Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft
File:                     C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft (raw, json)
Hash identifier:          jotTkaFM+eLZzfFYMKiyEl97RQ+/goA2OLDEuGZrjUE=
Subject key identifier:   CF:7B:3C:9B:79:CE:F5:3E:C0:D8:05:85:16:2E:E8:F0:EF:E0:E5:44
Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A
Certificate issuer:       /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A
Certificate serial:       59F4331DF4F8F88791F2C2B0AB491BE103D73FAC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft
Manifest number:          04EE
Signing time:             Sun 01 Mar 2026 10:21:42 +0000
Manifest this update:     Sun 01 Mar 2026 10:16:42 +0000
Manifest next update:     Wed 04 Mar 2026 14:42:42 +0000
Files and hashes:         1: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: GMDlJkIYSBbaiHdAVmprXvGw9l46ixxNam2eRH2A4Uo=)
                          2: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: EXp3RCNwYXOW99lPgPgoT2jmWozp8DenSjKe6GpVx0A=)
                          3: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: 7tgGUn+YrUZ/MWVDGtrerXtqbOMhyZDoTldLslkYYTI=)
                          4: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: VElKMVk3iPulNjS9HeHc93PPFZl5g9fy4/nN9cMU7rI=)
                          5: C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl (hash: TdqUp8c4xBExLkekpPjKX9zNYY5tqjLYQIcYKblu1p4=)
                          6: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (hash: m0WKFr7Q9JfSEuoay78BCi3cNgU52tNMlZWVG7Fhi1s=)
                          7: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (hash: Ffjrt07F64qfTUTQRM4q8gB9QS8eehDO7qAs3NtubXM=)
                          8: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: yxV12cP+17+f4nsu4Qt/0TyM0Yc+PlYZYCbNR6RBl54=)
                          9: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: 8zY41tTngWvKTe/HAKHtyytdzc6XdijkL5LcFd6Ewbk=)
                          10: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: ZQ63p3M+wzXAXpgNpBD0Iq30pmnSOSGVBCaMjIYT+N8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl
                          rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 14:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f4:33:1d:f4:f8:f8:87:91:f2:c2:b0:ab:49:1b:e1:03:d7:3f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A
        Validity
            Not Before: Mar  1 10:16:42 2026 GMT
            Not After : Mar  4 14:42:42 2026 GMT
        Subject: CN=CF7B3C9B79CEF53EC0D80585162EE8F0EFE0E544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:13:d3:43:8e:d3:76:46:b1:01:bb:42:41:
                    89:21:95:04:44:0d:5a:2b:6d:f5:35:c7:17:6c:d9:
                    d3:ff:d8:f0:ab:7c:2b:28:49:05:39:e6:b8:b4:e4:
                    4e:bd:eb:7b:bf:2d:81:45:85:4b:2e:15:24:f9:5b:
                    db:d0:69:25:c5:5b:f3:ea:6c:09:bd:fb:52:c3:ef:
                    df:97:bc:5e:c4:b9:9f:4b:bd:f9:01:29:f3:39:c1:
                    9d:9a:d2:cd:7c:e8:84:af:f8:16:d7:31:2e:a0:58:
                    45:41:09:bb:46:5c:c9:b2:0a:8d:d2:1b:16:66:3c:
                    72:d6:05:50:7d:c8:a5:8f:ad:77:15:24:d1:cd:46:
                    82:c3:27:ee:6d:3c:ad:3e:50:c4:89:1a:97:4f:5b:
                    ac:72:73:1c:8e:43:91:69:bb:45:3f:0e:88:5a:cc:
                    54:87:49:6a:e9:c8:1f:77:ce:52:74:19:07:ea:36:
                    94:4c:05:d6:c1:a9:3e:2e:a4:8a:5f:52:8a:dc:d7:
                    74:15:d6:2f:39:dd:3e:53:17:37:c5:1c:73:5b:3a:
                    4c:e1:69:5c:ac:2c:0d:75:ba:7c:b4:60:5f:8f:18:
                    95:29:9a:77:2e:9d:e5:6e:c0:2e:6b:b1:00:3f:99:
                    d7:01:54:0f:6d:c3:c0:6b:db:ff:03:e6:ce:d8:27:
                    7d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7B:3C:9B:79:CE:F5:3E:C0:D8:05:85:16:2E:E8:F0:EF:E0:E5:44
            X509v3 Authority Key Identifier:
                keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:8a:86:83:4a:ee:47:0b:08:e1:9a:19:ee:17:07:92:32:41:
         da:13:56:48:d3:a3:fe:09:2c:dd:f8:58:31:34:cd:a9:27:1d:
         01:61:30:13:f4:b5:2f:26:71:97:b3:83:5d:08:ed:1e:f0:8f:
         35:88:4e:49:f0:bf:f5:e4:72:02:78:8d:09:7e:4d:98:89:c1:
         70:0d:26:81:3c:bf:fb:19:34:7c:17:12:db:97:c6:7d:01:d7:
         3e:88:8f:54:91:8a:80:c4:9a:62:60:d5:8c:ad:d8:6a:bd:ea:
         cf:6e:aa:ac:35:7c:49:85:d1:59:f6:b2:26:b4:ae:fa:b9:be:
         4f:70:5d:2e:69:cb:0b:07:43:4f:49:c4:f2:46:6e:ad:be:82:
         3a:47:0f:a3:31:87:7d:1d:3c:9a:ac:f3:a4:e6:20:e3:5e:d1:
         0e:2c:f6:ee:10:5b:81:17:ee:69:da:7f:0c:b3:4c:4a:8f:e0:
         e2:79:16:f2:1d:2b:75:14:52:c8:b3:8d:20:5f:ef:7b:93:7b:
         2d:0e:39:32:fe:a4:21:03:20:3a:e8:34:ea:c0:ad:6a:70:c6:
         b0:e1:d4:d2:33:c6:ea:49:e7:bf:00:69:c0:d2:a9:62:50:fa:
         f8:65:ef:b0:1e:98:47:5e:64:47:32:36:ad:87:7d:01:3d:f7:
         41:99:f5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:02 2026 by rpki-client