Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
File:                     C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json)
Hash identifier:          cVE6fzPKm9n4YT1EI4T87VtiAUKYMafW0wkWiCQ5c8E=
Subject key identifier:   1C:CF:11:87:D3:A0:2C:0F:C1:EB:9C:5E:6F:10:72:11:E7:20:07:27
Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90
Certificate issuer:       /CN=C710954C7B301C60B82BA6372CACEB81DA08F190
Certificate serial:       0716152721370E4ECA56EF8100AE7F7CDECD467A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
Manifest number:          051F
Signing time:             Thu 12 Mar 2026 16:10:04 +0000
Manifest this update:     Thu 12 Mar 2026 16:05:04 +0000
Manifest next update:     Sun 15 Mar 2026 19:26:04 +0000
Files and hashes:         1: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: KCWBSP7rWtl3VyLxiAaxmRkPc3hNP7eiKU1JJgfa2DQ=)
                          2: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: DYGPu1R9knVMTB6Ioiy1/sQp83HBRZI1WQg4Zdy3cp0=)
                          3: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: KQUN/mjgI9NAwHO1H2+jS+2KNmkSKgxnmq0NRk0bNGg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl
                          rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Mar 2026 19:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:16:15:27:21:37:0e:4e:ca:56:ef:81:00:ae:7f:7c:de:cd:46:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190
        Validity
            Not Before: Mar 12 16:05:04 2026 GMT
            Not After : Mar 15 19:26:04 2026 GMT
        Subject: CN=1CCF1187D3A02C0FC1EB9C5E6F107211E7200727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:da:a5:56:64:88:7e:6b:c4:d5:66:cb:33:71:
                    52:a7:6a:d6:cb:6d:57:12:b7:84:26:33:0f:9e:3e:
                    70:61:cd:3d:0d:91:2b:8c:ed:9c:d5:ea:fa:97:a3:
                    27:15:04:b2:d9:a7:38:bd:e5:19:3c:4f:07:d8:cf:
                    6b:50:6a:8c:08:30:e2:1a:b5:7b:b0:14:23:0b:7f:
                    4a:71:32:e9:a4:88:1e:1b:c0:89:4a:34:4d:0f:a2:
                    ad:5d:a9:5e:fe:d7:b3:85:32:fd:d8:b1:fb:6c:7d:
                    dd:8a:d9:5b:90:e5:ff:f1:f0:50:a6:5b:35:4d:2a:
                    e7:9c:27:9a:dc:eb:4b:f0:fd:a0:d1:28:1d:05:76:
                    a5:c2:b7:6e:fa:87:8e:d4:53:47:81:cd:ed:9b:fc:
                    1e:7d:2a:17:a1:03:2d:82:b5:47:bf:af:e3:fb:74:
                    64:99:c3:9e:f0:86:71:56:3d:98:5f:46:60:d7:e8:
                    2c:d6:e4:44:37:32:cd:ad:2e:4e:97:a6:a7:af:29:
                    91:83:38:b3:c3:a4:17:00:66:a2:7c:78:fa:b7:07:
                    42:e8:a2:f4:32:c9:ee:b2:60:5c:96:28:10:96:3b:
                    5e:b0:7f:25:b9:4a:b6:ee:4c:95:bd:1c:3d:eb:46:
                    26:75:50:68:e8:2e:60:03:60:08:0e:f2:cf:12:47:
                    bb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CF:11:87:D3:A0:2C:0F:C1:EB:9C:5E:6F:10:72:11:E7:20:07:27
            X509v3 Authority Key Identifier:
                keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:06:32:31:85:51:b9:32:71:bf:97:77:0a:5a:fa:9c:8a:06:
         ee:29:7d:5d:99:b3:ee:9c:23:a9:6f:33:93:1a:e4:3f:52:9c:
         60:bf:c5:1c:2f:20:66:69:69:ef:5b:96:c5:f1:07:ae:f9:26:
         da:ae:f9:23:2f:17:98:b5:2c:98:90:3e:14:8b:53:76:3d:2c:
         9f:52:0f:9b:b3:1d:8e:44:71:c6:c1:69:e3:14:c4:c2:71:d3:
         31:2c:e9:fc:bd:ed:0b:5f:6e:eb:7b:a5:62:f0:a9:10:cc:81:
         e9:5a:9c:b0:18:c6:c3:09:a3:a3:a8:c3:bd:4b:c7:b6:d5:85:
         00:dd:8b:46:18:2b:0f:e8:84:03:ef:0e:38:f5:df:13:92:2c:
         c2:71:39:30:13:21:bc:55:af:0d:16:ee:cd:27:32:d0:23:70:
         ef:62:a7:3e:0e:6a:41:8f:2e:c6:7b:dd:fa:6c:48:e3:fd:f3:
         7a:81:94:2b:4f:69:4b:a2:ce:d4:19:28:d7:44:46:91:47:70:
         47:d2:29:ef:2d:0f:3d:4f:94:a6:35:fb:6a:0a:8b:7e:78:b6:
         ae:03:37:10:cb:76:ce:7a:b6:0d:28:0f:0b:c0:8e:0f:59:56:
         e3:ae:68:93:6d:4b:85:89:5d:67:c0:0a:b3:73:1e:3f:b1:2a:
         9c:71:0a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:53:14 2026 by rpki-client