Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft
File:                     2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft (raw, json)
Hash identifier:          XHx9XxhIy4JRl2yoJK4k3DBxCoikQZxnT7z0GP9shcc=
Subject key identifier:   8F:BF:3D:07:B4:EB:EF:7A:AE:C0:5B:45:9A:DF:3E:60:77:7D:BE:84
Authority key identifier: 2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC
Certificate issuer:       /CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC
Certificate serial:       588016855249AF19B42D51FD8A5A664533872B79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft
Manifest number:          0126
Signing time:             Sat 28 Feb 2026 08:50:44 +0000
Manifest this update:     Sat 28 Feb 2026 08:45:44 +0000
Manifest next update:     Tue 03 Mar 2026 13:39:44 +0000
Files and hashes:         1: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: teoM6MXntxfZebuRvj4HuDCmBJE7bmAYK9p8NliSwzQ=)
                          2: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl (hash: SAYVM8A6pU47akXmeImemA+vM4Pf31LF/R2FO4cbnfA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl
                          rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 13:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:80:16:85:52:49:af:19:b4:2d:51:fd:8a:5a:66:45:33:87:2b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC
        Validity
            Not Before: Feb 28 08:45:44 2026 GMT
            Not After : Mar  3 13:39:44 2026 GMT
        Subject: CN=8FBF3D07B4EBEF7AAEC05B459ADF3E60777DBE84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:f7:d3:36:f5:cb:07:b1:2d:f0:a9:35:ae:
                    f9:0a:36:37:b6:e1:7c:ec:c4:eb:12:44:2c:17:47:
                    0d:19:f4:c3:74:a9:b9:79:eb:1b:2e:9a:7d:34:45:
                    b8:19:5e:36:29:14:76:1c:fb:d3:f8:2b:8d:57:3c:
                    85:b0:0a:dd:1f:f2:c1:5a:72:44:75:72:c5:82:29:
                    86:cb:ed:b3:86:cc:a1:23:eb:9b:bf:bd:49:f6:e5:
                    34:93:3b:77:34:1b:9e:41:9b:4f:02:e6:7e:02:9f:
                    c3:17:10:e7:d3:63:d8:14:63:35:aa:78:83:48:67:
                    88:b5:8d:eb:ad:18:fa:4d:69:a2:96:09:e6:66:81:
                    9e:ca:4e:35:59:ad:6b:a4:3d:9b:c7:59:56:5c:c6:
                    be:41:e2:04:96:e0:3a:71:8a:7c:fd:d3:a3:a0:50:
                    c7:e5:b0:de:28:66:b2:85:8e:09:7e:64:2a:d4:fe:
                    f1:4d:08:37:ae:02:93:f8:b5:62:55:d4:74:8d:ee:
                    73:16:4f:b6:2b:fb:02:70:10:28:5f:f6:4b:84:ca:
                    ec:b2:57:5d:29:53:5e:5a:e4:e7:ad:29:4c:1b:15:
                    6c:ab:fa:de:40:5c:5f:02:d4:07:67:92:68:3c:96:
                    35:c9:31:d6:92:e8:d4:43:68:22:4d:36:2d:e5:1f:
                    70:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BF:3D:07:B4:EB:EF:7A:AE:C0:5B:45:9A:DF:3E:60:77:7D:BE:84
            X509v3 Authority Key Identifier:
                keyid:2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a4:ca:c2:05:ab:18:bf:b3:f8:3a:d5:22:b9:37:08:39:6a:
         07:54:b0:cf:ed:1a:68:7c:68:a4:99:67:33:d7:3b:63:96:a8:
         8d:63:91:b2:75:5c:a7:b4:f5:00:a7:4f:4d:aa:72:f9:e1:73:
         bc:40:67:33:39:2e:51:67:b8:6a:6f:60:4c:0b:58:43:05:99:
         d1:ce:56:a2:80:b1:84:03:aa:f0:e5:d0:91:2e:86:b8:17:d5:
         51:b4:c8:8a:6a:fd:a9:a0:fc:9d:26:8b:4c:8d:34:97:92:28:
         7a:10:51:f9:f1:28:06:5b:ca:12:be:a2:92:e9:bd:86:6f:72:
         3b:fa:ed:4e:54:0c:46:22:7b:33:3e:5c:c2:63:a7:be:aa:bc:
         fb:ab:e6:a2:01:ef:9e:b4:7b:0c:72:a4:bf:82:3f:b2:7a:47:
         57:dd:0f:09:15:76:c3:45:cb:13:fb:d2:99:fd:78:c2:7f:40:
         0b:08:29:5f:00:4a:c0:95:c0:93:c8:d3:70:26:81:dc:69:b4:
         0a:38:a0:9a:df:31:2f:4b:76:17:0b:c0:96:59:ee:86:72:54:
         96:41:ef:a4:91:93:75:2b:6c:99:95:78:17:e1:98:f9:4b:9f:
         e3:10:6a:3c:55:93:47:04:51:de:fa:3f:37:5c:95:d3:f7:90:
         48:85:78:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:10:09 2026 by rpki-client