Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
File:                     8999E6DA986A355F868ABD73E4E2AADC08244F29.mft (raw, json)
Hash identifier:          4nsCGUoolnkMinJ8DbzcFAR8iHUDQgskf4y40bO6vlw=
Subject key identifier:   7D:FF:30:B8:6F:31:18:9D:61:88:F3:25:55:FC:EC:76:C0:E3:FB:4F
Authority key identifier: 89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29
Certificate issuer:       /CN=8999E6DA986A355F868ABD73E4E2AADC08244F29
Certificate serial:       1D27314C77694FE4C62ACA22A6CCEA29A1823818
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
Manifest number:          011A
Signing time:             Fri 06 Mar 2026 22:22:29 +0000
Manifest this update:     Fri 06 Mar 2026 22:17:29 +0000
Manifest next update:     Tue 10 Mar 2026 09:49:29 +0000
Files and hashes:         1: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: g0W4yfpco5rqCeJ3sGtEPJSj+o2p48FtppiRKtinTxM=)
                          2: 8999E6DA986A355F868ABD73E4E2AADC08244F29.crl (hash: n4gh9ykTYyoB8fA9GelQocpKBDNYFdyjNh1iYTsLD0U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl
                          rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 08:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:27:31:4c:77:69:4f:e4:c6:2a:ca:22:a6:cc:ea:29:a1:82:38:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29
        Validity
            Not Before: Mar  6 22:17:29 2026 GMT
            Not After : Mar 10 09:49:29 2026 GMT
        Subject: CN=7DFF30B86F31189D6188F32555FCEC76C0E3FB4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:15:97:4d:40:d8:7e:3b:62:5c:5c:dd:7c:
                    a3:81:8f:3e:03:4c:8e:28:90:6f:a0:5c:ed:fd:b0:
                    f8:dc:70:6d:e9:84:c7:a8:c1:35:fc:03:18:97:d1:
                    bb:87:d5:50:90:1a:fa:33:0e:3c:90:5a:b6:18:6a:
                    be:82:35:10:fb:df:8c:a0:1a:21:a0:d7:2f:70:fa:
                    62:36:8c:63:6e:d6:28:63:70:60:a1:5f:30:7a:e1:
                    93:26:15:0a:8c:d1:d9:ff:3f:42:0b:ae:06:9e:88:
                    83:cb:f4:a9:8e:ae:bf:6e:12:08:d0:83:2f:06:95:
                    81:50:ea:66:84:98:e1:78:65:04:43:35:43:75:c0:
                    cb:4a:80:c9:1b:05:f9:69:c1:79:c4:ec:55:ed:6f:
                    97:11:69:4a:d5:4d:b4:83:d3:db:51:d7:5d:33:6c:
                    39:c8:8f:47:d5:2a:29:50:ce:3f:13:6d:68:43:f5:
                    cf:c5:22:06:8d:23:c5:d5:7b:bc:f4:2b:08:0a:76:
                    43:b7:1f:7e:13:19:93:73:07:dd:6b:82:81:38:0d:
                    b4:08:95:03:88:da:36:53:39:85:db:9e:80:7a:35:
                    07:91:98:9e:3a:a5:19:da:77:cb:84:06:af:cb:a8:
                    08:30:f8:34:bb:3b:1c:a7:27:e5:68:7b:5e:27:65:
                    b2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FF:30:B8:6F:31:18:9D:61:88:F3:25:55:FC:EC:76:C0:E3:FB:4F
            X509v3 Authority Key Identifier:
                keyid:89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:5f:cc:48:03:cf:64:4e:a9:66:38:a7:51:6e:ed:6c:4e:ab:
         5b:2f:ae:61:e5:5c:15:73:72:9b:de:33:55:44:39:9c:4b:7d:
         8b:fb:ef:4c:d8:07:d4:b6:b5:b1:4d:77:23:e9:20:08:05:b4:
         ce:00:1f:6f:6a:8a:ab:8d:f4:a2:b1:50:78:83:a1:f1:0b:fd:
         fa:db:02:7f:80:f8:03:04:d5:3d:76:a6:23:60:66:a1:40:90:
         c8:06:ee:9c:2f:a8:3f:93:8f:e4:bb:3c:9f:2c:fe:90:b6:3a:
         61:68:9a:ba:e7:eb:fb:d3:c8:b4:f9:01:6c:e6:91:6f:0d:ce:
         e3:b5:30:de:01:dc:4c:5b:3f:60:06:a9:47:53:b9:82:a8:2b:
         15:4d:6f:30:a7:15:01:5f:e3:3c:e9:1a:51:58:c2:fc:79:09:
         c3:a9:99:c3:90:44:fa:3e:95:56:09:1e:63:94:3a:0d:00:1e:
         3f:93:f4:44:a5:2e:5b:c0:45:e7:5b:3b:18:2b:42:35:02:d8:
         f4:11:e0:76:b7:12:60:9a:97:d4:38:c4:94:64:7e:aa:f9:17:
         eb:7d:0b:4c:df:ee:a5:5a:37:a6:d9:1a:d2:6a:5f:77:ea:4d:
         3d:1c:ac:86:25:d5:fa:8c:2d:d4:7c:0c:83:21:26:9d:b7:b7:
         ad:33:72:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:35:53 2026 by rpki-client