Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
File:                     115880D133393FF2D96A5861679B5166AFDB1248.mft (raw, json)
Hash identifier:          cSjGUaihsiKjV79w843y2uLe6EPYOVstgWerJxR7r1s=
Subject key identifier:   31:ED:39:26:8D:34:95:E7:E3:7A:F7:27:77:87:E2:0D:8D:06:6B:CE
Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48
Certificate issuer:       /CN=115880D133393FF2D96A5861679B5166AFDB1248
Certificate serial:       56C47E606F199E73C8A5E7DEB0B2AB07597DF7A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
Manifest number:          0210
Signing time:             Thu 19 Mar 2026 12:02:29 +0000
Manifest this update:     Thu 19 Mar 2026 11:57:29 +0000
Manifest next update:     Sun 22 Mar 2026 20:54:29 +0000
Files and hashes:         1: 115880D133393FF2D96A5861679B5166AFDB1248.crl (hash: qSRAxOOhhKIg27MOKCHaI10fbSjccTL28JdcRRq7MPk=)
                          2: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: PUB3O8b9f0V9upxUQ1vz/Akmef3nw9nhl+zmK2wYTN8=)
                          3: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: 1qHo3owsIra2DLunWHCtcR/bz4Z6XiVGZF9DHU6ujCU=)
                          4: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: 7cjr2Mf8da23M7780NOwEQz2pNcc6LU8HdKHbP3bqXY=)
                          5: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: VvBdfRoXJdspZfeWpUDljLmbCHnzMGWW+ov3JCtu9WA=)
                          6: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: dsbjoyKjKxL4iwUB8V3WadTuSmVRqe7mRaojqe/cx6g=)
                          7: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: mM1uMrTnIIOB9qV95bnMry0CA1H0myomJNfLWIW9li4=)
                          8: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: ovzcVNQEy/mX6iGBONz7ezsyibr0pRiafYk0E6VSJek=)
                          9: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: qOgMs8L+7L6hzGSgXrwuDdjZMuQgbmzasXiAjPj9OOI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl
                          rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Mar 2026 20:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c4:7e:60:6f:19:9e:73:c8:a5:e7:de:b0:b2:ab:07:59:7d:f7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248
        Validity
            Not Before: Mar 19 11:57:29 2026 GMT
            Not After : Mar 22 20:54:29 2026 GMT
        Subject: CN=31ED39268D3495E7E37AF7277787E20D8D066BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:80:9c:d0:55:8c:cb:11:f3:e4:9e:8c:78:9a:
                    55:c0:18:81:32:29:23:a5:df:62:a6:93:03:91:1a:
                    41:7f:34:c0:8f:79:66:e9:d1:07:be:8c:32:ad:b1:
                    89:76:f5:50:a9:4d:29:93:cf:c2:75:fe:89:b8:b3:
                    6d:e2:02:3e:d5:5d:a6:d1:6b:18:31:d1:6c:2b:d8:
                    cf:11:b8:c8:34:aa:b7:19:1e:8e:e4:63:a9:10:7f:
                    0c:ec:cd:bf:24:63:dc:4b:c6:8a:ce:84:2b:ed:f5:
                    83:da:ee:17:4e:e7:f5:3a:c1:a8:b6:4f:2f:14:cb:
                    34:54:53:64:19:b5:64:e5:a3:0b:ed:1e:12:19:73:
                    7a:f9:0b:e0:77:5c:97:3a:a9:46:5a:c1:8e:e8:ac:
                    4b:63:05:21:c9:2f:11:2d:4a:43:0f:0e:0a:9a:58:
                    85:04:71:c4:f8:09:4a:df:b5:d5:2b:92:6f:98:d6:
                    9d:96:f1:6f:73:3c:61:c8:68:5a:f9:ac:63:98:b0:
                    0a:34:de:31:1c:fc:1c:87:ae:a6:a0:19:ee:e5:26:
                    df:8a:c5:fc:ac:7d:db:b1:b9:29:df:42:73:d0:8e:
                    4d:43:d7:bd:65:ad:82:3e:ea:b0:32:e8:22:9c:84:
                    94:be:c3:14:ee:0a:31:26:31:68:b0:40:7e:c9:77:
                    00:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:ED:39:26:8D:34:95:E7:E3:7A:F7:27:77:87:E2:0D:8D:06:6B:CE
            X509v3 Authority Key Identifier:
                keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:df:b4:80:40:65:f3:7b:4c:61:51:c2:79:6b:98:f9:74:9d:
         0b:eb:82:5a:6c:d6:35:3e:a3:58:35:42:8a:8c:86:f7:28:69:
         cd:8b:8c:e1:d3:05:1b:c5:64:33:66:9b:7a:5c:e5:40:c2:c7:
         16:06:da:aa:7a:c1:c3:dc:f2:b8:9f:9d:2b:1b:9f:2d:b5:73:
         22:58:3c:8c:92:3e:13:e2:32:40:b2:68:b9:c0:ac:68:2b:d0:
         61:66:8a:30:60:ef:3b:66:6e:4a:73:a3:ec:8a:5b:7d:4c:33:
         65:bb:10:b6:23:cd:b6:15:9c:ec:eb:21:25:09:20:af:02:ac:
         c5:6e:55:72:e9:19:ba:01:f2:91:59:42:af:fa:ee:f6:de:f8:
         ea:74:11:fe:0b:0d:40:95:2b:a9:d3:ad:12:29:87:34:62:0a:
         77:11:a5:e5:83:89:28:38:39:28:2a:10:fe:d8:4b:ad:02:62:
         0c:74:14:c9:ca:1d:d9:34:de:b5:b9:67:1e:90:b6:cf:99:55:
         98:50:81:3d:bc:12:88:a4:95:f5:68:13:a0:4e:72:7c:57:94:
         fd:10:c5:32:02:f4:75:d6:23:55:56:4f:06:3a:c1:3b:93:79:
         7d:0d:80:8f:51:77:b3:0f:f2:3a:55:24:bb:78:a5:4d:85:c1:
         1e:76:62:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 01:36:06 2026 by rpki-client