Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft
File:                     F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft (raw, json)
Hash identifier:          Q1OSaYrmrCj3l/d9Kj1iuiRnNqjny3m9BioFECXezrE=
Subject key identifier:   26:94:11:21:95:8D:71:9A:4B:2A:D4:1C:CE:6E:D8:EA:F5:91:7C:38
Authority key identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51
Certificate issuer:       /CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751
Certificate serial:       062E6725C041F5B3ABFFB1A54C06B85D7370F241
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft
Manifest number:          04F5
Signing time:             Wed 25 Mar 2026 00:52:06 +0000
Manifest this update:     Wed 25 Mar 2026 00:47:06 +0000
Manifest next update:     Sat 28 Mar 2026 01:46:06 +0000
Files and hashes:         1: F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl (hash: TQfJ/cqyHUjJXQ0duLTVDPBFJIi+k3Ari2cRfypO2CA=)
                          2: 3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa (hash: 0gt4Ot6+F7fSlrKRykoZVwa5I+j2zIdyxVjYLmEYd1w=)
                          3: 3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa (hash: APKnqzs0AhNltyzReDLYt5pEaL3GFsO7SJudc2pHP5w=)
                          4: 3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa (hash: MbvKBjhGVKXrhTAYqLQTkHHlmqfGdIcd1OSrPlpqfSU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl
                          rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 01:46:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2e:67:25:c0:41:f5:b3:ab:ff:b1:a5:4c:06:b8:5d:73:70:f2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751
        Validity
            Not Before: Mar 25 00:47:06 2026 GMT
            Not After : Mar 28 01:46:06 2026 GMT
        Subject: CN=26941121958D719A4B2AD41CCE6ED8EAF5917C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:93:80:c2:7a:d3:f7:1f:78:f2:94:49:2e:
                    85:5a:2f:5e:c7:d2:30:78:3d:1e:49:1b:ba:c7:8a:
                    c7:4b:ea:4a:0f:66:8b:e2:29:82:fc:ee:96:1a:d3:
                    fe:44:45:87:11:e4:36:a0:69:87:59:f1:d9:48:0a:
                    d0:6d:79:d0:8e:aa:ab:71:c0:30:42:5a:7c:4a:2f:
                    b0:92:30:79:0e:fc:e8:2e:68:f2:67:9d:dc:29:27:
                    50:4a:29:86:ca:d0:25:0f:5e:9f:aa:c7:2e:27:88:
                    b5:34:ac:a1:dd:5c:de:24:73:c4:71:7e:dd:5f:42:
                    21:fe:7b:b0:c9:00:12:28:d9:b8:a8:62:af:0d:d4:
                    46:b0:b9:03:75:2b:03:9f:67:9d:e4:4d:cf:b5:62:
                    30:93:da:67:65:ae:69:16:63:57:49:9b:ae:4d:59:
                    33:ca:07:37:fc:52:94:36:37:7d:c5:3a:db:41:b3:
                    29:09:27:6e:a8:70:04:10:69:14:df:87:05:d1:31:
                    3e:0b:29:6e:56:8d:46:4c:14:2d:0b:94:25:b6:4a:
                    7e:cd:4f:12:81:40:9a:9c:5f:5a:b3:88:0c:63:28:
                    2a:51:34:6a:40:47:3d:97:57:15:e3:28:dd:d9:25:
                    9a:cd:f7:14:60:8d:e8:16:19:83:75:c7:9a:9e:9f:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:94:11:21:95:8D:71:9A:4B:2A:D4:1C:CE:6E:D8:EA:F5:91:7C:38
            X509v3 Authority Key Identifier:
                keyid:F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ed:be:57:04:ae:43:c6:71:79:6d:83:c3:bb:ed:4e:88:e7:
         d2:e5:0a:ac:4d:df:b6:9c:bd:7d:ab:6c:18:6a:4f:55:64:59:
         09:45:ca:fa:44:a8:4d:61:a8:4c:fc:85:91:fb:0e:27:9a:8f:
         0a:51:dd:a1:ad:e1:05:aa:f1:cb:be:1b:23:89:23:82:08:f0:
         d1:1a:30:9a:c5:ab:de:48:c7:c5:22:90:cc:4d:50:23:3d:94:
         b4:3a:93:84:17:b1:b0:55:1b:a7:f4:6f:fc:72:bd:63:46:18:
         ec:8d:2a:aa:c4:50:33:62:2d:92:2e:48:08:ce:62:6e:b7:aa:
         26:8f:af:22:63:5f:f0:3a:38:6b:ab:07:db:9e:b3:b4:a5:bc:
         30:e9:fd:f2:ce:fe:8d:fb:47:0b:ff:ce:2e:a7:3e:89:05:c6:
         66:59:67:54:4e:80:1c:ab:d2:4e:6f:ae:e1:19:d4:71:5d:87:
         b4:bb:bb:86:a2:83:84:c7:50:d8:38:2a:84:3a:72:de:87:00:
         bb:bf:49:f9:6c:3a:76:b0:cc:f1:55:6f:90:78:03:6e:d7:c9:
         60:68:6f:a6:01:bf:fd:40:86:93:a7:0a:ab:86:79:2a:91:d7:
         3d:38:ba:90:5b:7f:1e:39:a0:47:1f:f6:f0:df:47:3f:bd:5c:
         32:5d:47:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:53:26 2026 by rpki-client