Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
File:                     798A229C42DA54D0690064D264AA7AA2375D0419.mft (raw, json)
Hash identifier:          G2oqbYwqc9Y8odCPgnD0Z05rjh6pN3BrkkRIJtZIUVs=
Subject key identifier:   80:67:1C:BC:23:A0:27:10:52:49:90:EE:99:E2:55:9B:2D:A4:77:B7
Authority key identifier: 79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19
Certificate issuer:       /CN=798A229C42DA54D0690064D264AA7AA2375D0419
Certificate serial:       5630EC7F76C79751F1558234F79CC655ACF0AFA0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
Manifest number:          012C
Signing time:             Thu 16 Apr 2026 07:32:25 +0000
Manifest this update:     Thu 16 Apr 2026 07:27:25 +0000
Manifest next update:     Sun 19 Apr 2026 10:06:25 +0000
Files and hashes:         1: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: VG6+4O5llgQnLe8B6hYlDtcuv5x9Z/46JdLy5SPzH+0=)
                          2: 798A229C42DA54D0690064D264AA7AA2375D0419.crl (hash: 0OHhcN/AtH9wj7Wf2n4aax2KZXHlfsMYHLrjd4iUo2U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl
                          rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 10:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:30:ec:7f:76:c7:97:51:f1:55:82:34:f7:9c:c6:55:ac:f0:af:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798A229C42DA54D0690064D264AA7AA2375D0419
        Validity
            Not Before: Apr 16 07:27:25 2026 GMT
            Not After : Apr 19 10:06:25 2026 GMT
        Subject: CN=80671CBC23A02710524990EE99E2559B2DA477B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:8b:a7:d3:b5:25:bd:16:b3:e7:bc:41:18:
                    55:40:bc:5a:86:84:bf:95:da:c1:75:93:44:c8:9f:
                    5b:fb:5d:2d:52:b0:f7:f8:fe:8b:21:ef:30:1e:fe:
                    74:f6:1f:89:d3:a9:99:8b:5b:2f:01:10:6b:d0:fa:
                    4a:ea:90:d6:ac:b8:9d:17:2f:06:58:26:fd:83:49:
                    ff:bb:54:f1:28:1d:42:3b:0a:eb:ae:59:81:d5:e7:
                    34:e4:e4:f8:6b:54:64:95:7c:c7:38:cc:71:82:5e:
                    e0:f3:4f:a0:ab:76:67:4c:fe:d5:37:be:4f:95:5c:
                    8c:23:50:24:f7:c0:09:88:34:4c:f7:1f:28:b1:a4:
                    de:b1:66:a4:19:c2:65:30:f4:97:c7:bf:f3:9c:ed:
                    24:d2:fb:23:18:d8:aa:6f:3b:02:5a:a7:0e:ec:bd:
                    37:48:f0:53:0a:2a:d8:ea:e9:78:4f:66:e4:79:1c:
                    e8:35:67:1f:43:c6:b4:8b:8d:d8:ad:79:21:eb:d5:
                    df:d9:79:f6:c9:f8:db:68:60:00:b5:2e:b5:a6:5c:
                    5e:5f:ce:5e:c8:29:d8:28:d3:82:78:b1:85:0c:3b:
                    85:a6:05:22:0f:06:61:bb:22:99:c3:23:07:dd:f6:
                    44:4e:90:81:c2:89:2b:83:30:de:50:84:ee:87:0a:
                    96:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:67:1C:BC:23:A0:27:10:52:49:90:EE:99:E2:55:9B:2D:A4:77:B7
            X509v3 Authority Key Identifier:
                keyid:79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:39:02:b6:1f:68:29:72:be:67:1b:36:6a:6f:01:3f:51:86:
         00:c2:b3:5c:d8:8b:2b:a9:c5:6b:0a:e8:d8:bb:9d:fb:72:83:
         34:e1:4a:a3:27:6e:4d:d2:37:45:d6:7f:14:82:0d:ef:9f:34:
         3a:15:42:0f:bd:c3:a4:52:5a:af:c1:53:be:15:26:f7:6e:59:
         f9:44:53:1a:44:30:d7:ca:ba:76:2e:ce:19:7c:b6:fd:09:18:
         1d:cd:6c:1a:ab:8f:37:22:2e:24:f0:77:27:e3:f7:16:64:a5:
         1c:f6:fc:cc:da:65:66:09:f3:f9:5e:2c:c2:91:95:92:2e:66:
         75:9c:2f:5b:15:ec:48:a3:61:cd:be:48:d3:6e:37:db:e6:fe:
         d6:01:47:03:d8:89:21:4c:ab:89:5f:e0:bc:7d:f5:c4:b5:3f:
         f6:2b:f6:c5:56:cd:06:91:68:c4:1e:09:9d:1f:d8:ec:ee:52:
         73:77:db:50:f2:cb:7c:72:22:79:9f:af:2a:eb:d6:ce:91:f6:
         ed:d2:8a:5a:aa:c7:31:f8:b0:d2:5f:00:81:0b:8c:cc:07:97:
         3b:ad:f3:53:2d:e6:6f:c2:8b:0f:16:66:66:c4:b7:01:2e:8f:
         85:3e:ce:ab:a8:6a:9e:59:5c:d4:5f:70:69:e6:0f:7f:fd:e6:
         53:63:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:35 2026 by rpki-client