Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft
File:                     19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft (raw, json)
Hash identifier:          nJCle3Ww9fPLxbgjLd5LjESq6cw6H62qrFZcLBWc8Yk=
Subject key identifier:   0D:2A:6B:48:62:D9:F8:47:E6:CE:D0:58:99:B5:F9:94:50:31:77:C2
Authority key identifier: 19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C
Certificate issuer:       /CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C
Certificate serial:       38B7E7F35F4E82B138E836F2470D0CB2BF957269
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft
Manifest number:          0554
Signing time:             Sun 01 Mar 2026 04:21:50 +0000
Manifest this update:     Sun 01 Mar 2026 04:16:50 +0000
Manifest next update:     Wed 04 Mar 2026 04:25:50 +0000
Files and hashes:         1: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Be1o2enB5OVbfeTb11FQx0y/6KQQnTeDSPNmLL8NRc4=)
                          2: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: hclG6eHZVb4H2Dv3mKJVXKKatJdKMCXUFJ5B8dDmEf4=)
                          3: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl (hash: FPOi2UTjtGcIXFjOEyfXn7o5mNyVClbKO4jqe6VYGl0=)
                          4: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: U5fnoyr/5IIStrT2HEQ+BlCOUuRxzROoZ8IEFi9/L1Q=)
                          5: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: 4brGPOCgGPQmWwoETwSHHbE2lw9R22KEcXYm0M7Fp90=)
                          6: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: HO0xgGTKI8hDqeJBD1vkonWKYqVkEjngRgMiBcK+FFk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl
                          rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 04:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b7:e7:f3:5f:4e:82:b1:38:e8:36:f2:47:0d:0c:b2:bf:95:72:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C
        Validity
            Not Before: Mar  1 04:16:50 2026 GMT
            Not After : Mar  4 04:25:50 2026 GMT
        Subject: CN=0D2A6B4862D9F847E6CED05899B5F994503177C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:46:69:25:9a:da:1b:74:9d:95:07:08:d6:
                    27:d1:71:03:99:1a:65:3c:10:7c:4b:7f:f7:23:a3:
                    b1:16:dc:e4:64:2c:0a:39:f3:e0:a1:65:eb:a5:94:
                    f4:2b:d4:14:cc:0b:7f:e7:e4:ca:ea:d8:4c:f3:ab:
                    5c:3a:0a:4b:90:32:61:45:a6:e6:1f:53:ed:10:06:
                    56:eb:c1:32:59:ea:df:62:92:ec:c9:b7:8e:78:34:
                    ec:65:58:81:99:68:86:b0:08:a3:59:5f:55:22:3b:
                    6b:04:16:d1:b1:36:08:48:06:36:a3:79:69:0b:0b:
                    f2:5b:39:71:d9:2e:75:3a:0f:23:a6:9a:30:a4:a6:
                    e3:94:87:4b:b0:13:65:e9:b5:bb:95:66:c6:89:90:
                    63:d0:af:10:6c:f8:9f:78:b2:e8:60:dd:d8:bd:ab:
                    ba:96:35:86:4a:15:8d:dc:00:f9:17:9f:79:cb:23:
                    cc:9d:ae:21:21:3d:21:ce:6a:91:2d:9f:c0:18:54:
                    00:ee:be:e1:a8:83:1a:65:02:c3:b1:c2:4e:71:38:
                    41:b1:3b:4d:8e:99:35:52:36:61:67:67:14:bb:89:
                    a8:db:2f:90:d9:2f:77:bd:1e:00:13:53:d9:f5:70:
                    c7:c7:fd:74:4a:7d:8c:c4:78:ff:19:2c:26:a0:65:
                    c3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2A:6B:48:62:D9:F8:47:E6:CE:D0:58:99:B5:F9:94:50:31:77:C2
            X509v3 Authority Key Identifier:
                keyid:19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ba:a6:8f:2b:60:d3:5a:61:6c:1b:02:e9:62:f4:75:93:ff:
         77:fd:79:d6:60:47:21:ac:a6:3f:09:40:2a:24:b0:46:49:52:
         30:36:de:eb:67:40:a8:26:51:6d:3f:36:5f:63:2d:35:45:eb:
         ee:51:c5:17:52:96:e7:d0:27:f6:b4:21:fe:55:44:05:6a:76:
         33:0d:07:eb:c3:09:b4:8b:d8:6d:e7:fa:88:c6:29:2c:91:46:
         16:01:4c:a7:14:57:e6:25:c6:39:9a:1f:ed:c4:f5:8f:1c:f5:
         66:21:99:c7:52:e3:ff:ce:f7:62:82:95:20:13:7e:a9:d6:e2:
         c8:96:54:51:4d:a6:80:dd:1f:07:64:84:58:3c:08:c0:95:9c:
         f5:9a:2b:48:ca:72:6e:ee:0d:00:11:10:ac:c2:e3:96:51:f8:
         8f:dd:d7:42:52:a7:a9:64:62:83:e1:ae:0b:4c:8b:68:fb:ec:
         95:ee:fc:63:47:aa:fa:f0:a6:ba:44:93:fd:3c:e3:f7:0b:f1:
         44:44:72:30:50:7d:2f:ca:e4:89:96:b3:b6:b4:b6:9b:74:55:
         69:5e:3e:c4:03:2c:f7:c9:55:3f:09:21:85:98:97:3d:15:69:
         ac:36:c0:35:8b:9a:fd:75:3c:20:23:20:9b:fd:66:52:9c:a0:
         39:71:08:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:11 2026 by rpki-client