Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
File:                     F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json)
Hash identifier:          hmHKuZPhTBNOCl09A/SAUBd3NUGmFtCRBjjUVrPAcdY=
Subject key identifier:   B9:77:46:5E:33:3C:B3:F9:52:DE:D1:2C:2B:7A:9B:51:D0:75:BF:6C
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Certificate issuer:       /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial:       3EF3E17364455EBF52C8E2A3DD09D13413B54362
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
Manifest number:          056C
Signing time:             Wed 25 Mar 2026 10:21:15 +0000
Manifest this update:     Wed 25 Mar 2026 10:16:15 +0000
Manifest next update:     Sat 28 Mar 2026 16:45:15 +0000
Files and hashes:         1: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: AZYO50pcht7zbgRleVLHSfxxSeX3cLrYkpQk4y4IB8g=)
                          2: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: PAUNyFLoTuXnyzJaaygCGIoZ2kkR7s3iDrCXWwkOWpM=)
                          3: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: YN/2s31112uMwq4KT5YT8EMIK9P8Spv9BQ+gu6aYN4g=)
                          4: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: qZ2majG5cGcPiPcNAPu4jGy/H5NlD9ILAfwhNapK3KI=)
                          5: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: +kWoeqncIsg2yG08LA8FNhnez+6IikrA0zXpF5e1dxk=)
                          6: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: HhAj5FXKG+WPBMJHSmfCQ5YyDXmhJH0Hqke8PTIqGvE=)
                          7: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: 6tYZRHS1gp6lxrRLkcMQOZpyzT7UZqMxo9oLwoeh2Kk=)
                          8: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: VSjVNeF6CQhhuIMP9VzYdgPpAyYTICUyURNkkRPZvf0=)
                          9: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: YHfOb3XSEMDVEIcVfiAIW6kLWlhlW9/hxOsVCiJWMDg=)
                          10: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: I9Xm1cEngTYg6WB2t4U5k+twc9OnUGEq5Opc/dfrZDc=)
                          11: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: 2CVcd1ddLo29W7oeoHdU4qUjtncRgsk0iNAwf87boPg=)
                          12: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: yvTVsKwfMbm9/tZX55oqWjXKQNBRGzzlj+jV8XkeY/A=)
                          13: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: addoLGX7l1qN9yrFfHEwbDZZ1vggnAx8LkSg4qCXPoA=)
                          14: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: 9ttsEv8xyQdIj2ysOYcOeKd2yqYa6sGhfUajffTzKd4=)
                          15: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: X871KmxDisPDxaQpNaNmNV8uKTNCiB9DC630xRuhDpo=)
                          16: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: lsw9Lj4TdivwiY9urFVLBPCnaQDyjQIHv9L2rFNGJcY=)
                          17: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: dn2LxIR2i9f98oBHTTzMm7c0l11yZxH5BdOjGXs/ET8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
                          rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 16:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f3:e1:73:64:45:5e:bf:52:c8:e2:a3:dd:09:d1:34:13:b5:43:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
        Validity
            Not Before: Mar 25 10:16:15 2026 GMT
            Not After : Mar 28 16:45:15 2026 GMT
        Subject: CN=B977465E333CB3F952DED12C2B7A9B51D075BF6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5d:d6:9d:78:27:62:34:2e:30:9b:96:47:26:
                    1f:c7:07:73:5a:53:1e:ee:0d:a8:ad:50:5f:e3:21:
                    16:fd:4f:3f:55:5c:cf:8a:19:bc:54:48:86:48:26:
                    42:5b:c3:8e:07:1a:fc:b9:f8:3d:bc:1a:ed:72:42:
                    30:d2:1c:43:21:2e:32:26:5c:14:55:30:bf:08:b4:
                    bd:9c:d1:a4:43:8d:af:59:b0:31:65:5b:b3:e7:2d:
                    d5:c1:a7:c1:cc:4d:65:69:42:54:bd:b2:bd:5a:45:
                    bf:b4:46:04:fb:2d:ac:69:e3:47:03:9a:77:72:a3:
                    e7:00:70:47:aa:46:bf:89:86:25:de:4c:5a:3a:32:
                    5f:8e:51:f9:01:79:19:56:de:7d:ec:e1:61:6c:95:
                    ab:bd:17:aa:ef:4b:d5:59:7a:66:48:19:97:b9:21:
                    36:f5:aa:7d:75:72:71:34:41:d1:82:b7:73:5f:e2:
                    1f:fd:b2:5e:95:29:da:dc:dd:52:4a:01:89:53:f6:
                    65:b3:db:f8:94:4b:71:b9:70:1a:1f:70:08:ed:59:
                    af:32:b0:71:53:83:cc:3d:e6:ed:a0:b5:6f:89:c2:
                    f5:c1:56:b9:a7:ef:cd:fb:ea:27:07:41:b1:dc:10:
                    e1:2f:52:3c:d0:2c:f5:58:36:1d:84:e6:11:88:1b:
                    f4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:77:46:5E:33:3C:B3:F9:52:DE:D1:2C:2B:7A:9B:51:D0:75:BF:6C
            X509v3 Authority Key Identifier:
                keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:dd:7b:ce:36:51:28:7a:14:64:ed:1a:83:f4:c2:00:83:ea:
         1f:91:be:ed:92:31:be:4b:be:92:38:6e:87:07:64:52:85:0a:
         4e:c5:ac:95:c2:c3:a0:77:9c:df:35:16:2a:fe:5f:da:36:49:
         fc:cc:78:46:72:ba:77:2d:d4:e6:35:1e:73:4e:fa:b3:a9:b8:
         82:77:90:7b:20:91:b9:ed:19:f2:06:cd:c0:02:b6:09:62:2c:
         18:fa:7f:61:e9:46:79:0c:dd:b8:02:dd:f0:27:aa:f1:d4:77:
         03:6b:b9:d2:2f:26:87:0b:ad:c0:44:04:23:f0:26:e2:14:f1:
         00:45:6b:de:be:d0:c6:e9:23:61:18:b2:ac:05:50:65:be:47:
         a0:3a:3f:14:d4:5a:b9:93:80:59:d1:49:f1:41:07:ce:07:85:
         56:83:d2:21:65:67:07:a9:bf:5d:3b:de:e3:2a:9e:f6:3a:42:
         47:a8:a9:46:96:a1:ff:75:e7:b7:35:ca:f4:cd:1a:54:b9:ee:
         96:84:cc:1a:aa:cf:71:64:69:aa:9a:60:f5:0b:36:15:63:69:
         cb:b6:b7:c8:47:b8:ef:38:bc:3b:ef:8d:47:19:eb:31:fa:4b:
         60:07:42:1d:b1:94:66:6a:56:37:88:3d:89:a6:0e:38:33:cf:
         f9:f6:97:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 19:32:10 2026 by rpki-client