Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
File:                     12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json)
Hash identifier:          7fOD4eaIkOvF8Ac2cqvoZD70HeGnsGJbd1U7F3aS5MA=
Subject key identifier:   FA:9D:2E:83:EE:A5:EB:79:C7:55:B5:FA:81:A2:2A:26:1D:FA:E8:5A
Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Certificate issuer:       /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Certificate serial:       1C00EAF21547B912ECC645C4B6AA951F47CB465C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
Manifest number:          055D
Signing time:             Sat 28 Feb 2026 17:30:46 +0000
Manifest this update:     Sat 28 Feb 2026 17:25:46 +0000
Manifest next update:     Tue 03 Mar 2026 18:33:46 +0000
Files and hashes:         1: 3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa (hash: TL6kftFt7vP2GTuixxW6r7zs8Ky4SmBEeLPTG5yr9A0=)
                          2: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: g7sZOa2Wbk8lNyORs7Hzsjx7qfWDAk/nkutfeaz6250=)
                          3: 3135312e3135382e31302e302f32332d3234203d3e20313331303735.roa (hash: cqvatD7Cg6pNEzgIw2WwWbtZBJHhttbVP+mmzWaLbBQ=)
                          4: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=)
                          5: 3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa (hash: IT9x0P/3RDDAHWuOeI/lOb1Fh67e62i5Nd9Bu80+ylI=)
                          6: 3135312e3135382e3233342e302f32342d3234203d3e20313534353230.roa (hash: /mPQp0zRLRixv4ruZ9YF3ierQjYd2QtemmGEIe6D21s=)
                          7: 1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer (hash: fewpVNLy6/HRvoDNDTlZwpVW2bZGk39++Q7XR4HP7Tk=)
                          8: 24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer (hash: t0TI2xUV9CSJIC6Ugf/2mUDyvpKoJrWf1xg05ApUJ+s=)
                          9: 38322e3135382e3132382e302f31392d3234203d3e2039333431.roa (hash: kXLN0HaZu/PhLPiFi30mit71JHQuO6u1X5gZIB305jg=)
                          10: 3135312e3135382e3230332e302f32342d3234203d3e20313336373833.roa (hash: NPFmuPD5p1q4xsC0OUpbrvvz76wi/OaRGYsWFjn+/80=)
                          11: 3135312e3135382e3230342e302f32332d3234203d3e20313534353232.roa (hash: DjXkhi3atbqk0A2teZVs4TmRpsS8LWjuJgAMaAjN4zY=)
                          12: 3135312e3135382e342e302f32332d3234203d3e20313432313938.roa (hash: AFjW+EEHhzoA6cLg/0TGjATfpii/CqiAmCZUF80TZ90=)
                          13: 3135312e3135382e35362e302f32332d3234203d3e20313432323538.roa (hash: eQeLFKLBPCDpd3UM2/Z4NimaOA9d7w4AVtrEMyVO6ds=)
                          14: 3135312e3135382e3233362e302f32332d3234203d3e20313534353233.roa (hash: 52qrDnM09tRZ9PTF92Y51pJWQ24eofPJfXULRl1uZ6c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 18:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:00:ea:f2:15:47:b9:12:ec:c6:45:c4:b6:aa:95:1f:47:cb:46:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
        Validity
            Not Before: Feb 28 17:25:46 2026 GMT
            Not After : Mar  3 18:33:46 2026 GMT
        Subject: CN=FA9D2E83EEA5EB79C755B5FA81A22A261DFAE85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:53:86:66:f7:aa:d7:26:4f:85:f7:0b:71:
                    d9:29:81:db:90:f6:08:ca:7c:f2:3d:8f:67:2d:a5:
                    ca:60:d4:5a:62:6d:8a:8e:8a:7a:d8:2f:44:b3:38:
                    c8:cc:36:f1:db:3b:56:80:e0:3e:ca:5d:53:cc:0a:
                    1b:cf:17:a6:ce:d0:8c:4f:f4:2a:24:18:82:e0:8e:
                    77:08:70:d5:c0:40:e0:da:cb:5d:68:45:ae:9d:93:
                    38:1d:b1:7b:c6:ac:83:5a:77:26:c2:9d:0d:9f:30:
                    52:f6:cc:75:d6:1d:e8:f9:12:4d:53:91:99:b8:06:
                    c9:75:59:44:89:5e:3b:12:6a:e7:de:9f:30:a2:76:
                    29:1c:ac:64:c8:11:c4:8b:b2:be:7f:91:26:44:56:
                    6f:16:25:f5:5a:d8:c5:1c:38:cf:be:2d:c5:b9:1f:
                    86:69:bb:a8:fd:3d:6b:e6:07:14:ac:52:71:34:27:
                    07:99:6a:fa:4a:94:bc:3d:a8:1e:7a:4c:1a:5b:ab:
                    a6:cd:40:9d:0e:ca:cd:49:7d:48:2e:cc:f1:ac:ca:
                    03:d7:e0:a8:8d:91:e7:a4:fc:88:ba:6d:2d:cb:7e:
                    06:4a:09:76:69:06:ff:2e:c2:ba:82:a3:4f:5e:aa:
                    33:d2:55:64:fb:50:28:eb:5e:b4:71:71:8f:5a:91:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9D:2E:83:EE:A5:EB:79:C7:55:B5:FA:81:A2:2A:26:1D:FA:E8:5A
            X509v3 Authority Key Identifier:
                keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:79:65:73:cc:9e:09:80:96:fe:eb:e4:64:b2:2d:7c:7c:d3:
         7d:04:3f:00:53:eb:66:8c:d0:9e:0a:7b:b5:5d:1d:8c:86:7c:
         99:20:99:8a:dc:e9:26:98:01:b3:d5:bb:43:a0:51:77:29:3b:
         b2:45:45:0b:79:89:5e:fb:43:5b:15:c0:43:56:1d:f8:42:88:
         0f:c0:a4:bb:3d:53:c9:0d:53:cc:58:d9:4d:e3:91:60:66:d5:
         c6:81:78:1d:ae:64:0c:73:55:44:ad:7e:0d:21:08:96:b7:0f:
         dc:06:f2:a9:d2:10:89:4d:93:2a:8e:73:8e:ff:59:b2:80:7b:
         c0:fe:4c:c7:60:d2:3f:e3:da:85:b5:1d:45:d6:21:40:55:38:
         6a:bc:48:be:3d:99:6b:54:78:8f:ca:fb:7f:29:26:34:b5:3e:
         d3:95:28:d9:2f:33:7c:73:4e:24:ca:b3:a3:a3:b6:08:6c:51:
         db:69:72:99:70:05:5e:bb:60:31:20:8c:d7:a2:ac:fc:a0:5c:
         33:bf:50:9f:88:b8:94:af:c2:48:4c:4c:1e:ed:d7:af:4a:01:
         dc:5f:19:12:bd:61:df:52:a8:2b:0c:5f:5a:17:5f:7b:b6:ac:
         50:51:1f:c1:52:e0:5e:06:e9:18:01:73:2e:80:eb:8a:c3:be:
         73:73:6f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:40 2026 by rpki-client