Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft
File:                     B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json)
Hash identifier:          S2fMydsfLTezjkmaLM8uVDoXANdHRJ+bdAd5TbjYCjc=
Subject key identifier:   72:0D:88:B0:A5:57:57:52:7A:91:76:0B:E1:4B:6B:3A:D0:B8:69:40
Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0
Certificate issuer:       /CN=B59504F478A4226C16D97004A6F98153CD19D2E0
Certificate serial:       69FD1597C66375B4BC0BBF79C65C3D36D11393D9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft
Manifest number:          A8
Signing time:             Mon 02 Mar 2026 11:12:36 +0000
Manifest this update:     Mon 02 Mar 2026 11:07:36 +0000
Manifest next update:     Thu 05 Mar 2026 18:49:36 +0000
Files and hashes:         1: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: FzKL1BFJPdDrl5OjMtkmpJOPrjr5ihGYOj0qfmxoc+Y=)
                          2: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: FoxdZHJrEp7+nFUQtWkPulj2p2oThQSviqn5PbYR67E=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl
                          rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fd:15:97:c6:63:75:b4:bc:0b:bf:79:c6:5c:3d:36:d1:13:93:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0
        Validity
            Not Before: Mar  2 11:07:36 2026 GMT
            Not After : Mar  5 18:49:36 2026 GMT
        Subject: CN=720D88B0A55757527A91760BE14B6B3AD0B86940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:f7:29:cf:02:ca:16:b1:32:6c:f8:c0:dd:
                    47:16:91:b3:85:84:07:a6:9a:51:7d:89:43:5b:b6:
                    fc:41:01:c8:15:58:1f:5f:0c:a3:2a:8e:16:cc:6c:
                    79:02:ca:c9:35:66:5e:6b:6f:e8:00:f1:6f:17:7d:
                    f9:a2:c7:b7:34:14:54:55:fa:09:da:76:fd:3c:22:
                    5a:d8:2b:52:a9:e1:e8:78:4b:6f:1a:a2:4c:57:e2:
                    d2:12:17:15:7a:a4:5b:32:75:f1:86:f1:0b:f8:4c:
                    b5:a6:f1:5d:84:7f:66:25:51:64:e6:0a:7c:0c:25:
                    5e:b5:3d:c5:c2:49:24:e0:19:cf:9f:90:29:cc:44:
                    12:43:63:1a:be:42:1e:cc:71:ad:5a:7d:ab:67:07:
                    7f:b1:6c:29:d6:7d:f3:58:cc:5f:48:5c:09:1f:89:
                    19:44:f6:5c:17:c5:dd:c8:b6:9e:d4:a7:0c:bc:2b:
                    1d:6e:b4:03:55:28:29:0d:80:ca:36:90:72:b4:da:
                    39:ef:3e:0a:55:d2:40:75:cc:b0:3a:8c:33:a0:e7:
                    6a:21:97:3a:97:12:d5:81:2b:14:de:31:c5:8b:79:
                    32:03:d9:1f:d0:bc:a2:7e:ba:db:0f:e3:5b:2a:c9:
                    2f:47:5e:c8:40:da:06:c2:65:d1:6c:4f:e1:e5:77:
                    a4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0D:88:B0:A5:57:57:52:7A:91:76:0B:E1:4B:6B:3A:D0:B8:69:40
            X509v3 Authority Key Identifier:
                keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:16:1e:9c:08:34:c5:c2:5b:7e:35:70:1e:06:17:e6:9c:d2:
         2e:74:2a:d9:7d:21:ea:65:b2:d8:3a:52:4e:5d:f9:e8:73:9c:
         c3:5e:19:ed:02:93:1c:42:b3:51:ad:d8:c4:4e:99:7f:76:4b:
         c5:33:22:56:29:f3:ef:ae:f3:d1:02:24:2a:4a:25:e9:4c:2b:
         54:ad:90:a6:29:b2:c1:cf:13:cc:25:48:f4:3d:4e:fe:2e:95:
         99:19:90:08:98:df:94:02:2c:6d:13:1a:b9:a4:98:81:ca:31:
         f9:b4:92:2f:6a:16:25:4d:21:dd:47:ac:12:bd:9d:34:d5:02:
         de:e1:6a:79:bf:de:15:4e:5b:58:d4:43:dd:27:b3:52:f6:cb:
         1d:1b:37:9b:72:36:e3:db:39:ee:af:df:7d:7f:1b:c1:bc:22:
         18:dd:2b:a8:04:a1:85:ea:e6:9c:76:38:9f:2c:84:af:e0:e3:
         26:19:f6:6b:b9:4f:97:43:2b:cd:de:df:a8:40:fc:82:57:5d:
         c1:62:46:5a:c3:06:c1:31:56:2a:3b:4c:1e:87:12:15:ba:0a:
         68:d2:73:9d:9b:c6:c6:5a:4c:df:af:e0:4a:8b:5a:8a:78:32:
         c1:65:49:a1:76:37:b2:a8:13:03:6a:30:5b:c7:b1:93:e2:5f:
         81:52:e1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:21 2026 by rpki-client