Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft
File:                     A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft (raw, json)
Hash identifier:          XLwwRp/mf5WiSf45OMgCNG8Bmomva+f4LhzQ7IQuXk8=
Subject key identifier:   E7:D0:72:63:38:D3:EF:73:B2:75:40:BB:9A:7C:07:3C:C8:64:44:3F
Authority key identifier: A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA
Certificate issuer:       /CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA
Certificate serial:       4CCE25400087203A652BF47F7E7CF7644A070FCB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft
Manifest number:          024B
Signing time:             Sat 28 Feb 2026 13:12:05 +0000
Manifest this update:     Sat 28 Feb 2026 13:07:05 +0000
Manifest next update:     Tue 03 Mar 2026 17:04:05 +0000
Files and hashes:         1: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl (hash: X3Gkt0hhxUzGEdFFsuhUcYuBoznquBnjrutjtVy82wQ=)
                          2: 3130332e3139312e3231362e302f32332d3234203d3e20313439393239.roa (hash: EzMh3H3LMpcsDj1VtV66jHz9y8osKoSaALLtXZ0KBbY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl
                          rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 17:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ce:25:40:00:87:20:3a:65:2b:f4:7f:7e:7c:f7:64:4a:07:0f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA
        Validity
            Not Before: Feb 28 13:07:05 2026 GMT
            Not After : Mar  3 17:04:05 2026 GMT
        Subject: CN=E7D0726338D3EF73B27540BB9A7C073CC864443F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b2:af:38:bc:41:c2:fd:72:08:86:67:19:b3:
                    46:8e:f6:a7:d9:35:68:da:a3:e2:4d:0a:e8:38:32:
                    f1:3c:d3:73:71:68:18:ae:8a:49:e4:0a:81:ba:a2:
                    94:38:76:d3:09:77:46:6a:24:3e:df:28:92:66:3d:
                    40:ca:eb:e9:89:84:b5:94:e5:55:90:e9:92:11:40:
                    45:bb:27:1e:06:4d:c4:29:61:fe:5e:c2:b2:bc:d4:
                    8a:de:55:2f:fc:22:5d:25:2b:61:06:b7:86:ff:e7:
                    d5:ea:13:4b:ca:06:4c:e9:84:f5:1e:85:1c:4d:5a:
                    39:1b:c3:11:46:0f:df:22:68:4a:6e:92:e7:02:5d:
                    01:2d:2e:a1:f2:c2:c7:dc:38:b0:19:1e:58:17:30:
                    89:f5:d5:0a:ae:a7:97:19:80:d1:cf:67:57:28:8b:
                    70:12:3c:f4:0a:58:7b:d9:b8:c8:d4:c8:34:57:10:
                    0b:e2:4c:00:b0:00:aa:da:db:ab:f4:3b:a1:46:9c:
                    5f:97:23:cd:a4:b2:11:2e:86:a7:25:d6:ee:c0:df:
                    65:ca:55:0e:5f:88:72:07:ce:99:f8:79:bd:63:72:
                    b4:49:28:66:0e:92:04:7b:36:d0:5b:ee:2d:33:89:
                    7d:d9:9e:6f:af:40:d6:46:e7:45:f7:74:8e:52:68:
                    62:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D0:72:63:38:D3:EF:73:B2:75:40:BB:9A:7C:07:3C:C8:64:44:3F
            X509v3 Authority Key Identifier:
                keyid:A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:30:c3:1d:e1:28:8c:a2:e0:87:12:54:af:81:3f:a2:b9:01:
         0a:9a:af:58:ab:f9:14:55:6a:a0:71:4d:17:0b:4a:39:73:75:
         ec:fb:91:6d:4d:97:b4:67:da:d1:c8:33:ea:51:21:a8:ec:0a:
         b9:4a:d0:cb:0d:2a:d4:b0:5c:3d:6c:8d:9d:24:29:af:ad:9b:
         5f:49:a8:7c:ef:45:5b:30:04:9e:4f:7e:c7:2f:21:47:ef:eb:
         13:7b:90:33:dc:79:66:f2:3d:c3:ad:ab:66:c4:16:d9:47:9a:
         ad:bd:18:f7:db:e8:3d:e5:fc:46:44:00:95:10:b7:d7:9d:2a:
         10:74:13:3f:2a:e4:0b:46:ed:a0:5a:8e:8e:48:b6:7c:e5:0e:
         90:26:dc:28:93:78:a2:df:8e:3a:aa:47:a5:98:bd:54:09:fa:
         fc:65:02:20:fa:36:1f:2b:41:a8:e6:c8:85:91:ef:92:ab:25:
         19:0c:46:1a:25:50:77:4f:19:80:21:9d:6c:5b:86:83:ce:3d:
         10:64:6f:44:ba:d8:4a:0e:bf:bc:2a:9c:b2:d7:c5:c9:7e:22:
         89:2f:72:89:34:37:41:bd:3a:0c:18:c7:2a:31:6f:3c:6d:76:
         4d:e5:eb:47:63:94:ea:33:cb:40:60:10:ff:22:ef:0a:84:77:
         be:33:a1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:46 2026 by rpki-client