Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
File:                     11D0290B4630192458231FFEA93A463483E71D15.mft (raw, json)
Hash identifier:          Hnr1wBPF2aUijKy3qw+QJiWjLktoI411/GZ3o5CEOKM=
Subject key identifier:   D7:95:D7:51:D0:40:17:A0:97:31:56:B8:A2:F3:CE:28:0C:83:F1:CB
Authority key identifier: 11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15
Certificate issuer:       /CN=11D0290B4630192458231FFEA93A463483E71D15
Certificate serial:       026CECB3A1FA562A20D4B933CE4D3CC8DF17A9E0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
Manifest number:          0202
Signing time:             Wed 25 Mar 2026 08:32:20 +0000
Manifest this update:     Wed 25 Mar 2026 08:27:20 +0000
Manifest next update:     Sat 28 Mar 2026 18:57:20 +0000
Files and hashes:         1: 11D0290B4630192458231FFEA93A463483E71D15.crl (hash: UfwoLycXFvhldFgS5/cO090ulIlM+/x6wagBQOpP9iI=)
                          2: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: u+vUasuo+Igy3NmWXga5XKWPQhhkbM5VIPkZA+eRxSc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl
                          rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6c:ec:b3:a1:fa:56:2a:20:d4:b9:33:ce:4d:3c:c8:df:17:a9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11D0290B4630192458231FFEA93A463483E71D15
        Validity
            Not Before: Mar 25 08:27:20 2026 GMT
            Not After : Mar 28 18:57:20 2026 GMT
        Subject: CN=D795D751D04017A0973156B8A2F3CE280C83F1CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:23:3e:2b:d1:43:97:5e:04:28:d7:5a:5d:
                    56:61:c1:78:a7:ff:bc:44:be:53:34:29:72:22:fc:
                    21:05:1d:67:8e:26:6e:fc:4b:0b:54:3c:0b:37:97:
                    b8:24:4f:92:e6:11:fe:67:5e:2e:ed:f7:51:1e:d4:
                    0f:a7:a3:ff:fd:a6:06:87:84:18:a2:f2:06:8a:d2:
                    b5:b3:a3:2f:b9:64:12:af:2c:83:20:17:84:3c:12:
                    f9:cd:08:a8:c4:03:a8:37:6d:6f:6a:ae:4e:e2:40:
                    ee:6c:26:7d:94:e4:a4:2c:e6:44:e3:05:a5:56:cd:
                    e4:9e:ab:d4:46:4f:ef:04:a5:f0:2c:86:b9:83:7d:
                    c1:de:ca:09:1f:95:44:5c:cf:b1:96:32:f0:44:7b:
                    1a:2b:b9:0e:75:95:23:82:cf:9b:1b:93:f4:bd:ef:
                    ff:7c:98:a4:1b:e9:48:74:71:95:f3:59:70:90:7a:
                    d7:ce:21:6e:b9:02:61:6a:4a:c3:a0:07:15:78:57:
                    8d:5b:b0:43:a0:e5:82:67:6d:77:6d:bb:f2:92:c4:
                    c0:7d:10:18:38:c1:44:a9:9d:3c:07:67:70:e4:17:
                    9e:12:40:31:1d:82:34:e8:7d:53:c6:68:15:eb:34:
                    d4:54:81:0e:e7:2e:33:77:d7:7c:73:70:64:77:53:
                    55:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:95:D7:51:D0:40:17:A0:97:31:56:B8:A2:F3:CE:28:0C:83:F1:CB
            X509v3 Authority Key Identifier:
                keyid:11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:2e:b8:b5:c0:55:5a:a2:33:19:ec:c6:03:fd:87:45:62:b6:
         be:51:52:b6:ee:de:b0:2d:69:0c:05:a6:4f:b0:50:11:94:9c:
         f1:f3:8c:75:a5:5e:a3:5c:36:64:e4:8e:b7:b2:5b:35:9c:28:
         7e:e6:af:eb:00:c1:f9:c9:b8:01:df:fd:d2:61:a8:1c:ac:39:
         20:be:80:f5:20:e6:74:d0:61:55:9f:d5:b6:26:5d:1a:0b:79:
         6b:84:95:56:3a:83:e0:6b:0b:72:6c:78:ac:26:3b:8b:3b:9e:
         c0:e7:ab:b8:cf:f9:f7:b3:25:ff:3b:12:02:50:4b:3e:f1:e2:
         bb:10:f3:83:49:b5:88:13:f0:e1:a2:03:0e:8b:9e:f0:23:ed:
         12:e8:6d:7f:6d:f1:59:4c:46:f8:1e:d5:ca:b2:d0:a0:42:ad:
         d8:14:3a:27:53:97:82:1b:6b:f2:2a:80:36:6d:65:85:47:d6:
         71:22:78:69:fc:4c:c9:41:38:86:65:7b:c1:bf:84:b0:da:bf:
         d1:b2:f7:96:f2:bd:de:0f:79:a5:63:33:c8:59:76:ad:39:90:
         7e:cd:9a:40:45:b9:20:90:de:37:b8:8b:15:50:46:20:bc:e8:
         fe:64:04:c6:50:c2:ed:d2:fc:26:b3:14:38:cd:41:01:02:35:
         00:df:a6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:56:32 2026 by rpki-client