Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
File:                     012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft (raw, json)
Hash identifier:          DghIfMYEdxPq1BjLHhgsoACqyA3VvxO1H9TTnLC0y5Y=
Subject key identifier:   F2:CF:8B:85:2B:6B:93:AF:F7:22:EC:1D:0A:78:73:EB:06:B0:CF:6D
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       1D4D52F43C79D3D97AADD651F51CF0FB53D91C9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
Manifest number:          0559
Signing time:             Sat 28 Feb 2026 03:22:26 +0000
Manifest this update:     Sat 28 Feb 2026 03:17:26 +0000
Manifest next update:     Tue 03 Mar 2026 06:01:26 +0000
Files and hashes:         1: 323430333a623930303a313531663a3a2f34382d3438203d3e2034333832.roa (hash: Mn12cCWWwqenSncttGnq31sIu/+Hnb5sVeUQv3iCWNw=)
                          2: 3230322e39332e3133392e302f32342d3234203d3e2034333832.roa (hash: 2xWfiK5wGmMcUrPcXTeK+FMi4oIrH3FKfxMpAgGIdSQ=)
                          3: 3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (hash: /w7eKmK7IgjbUT0N0MS/xY50UMcyTaRIoyZfbv+wX+Q=)
                          4: 3230322e39332e3133382e302f32342d3234203d3e2034333832.roa (hash: 9VqDU3d2jTW23JJ05scMXpgKwNdRFXtjy3WCszDduNE=)
                          5: 3230322e39332e3133322e302f32342d3234203d3e2034333832.roa (hash: HZhJmMH/Ke4cPS3cjwshrQlxCqO5LSReCzOgD2oJQGE=)
                          6: 3230322e39332e3132392e302f32342d3234203d3e2034333832.roa (hash: 0aNy0ETuqhbORaoBLuDRgIvkLNekuqgE5MuIzbIuHu4=)
                          7: 3230322e39332e3133332e302f32342d3234203d3e2034333832.roa (hash: vkTDe9buXDOgB6kWHFGcwJdVcp2flSZI09Z4kQqjciU=)
                          8: 3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (hash: AxG3Av6Lr1ooWeZ52jFBXjksOOp131HOnOlkyHCdSIY=)
                          9: 323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa (hash: yvbmRN5GX0Kxoc+90gun4y0Zq8jLX00f2pb/Z/G8CGA=)
                          10: 012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl (hash: aURMXJkAgdJVGtorcbx0R7kPujwbmA9/1qevywVYOoI=)
                          11: 3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa (hash: qkkJ54NZ40Um3ciYsl/FGUnS4rYZSGlzZD4dWlUI5hM=)
                          12: 3230322e39332e3134312e302f32342d3234203d3e2034333832.roa (hash: bBONzBtnp5cZgKGGF/WSDLhv6iSsnxnb46nVEQMcaEk=)
                          13: 3230322e39332e3133352e302f32342d3234203d3e2034333832.roa (hash: ri1oMn8me80QpVGUqBtvPXHCGV+V3jM8xkbu4T3ytno=)
                          14: 3230322e39332e3133372e302f32342d3234203d3e2034333832.roa (hash: bc52vQ8UC2G4/y1ll8Fk+/X4/gPss4cwSVJImtHITIQ=)
                          15: 3230322e39332e3133312e302f32342d3234203d3e2034333832.roa (hash: w9IXrLEpnOTvHIWW3gOa5yz7gU/R3agEoOz9SkOzTf8=)
                          16: 3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa (hash: iVB5CfMmFrw/1sxkrTtiTl8LrYbLbK8j8toSYOpEOdI=)
                          17: 323430333a623930303a3a2f33322d3332203d3e2034333832.roa (hash: JWHfZ6w+iObuBrwQGbo/6Xd2nLZuo2KPm5ntS1O1mZA=)
                          18: 3230322e39332e3133302e302f32342d3234203d3e2034333832.roa (hash: mk2uuBuKIDHj7rkFbCdRe6jSuAPJ/hDxuUfm/exdaSw=)
                          19: 3230322e39332e3132382e302f32342d3234203d3e2034333832.roa (hash: Kcq6RiACas78b8uWIYiFOtGS3r3yMXUnaWfx7z/cdEU=)
                          20: 3230322e39332e3134322e302f32342d3234203d3e2034333832.roa (hash: /rqrLGb+IkPW8rjy02EXXMaWAA6ibmhWcBGw6CAxGjc=)
                          21: 3230322e39332e3133342e302f32342d3234203d3e2034333832.roa (hash: XNOVEI3YN45FFKxPdBMlhL4tIvoqWKr9UzQJy69423A=)
                          22: 3230322e39332e3133362e302f32342d3234203d3e2034333832.roa (hash: uZGMmLO+ihx1HauuMCEhDeKUaoZ9Cej3WyjpZuP5mxw=)
                          23: 3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa (hash: sFm39yL/wE3VY7beJqFDG9gTkKfaNeEukDIdxaa9zRE=)
                          24: 3230322e39332e3134332e302f32342d3234203d3e2034333832.roa (hash: HxTVM3BaA8ke4XmmAmeOxfSVVSVRh0EkdWqpyqwPT1U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 06:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4d:52:f4:3c:79:d3:d9:7a:ad:d6:51:f5:1c:f0:fb:53:d9:1c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Feb 28 03:17:26 2026 GMT
            Not After : Mar  3 06:01:26 2026 GMT
        Subject: CN=F2CF8B852B6B93AFF722EC1D0A7873EB06B0CF6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:fb:0c:a1:b7:0a:98:14:74:0f:79:9b:e7:
                    cb:7e:13:14:c1:10:a1:6f:2d:67:ff:08:3b:be:22:
                    09:a1:50:7b:be:fb:da:4c:1e:da:2d:27:09:34:55:
                    61:0e:29:f3:64:c6:af:7a:9c:60:40:72:5f:c8:35:
                    d7:d5:32:ce:21:90:d1:be:a7:5e:22:76:67:fa:41:
                    61:40:81:ec:eb:a4:5f:ba:a0:8d:29:07:a4:af:10:
                    91:89:61:e2:7f:d5:a5:77:b9:30:1c:bf:00:16:f1:
                    d0:61:da:1a:25:cd:40:9d:bd:84:19:6c:d4:78:e2:
                    3d:07:ec:0c:34:ca:34:ef:e8:2e:1f:2d:5f:02:13:
                    40:88:15:45:90:0e:30:ff:cf:bc:5b:d9:54:31:87:
                    e4:2d:86:b2:db:6a:79:16:ba:ef:64:d1:32:db:af:
                    7d:44:0a:e2:78:a2:9d:48:d5:6e:08:72:49:15:b1:
                    22:59:ef:3d:bd:6a:5d:d9:a8:10:e2:f4:3e:b6:b1:
                    97:bc:03:f2:99:7e:5d:59:a4:5f:d2:1a:d6:d4:89:
                    0e:84:fb:de:bf:5b:be:5d:d9:15:5a:be:b5:8c:23:
                    5c:8b:6e:bc:f7:a4:db:9b:4e:e9:10:94:04:a9:e6:
                    c0:36:91:b3:8e:7f:e4:1f:0e:4a:a9:0f:82:7d:d7:
                    bc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CF:8B:85:2B:6B:93:AF:F7:22:EC:1D:0A:78:73:EB:06:B0:CF:6D
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:3b:ec:7a:c5:12:4c:94:73:24:d7:c5:db:83:94:63:19:f7:
         86:3d:a9:3e:3e:2c:8b:08:ca:eb:c5:6b:ef:a9:25:80:88:b3:
         4f:ab:01:cb:1e:c9:df:50:75:cf:31:11:3f:13:b6:f0:a3:4b:
         5f:ec:a4:b9:a0:e8:37:18:1f:9c:c0:1d:e6:61:c5:6b:67:2c:
         dd:d7:e1:d3:ae:a9:5a:02:8b:da:20:e7:7e:d4:97:1e:0e:07:
         a3:a6:04:23:94:12:20:99:df:59:a9:9e:e3:0f:00:a0:ea:b1:
         0c:3f:50:06:bd:d3:68:19:35:1e:f5:b4:2f:c4:df:3c:04:cb:
         2f:df:b6:4c:10:47:de:19:ed:79:b8:fa:90:78:cd:99:4e:79:
         78:9f:6c:68:bd:37:72:de:d6:c2:d2:80:38:99:18:77:34:11:
         d1:f9:77:ff:0b:b7:e0:b5:fc:e2:c7:2b:77:6b:15:d0:18:4d:
         58:34:a6:ad:03:da:63:4a:e4:61:89:d3:d5:0d:6d:82:44:13:
         6a:08:d5:7b:85:ce:3e:fa:59:79:31:a9:27:54:99:85:2e:42:
         e9:d0:f1:65:74:f7:1e:ec:6f:17:b0:59:84:af:7b:3d:66:3e:
         1c:0f:78:9b:95:b3:50:b2:d5:bf:44:e2:75:9f:c8:f8:72:09:
         f6:26:6b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:30 2026 by rpki-client