Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
File:                     8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json)
Hash identifier:          r3JG2ImZ1k9biTWjucf7Q7VT4u4vfxTa37m6W+fUqn0=
Subject key identifier:   58:A7:FE:B6:C2:A0:BF:57:A5:61:BF:95:56:B5:9B:8F:A6:DF:B5:2E
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Certificate issuer:       /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial:       7F5A0D09FDD9B29CC7B581F45EB061BCA161D0B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
Manifest number:          056A
Signing time:             Sat 28 Feb 2026 07:31:53 +0000
Manifest this update:     Sat 28 Feb 2026 07:26:53 +0000
Manifest next update:     Tue 03 Mar 2026 17:24:53 +0000
Files and hashes:         1: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: M3nv0mC0g0dVK72c2OJ01BOoKTGk3r0NAIb60MF1lcw=)
                          2: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: D991UEHbv0mT0xjDcSLCu5iaTm6ib67YwDcjKkL5vPw=)
                          3: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=)
                          4: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: SDQ6xpzFoeg0lTwEJkVJ2YC5ntC/O8NvcqwJeEYUXmo=)
                          5: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: RS4Z5hPliFofbuZy6siMGSvvq53kTGe3aDopkAMtX7s=)
                          6: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=)
                          7: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=)
                          8: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=)
                          9: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=)
                          10: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=)
                          11: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: Iku7tb8SAQIhEvwkUVsI01KnPzpIZ553w7v11/ErUtM=)
                          12: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: mcVf06fMIjlRSFSVE0qz9zT6Xd6/HGBKpUj+lwZoqGo=)
                          13: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: 0G3umGSNIafLUyMMJjc+XpTQjFcLRIMU7BoomAPsjew=)
                          14: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: lzhEeQ6DAkKFZoSDXb/ij7h8jtExSjFLGzcvwIopMPE=)
                          15: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: 8bH62zhwf0kgF3amh047ZVAlbr2i3orRPBn9qkRCMJk=)
                          16: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=)
                          17: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=)
                          18: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=)
                          19: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
                          rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 17:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5a:0d:09:fd:d9:b2:9c:c7:b5:81:f4:5e:b0:61:bc:a1:61:d0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
        Validity
            Not Before: Feb 28 07:26:53 2026 GMT
            Not After : Mar  3 17:24:53 2026 GMT
        Subject: CN=58A7FEB6C2A0BF57A561BF9556B59B8FA6DFB52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:43:c0:59:16:75:6d:58:ea:ff:c1:2f:0a:d6:
                    f1:9a:0b:43:6d:d0:ca:30:57:32:0d:d5:e8:fc:90:
                    f5:15:f6:c2:c7:22:ec:1d:48:75:6f:50:28:fb:dd:
                    1a:b6:b4:f9:d2:1b:c4:4d:a5:e0:7e:cb:c5:41:85:
                    b7:f9:e6:60:3a:09:fd:25:d7:db:06:30:cc:de:78:
                    0c:9a:02:1d:2f:2a:2f:2f:9f:5f:95:bd:28:38:35:
                    f0:32:c9:72:05:51:42:05:04:56:99:23:d6:dd:7d:
                    76:b3:10:27:7a:aa:73:ab:4e:39:36:f9:de:99:e9:
                    8e:32:3c:25:a8:96:f2:36:47:03:af:71:3e:ee:f4:
                    d8:ea:7e:55:c1:15:8d:ed:c3:c9:93:e3:48:74:40:
                    fc:8f:f1:53:74:d7:1d:41:d4:ea:02:03:22:b7:1e:
                    6d:b7:a6:e8:fa:1c:03:9f:a9:10:5a:cd:be:43:be:
                    b7:78:de:9e:66:8c:a4:61:d5:91:b0:62:82:97:ba:
                    71:99:97:4c:20:41:fd:8a:e9:2a:f6:4e:b9:6f:84:
                    0a:e9:10:2d:87:ae:91:30:22:3d:30:8e:dd:3e:0b:
                    eb:e4:d1:9a:56:67:01:66:28:dc:75:7d:dc:e3:31:
                    f6:9a:14:79:e7:a3:a8:9d:35:85:0e:ad:eb:7d:23:
                    f2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A7:FE:B6:C2:A0:BF:57:A5:61:BF:95:56:B5:9B:8F:A6:DF:B5:2E
            X509v3 Authority Key Identifier:
                keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:00:6a:d7:89:93:93:3b:b1:e3:64:bc:56:39:be:ee:65:cc:
         10:57:2e:5d:5b:77:57:db:d0:48:f3:4a:5a:f5:4f:e3:ac:c3:
         61:3a:c3:0d:f2:4c:86:32:64:d5:b7:df:49:a3:84:98:35:93:
         78:23:ac:2f:0a:f7:05:2a:46:58:f4:38:f4:5f:01:6c:96:a6:
         23:4f:7a:2f:ce:34:32:7a:65:5f:68:87:a7:58:03:99:9a:a2:
         a1:0e:cc:a7:1d:f8:b4:0b:49:54:a3:a0:b2:de:f4:c7:49:d4:
         08:ab:32:8e:74:36:04:1b:43:74:4d:6f:17:fc:e3:a1:1c:34:
         86:28:05:d7:0e:cd:71:a9:b3:23:f0:6d:77:d0:fe:df:e2:e8:
         76:38:21:35:10:e7:25:bc:98:1c:76:47:8e:00:ee:96:73:f2:
         9a:52:0e:48:e9:c3:e3:e9:84:56:59:dd:1d:49:c5:ff:0c:8c:
         42:60:79:25:58:a9:55:ad:4a:97:ad:60:eb:90:bf:df:2f:e9:
         1e:73:6e:17:00:c6:0b:87:92:34:42:ec:49:90:d1:0b:7a:0a:
         65:11:58:89:d1:0e:63:0e:b3:a9:6e:05:08:9f:38:fd:f7:bf:
         49:e9:93:ef:44:ab:13:4b:25:48:91:ce:e7:33:3a:95:ba:ec:
         26:4d:f5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:36 2026 by rpki-client