Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
File:                     3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft (raw, json)
Hash identifier:          4pHdAVrPt4m/8E52u602uYSFS9Wyl80xnq68lxW7wiA=
Subject key identifier:   60:00:26:10:05:26:EE:7E:DA:D4:7F:FB:11:55:16:E9:20:EC:9F:D9
Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25
Certificate issuer:       /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25
Certificate serial:       0429296A3E5FAD198AF57111A11EA2AAA8939C74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
Manifest number:          0225
Signing time:             Sun 01 Mar 2026 19:11:55 +0000
Manifest this update:     Sun 01 Mar 2026 19:06:55 +0000
Manifest next update:     Thu 05 Mar 2026 02:42:55 +0000
Files and hashes:         1: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: O+nmvl+UTnkLZegrbIISQHYGfoEA7BPCfhSW9p3DWUc=)
                          2: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: ugWQkuQ0uRRyYTj1KpvBULv0Xx0kJB9LyC15wGfuroA=)
                          3: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: xiMw3g54rwkg5pTrfUcRFVEPY6CzUbv7I+jMZseSJVM=)
                          4: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: BHHFTjLTNMFtSq5idTfwLT9M3wuRjM3mExKv2SVRdKc=)
                          5: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl (hash: eSXSd4o+2ItFvGHVNpSJxLIaIwK5NED/6tX/9R7WruY=)
                          6: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: sVFI8Cp5vLICzsv5e4/4WyRHUaJ0f+3GFM/qswBcdHg=)
                          7: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: JiNSNBx/NJVCb9CW8exTEdCGa2EMUTZlCI+5UgveOhE=)
                          8: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: iXcg9I4Oyy6EsqPXrnC6OWS/dn/agjkU6nPGqXChu7c=)
                          9: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: KCBeNM9Sn0PIpboyPHdjgvvuRVmSaWYIbnHGh3xSCK0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl
                          rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:42:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:29:29:6a:3e:5f:ad:19:8a:f5:71:11:a1:1e:a2:aa:a8:93:9c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25
        Validity
            Not Before: Mar  1 19:06:55 2026 GMT
            Not After : Mar  5 02:42:55 2026 GMT
        Subject: CN=600026100526EE7EDAD47FFB115516E920EC9FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:56:3f:21:b6:77:19:1e:2d:47:aa:94:0d:96:
                    58:a3:d2:c2:63:92:1a:7d:c7:33:18:9c:5a:4e:42:
                    c2:e4:39:4c:f6:9f:59:de:f9:2b:f6:0c:23:ae:e5:
                    3c:13:63:92:ca:c3:d3:48:95:57:87:c6:7f:9b:96:
                    de:19:7d:43:2d:86:92:ea:2c:a0:f4:93:3b:60:bf:
                    0d:5d:10:9c:cf:37:b0:d9:88:e6:c8:65:9b:38:24:
                    1f:e6:a0:42:82:2c:32:39:35:5a:c1:fd:36:bf:b6:
                    54:9e:08:38:54:a7:be:c3:65:fe:56:d0:d3:d8:f9:
                    0d:b2:c3:8d:a3:52:5e:94:e0:c6:a4:fc:4a:f1:72:
                    52:1a:5f:49:cd:34:89:7d:72:88:25:04:6a:d5:dc:
                    b1:a5:7d:52:10:83:7c:7e:65:cb:cf:84:10:f5:bd:
                    0f:f2:36:1c:47:0c:91:b8:91:78:ee:6a:a8:f3:5d:
                    17:7b:f5:d4:64:9b:be:37:f5:d8:39:85:19:69:ce:
                    11:ef:61:5b:81:8c:8c:d2:f4:a8:e1:29:63:22:b5:
                    96:86:65:de:53:c1:a8:4f:ba:9e:9f:fb:c6:e4:a6:
                    2b:c3:fa:90:f6:0b:b6:63:b3:eb:82:dc:80:12:31:
                    f7:5f:94:1c:a6:76:a6:d9:00:2e:7a:f1:12:63:f4:
                    e1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:00:26:10:05:26:EE:7E:DA:D4:7F:FB:11:55:16:E9:20:EC:9F:D9
            X509v3 Authority Key Identifier:
                keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:7e:bf:7e:79:26:f1:01:88:a2:e6:7e:e2:af:7b:06:69:46:
         ee:85:8b:20:26:59:d3:bc:16:aa:3d:ff:77:13:c1:6f:ae:10:
         89:ea:a9:55:7b:0a:6d:ce:9c:63:e7:88:7f:45:ca:1a:2f:fe:
         1c:c6:51:ec:d7:b1:d7:47:77:51:9d:04:90:2d:44:99:ea:44:
         0e:17:ec:96:37:72:aa:ff:58:b2:7d:61:f0:ee:48:03:20:9f:
         b0:68:bb:fe:65:18:c4:4b:2d:18:76:4d:4b:c9:a9:13:8f:e1:
         d5:83:e8:97:23:75:ea:ab:5b:69:40:24:91:61:5c:00:2f:9c:
         5f:28:ee:21:fe:7a:1d:b0:78:6b:41:5c:8f:aa:cf:71:93:6d:
         02:d3:94:48:34:67:37:c8:2e:7d:a7:2e:e5:2c:bd:f0:94:49:
         1e:bb:01:13:16:36:dd:00:35:b4:4e:a8:a8:8d:40:31:8d:f1:
         b3:d8:79:36:84:97:6b:46:07:d5:8e:54:9d:45:31:e0:33:aa:
         ce:8a:e7:24:9b:fd:28:76:7e:03:0e:76:f9:46:81:eb:ad:ae:
         01:66:66:52:dc:c4:a8:27:90:cd:16:11:5b:00:3b:a1:99:34:
         a5:90:aa:55:73:e2:5d:7d:58:92:27:58:4c:3f:49:60:f0:86:
         77:f2:03:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:11:17 2026 by rpki-client