Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
File:                     AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json)
Hash identifier:          Ryw9+wS59sTR0FWCpvGdu8t8ur2KCtc4wzf8vSAPUqI=
Subject key identifier:   FF:5A:F2:01:07:E5:BE:43:41:AB:51:00:91:B7:4D:8A:55:B0:B7:9D
Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B
Certificate issuer:       /CN=AA90F6A6378710CD695B4CC742651F235E503C5B
Certificate serial:       58E287EDC02EAD1CF1E777A725AC08EF08CE25A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
Manifest number:          0187
Signing time:             Sat 18 Apr 2026 03:41:39 +0000
Manifest this update:     Sat 18 Apr 2026 03:36:39 +0000
Manifest next update:     Tue 21 Apr 2026 11:58:39 +0000
Files and hashes:         1: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: HFW5aOUlz8CneGvqbuAkxRSpm8LvMovfKvDvVm1g4TM=)
                          2: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: VFWMiazWmoGEVLtcrf1dTJMRZzx900Rx4cZwTnY4Hao=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl
                          rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 11:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e2:87:ed:c0:2e:ad:1c:f1:e7:77:a7:25:ac:08:ef:08:ce:25:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B
        Validity
            Not Before: Apr 18 03:36:39 2026 GMT
            Not After : Apr 21 11:58:39 2026 GMT
        Subject: CN=FF5AF20107E5BE4341AB510091B74D8A55B0B79D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:a6:0f:ca:5f:cf:a3:54:dc:33:2f:e1:01:
                    2d:a0:95:16:14:7f:a2:7f:1c:5b:79:df:45:23:f0:
                    d9:7a:a4:ca:44:68:f6:45:82:05:07:85:61:2f:d0:
                    5a:c6:f5:2d:69:71:17:4f:a7:73:1e:22:c8:a7:b2:
                    6e:6f:ec:08:b0:8c:37:38:b3:5b:cc:72:56:07:28:
                    a9:54:17:6e:b9:b0:b8:d3:1b:8f:35:1b:77:07:68:
                    d3:09:b7:a6:2c:94:be:9e:48:e1:d7:20:58:8d:66:
                    fc:f8:cd:eb:c1:8a:f5:8e:ff:b4:e6:02:57:f5:90:
                    1d:1e:c5:c3:23:17:01:88:fe:c6:97:b4:7e:f6:10:
                    af:ff:93:37:90:b3:f3:92:e5:31:aa:02:b0:92:70:
                    81:ac:08:4a:0d:ce:f4:6d:61:a6:b6:55:b5:85:1f:
                    82:fa:ff:62:85:a6:ac:da:16:68:a0:e6:b0:57:17:
                    27:ba:a7:1c:2e:9b:5d:d0:d8:b6:8d:e3:8c:0b:b4:
                    83:4e:0f:da:08:55:50:e7:e9:2b:1b:42:c6:cd:fb:
                    53:7a:bd:09:eb:69:95:21:ee:84:6c:93:11:2e:f3:
                    74:65:8e:9f:32:99:14:63:b9:9f:15:a3:bf:8e:86:
                    00:5a:ba:02:e3:5b:5c:c7:44:72:29:22:69:39:26:
                    36:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5A:F2:01:07:E5:BE:43:41:AB:51:00:91:B7:4D:8A:55:B0:B7:9D
            X509v3 Authority Key Identifier:
                keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e9:da:1f:99:32:7d:0e:78:4f:e9:ce:3d:98:e3:d3:56:70:
         bc:da:00:4d:60:a2:95:bd:6c:fb:ef:db:e9:29:35:a5:a0:f4:
         fc:7a:95:80:22:4d:40:3c:0d:f0:14:1f:e4:98:bf:d8:99:5f:
         3e:c2:a7:53:44:ec:85:8c:84:f1:2a:b5:9f:28:16:5b:78:d2:
         d4:6c:aa:2c:77:d5:6e:f6:6b:5a:c9:c1:b1:c0:6a:e4:62:c9:
         61:c0:47:a0:3a:aa:ec:f0:74:a7:05:86:ca:7b:4a:71:e5:43:
         d3:1e:e2:84:a1:70:be:4c:5f:a7:8b:29:4c:e2:03:a8:44:bc:
         72:40:ac:55:77:96:04:f1:ea:07:d2:2d:e2:17:58:04:c3:7f:
         8b:72:cd:4b:be:17:70:e2:72:be:1d:00:37:d8:9c:95:11:6f:
         46:b7:9c:87:56:c4:c8:cf:94:63:a6:76:fa:6f:ed:11:6e:e2:
         9b:24:06:80:19:6e:24:ed:e5:4c:a6:4a:bf:23:17:a4:84:69:
         e2:85:4f:be:3a:27:36:a2:d2:26:a8:39:1a:61:d8:92:89:65:
         9d:e7:ed:a6:3d:72:13:cb:19:e8:fd:55:dd:8d:a9:ec:a0:3b:
         0b:1e:2d:66:90:c0:d5:d3:16:51:9b:17:f7:68:73:d9:49:f6:
         4f:b5:d6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:01:26 2026 by rpki-client