Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft
File:                     990382439FFA8C086A4458B338B52CCD0D54CFA8.mft (raw, json)
Hash identifier:          xAQdf7W1K81zIO4HR1tds15yMZY6KVH8AvYuwUnw5dk=
Subject key identifier:   60:9F:74:F8:93:B3:81:75:44:33:1F:7D:DA:50:55:9F:BE:E6:D1:2C
Authority key identifier: 99:03:82:43:9F:FA:8C:08:6A:44:58:B3:38:B5:2C:CD:0D:54:CF:A8
Certificate issuer:       /CN=990382439FFA8C086A4458B338B52CCD0D54CFA8
Certificate serial:       266EEC72FB6BD85E1181A0630FFD488E48E03386
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft
Manifest number:          08
Signing time:             Fri 06 Mar 2026 13:41:46 +0000
Manifest this update:     Fri 06 Mar 2026 13:36:46 +0000
Manifest next update:     Mon 09 Mar 2026 20:33:46 +0000
Files and hashes:         1: 323030313a6466363a613434303a3a2f34382d3438203d3e20313432363339.roa (hash: 6vBqY8AYNH35xXLwcOm0sU3NOzFnX23xmkRxg0L8bmk=)
                          2: 990382439FFA8C086A4458B338B52CCD0D54CFA8.crl (hash: 19mwDLaGmqqMUaBFfA3iK35n+eyyscfUGBfdj5fCZmI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.crl
                          rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 20:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6e:ec:72:fb:6b:d8:5e:11:81:a0:63:0f:fd:48:8e:48:e0:33:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=990382439FFA8C086A4458B338B52CCD0D54CFA8
        Validity
            Not Before: Mar  6 13:36:46 2026 GMT
            Not After : Mar  9 20:33:46 2026 GMT
        Subject: CN=609F74F893B3817544331F7DDA50559FBEE6D12C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4b:63:6d:37:45:90:e7:67:b4:92:b9:9b:cc:
                    e3:8b:7e:b7:3e:cd:a8:3a:a2:d1:7f:e9:cf:75:9f:
                    3a:8d:45:7f:85:de:09:e5:2f:59:05:57:c8:9b:17:
                    b2:7a:cc:e8:14:7b:a8:be:e9:f2:2b:9a:f4:b8:93:
                    c9:9b:f7:47:30:fa:f5:71:46:ed:31:d8:45:0a:ff:
                    59:cc:b2:8d:8c:38:88:dc:f8:30:e5:aa:06:16:64:
                    8b:d5:c0:9b:bb:9d:4d:ac:b9:f9:fb:c8:62:a0:31:
                    23:18:d4:8f:c9:c5:c9:76:ba:da:7b:ea:e1:ef:0f:
                    76:87:f6:0d:25:18:98:42:64:57:f2:bf:ac:1a:95:
                    27:85:b7:68:a5:27:43:c2:f8:5e:fb:d0:ab:25:5b:
                    98:a0:67:f9:9d:d8:c6:52:38:69:71:87:00:c9:49:
                    9a:82:55:83:d9:62:5a:90:e3:5a:77:67:30:17:a9:
                    8e:9f:b4:46:47:81:aa:a4:96:2f:07:c9:f3:cf:15:
                    29:e4:a9:dc:98:08:38:94:96:5a:98:9f:39:c2:a4:
                    4d:ec:89:56:63:91:1e:3b:a4:04:3a:f6:9a:41:69:
                    64:f6:f2:83:5a:4e:4f:94:9a:f1:a5:8c:aa:64:33:
                    10:f7:ef:a5:d5:77:40:4d:55:ca:21:ee:79:0d:d4:
                    e3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9F:74:F8:93:B3:81:75:44:33:1F:7D:DA:50:55:9F:BE:E6:D1:2C
            X509v3 Authority Key Identifier:
                keyid:99:03:82:43:9F:FA:8C:08:6A:44:58:B3:38:B5:2C:CD:0D:54:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:8e:38:a5:59:c9:57:a8:80:1a:87:1b:5e:98:56:98:ea:6c:
         4c:f6:1f:08:0e:9d:bf:17:c9:6d:5b:d5:6b:6c:9d:38:93:96:
         77:d5:fe:12:a0:83:97:d4:23:01:a2:a3:e3:81:c0:53:aa:3a:
         1c:86:ee:e7:b4:44:16:68:4c:31:7a:f9:53:59:96:6a:aa:5e:
         d4:9a:01:50:1f:41:97:6a:56:ea:57:b8:ad:33:85:85:97:95:
         2c:61:54:8a:e3:f1:23:04:14:0f:a2:76:30:56:3c:fb:47:96:
         25:e3:8c:f2:59:59:7a:33:ab:4b:12:a1:cb:19:cf:e3:7d:67:
         db:48:c0:18:a7:b7:b5:ac:59:19:ff:5f:80:c5:84:c7:de:d3:
         ee:45:6a:4f:79:5e:71:7d:cc:f8:be:56:db:d8:9a:87:e6:75:
         f8:52:26:9c:5f:63:cf:50:a3:a4:83:ae:bd:65:17:a4:4f:56:
         24:e0:6f:c2:6d:c5:64:21:cc:a7:18:48:7e:ae:ac:84:19:7f:
         73:1e:11:ff:b8:65:e1:4b:33:72:14:cb:82:02:b2:32:b0:f4:
         55:40:3f:26:dd:4c:3e:91:fd:e3:32:28:04:a7:29:e2:f6:ae:
         7a:03:33:86:ba:97:67:21:c8:8a:90:8e:0d:62:f6:b4:6d:03:
         f9:56:5e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:59:51 2026 by rpki-client