Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft
File:                     277D3C0811B597BC22847329E543CCEE7E2449A0.mft (raw, json)
Hash identifier:          EVFwMl5qw5W8VnNH49fGnASR9sgwRzbJqhS+uLLinKA=
Subject key identifier:   ED:2F:09:3D:E0:19:F7:B4:B3:9D:00:52:50:6C:21:55:E9:06:43:D2
Authority key identifier: 27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0
Certificate issuer:       /CN=277D3C0811B597BC22847329E543CCEE7E2449A0
Certificate serial:       1F65A9DE6EFCB2B38203B8E02B1762C7D6BA339B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft
Manifest number:          0109
Signing time:             Mon 02 Mar 2026 11:21:01 +0000
Manifest this update:     Mon 02 Mar 2026 11:16:01 +0000
Manifest next update:     Thu 05 Mar 2026 19:45:01 +0000
Files and hashes:         1: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (hash: fefCWKXr30YVqWiq342VlH8lfhnIRdZEARC93/LTaB0=)
                          2: 277D3C0811B597BC22847329E543CCEE7E2449A0.crl (hash: YoAQ0wthUQns+NOa5DYZJvtraevRa09OJKYh2dVcKBc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl
                          rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:65:a9:de:6e:fc:b2:b3:82:03:b8:e0:2b:17:62:c7:d6:ba:33:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=277D3C0811B597BC22847329E543CCEE7E2449A0
        Validity
            Not Before: Mar  2 11:16:01 2026 GMT
            Not After : Mar  5 19:45:01 2026 GMT
        Subject: CN=ED2F093DE019F7B4B39D0052506C2155E90643D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:fb:c3:7b:82:20:13:bc:ea:df:8d:f5:bc:
                    a8:50:b4:5d:b5:b7:11:51:29:b6:ac:96:bf:29:8d:
                    c2:f5:a4:82:7c:3c:24:21:ad:f9:ed:3c:5e:26:3a:
                    a9:7c:d6:98:42:5e:3d:bc:21:2a:19:09:f6:4b:0b:
                    82:96:04:e5:5a:eb:bd:b4:31:40:ec:5a:48:04:02:
                    5a:04:4e:3e:c9:3c:0d:a9:0b:1b:8a:e7:00:c1:7c:
                    d0:29:95:36:61:18:58:de:b4:a1:54:90:d2:4d:53:
                    27:f4:5b:e2:76:c0:23:3b:1b:48:8e:22:39:13:f6:
                    7f:84:cb:b8:c3:4e:11:cc:b4:01:32:79:24:34:58:
                    cc:6f:97:94:58:e1:b0:1f:e9:10:70:92:cf:f5:a0:
                    49:02:28:72:a7:82:3f:06:af:34:65:11:57:66:ec:
                    76:05:af:69:0c:66:b4:ac:03:75:ed:3d:f4:9a:65:
                    d0:9b:3d:bc:af:a8:da:0e:3e:46:b6:7b:00:58:1d:
                    21:3f:25:b0:1f:92:30:46:4d:82:af:35:8f:ac:81:
                    f7:ef:e1:9b:e9:6e:80:8c:2a:8f:c6:eb:68:da:49:
                    ce:51:94:17:08:f5:57:64:34:ae:6d:8e:69:a5:77:
                    ad:17:25:7c:fe:7e:f2:a6:8b:eb:9a:03:37:1e:f4:
                    ab:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2F:09:3D:E0:19:F7:B4:B3:9D:00:52:50:6C:21:55:E9:06:43:D2
            X509v3 Authority Key Identifier:
                keyid:27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:47:56:50:d9:ec:80:21:80:25:d6:6c:8a:30:11:ee:33:9d:
         cf:72:97:08:b7:42:bf:c8:b4:6d:93:65:e4:fe:f4:0d:95:4e:
         44:be:63:65:0b:88:60:28:bc:d1:80:dd:1e:f8:58:63:97:56:
         0d:23:38:b7:0f:51:78:03:e4:cf:1c:f8:51:5e:9e:30:4d:2c:
         82:f1:0c:85:02:29:3e:5e:d2:ea:95:e1:cd:df:50:d7:5f:ea:
         fa:13:91:4a:5b:24:36:75:f9:0a:5b:48:9b:40:c3:14:97:f5:
         7a:f8:af:72:a3:66:6c:4f:e1:8b:e2:2c:35:91:30:b1:6b:db:
         c8:87:06:ea:f9:13:35:27:af:39:a7:03:b1:17:3a:78:51:c7:
         73:92:51:2e:12:2a:1b:b9:98:18:a8:10:77:c0:51:28:67:d1:
         a8:94:68:eb:5c:c6:8b:35:fa:a5:3d:65:05:fe:51:f7:79:62:
         a1:79:2f:04:65:82:bb:fe:1a:0c:46:a3:ea:6e:ec:e2:a7:2d:
         e3:96:58:1c:5d:5b:33:60:d2:0b:6d:bb:ba:10:1e:d9:e9:ac:
         60:27:d8:1f:9c:67:4d:11:fd:98:34:4c:19:e1:f7:52:cc:1b:
         5f:36:94:80:60:f2:2c:7f:ba:f4:90:56:7b:1f:8b:6e:94:a4:
         75:4e:14:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:37:07 2026 by rpki-client