Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
File:                     0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft (raw, json)
Hash identifier:          7iY/RohhkdFLgpLeoJFw0/fFKEdpN7Mbdz/b6QrWwfw=
Subject key identifier:   37:22:9D:2B:AF:F0:72:B0:0A:90:F3:3A:C9:AD:76:1E:D8:B7:A0:3F
Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD
Certificate issuer:       /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD
Certificate serial:       2CDCA8175149B29E7CCCB42E4A6988D9895D7137
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
Manifest number:          F0
Signing time:             Sat 28 Feb 2026 16:21:14 +0000
Manifest this update:     Sat 28 Feb 2026 16:16:14 +0000
Manifest next update:     Tue 03 Mar 2026 17:22:14 +0000
Files and hashes:         1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: ksjiqtTAWCgIRtUjPZtNzrKoQay+iOF9ttjO6dpoPs4=)
                          2: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl (hash: lIA5VRTnfN888xGcOYcApMJaWIgbZlhFScGlDRqQvdg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl
                          rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 17:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:dc:a8:17:51:49:b2:9e:7c:cc:b4:2e:4a:69:88:d9:89:5d:71:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD
        Validity
            Not Before: Feb 28 16:16:14 2026 GMT
            Not After : Mar  3 17:22:14 2026 GMT
        Subject: CN=37229D2BAFF072B00A90F33AC9AD761ED8B7A03F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:f6:a4:28:d7:76:38:4e:34:19:5e:55:28:
                    84:79:a4:1b:3f:07:83:43:5a:f4:20:c7:5b:18:24:
                    67:5b:05:09:51:c2:e4:7a:b4:a8:fb:53:b8:9c:1c:
                    0c:00:13:d9:ae:2a:d3:e5:0b:d5:ff:2c:7f:d4:5e:
                    3d:ba:2d:53:3b:84:64:72:e0:1b:b2:07:c4:dc:5b:
                    30:aa:26:93:ac:08:ab:5e:4b:a0:8c:3c:cf:83:a4:
                    f1:85:59:dd:9c:3f:9a:9e:27:c2:09:9f:12:79:5b:
                    9c:c1:fd:dc:4b:8a:98:4e:b3:48:1f:84:7c:7c:5c:
                    6e:e2:c4:dc:9b:ad:0c:5a:94:43:fb:62:05:e0:70:
                    6f:1f:4c:61:3e:58:ca:b4:71:73:87:84:18:00:69:
                    ac:f3:84:77:08:31:60:09:20:b4:a2:a6:b9:e4:2a:
                    e0:28:b5:88:81:21:84:09:39:14:4e:5e:96:2a:b4:
                    24:e1:56:5b:38:eb:75:8b:64:69:88:84:c8:b7:f8:
                    75:42:8f:e4:e3:23:ee:08:da:0d:71:a7:89:a0:00:
                    90:8c:2c:5a:52:27:09:83:50:05:64:42:29:b5:89:
                    1b:f2:74:56:c6:ce:d0:35:47:30:f3:b0:d6:06:96:
                    6d:55:86:71:65:18:29:f4:83:6d:46:35:72:a8:5e:
                    8e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:22:9D:2B:AF:F0:72:B0:0A:90:F3:3A:C9:AD:76:1E:D8:B7:A0:3F
            X509v3 Authority Key Identifier:
                keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:cf:41:b9:15:04:14:8a:85:89:60:d7:8e:2c:ae:46:c3:59:
         91:4f:04:f2:46:17:88:a2:27:2d:ba:55:39:fa:1f:f6:58:d7:
         6a:e6:52:bf:bb:a0:73:6b:1c:fe:ca:dc:b2:33:d9:3b:a0:43:
         48:21:6a:25:47:b6:cd:52:ae:08:1a:74:d4:4b:af:40:0e:a2:
         63:2a:8a:9f:0f:a6:82:ff:c4:f8:a5:62:03:a0:f7:e2:c8:78:
         0f:5c:c9:c4:38:b5:c0:f3:d5:6a:20:0d:e3:94:b7:28:d3:e3:
         ea:35:8d:14:90:3b:af:80:a6:e4:2a:c3:57:27:57:e1:b9:76:
         6d:64:75:9c:71:21:70:b7:30:dd:4b:51:63:43:41:31:67:bc:
         b7:bf:f5:c6:ff:a3:36:74:cb:b0:62:d9:42:09:e5:44:1e:fb:
         c8:41:12:db:22:b3:05:a2:37:21:35:8a:fc:f0:16:4d:44:90:
         93:71:8a:c2:58:fb:0f:aa:26:e2:a4:91:fa:4a:83:0e:2f:39:
         8a:0c:ab:5d:cf:f4:e3:ae:32:9e:31:13:fa:c7:35:20:60:0c:
         60:88:c5:d1:ad:f2:d4:a9:99:e0:1c:dd:e5:cc:37:32:15:02:
         1c:57:f6:8a:c9:59:57:ea:24:e0:5d:f7:35:51:32:d3:59:7c:
         1b:b5:c4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:04 2026 by rpki-client