Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
File:                     1F969EE9B0838D22156118A888B81BF27B859BD5.mft (raw, json)
Hash identifier:          6lQZS5yffhvEUclbKXCuLVa1Y5DTy8C0hzsxgIoFOCg=
Subject key identifier:   E5:08:0E:77:4C:93:03:F8:3C:B5:A5:E5:6E:56:A5:09:47:8C:75:E1
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Certificate issuer:       /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial:       4E73A6317AF57BFF4C51F71A5335257834E93D43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
Manifest number:          02B0
Signing time:             Sun 01 Mar 2026 06:52:06 +0000
Manifest this update:     Sun 01 Mar 2026 06:47:06 +0000
Manifest next update:     Wed 04 Mar 2026 09:53:06 +0000
Files and hashes:         1: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: N2Cye2k2ArU32sR4BIWlxYfXaoMWkhmX2inof4bL/qc=)
                          2: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (hash: Sm/MByCUVOhu6ULq3sIzfHgpRtekl1ETdukmwPQMprw=)
                          3: 1F969EE9B0838D22156118A888B81BF27B859BD5.crl (hash: eAUtG3w8mXPJbRqnzaTfPMT75NzEfz6PiYi3gMO+GvI=)
                          4: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (hash: HB4BEaVD5xfGQGvt67YetoiSjWiGFie2TAF+weL5UPc=)
                          5: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: i0qXLSeEhZMkdN2DfH6rqQw93/yoa+3wg07gaHoYz0k=)
                          6: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: jfT+fFK9MuHkEFZ88hcVlJwwMYmz7o5P6pVJldda2zA=)
                          7: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: bCrGS2h+/zPAS+2DepWngEarE7NIIMpAdATexMqAfyQ=)
                          8: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: pyK+jcOUykm+t8TqsiBiASQSX3weZBQz2lnXkKpEWw8=)
                          9: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: s1oc4oY30dv4ZziJEtii0WqAjWHN4yIZ+Wcll5R6Lx0=)
                          10: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: 1S76/HrjUbBiAn5ZM34FLqmHD8p3H4UjIcnlsDjI5eo=)
                          11: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: 0bz9arJVEpW8niw69al2HqlLatQbtnCd6cPuE1FtiQQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
                          rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 09:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:73:a6:31:7a:f5:7b:ff:4c:51:f7:1a:53:35:25:78:34:e9:3d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
        Validity
            Not Before: Mar  1 06:47:06 2026 GMT
            Not After : Mar  4 09:53:06 2026 GMT
        Subject: CN=E5080E774C9303F83CB5A5E56E56A509478C75E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:04:f2:ac:e7:95:98:ac:24:5b:2f:db:d5:93:
                    9f:e2:1c:6d:14:29:42:79:53:d5:cb:5c:97:a0:26:
                    d7:ec:6c:9f:d2:a1:fd:c8:90:23:d3:07:f4:8e:76:
                    b4:63:1a:14:84:dd:51:38:15:67:30:99:89:63:37:
                    37:96:c7:5f:32:7c:6e:c0:0f:10:a5:6e:17:11:35:
                    9c:83:0f:10:5c:8e:67:ed:87:12:8a:76:ac:fc:77:
                    a7:02:34:24:61:ad:e5:20:df:75:8f:6a:45:ae:2a:
                    ed:69:ad:38:d7:3e:3b:c5:38:66:4a:21:d4:92:08:
                    81:d3:bd:f9:05:12:54:c3:ca:d6:86:fa:ec:0f:b5:
                    80:c1:1c:7d:3c:44:7d:70:84:48:e0:90:04:96:57:
                    3c:02:b0:30:35:73:e0:be:3e:0c:06:cd:9d:69:47:
                    48:86:7f:1a:bd:75:f9:a4:58:35:74:b8:e7:90:e4:
                    95:19:93:d6:65:85:b7:65:97:77:9c:1b:8d:3c:7c:
                    11:06:38:94:d3:93:9d:53:b7:79:32:67:88:2d:24:
                    48:e8:76:1c:6b:12:eb:13:bf:d6:04:50:f1:3a:5d:
                    13:b6:3f:07:4d:18:86:a4:8f:24:97:e0:a7:aa:c8:
                    5e:43:d8:2a:a1:23:54:c6:05:22:13:b2:25:07:40:
                    64:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:08:0E:77:4C:93:03:F8:3C:B5:A5:E5:6E:56:A5:09:47:8C:75:E1
            X509v3 Authority Key Identifier:
                keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e4:fe:13:e2:d3:92:5a:20:04:d0:d3:95:7c:9b:dd:b0:1e:
         2b:5e:89:79:14:a9:dd:47:22:04:f5:69:02:1a:e7:76:77:dc:
         52:31:32:72:e4:c8:88:c3:b3:ab:1b:3e:56:fd:7d:26:9b:e2:
         53:84:26:30:16:d0:25:ed:d3:87:8b:a9:14:74:a7:ae:92:90:
         bc:07:36:6b:d5:e6:0b:93:06:bf:31:85:45:a9:f5:0e:2a:74:
         c8:b5:40:01:45:c8:7d:a3:01:fd:be:bf:d7:4d:56:e6:26:47:
         d3:82:ef:c7:9e:d1:40:b5:6f:46:a3:06:f3:77:43:d4:6f:e5:
         5e:b0:9f:d3:1d:cc:f3:cb:b3:d0:5a:8c:5a:b7:d9:69:a3:45:
         13:50:89:99:f5:25:cb:93:a2:c2:67:10:a5:91:5a:44:7c:a8:
         e5:10:78:ca:7f:8e:c3:85:34:01:ea:f1:41:87:9d:0b:ca:7f:
         fe:36:3b:0b:7e:55:07:e0:64:b6:3a:5e:fe:6a:15:d2:1e:94:
         bc:ff:29:a5:3f:7b:9c:94:dd:bc:d5:be:01:f6:55:b7:4f:5d:
         3f:de:28:44:11:74:77:3b:60:db:94:ca:bf:5e:18:57:17:4e:
         03:10:6d:75:7a:b1:8a:f0:56:c3:4b:31:5e:8b:29:88:82:a5:
         2c:24:31:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:32:20 2026 by rpki-client