Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft
File:                     F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json)
Hash identifier:          GdGeH9yztwLeejicahCW6xziq73yXoD6Gw1McEDQ9+k=
Subject key identifier:   47:65:CF:AE:6F:B2:66:07:F7:4B:41:17:8B:54:75:F0:83:25:7A:99
Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3
Certificate issuer:       /CN=F23ACCA147720B423A9576F3E408691505B293A3
Certificate serial:       53020C0ECDD4D58484C8171E95795EE8EAEE79E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft
Manifest number:          018C
Signing time:             Fri 13 Mar 2026 12:11:49 +0000
Manifest this update:     Fri 13 Mar 2026 12:06:49 +0000
Manifest next update:     Mon 16 Mar 2026 23:15:49 +0000
Files and hashes:         1: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: bL4A3iMML3JwhDE2yFeN6uDiSzuObZzoT/f0gxHop3A=)
                          2: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: 3v1gtF+D2vFmB2mKzifGXa7g7HSo+THy2QSPBs0nhcQ=)
                          3: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: BETPcfS1VcTumvWSwQRlY9PEvVDNhn9IgT3oOeof4jw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl
                          rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Mar 2026 23:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:02:0c:0e:cd:d4:d5:84:84:c8:17:1e:95:79:5e:e8:ea:ee:79:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3
        Validity
            Not Before: Mar 13 12:06:49 2026 GMT
            Not After : Mar 16 23:15:49 2026 GMT
        Subject: CN=4765CFAE6FB26607F74B41178B5475F083257A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:6c:e4:d8:79:ea:6f:a3:0c:98:77:09:31:
                    66:d5:16:09:d1:79:23:4e:9f:fc:d5:9c:bd:34:25:
                    7a:b4:68:b2:64:d0:0e:7a:db:3f:f4:28:35:be:36:
                    53:2c:0b:a1:fd:6b:16:61:e4:60:28:9c:88:28:1a:
                    d6:27:7f:81:98:6e:ac:b1:07:16:e9:08:78:a2:e6:
                    a5:3c:6d:45:41:3f:de:ad:68:45:92:60:a5:7c:dc:
                    11:23:45:b8:28:bb:63:0c:96:74:33:de:d0:26:97:
                    e6:98:b9:eb:ee:7d:e9:79:2b:5a:e5:19:b4:9e:2f:
                    81:af:cd:28:65:f3:1c:7f:3d:66:0a:3a:01:41:e3:
                    cf:eb:69:d6:46:e2:ad:e8:c0:49:22:a8:5b:21:55:
                    7a:fd:72:ef:66:df:ae:11:ad:46:35:9d:fe:4b:32:
                    55:78:8d:38:6a:d7:93:45:7f:9e:4c:67:9d:ab:29:
                    1d:17:fa:c3:d3:82:2a:d9:32:c4:ec:b1:79:b0:5f:
                    5a:47:d1:d3:0d:3e:d7:c4:06:c4:ae:fa:fd:af:5e:
                    eb:e4:ac:d0:37:ec:1f:3b:c8:4a:6f:d5:43:04:74:
                    d9:10:33:06:ac:8d:2b:bb:17:12:b8:b5:4f:c3:ac:
                    ca:7a:0c:2d:0a:34:01:86:74:cb:43:91:9c:89:f4:
                    9e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:65:CF:AE:6F:B2:66:07:F7:4B:41:17:8B:54:75:F0:83:25:7A:99
            X509v3 Authority Key Identifier:
                keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:0f:87:27:3e:a9:c1:08:94:0a:38:cd:fb:2f:2e:47:38:1c:
         fe:51:2e:7e:28:0a:2e:86:8f:34:bf:88:51:3e:93:f2:ed:5e:
         aa:3d:14:65:92:2c:78:9b:3a:b7:f2:d0:d5:92:c5:6f:3c:87:
         97:ca:bc:87:d9:b7:f9:46:24:20:ab:c9:53:b8:dd:a0:04:7d:
         5a:88:d0:b4:c5:83:e9:a0:65:2e:2a:7f:a7:b4:26:35:70:85:
         4b:7e:41:0a:53:9f:1c:30:56:49:40:31:8c:e0:3d:05:ce:62:
         69:73:07:fa:10:c8:d2:88:72:df:71:69:3f:a4:9c:da:fe:f8:
         80:ce:53:db:6b:16:ad:69:7b:c2:76:d2:fa:93:82:f0:e0:a1:
         6f:8d:78:ea:9c:25:54:1f:d4:6d:90:5a:a7:f4:9d:88:64:0f:
         33:4b:97:4c:35:42:96:12:e2:ed:02:76:f3:36:fa:53:8d:69:
         7b:48:00:a1:5a:7a:0c:c2:2b:ff:c8:f9:ca:e1:f9:e2:45:04:
         8f:c4:a4:35:1a:f1:9b:65:45:d9:9c:a8:46:f2:fe:48:1b:97:
         f3:60:02:ac:34:52:12:f7:22:de:ff:e5:65:bd:03:e7:58:4e:
         4d:d0:81:3c:cd:00:65:57:e0:c2:bc:a1:93:19:ad:c0:38:0e:
         7f:02:d9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:20:02 2026 by rpki-client