Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft
File:                     146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft (raw, json)
Hash identifier:          3uJ6CwCE/kyXugp/sNyX9qEmiyPonQLR3NsrsutVVqM=
Subject key identifier:   7A:AE:F9:9A:32:FC:82:59:D8:70:95:2E:91:B2:49:EF:B3:1F:F9:A6
Authority key identifier: 14:6C:83:A9:CC:B5:7F:CF:AD:02:8C:ED:A7:9D:6D:05:76:8C:A8:7A
Certificate issuer:       /CN=146C83A9CCB57FCFAD028CEDA79D6D05768CA87A
Certificate serial:       73CBF11E37B46F275ED044184475E2DE626036F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft
Manifest number:          021B
Signing time:             Sun 01 Mar 2026 09:41:48 +0000
Manifest this update:     Sun 01 Mar 2026 09:36:48 +0000
Manifest next update:     Wed 04 Mar 2026 15:41:48 +0000
Files and hashes:         1: 146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.crl (hash: 4GAPodTvsj0iAgocJiCjURkZKUCN197LnRXsFSek0PQ=)
                          2: 3130332e38332e302e302f32342d3234203d3e20313530323532.roa (hash: V86Ceez2ot8X9IsTE49PzBGgGBjL0MbKZZ/wjjN9T+M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.crl
                          rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 15:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cb:f1:1e:37:b4:6f:27:5e:d0:44:18:44:75:e2:de:62:60:36:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146C83A9CCB57FCFAD028CEDA79D6D05768CA87A
        Validity
            Not Before: Mar  1 09:36:48 2026 GMT
            Not After : Mar  4 15:41:48 2026 GMT
        Subject: CN=7AAEF99A32FC8259D870952E91B249EFB31FF9A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:c8:34:8b:55:aa:5c:b3:b7:1e:80:52:92:
                    2e:36:80:af:7c:65:dc:13:3f:d9:03:96:33:ca:15:
                    d6:ff:22:0e:e5:8a:10:30:16:1c:7b:da:90:a8:74:
                    5f:f2:c6:50:20:13:70:70:ba:1e:8d:69:ec:3a:c0:
                    a0:da:b1:d1:a7:a0:25:20:29:6f:66:1a:d7:07:80:
                    5a:4f:7a:3a:c7:d7:7e:ea:d7:21:6b:06:24:70:e4:
                    0f:df:3f:d7:b7:69:61:d4:1e:0e:12:14:a4:9f:e1:
                    43:17:a6:24:b1:81:2b:11:59:9a:9e:8a:2d:3d:bb:
                    04:20:d2:45:a8:5f:04:70:76:37:13:d8:44:77:cf:
                    85:ba:dd:09:43:f7:dc:61:ea:b6:d2:8e:c5:41:44:
                    51:44:4c:82:b5:3d:48:8f:2e:24:ea:00:91:38:a1:
                    f9:da:74:f8:2a:18:a0:96:17:54:15:cd:e9:7d:e6:
                    53:0e:a9:a1:dd:06:b2:2a:ad:3e:bb:30:f6:3e:ad:
                    d1:c2:7b:3e:a5:16:c8:21:bb:b1:15:67:83:50:7a:
                    62:40:6e:a9:9b:dc:f0:db:68:c2:d8:7d:85:d3:ee:
                    6d:24:60:b9:93:a9:20:bb:4d:76:58:e9:9f:19:31:
                    4e:1c:e6:8e:e7:d6:82:0e:68:a7:03:e6:71:4d:ed:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AE:F9:9A:32:FC:82:59:D8:70:95:2E:91:B2:49:EF:B3:1F:F9:A6
            X509v3 Authority Key Identifier:
                keyid:14:6C:83:A9:CC:B5:7F:CF:AD:02:8C:ED:A7:9D:6D:05:76:8C:A8:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ad:08:72:f9:b9:f0:97:aa:9c:7a:d0:65:b2:8d:3c:e1:61:
         85:72:69:cc:75:4d:79:c1:2d:c9:bc:c0:a8:0b:bc:05:d1:1f:
         ea:f2:28:fc:d0:45:63:e3:91:88:41:d5:95:ce:80:c4:cc:f3:
         68:0c:ee:28:88:51:cf:36:40:3e:de:d7:3c:c2:52:b9:b3:88:
         ad:71:fe:f0:3b:82:92:ba:d7:ff:3b:48:e2:62:48:e6:86:82:
         6d:7f:31:0e:e3:ee:37:8f:62:08:9d:31:0f:61:8f:a7:0e:5c:
         89:5c:d3:be:e9:4e:af:8a:de:0d:3c:b8:05:d4:8c:16:fe:0e:
         17:72:68:f7:a7:ed:77:25:1e:e1:5e:af:b4:17:56:1d:ea:38:
         f6:f2:00:ad:c7:9b:c7:5d:19:ff:b4:99:26:98:55:8f:fa:46:
         ae:d4:c9:3e:13:7c:34:1d:76:06:ce:04:a3:f1:a9:ca:f5:73:
         3d:c8:64:ca:79:8c:e2:37:ab:ea:4f:47:36:76:17:01:57:52:
         37:ee:99:b8:50:57:c6:5c:71:f0:0e:11:62:70:57:9e:d1:77:
         e2:d2:53:9c:8b:ae:5f:47:29:81:0e:4d:26:94:e2:c7:02:1d:
         40:9a:c6:0b:15:63:c4:16:59:78:e6:58:f3:c8:3d:fd:96:fc:
         7a:fd:9d:7f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc8vxHje0byde0EQYRHXi3mJgNvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ2QzgzQTlDQ0I1N0ZDRkFEMDI4Q0VEQTc5RDZEMDU3
NjhDQTg3QTAeFw0yNjAzMDEwOTM2NDhaFw0yNjAzMDQxNTQxNDhaMDMxMTAvBgNV
BAMTKDdBQUVGOTlBMzJGQzgyNTlEODcwOTUyRTkxQjI0OUVGQjMxRkY5QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLssg0i1WqXLO3HoBSki42gK98
ZdwTP9kDljPKFdb/Ig7lihAwFhx72pCodF/yxlAgE3Bwuh6Naew6wKDasdGnoCUg
KW9mGtcHgFpPejrH137q1yFrBiRw5A/fP9e3aWHUHg4SFKSf4UMXpiSxgSsRWZqe
ii09uwQg0kWoXwRwdjcT2ER3z4W63QlD99xh6rbSjsVBRFFETIK1PUiPLiTqAJE4
ofnadPgqGKCWF1QVzel95lMOqaHdBrIqrT67MPY+rdHCez6lFsghu7EVZ4NQemJA
bqmb3PDbaMLYfYXT7m0kYLmTqSC7TXZY6Z8ZMU4c5o7n1oIOaKcD5nFN7S9fAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUeq75mjL8glnYcJUukbJJ77Mf+aYwHwYDVR0j
BBgwFoAUFGyDqcy1f8+tAoztp51tBXaMqHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NjJjMjM2Ni1mOWVjLTQ0NTUtYTlmZi1mZjY5NmExMDdlNjIvMC8xNDZDODNBOUND
QjU3RkNGQUQwMjhDRURBNzlENkQwNTc2OENBODdBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTQ2QzgzQTlDQ0I1N0ZDRkFEMDI4Q0VEQTc5RDZEMDU3NjhD
QTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjYyYzIzNjYtZjllYy00NDU1LWE5
ZmYtZmY2OTZhMTA3ZTYyLzAvMTQ2QzgzQTlDQ0I1N0ZDRkFEMDI4Q0VEQTc5RDZE
MDU3NjhDQTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGStCHL5ufCXqpx60GWyjTzhYYVyacx1TXnB
Lcm8wKgLvAXRH+ryKPzQRWPjkYhB1ZXOgMTM82gM7iiIUc82QD7e1zzCUrmziK1x
/vA7gpK61/87SOJiSOaGgm1/MQ7j7jePYgidMQ9hj6cOXIlc077pTq+K3g08uAXU
jBb+DhdyaPen7XclHuFer7QXVh3qOPbyAK3Hm8ddGf+0mSaYVY/6Rq7UyT4TfDQd
dgbOBKPxqcr1cz3IZMp5jOI3q+pPRzZ2FwFXUjfumbhQV8ZccfAOEWJwV57Rd+LS
U5yLrl9HKYEOTSaU4scCHUCaxgsVY8QWWXjmWPPIPf2W/Hr9nX8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:37 2026 by rpki-client