Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft
File:                     E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft (raw, json)
Hash identifier:          zVcT7hA1tjwpvruQglCPgXK7a9HDb5dOjCAdgjaODyA=
Subject key identifier:   BF:0E:B5:95:C9:3C:95:8E:B0:F1:AA:AA:45:86:59:4A:31:C3:D0:D6
Authority key identifier: E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F
Certificate issuer:       /CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F
Certificate serial:       5E4EF708B83977281212C101F5AD06E5D2FB4AC6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft
Manifest number:          CB
Signing time:             Mon 02 Mar 2026 18:11:01 +0000
Manifest this update:     Mon 02 Mar 2026 18:06:01 +0000
Manifest next update:     Thu 05 Mar 2026 18:11:01 +0000
Files and hashes:         1: E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl (hash: dEfoGfs7Ou0OVHqt5ocb9hVnltB/XQc6NY+MXa36/8g=)
                          2: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: dSXAsb0EYxBUtM1CoaRZWop2Ld4yRUPCa2RHmQsYyhU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl
                          rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4e:f7:08:b8:39:77:28:12:12:c1:01:f5:ad:06:e5:d2:fb:4a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F
        Validity
            Not Before: Mar  2 18:06:01 2026 GMT
            Not After : Mar  5 18:11:01 2026 GMT
        Subject: CN=BF0EB595C93C958EB0F1AAAA4586594A31C3D0D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:57:4c:90:a8:a5:3e:3b:03:b5:cb:34:54:
                    b0:86:c9:46:33:28:6b:09:1d:0d:77:88:89:e7:d3:
                    2f:41:b1:e7:06:27:4d:fa:bc:3f:26:7a:e2:3e:12:
                    21:4d:be:74:6d:85:43:3e:f8:e9:46:4f:c9:d8:73:
                    e5:de:aa:31:04:d5:95:c3:78:aa:76:a3:08:3f:c1:
                    42:99:7e:65:1d:c0:40:20:5b:71:b6:88:7a:de:e5:
                    8e:5f:8e:bb:a9:35:76:d9:c3:91:00:ae:6e:bd:82:
                    0b:ca:38:8e:35:0b:e0:57:c7:b4:ea:42:69:f8:c7:
                    6f:90:36:28:50:99:eb:bb:dc:fc:59:ca:85:86:fc:
                    fa:61:db:86:33:23:b1:54:dd:52:73:e6:ea:9b:f5:
                    19:c8:a2:c9:84:59:63:b0:15:c8:fe:a7:aa:75:7f:
                    85:62:11:82:41:67:12:50:75:bc:53:e9:b1:b8:72:
                    ec:4e:c8:10:d4:64:91:1e:b3:34:eb:54:fa:5a:a0:
                    9c:39:45:aa:b2:33:c8:b7:95:db:d5:19:ff:4d:08:
                    19:14:5b:bc:86:84:59:3b:d5:34:fb:83:87:fe:6e:
                    d1:1c:fe:f1:3d:84:ad:f4:53:ef:83:55:d1:5e:d3:
                    8f:ed:03:ab:39:cc:9d:b9:65:20:99:f4:e2:a8:a9:
                    ab:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0E:B5:95:C9:3C:95:8E:B0:F1:AA:AA:45:86:59:4A:31:C3:D0:D6
            X509v3 Authority Key Identifier:
                keyid:E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6f:ea:20:bc:f6:b1:34:5e:8f:21:c2:89:56:cd:03:75:7f:
         ad:b6:8c:db:6c:0c:03:01:71:68:62:af:33:e3:78:e2:87:fa:
         fd:27:ed:ca:32:86:92:9f:5a:82:41:cf:c3:e3:cf:71:67:9b:
         50:d9:2c:1c:66:42:ca:49:9a:8b:cf:5c:d9:35:19:17:36:57:
         b1:46:2f:a0:18:90:1e:fb:6b:0b:fd:37:ee:97:f3:45:fd:0f:
         25:7c:4d:7a:6e:ac:a8:8c:44:1d:10:4f:4f:85:07:ae:0b:25:
         f8:f3:58:69:7e:fb:f1:8b:09:21:93:4a:e7:0a:53:59:33:b4:
         f7:6a:8d:fe:17:ac:c5:6c:77:22:91:92:1c:f1:4d:f4:67:14:
         2d:ce:12:86:d8:72:00:68:19:68:48:a1:25:dc:ed:54:17:9c:
         cc:82:ec:15:d9:b8:fd:1e:6f:8c:b2:af:48:96:dd:07:99:8e:
         70:92:cc:58:3d:eb:48:df:16:1f:e6:77:ed:14:fb:06:e5:7d:
         7f:ed:b6:84:5d:f7:84:88:4d:a8:d9:ce:1e:c9:4b:69:00:2e:
         1a:25:2c:7f:65:20:ca:ae:0b:9a:b3:a0:69:30:62:c6:d5:49:
         d0:25:62:31:7f:98:bb:fa:37:79:c7:db:63:a1:87:e8:b2:fb:
         41:41:94:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:30 2026 by rpki-client