Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
File:                     C451166D49539649063AF8F493F51CB1ACE0AB09.mft (raw, json)
Hash identifier:          zT+ue7qUPwXz40QcmRZWEzHMWMGOTFmmWFNkhKInYHg=
Subject key identifier:   8B:A4:DF:A8:F0:C3:86:8C:8B:D3:48:B8:3D:4E:80:45:1C:9C:79:D2
Authority key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09
Certificate issuer:       /CN=C451166D49539649063AF8F493F51CB1ACE0AB09
Certificate serial:       4382F1061864F0D6C96BBEC54BA2A7C724ED800B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
Manifest number:          0226
Signing time:             Sat 28 Feb 2026 10:21:05 +0000
Manifest this update:     Sat 28 Feb 2026 10:16:05 +0000
Manifest next update:     Tue 03 Mar 2026 11:23:05 +0000
Files and hashes:         1: 3230322e35352e3136322e302f32342d3234203d3e203137373639.roa (hash: T5jlMftgO+al5AvueUPJMaV5GzIbWRKqrYOhtXYmc+8=)
                          2: 3230322e35352e3137322e302f32342d3234203d3e203137373639.roa (hash: IjrbLlYEZOkT769gFvToei/FjO23eUDwwXgDIinpfEU=)
                          3: 3230322e35352e3136342e302f32342d3234203d3e203137373639.roa (hash: 9n+k1wYDMgpMgw+A5gACjEnWZSRILaiiNarAGXe5WNY=)
                          4: 3230322e35352e3137312e302f32342d3234203d3e203137373639.roa (hash: s4QV2LJdIkwWHWXsfO0kzma2mgtldKYGhA7Yd0ZrUKw=)
                          5: 3230322e35352e3136372e302f32342d3234203d3e203137373639.roa (hash: cWz9uXSlQWLa9Ng0/c4IO1YEuQsv0PGxvtj/Shq2axY=)
                          6: 3230322e35352e3136362e302f32342d3234203d3e203137373639.roa (hash: rh4Hq0+PJnkMYodh0EEu2Rh0F1326cFssYTeQOpe6mo=)
                          7: 3230322e35352e3136332e302f32342d3234203d3e203137373639.roa (hash: fj4+D3FnvWC2jZGh29lA6NhBfEm+9p3F5NFsLJJnOOA=)
                          8: 3230322e35352e3136352e302f32342d3234203d3e203137373639.roa (hash: g5FIe96NvzXk1l3G1SZk+E0uR323nS4gh8FFBV8v4lc=)
                          9: C451166D49539649063AF8F493F51CB1ACE0AB09.crl (hash: V3nxDH8QGW0zO++4QlC8Lau0iZG9ObRLq9HUvaivBwM=)
                          10: 3230322e35352e3136302e302f32342d3234203d3e203137373639.roa (hash: p+Uf34Mmlfgto2vZAGmKX9zPbb85GAX+5DX29eoUl2g=)
                          11: 3230322e35352e3137302e302f32342d3234203d3e203137373639.roa (hash: FcauiWQCAo10b4251JHpBxlXw/DF6Tp3LqTDNrIkFZE=)
                          12: 3230322e35352e3137352e302f32342d3234203d3e203137373639.roa (hash: 6C+M2mKjL0ChxPYmBY/5rPDruxQaFvTx4uNnx5SBd5k=)
                          13: 3230322e35352e3137332e302f32342d3234203d3e203137373639.roa (hash: 39FnZF9lwp6Zy6W9tvLZyBge1M+UPl6WPVxqAcRECPc=)
                          14: 3230322e35352e3136312e302f32342d3234203d3e203137373639.roa (hash: E6giWYKilOtzuxxyRR5Bf2onxUq+uVzIL/QgDucECFM=)
                          15: 3230322e35352e3136392e302f32342d3234203d3e203137373639.roa (hash: E22Utfr9APhC4z7JcllyNf8HweB95Yf5C8me+CdvyFE=)
                          16: 3230322e35352e3136382e302f32342d3234203d3e203137373639.roa (hash: GjZ1cbaTXfnbMXe6NXLIE1G8vG8knT78bA2UOSSfXJY=)
                          17: 3230322e35352e3137342e302f32342d3234203d3e203137373639.roa (hash: AZl1WqvrrGaN/Hqm3PzVhhQNyD550/D+bGuAXNwzmmo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl
                          rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 11:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:82:f1:06:18:64:f0:d6:c9:6b:be:c5:4b:a2:a7:c7:24:ed:80:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C451166D49539649063AF8F493F51CB1ACE0AB09
        Validity
            Not Before: Feb 28 10:16:05 2026 GMT
            Not After : Mar  3 11:23:05 2026 GMT
        Subject: CN=8BA4DFA8F0C3868C8BD348B83D4E80451C9C79D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f2:01:79:bd:08:0a:0d:da:ed:f2:ee:0c:e9:
                    46:db:62:32:86:d6:db:2d:cc:50:d3:65:03:25:0d:
                    d0:3f:d4:eb:46:05:9c:29:b6:24:a4:9e:b0:c7:3a:
                    a7:28:9e:6d:92:c7:97:1e:60:15:b7:cd:90:a4:92:
                    b4:52:c7:5e:31:45:12:25:e9:ab:e1:d5:d6:0a:c8:
                    59:eb:00:a5:ff:83:59:96:30:48:9c:fd:04:79:11:
                    a6:43:e8:4e:42:f4:96:aa:b3:ae:8c:21:b6:c3:1e:
                    66:22:b5:49:62:1d:fb:bb:6c:a7:be:11:04:f8:bb:
                    5b:7c:ce:65:ab:14:67:db:65:05:f2:7a:1e:04:1c:
                    1d:01:26:db:ca:eb:7d:08:17:d3:ca:5d:51:26:36:
                    3d:b8:cc:3d:6c:33:de:62:46:24:cc:9d:b1:22:8a:
                    09:89:d1:19:0b:78:5a:46:d7:54:7d:54:10:28:30:
                    11:7e:6e:54:7d:07:8a:0e:55:54:0d:b3:07:1e:ee:
                    25:2c:b1:66:7d:dd:40:60:64:dd:2d:f7:77:43:6a:
                    94:e0:07:46:99:14:da:db:c6:97:6d:3a:9b:e4:de:
                    b5:e8:19:90:71:d2:ad:eb:0d:b4:bb:81:fb:1a:f5:
                    09:49:d5:58:69:2d:be:43:04:09:86:a9:e3:1e:9a:
                    7b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A4:DF:A8:F0:C3:86:8C:8B:D3:48:B8:3D:4E:80:45:1C:9C:79:D2
            X509v3 Authority Key Identifier:
                keyid:C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:cc:ec:b2:ec:e7:e7:8e:fd:db:51:56:18:b9:15:e2:bb:ec:
         08:7b:26:3a:c0:f6:b2:9a:c3:0a:1c:3b:bb:dd:f6:e2:eb:0d:
         eb:46:ed:c9:98:ab:ab:f8:92:02:89:62:4b:45:b7:01:8e:44:
         a8:ff:41:6f:13:cd:f1:5e:c0:cc:02:59:bb:5e:fa:fa:b2:e1:
         5a:1b:de:a1:26:0e:32:02:89:e8:81:ed:a4:f5:01:b1:c1:91:
         b7:09:cb:29:fb:6a:dc:8d:57:c9:b3:f7:d0:86:5d:2b:1b:f7:
         81:b8:e3:b2:04:97:6d:ea:73:d4:89:36:c0:60:fe:26:4f:2a:
         d2:97:81:18:b2:45:56:3d:63:0c:1c:6d:44:e0:87:60:8e:84:
         b0:55:7c:22:16:5d:6a:6b:58:c9:35:4f:33:77:89:11:37:95:
         ba:03:ac:7b:7b:97:f5:1b:8d:b1:d8:87:6e:dd:c5:af:4e:95:
         3c:c8:54:4d:3e:f9:fa:c8:48:c3:8d:ab:31:3c:93:02:10:fc:
         81:b6:73:14:77:89:f3:1e:19:d6:cf:83:81:59:5e:fa:94:b4:
         27:65:88:9e:ed:db:18:f4:26:7a:60:c4:76:a4:94:dc:d1:84:
         ab:df:02:3f:53:af:eb:0e:24:f0:20:08:a7:b2:bc:bf:c5:f1:
         b7:92:20:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:08 2026 by rpki-client