Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
File:                     8B7E0099F26BEEE90826C9B0E424575BDE128403.mft (raw, json)
Hash identifier:          eKT9cKdAts2/jSXax9HYK+SEL/evf+xqVEo2yLQd2RI=
Subject key identifier:   49:01:81:C3:7D:7D:A4:E2:FA:10:5D:C0:FA:4B:96:39:1B:0B:8B:24
Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03
Certificate issuer:       /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403
Certificate serial:       0E8FA5C6F87BABD8E5A26C3224A5AF52AA42AF56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
Manifest number:          02E6
Signing time:             Wed 25 Mar 2026 19:42:23 +0000
Manifest this update:     Wed 25 Mar 2026 19:37:23 +0000
Manifest next update:     Sun 29 Mar 2026 00:26:23 +0000
Files and hashes:         1: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: E6T8Gt5EtL567pGgeSiX6DPJMeUcOvm0iW+qF8Vx1Vo=)
                          2: 8B7E0099F26BEEE90826C9B0E424575BDE128403.crl (hash: AjUtfP73aNHAA5QxzLwVAPwCf+XpuL3+ccyUAgfQfwY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl
                          rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 00:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8f:a5:c6:f8:7b:ab:d8:e5:a2:6c:32:24:a5:af:52:aa:42:af:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403
        Validity
            Not Before: Mar 25 19:37:23 2026 GMT
            Not After : Mar 29 00:26:23 2026 GMT
        Subject: CN=490181C37D7DA4E2FA105DC0FA4B96391B0B8B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:6c:08:3d:3a:3f:67:e5:61:6a:ff:e2:47:
                    c7:8c:1b:be:ce:f0:44:19:6d:64:11:20:2e:d5:58:
                    ff:4a:3d:49:6a:d6:0e:44:04:ff:69:d0:87:a4:17:
                    8c:50:91:9f:a7:03:d1:a4:d7:cc:bf:cf:21:9e:aa:
                    19:d6:14:0b:da:b8:7b:8f:f3:89:5d:71:6d:e1:9f:
                    78:15:84:a3:1e:06:7f:fa:c4:00:b8:2c:be:62:23:
                    04:92:23:f4:35:38:f5:be:61:94:10:d8:4a:1f:ab:
                    29:f5:32:5c:8f:16:6e:34:fe:5c:57:20:c0:8e:05:
                    b5:a3:8c:4e:96:99:a0:d7:69:b0:1c:28:ac:20:5b:
                    95:3e:aa:6e:97:fb:ad:60:18:1f:ce:c8:e2:20:80:
                    36:a0:d3:a6:76:04:73:ca:b9:b5:1c:17:80:95:55:
                    d6:e8:17:7c:53:88:5f:dc:16:95:33:5a:2e:0e:6f:
                    e2:d7:c0:c6:dd:f0:c0:31:c5:8c:b4:a7:2d:e6:6a:
                    13:27:52:b0:ea:64:61:97:b1:8d:50:6d:ea:c2:b4:
                    bf:58:3f:24:17:05:8d:ec:0c:c2:0d:32:8e:76:21:
                    f9:46:b2:c9:cb:ba:fc:70:bb:e8:85:b1:3a:2e:30:
                    ef:ca:2e:78:63:b2:64:40:bf:ef:0d:d9:9f:c3:78:
                    4f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:01:81:C3:7D:7D:A4:E2:FA:10:5D:C0:FA:4B:96:39:1B:0B:8B:24
            X509v3 Authority Key Identifier:
                keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c1:e3:df:ba:d4:57:a6:68:62:8f:e5:45:52:aa:02:cc:78:
         4f:ab:b3:d8:81:e5:a7:75:a1:b3:e6:d0:9e:96:a9:d1:d2:79:
         7f:61:7d:1f:a6:16:f7:07:29:ec:fe:84:04:84:17:98:44:04:
         a6:9e:cf:30:cf:ec:22:dc:6b:ee:96:02:55:d7:7b:10:60:b6:
         91:1d:8d:4e:93:25:4c:17:dd:19:56:c1:2b:52:43:8e:e4:c1:
         b5:3b:b5:ca:98:08:c9:85:4c:7e:cd:3f:d9:17:b7:29:62:6a:
         0f:9b:e7:0b:73:a9:3f:ea:54:d2:eb:c0:83:14:61:93:65:d5:
         50:02:e2:c1:c6:fe:fb:e6:57:8d:96:ee:c0:d7:e4:dd:af:99:
         55:70:1e:c5:e4:69:d7:06:dd:32:05:ab:95:27:b9:3b:f2:87:
         42:aa:df:28:12:09:17:eb:af:91:a3:41:ed:0a:6c:9f:30:2a:
         de:c2:df:19:5f:72:49:28:65:04:47:63:86:07:9b:b6:b8:6c:
         7f:b5:55:67:b0:3b:98:73:b4:3a:2d:5a:44:6e:9b:79:1c:95:
         c4:28:c8:90:6a:65:2e:a9:73:55:0a:5c:4e:ad:a2:aa:ba:f2:
         52:76:0f:0d:67:fe:bb:15:eb:c3:b6:63:7d:d2:89:e0:49:43:
         6f:5c:69:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:55:25 2026 by rpki-client