Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
File:                     F490341241E1B1C7D170AB872CA39A68309B3F3B.mft (raw, json)
Hash identifier:          ZVD9521Eyu9gumMqegLMmnnryvS0V+978zYwRSEWOJ8=
Subject key identifier:   1C:E0:8B:C6:1D:40:73:D8:57:E0:A4:A1:B0:EE:5B:6F:8F:31:72:F1
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       1EC5F440C398368C3829E4372C033E86C5F3E09A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
Manifest number:          0573
Signing time:             Sat 28 Feb 2026 10:11:17 +0000
Manifest this update:     Sat 28 Feb 2026 10:06:17 +0000
Manifest next update:     Tue 03 Mar 2026 19:49:17 +0000
Files and hashes:         1: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (hash: 760KemyA/8CG6teBonQBDvPWQiZb2MFgnxH7YjBubLE=)
                          2: F490341241E1B1C7D170AB872CA39A68309B3F3B.crl (hash: wRwg/+BBnKqUOzk9hiYM/H/5M+1SgFRKgFO2dXdXJhg=)
                          3: 3138322e3235352e322e302f32342d3234203d3e203436303439.roa (hash: s6t8B9Yb32gbmphUa2yAhVP1WuavRJY2Ru8LFunH5f8=)
                          4: 3138322e3235352e312e302f32342d3234203d3e203436303439.roa (hash: /whKyexdqjSOrcGqLso5j6gTdy//noyVQBpRBCINN/I=)
                          5: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (hash: I1A638CYsM8J+ynZCPmsBPN7YoHXf4XqHlMcOkLKF2I=)
                          6: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (hash: q1fJNMSMrTdPYX6ezkyT1Xn0IDgEntngG/ryVwe3mo8=)
                          7: 3138322e3235352e362e302f32342d3234203d3e203436303439.roa (hash: QRYn8WtwsQRs+x1TkdeVU1UH0/rjpzX3BZt6CYg28oE=)
                          8: 3138322e3235352e372e302f32342d3234203d3e203436303439.roa (hash: ZOn1duEgq0Mggi6JeNyv0wxbJd/1uQH8PSmUAhWuNpM=)
                          9: 3138322e3235352e332e302f32342d3234203d3e203436303439.roa (hash: 916QQrsogPaFL20AzlqFBpH82vUOjVu3r9uBPeIXCrE=)
                          10: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (hash: RKttGS5PwJEjpYkkwnYXSXMh2rGPID7tZySIx4z8fXc=)
                          11: 3138322e3235352e342e302f32322d3232203d3e203436303439.roa (hash: WTHU/5ITLWOOuxdsynAF/KxIVTWen6H2gEJyk6lWAdc=)
                          12: 3138322e3235352e302e302f32342d3234203d3e203436303439.roa (hash: CAyWkxyi9LMtsrHYjfAG2boS5jHeuAANIsKyYBMp0r8=)
                          13: 323030313a6466303a62353a3a2f34382d3438203d3e203436303439.roa (hash: 2VAQFfeqQhEyAnMrmaTI9sSR0U2G484A8xe93rrxtaE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 19:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c5:f4:40:c3:98:36:8c:38:29:e4:37:2c:03:3e:86:c5:f3:e0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Feb 28 10:06:17 2026 GMT
            Not After : Mar  3 19:49:17 2026 GMT
        Subject: CN=1CE08BC61D4073D857E0A4A1B0EE5B6F8F3172F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:85:23:74:34:0d:15:39:ce:72:c0:f8:a6:77:
                    ac:7e:e1:80:ec:a0:7b:d0:cb:7d:7c:17:56:21:30:
                    e7:fd:89:c0:a2:76:c3:25:96:47:5d:d1:45:d9:2b:
                    8e:86:47:6c:00:b7:61:a1:b1:3d:d6:31:11:70:bf:
                    c6:c5:d3:e9:96:9f:ce:dd:8f:f4:5f:56:6d:86:11:
                    84:89:fc:ad:82:22:31:45:8a:ab:11:85:59:f6:cb:
                    cd:a1:19:36:67:28:9a:c7:79:84:4c:79:50:b6:1d:
                    94:36:ad:25:69:18:3c:92:e9:ee:58:78:74:49:5b:
                    36:97:80:e8:23:9e:bd:d2:2d:b7:fe:94:a6:8e:72:
                    08:60:30:5c:f3:c3:2d:53:06:11:d0:43:be:83:aa:
                    84:09:7e:10:ea:8f:83:54:3b:18:fb:36:51:79:25:
                    19:72:37:4e:4a:13:7d:a9:f8:2a:04:91:96:fc:ef:
                    a1:f7:cf:b8:1d:d3:fc:45:c0:ff:31:fc:12:3e:f4:
                    fa:9c:51:6c:4e:fd:8e:83:eb:30:dd:3b:d2:26:cc:
                    2f:eb:64:a1:db:84:18:c9:7d:32:a3:87:10:b4:9c:
                    86:2c:3a:14:4d:d7:48:d8:f4:06:df:e2:2e:56:8e:
                    36:a7:10:e2:55:d5:5c:d3:47:5c:73:81:3b:94:d1:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E0:8B:C6:1D:40:73:D8:57:E0:A4:A1:B0:EE:5B:6F:8F:31:72:F1
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e7:84:73:d6:5f:c2:8a:27:75:ce:8f:8d:26:b4:cb:3c:43:
         7e:83:88:62:c2:8a:a5:d5:15:27:cb:f7:21:5e:65:4e:38:04:
         e3:f2:12:78:05:ba:58:fb:99:c9:20:51:b2:d1:b7:31:7d:c0:
         aa:d1:be:12:87:64:a4:1f:66:fd:0c:5a:be:6a:4f:bc:5a:dd:
         87:14:9d:8d:65:6a:28:35:64:2c:a9:e3:fc:28:b7:a1:22:b7:
         61:62:46:3d:fb:ac:31:d6:df:2a:8f:cd:0b:07:af:53:25:5c:
         70:80:64:71:2b:2a:1f:84:41:a9:56:29:e1:bf:df:3d:95:64:
         85:a1:19:06:91:2f:f1:3d:63:2a:42:fc:1d:ae:a2:df:95:b3:
         6d:37:2b:06:33:bb:e2:66:ca:de:4a:e4:0e:ca:f8:8d:41:98:
         b6:9d:a5:93:94:48:ca:b4:68:2c:32:34:f7:dc:00:c7:ac:5c:
         46:39:04:c7:6a:a7:26:05:7e:d4:5f:c6:95:c3:41:b8:c4:fd:
         bf:72:d1:21:87:55:bd:c4:89:82:d7:76:a7:2c:e8:cf:95:2c:
         bb:75:f1:6f:d3:f3:23:9f:af:80:85:ff:65:a1:a9:80:72:51:
         0f:f8:83:31:7d:7c:0e:9d:51:5d:23:c7:d1:ea:62:77:ef:cd:
         d5:d7:dc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:45 2026 by rpki-client