Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
File:                     8999E6DA986A355F868ABD73E4E2AADC08244F29.mft (raw, json)
Hash identifier:          rjeh+WV1S04im4NWHeuro7XpTGU6MP3l2k+wb7SDt/k=
Subject key identifier:   86:D3:FB:C3:7B:EF:4D:69:25:BC:F5:11:AC:1F:24:B3:E7:B3:3D:D1
Authority key identifier: 89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29
Certificate issuer:       /CN=8999E6DA986A355F868ABD73E4E2AADC08244F29
Certificate serial:       29010D39A4A06FA41150369423D7372BFE70399C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
Manifest number:          012C
Signing time:             Thu 16 Apr 2026 17:52:35 +0000
Manifest this update:     Thu 16 Apr 2026 17:47:35 +0000
Manifest next update:     Sun 19 Apr 2026 23:57:35 +0000
Files and hashes:         1: 8999E6DA986A355F868ABD73E4E2AADC08244F29.crl (hash: +UbV4wHSBOLEHMUf2+P//SONP3DCcZhipDs0mNt+dE4=)
                          2: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: g0W4yfpco5rqCeJ3sGtEPJSj+o2p48FtppiRKtinTxM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl
                          rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 23:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:01:0d:39:a4:a0:6f:a4:11:50:36:94:23:d7:37:2b:fe:70:39:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29
        Validity
            Not Before: Apr 16 17:47:35 2026 GMT
            Not After : Apr 19 23:57:35 2026 GMT
        Subject: CN=86D3FBC37BEF4D6925BCF511AC1F24B3E7B33DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:fa:3e:fa:8e:a3:84:6f:5a:d2:03:39:3c:
                    84:12:48:5d:d7:29:d2:dc:a3:72:54:4e:cd:75:8b:
                    dc:66:15:53:4a:92:30:d2:17:89:c2:d3:36:af:07:
                    16:6b:fb:46:d3:f6:4b:a0:3a:af:5b:4d:bf:9a:df:
                    c0:9e:10:51:cb:84:ae:96:1a:9f:89:08:16:5e:7a:
                    af:90:c4:64:9e:66:6a:bd:cb:6c:90:3e:89:45:6f:
                    1d:72:7f:68:18:05:78:2f:69:48:6c:8e:c2:28:1a:
                    39:19:69:d0:47:b4:72:98:fe:45:0c:80:8e:16:b7:
                    8e:fc:c0:46:d6:e5:6f:e2:15:32:ac:10:d7:4f:08:
                    18:a2:ac:4c:4c:1f:71:a3:1a:0e:fa:f4:66:c3:ab:
                    98:58:b3:b8:08:73:79:b5:c0:89:58:df:29:d4:ad:
                    e5:a0:a6:fb:67:fe:df:b4:af:4c:85:d0:d4:2e:3f:
                    8c:ad:7d:ad:08:94:0e:1a:63:51:35:20:5f:18:d3:
                    f2:35:e0:56:97:65:56:a5:d9:37:38:7e:31:32:a9:
                    cb:80:24:41:1c:6a:b9:19:7f:11:7f:c2:1d:9a:b6:
                    3d:15:75:81:d2:a3:85:ec:8c:63:e3:db:46:20:76:
                    d4:c0:49:9a:de:fd:73:61:45:39:eb:6b:94:49:ea:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D3:FB:C3:7B:EF:4D:69:25:BC:F5:11:AC:1F:24:B3:E7:B3:3D:D1
            X509v3 Authority Key Identifier:
                keyid:89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:8f:41:dd:36:42:d4:e0:22:21:25:92:46:1f:46:c8:3e:a9:
         33:56:ac:38:28:f0:31:a6:6d:fc:2a:46:5a:1d:38:aa:13:5f:
         36:5c:51:a6:8e:8d:2b:28:2c:48:e9:b0:bc:ab:b2:6a:6c:a2:
         03:d8:52:fb:c4:3f:84:c0:bb:2f:0d:54:b6:96:6f:d5:e2:0a:
         24:94:e1:d4:ae:74:31:85:1d:b6:99:3c:70:62:ae:37:82:f6:
         fc:75:51:51:b8:ca:b2:db:85:0e:d9:d7:60:5d:e5:87:fc:57:
         cd:90:cb:5c:61:76:f8:8c:56:b2:d0:19:bd:d2:f0:6a:d5:a1:
         ca:6e:e0:11:fa:eb:1b:d3:08:4d:5c:7c:99:77:d6:f8:64:2b:
         3c:6e:4d:85:0d:04:1b:ff:b0:39:f7:14:56:5c:32:1f:84:16:
         aa:38:6f:b6:fa:4d:04:82:30:d2:61:ff:1a:33:9e:b8:a2:8f:
         3e:d7:4b:92:d2:15:60:ab:eb:df:e1:f0:63:7a:6b:25:48:cc:
         17:36:30:f6:60:3c:28:f6:ff:bd:4e:fe:1d:4c:c2:e4:88:8f:
         f7:ab:11:02:fe:98:27:b9:7f:47:be:10:16:ee:db:99:02:87:
         d2:31:9f:20:d7:e0:51:f6:4c:b1:a7:87:24:db:a2:a5:67:db:
         6a:cb:58:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:04:07 2026 by rpki-client