Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft
File:                     B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft (raw, json)
Hash identifier:          SGLlODuUlg1+PyBeKIiPOyUdCuxhq+dYyHBdPdO+U5I=
Subject key identifier:   95:D7:72:D8:F6:F0:B1:E2:D9:43:A8:0D:B1:5A:EA:D2:D0:4B:AD:3F
Authority key identifier: B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65
Certificate issuer:       /CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665
Certificate serial:       73E8B8383E41293980473A49A8CB366A7429CE80
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft
Manifest number:          01E8
Signing time:             Wed 25 Mar 2026 20:30:50 +0000
Manifest this update:     Wed 25 Mar 2026 20:25:50 +0000
Manifest next update:     Sun 29 Mar 2026 04:24:50 +0000
Files and hashes:         1: 3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa (hash: fR4/sRkESHHEeZ0tfJRKaTFK0AKCxACnf8guj16EfzE=)
                          2: B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl (hash: UVBcyb0ZlM66eucj4qhdK7SNEtuB38iJYllCaNAYLTQ=)
                          3: 3130332e3134312e3235352e302f32342d3234203d3e20313331373639.roa (hash: UcW1iFtA3xmwGxl0rMA15ydO8ueLUu0PDp6eYLpRscg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl
                          rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 04:24:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e8:b8:38:3e:41:29:39:80:47:3a:49:a8:cb:36:6a:74:29:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665
        Validity
            Not Before: Mar 25 20:25:50 2026 GMT
            Not After : Mar 29 04:24:50 2026 GMT
        Subject: CN=95D772D8F6F0B1E2D943A80DB15AEAD2D04BAD3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cf:39:8d:82:d1:8a:37:b8:99:94:79:62:99:
                    4c:52:9d:c4:bf:0e:36:72:d1:69:59:cf:40:0d:35:
                    28:31:6a:7d:c8:9d:5a:10:70:b4:4b:5e:ff:16:1b:
                    49:89:39:e7:4a:99:da:79:11:41:5c:a1:71:7e:e4:
                    ce:47:6e:62:76:00:d5:46:17:d6:39:2e:ac:86:9a:
                    cb:1a:53:ee:53:be:a3:1f:8a:e4:47:72:27:77:d8:
                    3d:c6:f2:b4:03:35:13:d2:c6:8f:5a:2d:a5:3f:a0:
                    15:27:d1:55:be:f3:57:0c:ed:4d:66:97:9a:fb:7d:
                    ad:18:fe:cd:41:fe:07:48:4b:28:41:5a:10:27:ae:
                    9c:a9:54:b8:50:98:08:a5:e5:93:8b:e0:08:0c:d4:
                    1e:a6:11:5e:e2:57:9d:af:e6:45:91:f4:a6:9f:65:
                    9f:49:7a:52:f2:02:40:9a:d0:b9:a9:5f:0b:3b:88:
                    52:39:12:7e:d2:43:5e:76:8a:53:46:d8:ec:0b:e8:
                    57:c3:d9:da:1a:fb:85:5b:6e:ce:67:bd:16:93:95:
                    05:d4:4c:59:a3:16:72:8a:62:ee:96:2a:bd:35:6d:
                    f6:80:e9:28:22:ac:54:48:ff:23:63:eb:61:30:a6:
                    d8:65:eb:c9:b8:72:d3:06:ae:a1:97:fc:30:0d:fc:
                    09:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D7:72:D8:F6:F0:B1:E2:D9:43:A8:0D:B1:5A:EA:D2:D0:4B:AD:3F
            X509v3 Authority Key Identifier:
                keyid:B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:72:93:18:de:be:0e:38:5e:36:0d:83:82:82:83:97:34:6e:
         fa:18:86:51:a4:16:0b:aa:e7:c9:26:49:4d:22:9f:93:a7:8e:
         0e:82:e7:8e:84:75:af:8c:64:e2:2b:5a:c8:ff:d9:1c:eb:17:
         47:50:c0:c9:68:bb:ef:be:e1:86:21:7c:4b:ad:67:26:49:9e:
         f4:7a:3c:af:15:83:55:d2:b1:57:fd:57:c4:ff:a8:c6:95:c8:
         a1:92:f0:70:3b:c7:9d:93:3c:20:d1:e2:f0:04:44:c9:38:c0:
         cc:b2:fc:02:b6:f8:c5:82:38:b5:d8:7b:e5:ea:0d:89:88:d1:
         eb:fb:ea:ac:a3:5e:17:29:9e:4d:48:d1:4a:94:88:3f:c8:dd:
         8e:a6:7e:2d:66:da:b7:11:31:b0:ae:17:0c:db:c4:d7:31:54:
         67:23:57:d1:c2:8c:24:fe:03:84:9c:22:c6:93:b9:dc:7a:b8:
         3b:53:56:0a:55:9b:38:b3:ce:4c:c2:ac:c4:f2:fc:87:c1:20:
         02:95:7d:89:ab:50:88:99:77:6f:08:f3:67:00:a4:e4:63:f1:
         ac:e9:a7:ad:f9:b8:da:66:6d:36:a7:c6:86:20:67:c8:4b:5d:
         04:3c:ca:89:d5:b9:88:91:13:b5:8b:bc:97:1d:eb:d5:54:33:
         3b:40:af:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:49 2026 by rpki-client