Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
File:                     CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json)
Hash identifier:          JkaPqmgH9PTyKgWe0GtRuMoVrBt5MNk41ausgcDk4zw=
Subject key identifier:   02:25:21:CF:91:B8:61:02:4B:2B:EB:28:A4:9D:D5:E9:4A:1D:4D:9A
Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
Certificate issuer:       /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Certificate serial:       601E703F9D9C3BA26EC49B86CE3971283986CCE0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
Manifest number:          0560
Signing time:             Sat 28 Feb 2026 18:32:34 +0000
Manifest this update:     Sat 28 Feb 2026 18:27:34 +0000
Manifest next update:     Tue 03 Mar 2026 22:17:34 +0000
Files and hashes:         1: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: p6E7fTKPRXKS0KTdGoGFmIb3fWpmO9Qcipf5FqInYV8=)
                          2: 34332e3235342e3132362e302f32342d3234203d3e203538343832.roa (hash: DbGnB1DqBC848hiKo1po0MqE4Gsa4J0OUdCykpEG2OQ=)
                          3: 3130332e32382e3232352e302f32342d3234203d3e203538343832.roa (hash: BGVByiTWnar+G9klrtY285yoFDo2RjE2YjBcwnHtPF0=)
                          4: 34332e3235342e3132342e302f32332d3233203d3e203538343832.roa (hash: iXtClCML1N9IxFKEnUu67jBHGm8QPJyw41HrxTVVN1g=)
                          5: 34332e3235342e3132352e302f32342d3234203d3e203538343832.roa (hash: 9k0Dch7Ak/Z6QMfcr+CZARJzHwZAuvWS8RON6gwZ8+8=)
                          6: 34332e3235342e3132342e302f32322d3232203d3e203538343832.roa (hash: hBuj8wbQYmHqntGj0o/eUNV+3o0v8DMJLG22gmNYBVk=)
                          7: 3130332e32382e3232342e302f32342d3234203d3e203538343832.roa (hash: 6xVTWVhJwHlTuupRqckmEH+2N+SG40cJCesUx/LAQVI=)
                          8: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: 253PIIaf2Tfe4dVA8SfkSeenzrn1yLojxg1BjltDWcI=)
                          9: 3130332e32382e3232372e302f32342d3234203d3e203538343832.roa (hash: 9Ew1E8zQmp44/WcA6xsjn9DG+Pj2XFS0Nowbj2INal8=)
                          10: 3130332e32382e3232342e302f32332d3233203d3e203538343832.roa (hash: 6VLiq/I44WcMCT+b35Hhj3WDvps84mPpDnwbEu/ZNyQ=)
                          11: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: oU26K1WNdmD4+eVmiwc4bkVkpstGiJjSdrNC9yEyagk=)
                          12: 34332e3235342e3132362e302f32332d3233203d3e203538343832.roa (hash: eZci8ugTs0KdDJxBSy4Gimtbte6tWVKKsSs87Z+r/R0=)
                          13: 3130332e32382e3232362e302f32332d3233203d3e203538343832.roa (hash: 4fMJzq8Nq1YJP9z1+S+a93o7lbnttq7OojId/hUDTmM=)
                          14: 34332e3235342e3132342e302f32342d3234203d3e203538343832.roa (hash: q6ov1LjBJ1C3MscONi3jd31fdQpeg7xo73ISZgsB13M=)
                          15: 3130332e32382e3232362e302f32342d3234203d3e203538343832.roa (hash: znVQQu+fIshyxf4G9mODoMFhYbJt3eH/0GuMVl8IwkA=)
                          16: 34332e3235342e3132372e302f32342d3234203d3e203538343832.roa (hash: QBHhnk1VzpNswo5xP4biYnK0qXDI4z1xHEPaP9wifbk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
                          rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 22:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1e:70:3f:9d:9c:3b:a2:6e:c4:9b:86:ce:39:71:28:39:86:cc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
        Validity
            Not Before: Feb 28 18:27:34 2026 GMT
            Not After : Mar  3 22:17:34 2026 GMT
        Subject: CN=022521CF91B861024B2BEB28A49DD5E94A1D4D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:40:bf:0b:09:e2:b0:31:36:9a:e3:ec:cf:3d:
                    d1:6e:cf:64:9c:33:15:79:51:cd:fc:56:10:b0:8d:
                    8d:39:ff:f7:0e:73:d4:7f:0e:06:aa:80:b3:e1:e2:
                    8e:60:80:e7:9a:df:17:1b:26:b1:1a:bf:11:bf:bf:
                    90:ec:e3:d5:31:d7:54:b2:24:81:c8:fd:b9:2f:48:
                    f3:f4:f9:b6:c6:04:83:4a:a6:b2:eb:62:2f:91:b3:
                    74:ab:c9:e9:39:a7:d2:a7:e0:09:ed:73:bf:ac:1b:
                    a9:11:60:87:80:48:9a:e2:35:a4:b1:e6:57:35:53:
                    46:90:88:7d:fa:75:b6:1d:91:24:78:43:cb:d9:d1:
                    fc:f1:f5:83:42:58:f0:47:96:fc:ee:6f:60:84:7d:
                    b8:87:61:2f:1f:75:1c:eb:aa:2e:23:ea:c9:23:f9:
                    50:60:44:fc:99:c7:07:17:38:0c:15:de:6f:08:68:
                    79:32:32:9b:af:ba:37:77:a4:61:25:ac:d7:df:3d:
                    41:4d:8b:32:13:bb:0e:61:b5:f2:eb:98:96:7a:a2:
                    bf:5e:d9:29:4f:c9:c8:4a:98:da:8e:5f:d6:75:af:
                    c0:ce:52:d3:f9:90:44:f1:93:0e:ab:38:55:23:92:
                    be:68:fc:d1:4d:5b:d0:e4:ea:3e:47:87:d2:b7:cd:
                    8a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:25:21:CF:91:B8:61:02:4B:2B:EB:28:A4:9D:D5:E9:4A:1D:4D:9A
            X509v3 Authority Key Identifier:
                keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b0:3a:6f:c5:6c:38:da:0d:43:70:cb:1f:43:5e:6d:87:94:
         5e:bd:76:f0:10:01:97:fc:1b:a8:6e:02:7b:06:55:47:07:5c:
         ac:17:c5:d2:65:51:f7:36:af:21:e3:79:81:75:5d:ff:81:93:
         d7:6b:00:94:c4:9d:78:2e:87:0c:d1:eb:78:51:e1:01:d3:8f:
         7f:cf:f4:55:ee:68:21:7e:aa:36:2a:4a:32:f7:09:5d:fb:b4:
         c3:e9:38:70:fb:4e:fd:fd:46:08:99:da:99:c1:c4:bb:5a:9f:
         9c:69:18:be:99:5c:5d:9f:56:94:50:4b:a3:56:34:bd:71:3b:
         ae:69:82:cb:43:64:93:c5:e0:1b:55:1b:5d:cb:bb:34:14:56:
         2e:f9:0c:74:c9:64:ea:4e:3f:7e:0c:60:25:bf:c9:e9:70:7d:
         9a:f7:f0:5e:fc:b8:db:bc:f0:90:86:2b:a1:82:4f:23:9a:23:
         4f:51:ab:08:41:6a:8c:24:98:66:f8:e8:ba:6b:5b:ad:ba:d8:
         51:53:2d:27:18:7e:e9:ea:57:a2:65:37:77:94:a8:b6:7a:cd:
         75:a7:b6:4f:a6:d6:26:50:94:4f:de:f0:dd:49:eb:7f:be:22:
         ca:58:35:b8:4a:67:5c:5a:b9:d6:5c:21:8f:5a:e2:fb:3d:a6:
         72:ac:d0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:05 2026 by rpki-client