Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft
File:                     14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft (raw, json)
Hash identifier:          8BDle7szS3BYp6CZa6ZBHglLIB5WvsDO+DJJANACvTk=
Subject key identifier:   B3:C4:BE:A5:B1:51:0C:B2:AC:5F:57:AD:BC:06:75:65:64:3F:E2:34
Authority key identifier: 14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B
Certificate issuer:       /CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B
Certificate serial:       655418FAD29E3C0C21C1A2B03D8EA086A9D7B863
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft
Manifest number:          F1
Signing time:             Fri 27 Feb 2026 15:41:07 +0000
Manifest this update:     Fri 27 Feb 2026 15:36:07 +0000
Manifest next update:     Tue 03 Mar 2026 02:59:07 +0000
Files and hashes:         1: 3230322e34372e3137352e302f32342d3234203d3e20313532303333.roa (hash: XksCWCwCEfjKtaahou1lG189rxAz7b8EI9jL1IweY6M=)
                          2: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl (hash: +lZqBxNkDnnh89kx+1vAeFhBEk/baucKzUbqwu4uz3Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl
                          rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 02:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:54:18:fa:d2:9e:3c:0c:21:c1:a2:b0:3d:8e:a0:86:a9:d7:b8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B
        Validity
            Not Before: Feb 27 15:36:07 2026 GMT
            Not After : Mar  3 02:59:07 2026 GMT
        Subject: CN=B3C4BEA5B1510CB2AC5F57ADBC067565643FE234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cc:72:55:e0:42:1f:6b:32:29:85:f7:7b:5e:
                    4e:13:68:dd:2e:19:f5:05:8c:d3:82:b3:db:8d:07:
                    c2:a9:88:9b:c1:af:d2:fa:dd:fa:93:1b:e3:a2:c7:
                    9b:88:25:d8:bb:52:86:a3:75:f4:e2:86:51:a6:f4:
                    d8:e5:8d:59:21:16:e8:f5:d3:b8:59:39:7f:cd:c4:
                    fc:8c:7d:95:17:f2:1d:95:f3:7d:62:71:d4:c1:14:
                    d1:04:59:a0:1d:b4:c9:13:f3:19:79:bb:18:a1:a4:
                    36:9f:ea:ec:e4:f4:e6:96:e0:f3:64:8b:f6:de:ee:
                    53:8b:af:ed:71:ad:c9:85:12:fb:58:30:29:91:e3:
                    ad:c8:50:21:21:8e:32:3d:9e:ee:1c:1d:ad:be:ef:
                    ef:ae:0c:59:35:5f:22:d4:b2:70:e4:10:a3:e7:49:
                    7e:3f:d1:20:e3:15:ea:72:c0:ff:4c:fb:01:56:a9:
                    5f:41:0e:d4:74:64:b0:da:38:ba:81:4b:e6:99:b9:
                    73:9f:f4:bc:e9:df:ad:08:36:b6:cd:cf:9f:91:e4:
                    26:b8:03:7a:d7:13:4c:7e:39:61:01:ac:18:0e:8e:
                    8e:16:ed:d9:7d:74:c8:62:bf:64:3a:25:31:bb:50:
                    0a:14:02:60:41:3b:42:11:7f:03:38:f7:a6:90:61:
                    0c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C4:BE:A5:B1:51:0C:B2:AC:5F:57:AD:BC:06:75:65:64:3F:E2:34
            X509v3 Authority Key Identifier:
                keyid:14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fc:15:26:47:54:ac:5e:37:ad:62:af:98:94:a1:76:c9:5f:
         bc:31:9e:5d:6f:33:d2:10:15:5c:35:96:a8:73:f0:3f:85:01:
         a1:b0:7b:6c:62:51:25:2e:80:3c:b2:e6:e7:a4:68:af:b3:f0:
         2c:d5:d0:41:2a:bd:5e:ea:b0:8c:67:72:55:79:f0:8b:64:c9:
         c0:bc:4b:7b:d8:72:2f:f0:6f:2f:da:e6:30:12:8f:37:9b:76:
         c4:95:85:14:61:5c:c3:57:b1:f3:0f:5d:5a:35:9b:fa:4b:ad:
         54:54:36:e3:e1:09:06:4d:06:3d:33:f5:25:cc:2a:a7:57:e3:
         75:7b:70:f8:88:fd:7d:43:b6:83:b5:f8:eb:1b:33:ae:84:d8:
         f6:2f:f6:a4:52:fc:90:b7:4e:90:01:33:dc:ac:c3:7b:76:c1:
         bd:11:f3:1f:ce:ab:6d:f0:82:1a:79:ba:2e:3f:f4:3a:c2:22:
         fe:8b:89:bc:c9:c1:e7:93:bc:9f:04:4b:09:cf:8b:ea:d8:e7:
         fc:25:d6:2a:9b:3b:13:43:11:87:1a:d0:3e:d6:a9:09:81:8e:
         cf:ad:9f:2c:ab:e5:9d:89:55:d0:f6:d9:7d:45:45:99:28:9b:
         e8:91:28:4e:74:2e:fd:99:12:05:ca:92:0c:c0:a8:12:e0:a3:
         35:99:a7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:19 2026 by rpki-client