Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
File:                     28E2707085C2950AF9267465A3801841D8077215.mft (raw, json)
Hash identifier:          7oSeLgRNajmXQ0I7uZyLDNsUnMMXu4q0vPo/7d2BF84=
Subject key identifier:   68:A5:18:F0:7A:B5:3E:8E:E2:7D:FB:09:F7:04:54:A3:37:94:57:FB
Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15
Certificate issuer:       /CN=28E2707085C2950AF9267465A3801841D8077215
Certificate serial:       08CFE357974F1A57B993228BB48FAF80FC8BB90A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
Manifest number:          0223
Signing time:             Sat 28 Feb 2026 20:31:10 +0000
Manifest this update:     Sat 28 Feb 2026 20:26:10 +0000
Manifest next update:     Tue 03 Mar 2026 22:46:10 +0000
Files and hashes:         1: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: NmvwQ+vJpzvl8csZBAxbb4I15urZPoz8PAj6HkV5eq8=)
                          2: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: V2i40azcgFmkBu7Cde0Y3YygkoeLetM6IsM3EboJEWs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl
                          rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 22:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:cf:e3:57:97:4f:1a:57:b9:93:22:8b:b4:8f:af:80:fc:8b:b9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E2707085C2950AF9267465A3801841D8077215
        Validity
            Not Before: Feb 28 20:26:10 2026 GMT
            Not After : Mar  3 22:46:10 2026 GMT
        Subject: CN=68A518F07AB53E8EE27DFB09F70454A3379457FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7d:82:2e:a7:8f:10:b4:76:4b:0d:b7:73:bf:
                    97:2c:0a:c1:ec:98:82:38:54:ab:51:3c:12:b8:74:
                    e5:16:fd:0e:2e:6b:15:74:48:32:f3:77:f8:ea:ac:
                    8c:2a:9d:f7:16:57:70:27:59:62:32:c4:cc:ae:fa:
                    d6:d5:8b:01:8e:f7:33:5f:ce:35:d3:86:c8:5c:f3:
                    53:27:2d:5e:96:c6:8c:76:a6:9b:57:29:5a:11:88:
                    40:bd:f7:48:10:60:8d:4a:ff:6b:d7:e2:c5:8c:d9:
                    85:24:4f:97:29:3f:90:74:57:d1:c1:1e:21:72:d7:
                    f7:a1:87:a9:bb:5d:80:bd:28:e5:a4:75:12:d6:1b:
                    9f:6a:5a:79:3d:5d:72:58:0a:f7:15:90:07:8b:83:
                    51:fd:06:69:a2:1e:99:44:6e:08:0c:99:22:ac:2a:
                    e2:1a:aa:2d:f2:0c:71:2a:44:bc:32:4d:59:04:d9:
                    c5:35:de:c4:51:1e:ff:14:e1:76:30:01:6a:fc:d8:
                    87:e9:d0:93:19:d7:28:c8:3d:94:98:e9:45:3e:8c:
                    09:43:fd:8d:40:81:17:04:5b:27:f1:d8:41:17:e3:
                    e9:3a:d9:c6:02:26:de:f7:d0:5e:54:96:fd:12:f0:
                    bb:0f:03:24:39:4d:9e:25:11:f1:fe:f9:10:5a:b0:
                    5e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A5:18:F0:7A:B5:3E:8E:E2:7D:FB:09:F7:04:54:A3:37:94:57:FB
            X509v3 Authority Key Identifier:
                keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:31:4a:6b:1e:31:53:5d:58:ba:d3:57:25:52:9f:66:18:22:
         27:93:df:be:f3:e6:9d:66:db:43:7e:4a:cf:9e:03:bd:df:b2:
         18:5b:ea:10:3c:eb:a8:bf:d2:83:ba:fc:5b:22:45:2d:ef:38:
         57:ab:11:0d:4c:6b:3b:9e:44:63:6b:b2:3b:13:d4:25:2c:97:
         33:03:77:2b:c7:95:1e:88:1e:18:6e:44:d8:f6:5a:e6:c3:1c:
         81:e2:06:b1:4c:f0:e8:97:ef:96:e2:69:11:b0:a2:b7:85:f8:
         da:eb:06:c4:c1:1d:40:51:c0:1f:12:a6:f2:9c:fa:9f:ba:a0:
         cd:f7:b0:71:72:f5:fb:7c:95:bc:3b:07:06:08:d7:db:9b:1c:
         d1:0d:57:0a:44:23:b3:ff:20:02:f3:76:71:56:1b:80:6c:19:
         0e:4e:13:b1:a4:04:60:f6:89:99:e4:8e:e0:1d:a6:38:95:35:
         74:db:75:d7:14:18:9b:03:86:83:83:7f:26:4e:83:31:e6:23:
         53:a9:91:a4:8b:e5:c0:4f:2a:08:67:e7:16:d4:05:7f:c1:5f:
         b1:25:68:50:d1:10:ed:d2:c6:80:c5:c0:5a:02:38:ca:83:3a:
         f9:38:d5:1e:32:56:df:41:c8:86:a3:98:1b:e3:83:af:66:ca:
         de:5a:b6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:23 2026 by rpki-client