Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
File:                     1F56B4FADE1163027086547FBCB424EDF45191FD.mft (raw, json)
Hash identifier:          JuAdTcTEod7pmXrKqhTvhtWriBcONxK7pcJMyfV2nIk=
Subject key identifier:   43:97:4A:86:CB:A2:0A:45:EC:CD:17:9E:B1:07:4D:33:68:E0:86:B0
Authority key identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD
Certificate issuer:       /CN=1F56B4FADE1163027086547FBCB424EDF45191FD
Certificate serial:       6DA847F263B408A29DE2D8F2536158DAC8041B5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
Manifest number:          0250
Signing time:             Sun 01 Mar 2026 01:11:46 +0000
Manifest this update:     Sun 01 Mar 2026 01:06:46 +0000
Manifest next update:     Wed 04 Mar 2026 13:05:46 +0000
Files and hashes:         1: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: MgjQuZZ4Lo3TWUBhrnPqAcWFkrZSN9rapanfesBZ5eM=)
                          2: 1F56B4FADE1163027086547FBCB424EDF45191FD.crl (hash: OzlNvKxqUBzAnOUCNRKjUiEDPb+m00IcG6miTsj/D1w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl
                          rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 13:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a8:47:f2:63:b4:08:a2:9d:e2:d8:f2:53:61:58:da:c8:04:1b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B4FADE1163027086547FBCB424EDF45191FD
        Validity
            Not Before: Mar  1 01:06:46 2026 GMT
            Not After : Mar  4 13:05:46 2026 GMT
        Subject: CN=43974A86CBA20A45ECCD179EB1074D3368E086B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:e8:3a:61:c4:fb:ce:75:e3:9a:47:0c:ef:
                    32:53:80:d3:0c:69:e2:b1:2f:51:c1:9d:f8:7d:44:
                    54:21:c0:d7:36:65:cf:c4:3b:3c:19:39:c4:31:fe:
                    89:8e:e6:28:5f:62:a2:21:88:72:e4:ca:1b:36:ad:
                    f2:d9:c5:0a:3e:fb:7d:f0:24:06:24:b9:fe:ce:55:
                    05:9d:00:6c:dd:67:c7:ba:39:df:09:78:15:90:2b:
                    4c:fd:37:75:71:45:71:2a:37:ae:ee:b2:3f:d2:27:
                    14:4e:75:6b:10:c2:75:07:b9:b6:c7:6e:95:c1:a9:
                    b0:25:71:cf:cb:fc:1b:20:6b:90:02:44:89:38:1b:
                    2f:54:1c:7a:c8:52:07:a7:5e:23:34:fe:5e:72:00:
                    70:94:d2:19:bf:64:ff:fa:77:60:32:f9:65:96:80:
                    04:39:40:07:dc:da:2f:9f:47:40:d1:f8:27:f7:99:
                    c9:51:ab:d6:bf:22:11:5e:e5:f3:6e:82:77:96:b4:
                    49:b7:c5:5e:0d:c9:2f:93:e5:5d:06:ff:43:45:b3:
                    91:59:50:2a:87:ac:41:e7:d1:81:83:52:99:61:cb:
                    f7:2a:fa:da:e9:ff:d5:db:8f:be:ba:11:30:46:20:
                    3d:a9:ca:37:a3:60:2e:b9:f9:b0:5e:60:95:d0:c5:
                    12:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:97:4A:86:CB:A2:0A:45:EC:CD:17:9E:B1:07:4D:33:68:E0:86:B0
            X509v3 Authority Key Identifier:
                keyid:1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:a5:77:ef:ed:ed:d1:83:62:49:1a:07:6a:32:fd:7c:43:cb:
         7b:47:70:25:b0:de:ab:37:47:e4:91:1c:2a:fd:44:e6:bb:94:
         27:67:2e:ce:fb:45:06:9e:58:cf:94:72:5f:77:00:56:72:4f:
         95:af:96:0c:81:0a:b6:10:a6:32:17:b9:69:e9:83:21:f0:1c:
         8c:0c:8d:14:b1:8e:10:f8:53:60:94:b0:6d:6e:a7:05:c0:f3:
         aa:e8:4f:81:a2:9e:7a:c1:72:50:de:3d:bc:86:15:3d:eb:bb:
         b1:44:8d:88:10:da:0f:09:92:7a:b4:9e:c3:b6:70:d9:ca:bc:
         3a:d2:3c:76:06:9f:a2:a8:9b:3b:7a:08:fd:9b:15:97:cb:fa:
         2c:e0:88:5d:3f:68:a9:dd:13:95:37:51:d4:d7:17:86:dc:74:
         53:34:fa:fb:5d:36:3e:68:b9:9e:d8:3b:cd:d3:92:b4:ff:c4:
         1d:62:a8:e7:6c:1d:ec:55:40:cc:6d:ce:62:ee:50:7c:a9:3a:
         84:8f:6c:46:80:94:5e:31:a9:cd:10:a0:1a:8c:88:6c:d6:7a:
         2b:fe:f3:22:9f:ff:ba:b5:16:77:bf:57:4b:ac:b8:5b:bc:fb:
         ce:36:25:40:23:80:da:dd:94:d9:6d:75:ef:88:00:36:2e:19:
         ee:07:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:01 2026 by rpki-client