Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft
File:                     3B6C011787F4528DAFAEE19B8408D9405F030E61.mft (raw, json)
Hash identifier:          Baf2gocomlEcg3rpq5WBbwy6AuHLUS3myqyOPf9pWHc=
Subject key identifier:   44:1F:58:8A:E7:B3:CD:A0:F0:0E:84:13:44:D5:7B:37:29:DF:4D:28
Authority key identifier: 3B:6C:01:17:87:F4:52:8D:AF:AE:E1:9B:84:08:D9:40:5F:03:0E:61
Certificate issuer:       /CN=3B6C011787F4528DAFAEE19B8408D9405F030E61
Certificate serial:       678EEC962F3593EF3BB97B6A94AF8AD6D745ACC0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B6C011787F4528DAFAEE19B8408D9405F030E61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft
Manifest number:          09
Signing time:             Fri 27 Feb 2026 22:42:36 +0000
Manifest this update:     Fri 27 Feb 2026 22:37:36 +0000
Manifest next update:     Tue 03 Mar 2026 07:49:36 +0000
Files and hashes:         1: 3B6C011787F4528DAFAEE19B8408D9405F030E61.crl (hash: 0+3CkCgT1Uu9FRN4s6K64LvnkBxEB4TQIWfhbiqxH7o=)
                          2: 3130332e3131352e39392e302f32342d3234203d3e20313337333536.roa (hash: qF7ZyvBLQXU0z6sQinAxqtICo9LN6FDZ9IqqCQLq5zI=)
                          3: 323030313a6466353a323530303a3a2f34382d3438203d3e20313337333536.roa (hash: rTSV+CqWgDbyB0T8+UwJX4nONp+OV7Tlp7vmg3QUH/0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.crl
                          rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B6C011787F4528DAFAEE19B8408D9405F030E61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 07:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8e:ec:96:2f:35:93:ef:3b:b9:7b:6a:94:af:8a:d6:d7:45:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B6C011787F4528DAFAEE19B8408D9405F030E61
        Validity
            Not Before: Feb 27 22:37:36 2026 GMT
            Not After : Mar  3 07:49:36 2026 GMT
        Subject: CN=441F588AE7B3CDA0F00E841344D57B3729DF4D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:ec:cb:05:e6:58:b0:5d:a7:06:97:f4:bb:
                    c7:15:f4:91:54:b0:d5:31:6d:10:9f:d5:ea:4d:82:
                    ec:e0:9c:57:3f:71:55:88:ca:67:c0:5e:f5:4c:01:
                    b4:0b:07:a8:f6:71:53:15:6c:68:e1:3e:6a:eb:30:
                    54:90:a0:e1:fa:aa:c5:a1:22:03:e8:57:c1:d9:9f:
                    4b:bd:a3:c8:58:7b:46:a1:24:9c:e7:b2:4c:b3:ca:
                    dc:a4:3a:ee:f9:08:39:1c:4e:ce:93:3b:5a:66:09:
                    b7:d6:2f:ff:18:40:29:90:22:74:f8:18:99:3c:1c:
                    11:58:13:18:0a:c0:98:7d:eb:51:7d:66:17:5e:24:
                    48:56:d5:c1:0a:f4:8a:7d:93:09:79:ba:1a:1d:78:
                    58:c4:92:47:87:08:25:b2:d0:1a:96:fa:32:80:99:
                    5a:6f:19:7b:c3:94:ad:4a:fe:2e:09:21:bb:f1:3a:
                    be:5d:36:9a:31:43:39:3a:c7:39:88:b9:e3:c2:2d:
                    32:1d:4f:5e:bd:f4:ac:d5:68:eb:3b:8d:36:13:25:
                    3d:44:ff:5e:31:9d:3d:d5:1a:d9:fc:71:3f:82:8c:
                    73:87:12:cb:99:eb:4f:4d:18:06:4d:b6:7c:0c:fe:
                    30:4a:c0:3f:4d:86:2d:79:83:92:42:54:51:89:6a:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1F:58:8A:E7:B3:CD:A0:F0:0E:84:13:44:D5:7B:37:29:DF:4D:28
            X509v3 Authority Key Identifier:
                keyid:3B:6C:01:17:87:F4:52:8D:AF:AE:E1:9B:84:08:D9:40:5F:03:0E:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B6C011787F4528DAFAEE19B8408D9405F030E61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0b:c4:5a:47:a5:c6:4a:45:7b:82:a3:f4:94:0f:25:e1:2c:
         1c:87:fe:5c:c8:c9:69:82:6f:cc:9a:1f:16:1e:0c:77:10:19:
         0b:77:92:5b:58:c2:f0:81:7d:83:74:78:25:bd:92:aa:73:62:
         99:b4:e0:05:13:b6:a0:80:83:bf:74:57:49:49:9b:92:aa:1c:
         b6:01:ac:f7:e6:67:d7:05:d6:5d:4c:9e:81:6f:c2:1b:5f:c3:
         41:aa:1a:db:b9:b3:93:4d:df:a2:48:3b:a0:1e:8d:a4:04:5d:
         6e:ee:66:ae:d6:31:99:aa:fb:2c:04:22:fd:2d:9c:67:03:a7:
         32:70:79:d4:5b:f9:3b:e7:07:88:ca:dc:f7:0e:59:f7:26:f3:
         3a:6f:c2:97:a8:54:97:3a:4a:12:dc:63:57:9c:a1:7e:90:56:
         e6:b1:79:66:e9:98:b3:a4:65:bf:72:1f:39:cf:d9:6b:2e:80:
         7f:9a:4a:c8:79:50:c7:51:96:5e:be:c1:5a:9f:1e:68:e7:59:
         b4:40:84:cb:59:56:5a:b9:fd:76:95:93:e0:c2:73:f5:80:f7:
         02:df:c7:b0:e2:dd:a4:23:79:46:90:32:a1:c7:e1:3c:bd:9d:
         c8:10:81:54:59:e3:cc:8f:7d:de:b3:b5:83:ea:47:b4:1c:d5:
         2d:73:0d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:36:29 2026 by rpki-client