Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft
File:                     F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json)
Hash identifier:          DONJAqkfuG/o0lnkY72sbSYsgnzIdtmFSFydDPHnuj4=
Subject key identifier:   38:A8:69:72:B9:8F:BE:86:B7:70:7E:32:F0:CD:E1:29:6D:0A:2E:F4
Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C
Certificate issuer:       /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C
Certificate serial:       65469590DC2A5F1E17D469327F3C0F1EE77E921C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft
Manifest number:          022B
Signing time:             Sat 28 Feb 2026 10:01:14 +0000
Manifest this update:     Sat 28 Feb 2026 09:56:14 +0000
Manifest next update:     Tue 03 Mar 2026 15:38:14 +0000
Files and hashes:         1: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ixRJi1MWGC1okPSFiKG/jBrV/vpTa13AlLkEe20yP98=)
                          2: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: YE1zUZkyMurPVzfN0UDOklrOyrHVV97jRhIkCtC/bag=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl
                          rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:46:95:90:dc:2a:5f:1e:17:d4:69:32:7f:3c:0f:1e:e7:7e:92:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C
        Validity
            Not Before: Feb 28 09:56:14 2026 GMT
            Not After : Mar  3 15:38:14 2026 GMT
        Subject: CN=38A86972B98FBE86B7707E32F0CDE1296D0A2EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1d:e5:96:c9:57:10:f9:91:f4:72:1e:64:84:
                    85:6d:25:7a:7a:5e:14:c1:0b:4c:4d:6b:a0:58:ac:
                    80:e9:75:e9:77:42:d7:fe:d9:56:79:bc:96:49:e3:
                    cf:f2:c1:8c:a0:d5:0b:20:79:56:38:d7:32:59:95:
                    85:93:57:59:d0:b4:4d:66:98:d7:f0:d9:2a:44:d3:
                    84:56:d4:aa:dc:64:e0:16:ec:45:d7:77:15:eb:61:
                    fc:9b:6f:9e:a1:49:ec:ff:f9:4f:15:ef:01:1e:0f:
                    c9:c1:57:00:77:73:19:82:79:e1:ab:8a:f5:8c:ae:
                    bb:98:a7:ed:e5:ca:1c:35:f3:e2:9f:bc:a9:ca:20:
                    42:4d:15:0e:1f:a2:03:ab:78:d1:b3:ee:20:83:85:
                    79:4a:eb:cc:97:37:d5:3f:29:01:f5:2c:e0:d7:6c:
                    00:ce:e1:d7:2f:ae:03:4c:4b:40:34:66:9a:0b:5a:
                    4a:3f:0f:be:47:01:a4:99:42:39:be:15:31:dc:3d:
                    7f:56:a4:12:1b:2f:a1:80:82:35:ec:ae:08:1e:3b:
                    a0:e8:42:d3:2c:3a:c3:da:83:05:67:a9:bb:dc:e7:
                    25:8f:0a:09:f3:50:be:1c:7f:4f:d1:24:d1:e7:a3:
                    78:ab:95:70:60:a6:a3:62:00:fa:af:a6:4f:32:0b:
                    19:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A8:69:72:B9:8F:BE:86:B7:70:7E:32:F0:CD:E1:29:6D:0A:2E:F4
            X509v3 Authority Key Identifier:
                keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:12:a1:a5:92:8a:09:9e:80:14:e5:bf:8c:18:49:54:42:5b:
         9a:32:a4:b6:78:cb:6d:de:95:16:3b:0f:55:64:fc:a1:19:fb:
         2d:58:e8:9e:73:a2:59:fa:45:6c:b7:f6:d8:75:9e:a1:1d:df:
         b1:49:70:5f:9d:2f:f4:83:7d:93:fb:32:92:19:66:25:be:1a:
         29:2b:5b:9a:aa:b5:1f:7b:37:e1:c9:9b:a5:25:0a:2a:a7:7b:
         93:27:12:1e:a5:2f:65:4a:b2:82:b1:0e:0e:a5:08:29:3f:96:
         67:b3:75:04:46:45:e1:7f:42:b2:2c:97:1f:8c:84:3f:c0:29:
         2d:8f:39:12:2f:8a:f5:a3:85:71:c0:80:8c:dd:f8:88:5c:22:
         9d:c2:ad:01:06:5b:e4:9a:1e:7e:0a:e5:06:0f:39:e5:da:7d:
         e0:b5:aa:e5:9b:8e:49:a8:46:63:1f:7b:1b:5c:59:06:a3:38:
         99:f0:a0:8b:5b:88:fa:44:68:71:4c:5c:83:95:14:b3:5b:a3:
         72:b7:34:08:f5:db:6a:36:38:32:47:98:e5:52:37:7f:81:b9:
         13:0e:ff:8d:02:49:ff:27:fd:17:59:1a:3d:a5:c5:1b:da:56:
         ee:b1:07:81:66:68:9c:d2:92:52:a8:75:e1:0c:0b:23:ee:32:
         88:72:15:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:42 2026 by rpki-client