Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
File:                     8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft (raw, json)
Hash identifier:          5ZASCYyzjAVJ8vy1Seri+wuQacMSQzaDzgBWm5PnwFE=
Subject key identifier:   49:BA:C2:B0:46:6F:07:78:3C:C9:0A:8C:DC:A7:F1:5D:18:03:1D:D6
Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6
Certificate issuer:       /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
Certificate serial:       08C3528D104B9C17221A5B01C093AFA1F72FDFA4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
Manifest number:          0437
Signing time:             Sun 01 Mar 2026 22:52:21 +0000
Manifest this update:     Sun 01 Mar 2026 22:47:21 +0000
Manifest next update:     Thu 05 Mar 2026 05:34:21 +0000
Files and hashes:         1: 323430343a636163303a3a2f34382d3438203d3e20313339343137.roa (hash: e4FelqGd8iSRDSYch9869PAfm5c/LDLNH50WEwKvgAs=)
                          2: 323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa (hash: J6NKKnMdVBOwrUcgcaUDqWIhEe+SxM9efvKnIwDrFFw=)
                          3: 323430343a636163303a316135623a3a2f34382d3438203d3e20313339343137.roa (hash: MlXNXecpYDMt2QQpUBakOr+EIFlAaxsX2zQH4wGOi/0=)
                          4: 323430343a636163303a666630303a3a2f34302d3430203d3e20313339343137.roa (hash: NL2aJR33roSrH0rfHxsWPH389zRfhX/C1lq5KI784/M=)
                          5: 323430343a636163303a3164353a3a2f34382d3438203d3e20313339343137.roa (hash: CX8B1mfhdsQDS9zQa9oKoJyxv1N2NZ8tGCcdQTHRuuE=)
                          6: 323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa (hash: s06nZ8vR0a4OcKfgZ9Rjay7aeq0mrdev7aQnhemDQBQ=)
                          7: 323430343a636163303a633032653a3a2f34382d3438203d3e20313339343137.roa (hash: TBR11DrPkyQgDEOjgsvbiFDryM9x2tI6poq7H38GvyM=)
                          8: 323430343a636163303a313030303a3a2f34382d3438203d3e20313339343137.roa (hash: PstEcCmg8gG5vVbo9YMYrQiqRv+ddYd7Zf80KwU2EV4=)
                          9: 8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl (hash: rMV9hMg/ZAg1ISyPb+4kQt/FXK3Hr6jsD5obPK6t4Zw=)
                          10: 323430343a636163303a313164353a3a2f34382d3438203d3e20313339343137.roa (hash: lN6IUo8XcirGXXI7zultPSLQfKt0KthPpzYWW5DChjw=)
                          11: 323430343a636163303a626162653a3a2f34382d3438203d3e20313339343137.roa (hash: ZZvd3DR6EuZwjhunUnqDOW5iI+a8OxR4MhiwHS29Yuo=)
                          12: 3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa (hash: 39SdZBT8G8X+WZ5lEwXOpRf3T2DX1nTTj3OeQb4f5Zk=)
                          13: 323430343a636163303a3a2f33322d3332203d3e20313339343137.roa (hash: s53TJWJAv9flAi62r4hsK2rclk66IcAtKdIRIb1s/Ps=)
                          14: 3130332e3133382e3131362e302f32342d3234203d3e20313339343137.roa (hash: 9Sw3qPXHiBs5nB21roqS7CsayEDhLD78ZFeflymZdjY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl
                          rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 05:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c3:52:8d:10:4b:9c:17:22:1a:5b:01:c0:93:af:a1:f7:2f:df:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
        Validity
            Not Before: Mar  1 22:47:21 2026 GMT
            Not After : Mar  5 05:34:21 2026 GMT
        Subject: CN=49BAC2B0466F07783CC90A8CDCA7F15D18031DD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:7a:9d:4a:02:74:cc:6f:fb:67:ee:6c:f8:
                    53:58:d6:27:6f:3b:f1:cf:bc:8d:ba:d0:89:63:12:
                    cc:bc:b9:5c:c5:af:37:85:67:b3:c1:6f:6f:7b:0e:
                    08:e3:09:43:20:68:a3:c0:41:10:b0:91:be:19:3d:
                    d9:1d:b4:78:08:47:64:b2:8c:14:3a:4c:0a:fd:0a:
                    b8:15:0d:60:9c:6a:d5:f0:b0:f0:7d:b9:f8:f1:b2:
                    db:42:18:74:1e:b6:30:73:e1:db:b2:35:8e:ca:de:
                    48:3c:42:8e:b9:9d:49:ce:14:e8:27:66:b5:f8:a8:
                    6c:10:0c:0e:c5:3a:56:b8:04:6a:de:b5:68:88:95:
                    5d:d8:e3:91:cd:64:9c:48:8e:c3:0f:1b:33:72:e7:
                    10:bb:42:e5:f6:02:3d:f4:36:3f:d8:1e:f0:9d:3c:
                    e3:9a:41:99:ae:ab:33:cf:af:b3:a3:1d:5b:9d:c9:
                    6f:3c:e1:22:0d:79:6d:74:34:09:c8:0c:2a:64:6d:
                    06:24:90:13:97:d2:72:3b:8d:e9:3d:6d:f6:96:6a:
                    1d:3b:a1:83:88:9b:42:6b:f3:5b:2a:76:bd:5c:67:
                    dc:94:93:ca:76:09:ee:12:9d:c5:1d:e4:3d:d8:d7:
                    e7:db:39:f0:0e:74:a3:d9:4f:9d:2d:8a:a9:e1:55:
                    6c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BA:C2:B0:46:6F:07:78:3C:C9:0A:8C:DC:A7:F1:5D:18:03:1D:D6
            X509v3 Authority Key Identifier:
                keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6b:6e:69:69:e6:a4:78:45:bc:d6:f4:0c:56:d1:68:30:56:
         f3:91:de:c4:80:06:1d:42:07:8c:06:34:e4:d7:d1:88:5c:69:
         48:e4:68:c6:04:47:22:b1:ea:07:ed:d2:86:f9:00:5e:e3:94:
         d6:2b:7c:b1:91:bd:dd:45:7c:66:9c:56:58:1b:c1:69:e3:e4:
         28:10:5a:24:19:d6:61:04:0e:5e:8f:6d:39:33:4e:d7:29:17:
         a4:61:35:86:34:98:0b:a9:31:be:53:80:17:76:e3:94:8d:ab:
         ae:be:d2:12:ee:ac:06:ff:e6:86:42:d2:01:4a:2f:d3:f3:3b:
         b7:85:8b:9d:e9:0b:f1:6f:05:4a:a6:2d:a9:c4:eb:eb:40:2c:
         33:2c:fc:7f:d8:64:35:78:df:7e:ed:8d:2f:56:51:12:7e:97:
         90:8d:98:1b:3d:c8:88:e8:1c:bf:84:79:64:d2:06:b4:f9:e9:
         bc:aa:86:7f:6f:09:88:d7:33:7f:01:b5:89:1d:31:cb:82:7d:
         b3:35:75:fa:2e:6d:82:10:46:9c:5b:46:ea:f2:2d:29:6b:66:
         a8:38:84:e9:b7:52:f9:57:83:e4:5f:2c:8a:df:e2:eb:78:71:
         21:92:d1:5d:f5:54:4e:a8:81:36:b0:33:3c:22:9f:8a:33:02:
         dc:52:61:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:13 2026 by rpki-client