Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft
File:                     4ED16B9231905A1C7A353DF749BF99487E69E313.mft (raw, json)
Hash identifier:          GWyXH/vxlwWDUqLcq6U724qS3yAGBIbiAjIflfbWRDg=
Subject key identifier:   59:8C:3F:96:2C:BD:ED:C3:B4:69:F8:36:26:61:4C:AF:9B:65:38:27
Authority key identifier: 4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13
Certificate issuer:       /CN=4ED16B9231905A1C7A353DF749BF99487E69E313
Certificate serial:       0149381355F42BBBDAE678CC0BDA5FA3510069A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft
Manifest number:          0139
Signing time:             Mon 02 Mar 2026 10:01:37 +0000
Manifest this update:     Mon 02 Mar 2026 09:56:37 +0000
Manifest next update:     Thu 05 Mar 2026 17:32:37 +0000
Files and hashes:         1: 4ED16B9231905A1C7A353DF749BF99487E69E313.crl (hash: a93KpEax0fPdkTafT340SpmLyRzmfqJD4jyNN28SwI4=)
                          2: 3135372e32302e3130302e302f32342d3234203d3e20313532343235.roa (hash: 7VTB88vseP1qaXg78jeUQOCaADrxTcbc/a9UTrZD8c0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.crl
                          rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:49:38:13:55:f4:2b:bb:da:e6:78:cc:0b:da:5f:a3:51:00:69:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ED16B9231905A1C7A353DF749BF99487E69E313
        Validity
            Not Before: Mar  2 09:56:37 2026 GMT
            Not After : Mar  5 17:32:37 2026 GMT
        Subject: CN=598C3F962CBDEDC3B469F83626614CAF9B653827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:16:bd:9e:69:17:a9:f8:a0:1c:1a:25:9a:7b:
                    14:39:34:f6:4f:02:2e:c8:d9:3f:3f:dd:4d:80:b0:
                    80:88:cc:c1:7b:90:83:27:81:d0:99:11:47:93:a3:
                    d6:28:ad:d1:fa:10:6a:16:a4:39:1b:b4:e9:b5:1b:
                    40:c1:42:a3:e6:36:5b:15:52:7f:7b:eb:4e:84:f7:
                    1a:bc:c5:45:a2:d5:d7:05:c1:61:01:d0:68:63:20:
                    fa:ef:ab:cd:9f:8c:bd:55:80:3d:5e:47:1e:8c:fa:
                    02:e2:fe:cb:f7:d7:fe:11:fd:f8:89:2b:89:fa:d5:
                    36:00:82:e8:f0:12:87:8d:79:72:d8:fa:ee:c0:02:
                    ba:da:38:ff:7a:03:69:1d:05:e5:bd:6e:f2:c6:fc:
                    10:5e:a4:79:e8:2b:31:cb:d9:f4:c0:a4:02:c7:41:
                    c9:29:08:e1:7c:51:a6:bc:2f:f9:95:7f:12:8c:2d:
                    cb:c7:72:38:1e:fd:06:22:21:b5:be:be:d2:f0:64:
                    2a:be:d5:a3:ee:0d:c6:c4:30:74:dc:f9:aa:c4:d7:
                    e0:f9:7a:63:18:ac:a9:d3:c6:ef:54:cb:42:d9:32:
                    78:91:e5:fa:4f:39:3c:f5:d3:13:2c:5f:47:fc:e8:
                    58:56:d9:6a:06:70:4a:b2:b2:a3:e5:41:50:77:70:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8C:3F:96:2C:BD:ED:C3:B4:69:F8:36:26:61:4C:AF:9B:65:38:27
            X509v3 Authority Key Identifier:
                keyid:4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:41:40:95:04:6a:9f:24:42:d0:9d:cd:7e:e7:b5:f6:9f:0c:
         63:1c:ea:79:ee:a6:93:84:5f:97:34:a8:e9:a3:39:88:81:b3:
         bc:b3:2f:d7:6e:bc:cb:47:71:c6:86:51:c5:08:60:bf:e2:bb:
         72:9f:81:7e:f5:d2:e3:6d:25:b0:6d:12:0a:85:92:2c:72:97:
         67:9a:d2:95:61:48:62:96:18:84:ab:b5:16:75:4b:db:a4:bd:
         eb:a8:ab:5c:81:dc:b1:c1:f8:f4:25:18:38:fe:ae:ab:e3:27:
         3b:fd:93:a1:b6:c6:1a:e7:1d:bb:0f:ad:0a:16:e6:e6:59:55:
         98:58:fe:54:68:12:27:c7:8f:51:07:df:75:31:14:fe:55:b0:
         4d:2f:40:86:9e:2f:b7:1b:b3:6b:c7:24:da:34:f7:81:a8:10:
         3d:8d:f6:a3:56:1b:9e:c0:da:eb:d3:ca:fd:77:66:0c:4a:2b:
         7e:31:f8:2f:30:1a:d5:e3:6a:e9:cb:67:86:ef:29:05:db:f9:
         fe:1c:a7:07:1e:ed:6c:1f:45:31:88:30:51:48:57:f0:b9:05:
         ff:5a:63:a9:40:22:f4:59:cc:7b:df:01:05:dc:d3:fc:2a:80:
         bf:5b:a1:3d:4c:b4:e7:a1:4f:ad:d0:75:48:65:88:64:71:56:
         0b:f8:87:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:08 2026 by rpki-client