Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft
File:                     A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json)
Hash identifier:          4HS2hK5536bRFmpIGLma/9Lc8D+5lwde/DbNXuOAEjQ=
Subject key identifier:   5A:68:92:27:A6:9B:FB:FE:C9:10:89:92:3B:DA:F2:FF:3A:19:DD:F4
Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F
Certificate issuer:       /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F
Certificate serial:       7BD74EF26FE6AB3106818EDA8B3655BEC1B50302
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft
Manifest number:          0169
Signing time:             Sat 28 Feb 2026 11:00:00 +0000
Manifest this update:     Sat 28 Feb 2026 10:55:00 +0000
Manifest next update:     Tue 03 Mar 2026 13:03:00 +0000
Files and hashes:         1: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: 24zK4sK+RJMP42blVvKb6PvbXXPqR/3RFCcYzFZwsfI=)
                          2: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: 1GcHJ2lyZakepkFB/Af5Gk+X5kDqZQ6u/Ah/ekHwIik=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl
                          rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 13:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d7:4e:f2:6f:e6:ab:31:06:81:8e:da:8b:36:55:be:c1:b5:03:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F
        Validity
            Not Before: Feb 28 10:55:00 2026 GMT
            Not After : Mar  3 13:03:00 2026 GMT
        Subject: CN=5A689227A69BFBFEC91089923BDAF2FF3A19DDF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b1:7b:77:ca:6d:d0:50:56:b1:7c:72:f0:3c:
                    cc:a9:c9:76:17:bd:c8:64:a4:bc:c2:00:ca:53:71:
                    78:3b:d5:8c:de:5b:7d:19:58:da:32:46:09:5b:17:
                    66:30:18:4f:55:89:e1:da:f3:e7:34:27:ca:52:b5:
                    4a:33:7a:48:d5:8a:80:fd:ca:b2:56:f8:0e:87:f7:
                    5f:f0:fb:a4:5a:33:28:c2:50:30:fc:4b:e6:8e:43:
                    bd:5f:f0:f4:15:70:fb:1f:5e:e5:4d:ea:05:09:7e:
                    a7:db:0f:c2:45:fb:4f:24:d8:a3:de:3c:61:96:fe:
                    79:1b:63:d7:e1:b6:cf:f8:bc:96:44:8e:bd:99:2d:
                    d6:f7:aa:e7:aa:56:7d:79:63:fa:51:4c:c6:c9:a4:
                    14:33:52:9f:d6:83:ea:92:6b:e3:96:cc:90:85:8e:
                    8f:97:d0:67:19:7b:da:56:a7:ec:79:f6:27:17:f1:
                    b7:b4:eb:3a:30:86:11:5e:26:4d:38:1a:18:5f:3b:
                    5e:0a:52:70:ee:51:05:83:1f:49:17:9f:13:41:fa:
                    c3:ad:36:24:92:b1:49:31:f7:94:e5:d4:a1:fd:32:
                    56:db:fb:fc:3a:90:5b:18:af:69:82:79:55:2b:ad:
                    eb:f4:b0:30:f4:ce:4e:72:20:bc:24:eb:58:4f:d2:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:68:92:27:A6:9B:FB:FE:C9:10:89:92:3B:DA:F2:FF:3A:19:DD:F4
            X509v3 Authority Key Identifier:
                keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:80:ec:f3:98:69:71:75:ec:7a:e7:c2:0b:8c:d3:62:f9:2b:
         27:5b:b3:1e:18:8f:03:61:4c:a2:8a:36:d9:bb:23:c5:d7:d7:
         e8:b8:4a:d0:13:bb:ba:12:18:7c:30:6d:df:f6:a4:44:5d:73:
         55:5f:d5:96:13:5a:b3:6e:d1:ab:1d:17:ae:1f:b6:2d:74:58:
         5d:4a:74:5d:cd:00:64:7e:ed:92:3e:6b:1c:bb:a3:35:52:4a:
         08:a4:16:89:2f:84:cc:c9:ba:f8:69:90:f9:46:ea:a3:34:bb:
         7e:92:7c:73:fc:6f:de:11:b1:87:e7:e1:29:7f:f3:62:81:08:
         58:f6:7e:9b:4f:d7:7f:24:8f:21:8d:0f:ce:6d:fe:f3:2c:86:
         60:d1:95:c1:b7:ce:6b:76:03:1c:fb:e0:82:56:eb:69:a8:db:
         41:f9:8e:00:e8:66:0a:f1:35:9d:e9:1d:34:1a:57:de:a3:99:
         53:37:16:cc:b6:c7:06:33:1e:a0:e8:b7:e9:ce:b7:47:d3:51:
         a9:4e:98:c7:da:3b:b0:59:92:5f:50:01:d0:a1:15:62:83:4d:
         6e:c5:dd:7f:0f:e4:1a:ba:b6:4e:40:1e:f2:3d:77:cd:b8:a9:
         15:ee:bd:e8:72:17:84:a2:ab:e5:ed:29:9f:37:1a:c0:00:41:
         aa:05:df:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:08 2026 by rpki-client