid:E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f0:7e:48:c4:d5:c4:7c:af:69:69:f5:68:80:5a:16:38:e2:
         40:98:c3:83:53:0d:78:fd:52:fd:30:7d:91:9c:56:02:35:46:
         bb:9b:d1:2d:a0:7f:de:00:2a:17:36:89:80:6d:2d:90:ac:1c:
         f0:06:86:a4:7e:2c:28:37:61:d9:24:0e:99:83:12:ee:59:06:
         cb:94:17:ab:9a:0a:31:a2:3e:04:e3:15:29:89:b1:4b:36:c9:
         59:4e:83:39:f5:c6:f0:37:c3:72:d8:7b:d3:26:be:92:27:3a:
         81:0a:b8:5b:e2:0c:48:76:b7:14:77:49:be:ac:48:86:25:db:
         1d:ff:8e:c6:d6:76:85:41:3c:a7:74:41:3c:5e:6b:3f:45:ea:
         7e:22:00:b4:94:f5:e8:da:20:53:dc:a6:65:33:eb:11:50:49:
         b1:7f:d1:8e:5b:07:b6:b9:68:c8:a7:34:0d:3c:34:af:cd:ab:
         60:8a:89:80:59:92:3f:4e:67:e0:9b:37:3e:b4:2c:e3:3b:00:
         9c:92:92:da:e1:34:a8:e6:da:8b:fd:61:bf:29:e1:02:c3:3f:
         17:e9:56:88:e9:b0:be:c2:07:33:9c:1e:ed:43:d4:86:cc:92:
         19:e3:82:a3:ff:d3:fa:32:9d:0a:f4:b1:2f:76:e9:a0:49:70:
         3f:15:4d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:06 2026 by rpki-client