Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft
File:                     ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json)
Hash identifier:          XzW13BPp0+hpoUDHbPP1Fcd3oerIViYfEBQMqv2T70A=
Subject key identifier:   53:4D:96:10:10:1B:E9:28:49:C8:CF:A5:AA:0C:7C:23:B0:C0:96:0D
Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59
Certificate issuer:       /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759
Certificate serial:       522BEFC1CC65B6AE07991762751E3C696B3A61F2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft
Manifest number:          0100
Signing time:             Fri 06 Mar 2026 06:00:01 +0000
Manifest this update:     Fri 06 Mar 2026 05:55:01 +0000
Manifest next update:     Mon 09 Mar 2026 12:47:01 +0000
Files and hashes:         1: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: gi02ILhNmSPXM/6oUJSdc+fUcG5M/yXxh8i/iN4xoDs=)
                          2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: EWnjtErVMnBbrrbwTFVBXyhULkzmfdybYpW9vhB6Px8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl
                          rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 08:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2b:ef:c1:cc:65:b6:ae:07:99:17:62:75:1e:3c:69:6b:3a:61:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759
        Validity
            Not Before: Mar  6 05:55:01 2026 GMT
            Not After : Mar  9 12:47:01 2026 GMT
        Subject: CN=534D9610101BE92849C8CFA5AA0C7C23B0C0960D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:29:49:62:fe:70:ae:bf:e8:eb:54:74:af:
                    ed:73:8a:87:48:ec:ee:2e:f4:31:0f:71:d5:a7:46:
                    d8:83:08:02:fa:5a:79:c9:21:fc:3e:b8:39:55:cd:
                    67:e1:e2:0e:2f:cd:9f:66:d1:60:ae:66:76:56:85:
                    4c:ff:64:ac:e7:65:08:07:a8:d6:51:aa:23:03:80:
                    fd:34:23:87:60:df:3d:cc:f1:eb:88:13:87:4b:19:
                    28:ec:18:42:ee:c3:c9:86:83:f6:fe:1c:42:1b:a2:
                    e0:b6:17:29:de:26:7e:a9:dd:d6:1a:36:0f:93:dc:
                    46:93:02:51:18:a2:5e:f8:80:5c:e5:16:66:0a:d3:
                    b6:cb:2a:b5:64:92:84:1e:78:96:6e:97:c3:90:3d:
                    15:11:a3:54:c2:cc:17:19:60:07:ef:df:a3:3b:41:
                    04:3f:29:20:86:3f:25:22:62:40:73:84:26:7c:21:
                    82:28:fa:58:74:f5:65:63:9b:59:26:c4:08:be:0e:
                    28:e5:f1:5c:34:4a:96:65:ee:a1:c1:d4:dd:5f:ee:
                    5d:84:cd:f9:84:2b:02:b4:9f:c0:e6:cc:1a:33:e1:
                    95:0b:44:23:8c:c7:f4:75:33:2d:28:a3:87:3d:e3:
                    b5:3b:68:71:bb:e9:95:de:ec:49:63:c2:1e:a0:b0:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4D:96:10:10:1B:E9:28:49:C8:CF:A5:AA:0C:7C:23:B0:C0:96:0D
            X509v3 Authority Key Identifier:
                keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:bf:53:2c:9c:af:f1:04:3f:f4:62:02:28:de:35:50:02:c3:
         4e:5a:e5:42:c1:f4:e7:57:6f:47:66:dd:4e:06:6e:63:54:0e:
         9d:79:45:68:78:f2:99:fe:db:e5:c9:64:73:fb:e1:15:18:9c:
         36:d4:ee:f7:2d:89:03:18:3f:43:d2:75:d4:2c:ba:65:cc:fc:
         d6:75:dc:7d:f1:4f:a7:90:44:dc:68:92:45:dd:09:ef:1d:ec:
         4d:a0:d7:75:24:22:b8:0f:b4:24:e5:1f:93:45:e0:e6:83:b5:
         b2:16:94:45:4d:91:78:4c:8d:d1:15:b9:c2:09:e1:f5:f7:ac:
         f0:3b:93:fe:76:85:32:b7:8e:66:25:46:14:b2:26:57:f5:24:
         b0:79:18:40:68:b9:11:26:32:d7:62:79:08:ad:25:a1:57:6a:
         bf:2d:e0:dc:f7:28:4a:92:26:cb:ea:31:0e:44:62:b9:de:c4:
         ef:d1:27:35:6f:8a:bb:3a:7b:5f:97:3c:ce:30:91:1d:4b:74:
         22:df:68:af:9e:59:65:4f:51:35:1f:d1:97:2e:5f:23:d4:7d:
         72:0d:e9:5e:bf:e5:dc:7c:4d:eb:d3:6f:47:85:34:9c:58:ff:
         a7:47:98:73:ea:98:82:e8:f6:4c:2c:a5:30:00:93:b0:f0:53:
         9b:f6:03:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:51:07 2026 by rpki-client