Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
File:                     9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft (raw, json)
Hash identifier:          llIlU/306dRx8eI2oavcA7R7EwJSNRKJz/PJypxvXBE=
Subject key identifier:   B0:DF:F4:A0:11:2A:C1:F7:0D:4A:2A:22:BA:32:82:D9:2B:84:75:11
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       36102AF2CB7A1FE383D3F53DF56F4A69593997A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
Manifest number:          0551
Signing time:             Sat 28 Feb 2026 08:31:56 +0000
Manifest this update:     Sat 28 Feb 2026 08:26:56 +0000
Manifest next update:     Tue 03 Mar 2026 19:56:56 +0000
Files and hashes:         1: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: WjmWZuOqqVrHpn2Iht/6D/CnYopSoMqLYwKVON2A9VQ=)
                          2: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: pHeh4WZc6QAiJI01oIhwHizGh3B/+0TL7uxRsM4Hqog=)
                          3: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: AMgNEXA3HgeJ9JW4vEN8yPqkkgaxJIY9BD1424Sv1Zo=)
                          4: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: fpx270ixaq11nCmgYzT3PO4j149L6mmMafh/Cax7edM=)
                          5: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl (hash: jiYrKxapvZBbHZza4/oSWqtSk7V+s0YppjtEQ4CdYXI=)
                          6: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: EdvOiYuEQSs6Tte4v6yMNFw5asiVZESXMxoQoYWb3vI=)
                          7: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: fs11mYHw0N1XTmtPs5VLrZKEd/NebYnoDSeOf+OjB1M=)
                          8: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: RS9Byz+j3EdqEQMObrbAR7PmpA8rmEiuqCAVbbyaqzQ=)
                          9: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: lTXl5JSGNXk2H6QC/ExXfaBTFR2N2ANdTqoiPB9R7qw=)
                          10: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: kpFmjz57IgAP8PtBxnCHq8wcPp57kSPI2nlME92Fnyg=)
                          11: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: vr66fn8B7rAPP+TZSIsfhj0n+lp991jln8PENhk4tOQ=)
                          12: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: CXQZIZNdSuRyo3numXoAqSwoFv1BpTDqqmtfJIixEeM=)
                          13: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: oTh96cvu9N7dUKNXeMRvCfiS16/pskUDIN5zzPcyPFs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 19:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:10:2a:f2:cb:7a:1f:e3:83:d3:f5:3d:f5:6f:4a:69:59:39:97:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Feb 28 08:26:56 2026 GMT
            Not After : Mar  3 19:56:56 2026 GMT
        Subject: CN=B0DFF4A0112AC1F70D4A2A22BA3282D92B847511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b6:b4:bd:0b:90:6a:83:a0:6e:b5:44:1a:8d:
                    c2:73:6d:5b:d8:af:3b:45:a9:b8:35:a0:b6:4e:21:
                    05:1e:64:84:b2:af:0d:4d:c6:9c:06:e2:61:1b:a3:
                    12:66:4c:3e:07:07:cd:f0:82:28:b1:3b:bd:ad:96:
                    1f:71:24:3e:55:25:0a:e8:17:93:40:46:79:3e:50:
                    8d:3f:89:6e:83:85:3d:2c:c4:d5:0b:7e:53:40:09:
                    5f:3f:9c:32:32:e7:78:a4:44:94:16:e3:dd:5b:26:
                    ec:ea:5d:0a:aa:57:ec:19:4c:d2:bf:fe:10:e6:15:
                    ee:4a:07:d7:43:a7:ac:09:e5:33:86:a2:44:ea:31:
                    a7:e8:5a:04:9c:b6:aa:c5:f3:a1:d6:a9:7c:9f:ad:
                    60:ce:82:82:20:34:0b:35:a3:a9:6d:8f:8f:fa:3c:
                    f1:a7:cb:c6:92:c0:39:ba:89:45:b2:fd:2b:ec:c6:
                    98:36:00:05:0b:4b:1f:f4:2a:ad:6f:4d:71:6d:5b:
                    99:ea:28:36:06:44:6a:e5:81:7b:f3:c2:1d:0d:52:
                    93:78:df:7e:b1:09:66:28:9c:3a:72:d0:c2:e8:76:
                    ef:a4:40:f3:7b:99:6d:e3:d0:52:e1:ae:db:9d:d5:
                    c8:47:43:7f:ba:a2:b4:8d:3b:c9:0a:ea:de:41:6a:
                    49:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DF:F4:A0:11:2A:C1:F7:0D:4A:2A:22:BA:32:82:D9:2B:84:75:11
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e4:d2:5d:f2:e2:53:c9:87:76:93:01:bf:a1:e6:fe:60:f3:
         3f:38:3b:3e:f1:a8:29:22:04:25:3d:6c:01:b4:a3:79:81:b3:
         c8:a6:fb:b7:31:83:fc:4e:50:9d:f1:1e:b1:65:42:ad:4d:df:
         bb:b5:e1:2d:97:0c:b1:05:2d:27:37:4b:92:f3:c9:e7:95:84:
         01:b2:25:ef:92:35:a1:b6:f3:e9:de:99:61:41:22:83:6c:18:
         ef:01:a0:09:c1:2b:6b:26:85:83:50:62:c6:64:af:d8:f2:e6:
         ed:40:f5:d3:e0:c4:76:29:5c:e7:14:16:85:d5:a8:71:7c:d8:
         12:08:74:20:f8:e7:85:2e:a0:db:41:0f:74:7c:49:5f:03:dc:
         16:5d:dc:39:f9:08:5d:85:84:c5:de:5a:73:8e:df:1e:31:a8:
         34:d5:1f:6b:e9:b2:14:7e:ed:a1:8f:bf:db:7c:44:2e:da:c3:
         36:83:20:27:79:ec:01:e7:52:e9:42:b9:ac:55:bb:e8:08:61:
         67:3e:f8:f0:4d:19:2e:7c:25:77:68:ec:1b:f2:b2:fd:d8:7f:
         21:16:f7:4a:03:6f:86:ce:72:43:3f:be:1a:38:7b:7a:8f:85:
         de:a3:9b:9d:de:4e:40:86:9b:85:39:2e:2f:99:c9:02:1a:83:
         94:c7:a7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:51:17 2026 by rpki-client