Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
File:                     9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft (raw, json)
Hash identifier:          s57ucL+TVJdJvpJHAVeJtL8qV8RKVP4WwmulXFI864E=
Subject key identifier:   D5:54:2C:E8:8A:40:78:5E:5F:CD:34:E0:9F:7E:8C:9E:EF:29:18:07
Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1
Certificate issuer:       /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1
Certificate serial:       2CC1F53D517875667036A2867C4CE584033F3C4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
Manifest number:          0113
Signing time:             Mon 02 Mar 2026 02:40:58 +0000
Manifest this update:     Mon 02 Mar 2026 02:35:58 +0000
Manifest next update:     Thu 05 Mar 2026 07:30:58 +0000
Files and hashes:         1: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: n7MsU+NqSEfM83vem4uRyZBilJV0EOOi2kf/za1AxU8=)
                          2: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: kwAZ838D0ERhtGt/Ke2PpJnDihw3zY8GMQxxC8oDZ/k=)
                          3: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl (hash: fG6FPdoO/Va6c9J8CQc04La1veDXYj15rFBNc9TNpcw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl
                          rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c1:f5:3d:51:78:75:66:70:36:a2:86:7c:4c:e5:84:03:3f:3c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1
        Validity
            Not Before: Mar  2 02:35:58 2026 GMT
            Not After : Mar  5 07:30:58 2026 GMT
        Subject: CN=D5542CE88A40785E5FCD34E09F7E8C9EEF291807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:11:05:b7:86:22:22:50:94:ac:69:b3:46:
                    c6:3b:d6:c5:c3:c8:4f:37:e9:07:f6:04:f1:0d:21:
                    a2:5a:fa:ca:ac:e4:32:17:73:1c:c7:00:cd:68:8f:
                    12:8c:2c:6c:c2:41:e6:4a:90:24:56:af:56:32:ec:
                    f7:52:ef:00:7c:70:b0:e0:15:da:42:61:f1:46:88:
                    cd:45:6a:d7:d5:c1:6b:e8:c2:6a:04:61:ba:23:36:
                    55:3c:90:91:b0:e3:68:f0:29:99:18:7e:da:d2:1c:
                    0f:d4:34:8e:04:a4:ae:77:bc:a8:a5:7e:c5:42:72:
                    2c:22:01:ce:ed:7e:58:83:b9:6a:6f:a7:0a:3a:68:
                    7d:5e:e3:f1:67:d8:f8:ef:a6:c5:32:3e:81:0f:04:
                    30:d9:a4:fb:c2:0d:f2:87:52:ab:06:38:9a:8b:a4:
                    83:7d:36:3f:e4:a9:b4:d5:2b:9a:fd:60:55:4f:35:
                    97:f6:1d:3e:89:e3:ae:f9:a1:43:4c:b4:24:78:b9:
                    e0:11:dc:f5:c8:e7:19:4a:fd:54:54:9d:16:b5:07:
                    57:5d:bd:dd:8b:4d:3b:84:65:30:44:85:a1:6a:5d:
                    3e:f3:9d:9b:c7:d5:b4:55:00:23:e4:85:23:b1:54:
                    a4:19:7c:39:75:88:b1:b2:c2:a9:33:a5:b6:50:2f:
                    a0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:54:2C:E8:8A:40:78:5E:5F:CD:34:E0:9F:7E:8C:9E:EF:29:18:07
            X509v3 Authority Key Identifier:
                keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:70:5b:94:6d:93:34:0c:7a:7e:c9:e1:33:9a:77:89:86:3d:
         76:6b:e9:b2:c7:36:1b:01:67:48:84:45:46:29:63:a3:84:28:
         a5:75:f7:b7:49:a5:b4:92:86:4e:ac:74:44:e7:c7:54:ac:96:
         bd:43:b3:a7:6c:59:2f:6a:11:86:e6:6c:72:be:71:cf:75:f9:
         08:0b:d1:4c:9a:62:68:7a:06:b4:ea:ee:18:ea:91:40:f1:e6:
         09:74:f8:98:33:69:1c:0e:54:d0:9c:7f:85:ff:c5:e4:7a:3f:
         45:65:69:09:f6:00:7e:13:1f:65:06:ca:b7:7b:ea:b7:e8:81:
         5d:3c:2b:95:a2:f1:0c:87:b1:1b:87:f2:27:7b:3f:c9:39:40:
         36:41:bf:65:71:91:19:f1:c2:b9:58:78:8f:97:4f:48:41:b9:
         20:31:df:35:45:00:a3:f3:2f:c8:7d:ae:42:17:0b:97:24:fc:
         35:27:d9:56:27:56:a0:80:ab:b6:e7:1a:bf:b7:a0:70:77:f4:
         88:ac:27:3f:13:3b:00:be:47:1c:b8:c3:c6:77:68:96:b4:96:
         26:1b:52:b3:25:98:1d:b8:f7:e7:e5:7e:d5:d7:9d:ce:06:ae:
         ea:d4:30:d9:82:02:15:ab:67:9a:9d:a3:c4:f9:15:93:5a:4b:
         0d:be:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:30 2026 by rpki-client