Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft
File:                     DEB4279F0D4CD8368462787573162FB753A9B04B.mft (raw, json)
Hash identifier:          c7fgwath51771CqDEgyQMdPqtDYGJUvVLthNNUskkBw=
Subject key identifier:   41:DD:B0:AF:52:7F:28:37:84:8D:50:02:19:05:96:86:E7:C1:B5:8B
Authority key identifier: DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B
Certificate issuer:       /CN=DEB4279F0D4CD8368462787573162FB753A9B04B
Certificate serial:       3946BA8619783C097609F65396AE4CA10312B14C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft
Manifest number:          021C
Signing time:             Sat 28 Feb 2026 16:41:04 +0000
Manifest this update:     Sat 28 Feb 2026 16:36:04 +0000
Manifest next update:     Tue 03 Mar 2026 20:49:04 +0000
Files and hashes:         1: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: SnMbgMOxWF6U2uyaAr5mP0bLC0JpKov3uB08AyMeVTY=)
                          2: DEB4279F0D4CD8368462787573162FB753A9B04B.crl (hash: LmLraa112riYhAxSQIUPgS9vjgF/A55hCK5HotFx03Y=)
                          3: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: /kG2XKRMgpHFqcmwADFIzCUj6H/leetgA+b7DMmSYLk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl
                          rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 20:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:46:ba:86:19:78:3c:09:76:09:f6:53:96:ae:4c:a1:03:12:b1:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEB4279F0D4CD8368462787573162FB753A9B04B
        Validity
            Not Before: Feb 28 16:36:04 2026 GMT
            Not After : Mar  3 20:49:04 2026 GMT
        Subject: CN=41DDB0AF527F2837848D500219059686E7C1B58B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:f2:98:dc:81:64:24:82:fc:d8:42:87:dc:
                    1f:da:3b:41:0c:3e:ef:c7:c2:d1:41:f8:d8:31:2f:
                    f3:4d:88:e0:1f:37:69:04:03:cb:b6:4e:9b:a3:ad:
                    4d:f5:b4:7b:db:49:9e:c9:3e:83:5f:0a:6d:27:2a:
                    6c:f3:33:05:47:98:21:1e:ff:50:17:27:39:a4:1a:
                    68:5f:f3:2e:4c:bc:d3:cd:dd:08:7d:f4:ae:54:1e:
                    85:f3:2a:b7:3c:2e:23:3d:17:5a:28:a7:ed:f8:dd:
                    68:61:b6:46:4b:14:ba:72:c4:a8:23:35:4a:67:4a:
                    8c:7b:dd:d9:14:46:a5:24:eb:90:eb:dd:c3:be:8f:
                    e2:d4:aa:27:cd:a7:a5:96:ab:20:64:9d:2f:53:ef:
                    ae:87:13:b6:9c:a1:61:0c:50:80:e1:5b:e3:b6:08:
                    fa:57:03:aa:94:20:9b:91:0d:ba:c5:28:88:55:73:
                    c7:6a:7e:ce:a8:77:83:9e:4b:13:e9:c4:35:b8:7c:
                    9e:01:1a:f0:8e:49:90:8c:af:08:6c:35:82:84:e1:
                    2a:d2:29:b6:96:b0:68:a8:fc:82:5c:2c:62:3c:d3:
                    93:0b:a0:4b:e9:ac:13:13:cb:3e:7c:2d:5d:eb:41:
                    9c:ca:8f:da:13:86:ef:92:c3:ff:e0:35:86:da:f2:
                    71:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DD:B0:AF:52:7F:28:37:84:8D:50:02:19:05:96:86:E7:C1:B5:8B
            X509v3 Authority Key Identifier:
                keyid:DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:cb:42:cc:16:42:91:46:25:ee:8d:fd:03:12:c7:99:b0:c7:
         f6:7b:23:1e:2b:d9:20:2f:12:f8:50:18:7e:f8:55:12:df:24:
         cb:78:bc:2f:4a:e2:37:9c:be:eb:1c:e2:7e:7b:6d:40:13:40:
         9f:73:64:52:92:19:8c:0c:f4:2b:96:6c:52:44:d1:6c:9d:89:
         7c:c6:99:e3:eb:5e:e4:15:62:d4:25:fd:2d:4f:b7:85:5d:bc:
         04:e4:ea:41:33:f7:05:31:92:15:6e:46:64:5f:77:e1:d6:77:
         e1:16:d9:bf:af:f9:a2:fd:eb:74:c3:ce:f2:69:37:83:62:b7:
         ef:fa:5d:3d:9d:d8:c7:66:f6:24:66:ee:73:c4:b5:60:cc:12:
         b0:d5:9b:f0:af:ca:f0:e4:ad:ec:aa:78:e1:eb:53:f1:8a:e1:
         49:8f:a0:96:2e:5b:d4:13:92:22:76:9b:20:fd:e5:7d:72:25:
         ef:e0:fc:bd:af:05:a0:79:62:88:01:56:81:93:d3:7c:34:22:
         18:0e:06:9a:98:17:7c:07:f4:fe:bd:d8:1a:fa:0f:e1:43:1e:
         74:01:39:79:d9:47:29:06:e2:0c:23:df:1b:68:91:da:b9:e0:
         6c:f8:61:e0:54:79:30:7a:18:ae:13:d2:18:0d:10:c9:10:42:
         2b:1b:e5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:45:53 2026 by rpki-client