Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
File:                     8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft (raw, json)
Hash identifier:          cYt69/FYaHzRZDpI3iPZV1+MNNkJpPKSHAvIN7+KHLo=
Subject key identifier:   1D:3E:D2:9A:12:89:BA:57:5F:59:F0:F2:DD:B3:B7:54:9C:C0:84:36
Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B
Certificate issuer:       /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B
Certificate serial:       09F19473A6A4A3B72716D3C16547AD2CD73A7861
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
Manifest number:          0200
Signing time:             Thu 26 Mar 2026 03:10:46 +0000
Manifest this update:     Thu 26 Mar 2026 03:05:46 +0000
Manifest next update:     Sun 29 Mar 2026 13:45:46 +0000
Files and hashes:         1: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl (hash: 0IkBKyvRORPa37bcioZmy1lPfTK8uCLZXlIS5Un/uKM=)
                          2: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: 4aA8UHvWdn6b+e9rvE0qvRNLuWwKk2SM0xhNOkJ4w/s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl
                          rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 13:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f1:94:73:a6:a4:a3:b7:27:16:d3:c1:65:47:ad:2c:d7:3a:78:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B
        Validity
            Not Before: Mar 26 03:05:46 2026 GMT
            Not After : Mar 29 13:45:46 2026 GMT
        Subject: CN=1D3ED29A1289BA575F59F0F2DDB3B7549CC08436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6f:33:72:4b:0e:5b:30:09:19:c7:a5:f0:5a:
                    7a:05:3a:b5:c1:91:d6:9a:aa:ea:90:21:0c:61:db:
                    e8:e4:10:4a:05:dc:ac:07:68:54:80:1f:f6:92:a1:
                    68:51:80:1c:1d:f6:77:81:22:71:95:b7:ab:8a:f1:
                    71:5a:8e:33:60:fe:52:18:5b:53:ee:25:d8:f2:26:
                    2d:a8:c5:e9:1d:30:fe:79:fa:f7:c9:7b:4d:8f:01:
                    41:3c:d9:3b:ff:c6:e0:43:a2:9b:a9:4e:6c:ec:d3:
                    fe:fa:7f:b4:b8:01:0e:46:56:61:0f:7d:35:06:7c:
                    fb:e5:9c:32:8c:ac:c8:48:c2:22:6d:b5:e9:f0:2f:
                    93:f9:7a:b0:39:1e:bb:e3:e4:9f:49:d1:d0:31:04:
                    35:24:b6:24:9e:61:bb:a7:c9:d3:a2:fb:d8:ca:cd:
                    ef:97:21:5e:4f:2d:76:94:58:49:f7:89:7b:24:26:
                    38:56:f9:53:09:58:3d:ef:c5:e2:87:ae:cf:14:01:
                    72:af:88:51:cd:14:8a:48:d8:15:12:94:b1:b1:9c:
                    47:76:32:2e:46:81:ee:c8:2c:f4:00:65:42:2b:fb:
                    35:45:80:f0:09:e4:ca:38:e6:2d:de:ca:8a:62:2e:
                    2a:71:d5:4c:3f:99:73:13:c9:58:a9:13:54:ba:bb:
                    e3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3E:D2:9A:12:89:BA:57:5F:59:F0:F2:DD:B3:B7:54:9C:C0:84:36
            X509v3 Authority Key Identifier:
                keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9c:22:d6:7b:44:d5:23:57:d2:4c:32:7b:03:42:97:36:ae:
         59:8c:36:5e:b7:a7:a9:88:c8:12:d9:50:ad:2c:75:f6:3f:8a:
         c6:25:ea:0e:52:1a:06:e0:64:ea:cb:f7:db:ea:b5:da:d4:49:
         9b:ac:c3:68:b4:0a:94:d9:2e:85:23:b3:52:97:d9:4c:16:6d:
         89:3a:b3:93:ae:58:72:ff:e5:79:04:b3:c5:c0:43:74:a5:3c:
         9b:ca:ce:f9:07:18:eb:a3:2f:e0:d6:3a:08:39:30:b6:c7:b2:
         6c:d8:34:93:e5:e1:9a:e7:84:1e:3b:a9:27:dd:bd:93:ab:44:
         f2:ca:2c:6b:47:68:19:43:bd:9f:78:ed:2f:86:ef:b2:9a:ad:
         9a:e9:96:54:e9:56:f8:ab:38:01:7b:a3:9c:ab:a1:16:de:d1:
         7e:d1:74:a8:82:74:1b:57:3e:e7:f3:0b:d8:a6:2f:dd:46:13:
         fb:92:58:42:18:54:b3:e1:52:cd:4a:f0:fb:b6:97:88:b1:41:
         87:ab:38:17:40:5a:6f:f6:94:8a:14:01:3e:2e:9c:00:5a:08:
         c9:e5:fa:1b:7c:7d:83:10:84:f8:c7:7a:03:c6:07:2c:a1:d1:
         0b:e8:db:68:67:f1:a8:12:b2:15:97:40:4e:25:ae:88:6f:bb:
         01:e2:80:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:14 2026 by rpki-client