Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
File:                     2993EFF92300988A33773DD8C4B502F74B907112.mft (raw, json)
Hash identifier:          1BtxGuamuTmbB1qj3R+2SLNhTMbwZP+hlFdm5DhpNvU=
Subject key identifier:   E0:CC:44:43:A6:5E:BD:A1:7E:6C:36:09:E3:8A:8C:0C:FA:28:10:1B
Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12
Certificate issuer:       /CN=2993EFF92300988A33773DD8C4B502F74B907112
Certificate serial:       1ACCC46F05AE690227164EE49455758A6F51139E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
Manifest number:          0234
Signing time:             Sat 28 Feb 2026 02:22:28 +0000
Manifest this update:     Sat 28 Feb 2026 02:17:28 +0000
Manifest next update:     Tue 03 Mar 2026 08:50:28 +0000
Files and hashes:         1: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: /T3q0aKMlccwCqwpvQMGCHEcfpAgRAD32J67j3q+a2M=)
                          2: 2993EFF92300988A33773DD8C4B502F74B907112.crl (hash: opbonYBSpY3eC3wR7BJmo6aOfo5s1uY73Li0a1T7eds=)
                          3: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: JCzAZhJKrjcnXPRUzXNAKrf8B2XJvFX+OCG60Nl0Dgk=)
                          4: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: 9H4P2m2Q86+wvaB6C5BWHbuw5/CMaL6D8SYn5Utxj3g=)
                          5: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: nyiH5XZRu3exSPXepkvkOwB2m2ULxFRKVzAk8qvL/Rg=)
                          6: 3130332e3130352e37392e302f32342d3234203d3e203535363736.roa (hash: 8akbgTHcBzy09cH/zWkvU4LNiBkusQqjKfIeLuC7DA4=)
                          7: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: 8FISrQYbnFOpjiQHBztskExqHRou9e+XROYZoHoylq0=)
                          8: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: dcc/bwTW1oTsN+Z0h/Aw94q6mQUdzuyzIAdCoesD/EQ=)
                          9: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: MQCiIDyqzNBQYpoR0MRnkXubNFQEv31SOdbwjwRhFAI=)
                          10: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: u1/FWvhkUX8NdpjOfCEzIQ83rh9KfgiQw+mbq+Uaf5Y=)
                          11: 3130332e3130352e37382e302f32342d3234203d3e203535363736.roa (hash: jFVbs/Ft4bO73kf8lHPUr8+y5jJNNuINBps0Q/t8tqg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl
                          rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 08:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cc:c4:6f:05:ae:69:02:27:16:4e:e4:94:55:75:8a:6f:51:13:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112
        Validity
            Not Before: Feb 28 02:17:28 2026 GMT
            Not After : Mar  3 08:50:28 2026 GMT
        Subject: CN=E0CC4443A65EBDA17E6C3609E38A8C0CFA28101B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4b:93:00:00:72:27:c7:06:5a:f3:e5:08:f4:
                    ff:6e:55:2d:c6:9d:89:5b:46:82:d3:4c:79:d8:f6:
                    08:62:43:4c:8e:14:85:4c:ae:e3:52:b2:e9:b5:e4:
                    b8:de:de:2a:8f:0b:16:c4:1f:45:f0:41:58:10:46:
                    65:e4:f8:6e:e8:d0:04:43:8f:80:ad:1d:63:5c:1e:
                    ac:d7:1a:15:e6:5e:dd:f7:ef:52:e2:79:0a:f5:ef:
                    57:9d:8a:3d:56:b6:a2:24:ce:87:64:ac:f3:c9:5b:
                    08:4a:b3:ea:a9:fe:d6:03:de:9a:70:5a:14:9c:f3:
                    ec:cd:90:c3:e0:71:c5:bc:ed:fc:81:ac:ba:d2:b3:
                    98:e3:d0:9e:c9:65:32:ca:bc:00:1f:54:26:ee:85:
                    7d:b1:fb:8b:4a:0e:e5:fa:5f:e9:eb:ed:d8:f7:08:
                    fa:73:9f:93:1f:db:0a:f3:ba:20:84:71:57:41:b6:
                    c9:27:88:6b:ff:3f:99:ea:6c:c9:e9:bd:0e:ba:cb:
                    d9:e2:4f:a7:5a:a5:ab:9c:75:f9:c8:de:c5:00:0c:
                    74:eb:fd:19:ad:1a:7e:06:9d:a4:78:d5:50:f7:ae:
                    c1:ed:7d:e5:01:0f:92:00:ef:e4:c9:54:b2:b8:bc:
                    12:23:9f:d5:bf:f9:1c:63:66:d3:9d:bf:98:66:3d:
                    65:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CC:44:43:A6:5E:BD:A1:7E:6C:36:09:E3:8A:8C:0C:FA:28:10:1B
            X509v3 Authority Key Identifier:
                keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e0:1b:56:a1:c9:68:ea:7b:6c:54:66:b6:be:39:09:ff:3c:
         4b:c3:84:30:0b:56:bb:5e:97:62:36:7a:7f:4a:39:9a:dc:a5:
         1c:a6:5c:f4:79:72:ad:41:62:3f:b7:3e:a8:fe:35:29:75:6c:
         c3:f7:d8:34:93:bd:52:9c:de:9d:32:c3:95:a4:38:56:cf:bc:
         cc:bd:90:39:1f:df:77:46:75:e4:7c:86:8f:d7:67:b8:a3:93:
         8b:c7:bb:d7:93:45:a0:0f:5c:57:1d:f0:cd:75:71:ec:d3:ed:
         ed:cf:c4:e3:15:10:b3:71:c9:e7:51:86:43:a9:87:6c:b3:f5:
         90:f1:82:62:85:22:25:9b:23:a5:10:5f:83:f2:e5:c5:85:97:
         2b:6e:58:61:a1:51:d8:ec:d1:ec:5d:5e:6b:e1:fd:18:e1:53:
         c2:f4:60:ba:be:47:ec:b3:7c:f1:a1:ab:1a:e5:df:1b:58:4c:
         ac:57:7e:92:2b:db:1a:91:a5:91:e7:9d:94:4b:4c:30:13:a7:
         5e:bc:9f:31:cd:42:c9:6f:a1:00:a9:94:91:d5:0a:e1:ed:e9:
         83:e0:0b:f5:87:3d:25:f0:32:5d:ce:01:d6:d6:2f:5d:23:6f:
         31:d6:2b:b5:6d:a8:fe:bb:66:0c:69:9f:ec:56:69:84:1b:74:
         16:5e:ec:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:49 2026 by rpki-client