Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
File:                     732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json)
Hash identifier:          xre6KQR9aHbJLycAeKthmjznFO1Q/IckhfFU9NKvLfI=
Subject key identifier:   06:9C:3E:5C:66:66:B4:51:47:E6:2A:35:15:87:57:FE:7C:F6:EF:50
Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3
Certificate issuer:       /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3
Certificate serial:       4B8E6E2FF39230BF703E63F35316E6147D88F4D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
Manifest number:          02D2
Signing time:             Sat 28 Feb 2026 14:11:12 +0000
Manifest this update:     Sat 28 Feb 2026 14:06:12 +0000
Manifest next update:     Tue 03 Mar 2026 22:09:12 +0000
Files and hashes:         1: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: 2YTeJrlPNFWad37HhhgTvGIvoyv08V1DRRJ3BoJTpGk=)
                          2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: MEztuZqZgD3unDvE9UbT7j2miLRVC0ZWnvrCm6yOt54=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl
                          rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 22:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8e:6e:2f:f3:92:30:bf:70:3e:63:f3:53:16:e6:14:7d:88:f4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3
        Validity
            Not Before: Feb 28 14:06:12 2026 GMT
            Not After : Mar  3 22:09:12 2026 GMT
        Subject: CN=069C3E5C6666B45147E62A35158757FE7CF6EF50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8e:fb:bd:1b:8a:c4:58:55:d2:b2:11:df:ad:
                    f2:9d:d7:6a:11:1b:7d:eb:12:ed:91:65:0f:39:7b:
                    44:fb:66:9a:70:83:ce:91:cc:80:0c:49:33:ec:27:
                    3b:8d:d1:7a:f0:8f:17:32:9b:93:47:98:ab:c5:75:
                    ed:ea:e1:68:d2:98:b1:47:f2:b5:ed:a3:2d:27:46:
                    f0:46:1c:9b:e1:da:a6:76:f9:1b:0d:3f:1a:d5:a9:
                    aa:22:a4:29:53:82:1e:40:5f:39:9b:41:56:31:8b:
                    06:28:b1:3e:8a:c2:09:14:f9:bf:6a:39:a8:c6:bc:
                    85:02:d1:a3:11:30:c2:4c:f5:68:41:76:9d:48:60:
                    ce:38:d1:2e:65:05:2c:98:a5:f9:68:f4:ad:c3:64:
                    0f:2c:24:4a:3b:e4:5a:c5:a3:49:5e:75:3d:b5:e5:
                    e3:aa:ea:b4:eb:6f:0f:4a:67:05:10:70:0a:cc:a1:
                    07:e7:9c:33:ba:c1:b7:be:aa:8f:2a:9c:96:54:34:
                    ce:a5:c5:91:a3:9d:94:aa:c9:f6:ff:e7:2d:91:c3:
                    a9:70:69:65:a5:df:bf:ae:19:f3:70:3e:73:57:b2:
                    89:1d:68:48:c1:b7:fd:67:1c:0b:65:ce:7b:a4:4b:
                    59:7d:99:c5:76:18:01:31:3b:88:74:0d:43:3f:09:
                    38:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9C:3E:5C:66:66:B4:51:47:E6:2A:35:15:87:57:FE:7C:F6:EF:50
            X509v3 Authority Key Identifier:
                keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:5f:f4:38:45:15:d7:90:66:6a:7a:83:ef:3d:11:19:c7:2c:
         f0:58:e1:19:4e:e0:de:a2:04:50:57:5f:7e:97:c0:d3:c9:0c:
         d9:6a:c5:52:d1:83:bd:b6:a8:ff:97:77:63:b3:15:54:bb:75:
         1d:0b:bd:b2:35:d3:02:41:1a:35:e4:a7:74:00:c5:65:3b:65:
         58:d1:fd:fa:0b:f6:8f:cf:66:a8:ec:1a:d6:b8:9b:e2:8c:6b:
         f4:1a:1c:a5:8b:8c:26:c3:a0:c6:3a:bc:97:4e:36:cb:d3:d8:
         10:09:54:9a:c0:a6:73:0a:70:9f:a6:fb:9d:07:69:ab:bb:79:
         fb:4a:e6:f5:95:58:7c:71:2a:9e:ad:d1:32:17:b6:bb:cc:df:
         56:1a:97:d4:32:3e:c9:5c:8a:dc:42:f7:ee:f6:1f:ff:c6:f6:
         21:93:64:34:a5:1b:9e:d5:2a:2d:e7:ac:80:20:68:5b:83:64:
         9c:e1:ac:e0:7b:65:44:29:99:de:78:ff:02:3f:9c:10:45:48:
         8f:e5:d4:1f:07:44:eb:7c:bb:30:a4:fb:a6:80:4f:de:a0:11:
         d4:4b:d3:d6:3c:29:d0:61:a4:80:7b:aa:70:d5:41:66:f4:2c:
         02:cf:50:dc:cd:0f:c0:47:91:68:70:f3:0a:2b:c1:d3:86:5e:
         3d:35:75:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:51 2026 by rpki-client