Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft
File:                     7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft (raw, json)
Hash identifier:          sZKUo9CuC6FnQuHhLhJYVdArCG6C2HnniE9AtzEf48A=
Subject key identifier:   B5:9C:CD:B7:1A:7A:5F:5C:4A:22:9D:37:71:E9:B7:E7:24:6B:83:78
Authority key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC
Certificate issuer:       /CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC
Certificate serial:       4ABE9C7D4495722668DA651EBB038F1880DEF5A0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft
Manifest number:          DA
Signing time:             Sat 28 Feb 2026 08:51:19 +0000
Manifest this update:     Sat 28 Feb 2026 08:46:19 +0000
Manifest next update:     Tue 03 Mar 2026 17:47:19 +0000
Files and hashes:         1: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: HJdK4DRAmRrZWLjILXhoJkILfMyC0BwC4uGRxH8TEAM=)
                          2: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: lAtUfGS13GDkvr/Pm9PSGFkJR4Rstob6+L+fcyUN72Q=)
                          3: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl (hash: QIr7wap3Vm04yM8cbCdBRl7cOzCR5Bv1+tQhuJXvswI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl
                          rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 17:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:be:9c:7d:44:95:72:26:68:da:65:1e:bb:03:8f:18:80:de:f5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC
        Validity
            Not Before: Feb 28 08:46:19 2026 GMT
            Not After : Mar  3 17:47:19 2026 GMT
        Subject: CN=B59CCDB71A7A5F5C4A229D3771E9B7E7246B8378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0f:14:84:71:3b:45:58:51:17:a1:10:ef:96:
                    28:d1:f6:f7:c0:f2:b9:23:ea:23:af:44:e2:3d:fb:
                    48:cd:a9:9e:2b:fb:85:3c:4b:1a:1c:ef:fe:07:60:
                    34:48:a8:2c:53:3b:99:fb:e4:ca:7b:f2:7c:91:55:
                    63:d5:13:54:30:51:1d:95:c6:ed:5b:15:c8:4f:04:
                    d1:c8:49:59:77:78:57:4d:7d:3f:60:94:b3:1c:25:
                    c0:76:af:a5:cc:59:2f:1f:9e:8b:07:5b:e5:0b:66:
                    bf:1e:4e:bc:6b:f6:2f:39:f6:f4:51:90:a6:8c:d4:
                    91:98:24:df:8e:94:d8:fd:59:7e:ac:f7:fb:09:2c:
                    88:3e:0c:eb:fd:b3:fa:29:f7:a7:7d:63:a4:53:39:
                    35:8b:29:79:ef:86:d1:8e:92:cc:29:a1:9e:6b:51:
                    42:bf:b8:be:ec:3e:04:9f:bb:b7:3f:50:15:0e:f8:
                    fa:bc:52:99:44:0a:65:21:a2:95:fc:c4:fe:62:87:
                    35:39:79:52:f5:d8:9e:e6:4d:f9:15:79:ba:c7:4a:
                    b4:f3:65:65:82:56:f7:48:7d:ae:9b:e0:46:78:8a:
                    3b:bf:8a:bd:34:23:75:87:6e:fc:a4:15:50:0b:21:
                    62:fc:ed:93:19:1e:01:72:bd:60:90:24:fd:11:84:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9C:CD:B7:1A:7A:5F:5C:4A:22:9D:37:71:E9:B7:E7:24:6B:83:78
            X509v3 Authority Key Identifier:
                keyid:7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:0f:0e:15:be:fa:3c:1d:9f:dc:d5:52:20:dd:9d:5d:c4:ab:
         21:b3:94:50:53:c1:6a:b5:62:b5:8f:ff:63:17:51:20:8c:77:
         4d:4a:a5:f2:50:a8:80:28:4e:44:bf:8e:89:38:38:82:31:71:
         c5:6c:39:6a:8d:a5:b8:ce:0b:33:be:b7:6f:3f:45:4a:bc:10:
         00:42:61:87:ef:0b:12:72:47:70:ed:16:db:14:d5:78:47:b0:
         60:ae:9a:61:43:56:19:f1:d6:6c:fa:2a:2a:19:11:30:30:d4:
         f5:71:33:b5:61:95:bd:83:59:94:d5:4b:de:44:3b:f7:16:72:
         21:50:89:ce:aa:9d:d4:b9:96:d7:57:2c:8b:fb:cc:49:ac:cd:
         f0:86:fc:0b:06:44:e7:51:85:bb:f1:4c:af:c5:8d:bd:9d:3f:
         a9:a8:6c:1c:d5:9c:62:45:0d:04:86:b3:c6:b9:50:23:af:73:
         16:25:89:42:89:70:f7:50:b0:e5:d0:d5:0f:5e:3c:47:f2:53:
         83:4d:8c:0b:c6:14:26:07:c9:54:6d:61:4b:83:85:b7:0f:ef:
         2e:81:8c:94:69:8b:4a:73:f9:d4:fc:43:f9:c2:b6:ca:a5:ca:
         d3:ad:d0:9d:9f:d1:49:51:8b:dc:ef:14:b6:f4:0a:54:2a:2b:
         6f:fd:6e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:09:45 2026 by rpki-client