Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft
File:                     491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json)
Hash identifier:          j+9pbwV8C1bhZjNL6OJXMmDoIaA3uIaQQSIKOZU8mMo=
Subject key identifier:   48:FB:11:62:7D:37:1A:D2:DF:E4:9E:62:AB:B4:B1:5C:33:B7:F0:DD
Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95
Certificate issuer:       /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95
Certificate serial:       7778D9317DAA3AAEC514FC67356F6F190E23B38C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft
Manifest number:          0232
Signing time:             Sat 28 Feb 2026 17:01:09 +0000
Manifest this update:     Sat 28 Feb 2026 16:56:09 +0000
Manifest next update:     Tue 03 Mar 2026 18:13:09 +0000
Files and hashes:         1: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: XmrsQZg25LzfhiARAVUt0SdXh5fLunU7Ew98BfBvR1g=)
                          2: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: ptZDC1QxEJ1qYR1JK+LpFE9hUdl4Mx+l7itGMa64wLk=)
                          3: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: 4DXpIxqwUP2SHUxVghm+mTwAYqcISbPiOREbhlKDTQA=)
                          4: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: TB81RW09cSXgrXgJAYPXKsxvmNEuOM4iVijZs/dW40o=)
                          5: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: /PJu6AuSDnXhTeWg26VNks6i/shKNwV6BfRsxAn96JQ=)
                          6: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: fWYqS2RMtH8nLEssuvtAlcPkKVGIslsMGAZ45sn+DFQ=)
                          7: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: znaa9hxdJrNdd5mqRzDzaW+zBpa4m4gv/8av6aAA/pk=)
                          8: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: I6slakky3CQtWTIuBbfvHlCbvw8Jyy9iX7shA/6YgbI=)
                          9: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: wJIxSydIcIK632aJu1sVcTgkjmEOfnhPh7sYYVJOybg=)
                          10: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: /AD55gQuIXqmhT7jl8XXbRiu7aeneAmR5bk7jupkCNk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl
                          rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 18:13:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:78:d9:31:7d:aa:3a:ae:c5:14:fc:67:35:6f:6f:19:0e:23:b3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95
        Validity
            Not Before: Feb 28 16:56:09 2026 GMT
            Not After : Mar  3 18:13:09 2026 GMT
        Subject: CN=48FB11627D371AD2DFE49E62ABB4B15C33B7F0DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:3e:c5:6c:a4:c5:8d:43:52:65:95:2b:04:
                    1f:95:81:c2:56:22:1d:a2:4b:f2:a1:e1:98:01:dd:
                    40:f9:58:73:4e:7b:75:16:c3:9b:0e:bf:6e:dc:32:
                    e8:07:7f:11:c0:d5:97:26:ed:93:3d:dd:be:cd:bc:
                    66:ed:d4:a4:a9:64:65:b9:cc:12:4f:48:f1:bc:d9:
                    9b:aa:95:f8:de:8d:ca:72:d9:1a:01:fb:f4:2c:6e:
                    57:4c:6b:84:f0:c9:dc:73:de:8c:17:17:ed:28:33:
                    aa:78:9b:bc:ec:ca:cb:ed:ed:15:a4:af:13:c6:66:
                    4a:47:a9:2a:af:4e:9b:0d:bf:e9:f3:63:05:4a:d1:
                    5d:f9:c7:74:83:dd:08:c1:10:ed:49:26:e1:da:7e:
                    eb:28:01:0e:bf:6a:ff:3f:fa:99:8a:8b:9f:41:ba:
                    31:e3:09:9a:15:68:14:12:0c:94:44:f2:44:c2:1a:
                    00:96:07:0c:b3:fb:f3:ea:2b:15:da:08:21:9a:b8:
                    50:a5:47:4e:cf:5d:72:c9:e8:33:f3:59:ac:f8:22:
                    73:85:fc:42:38:63:ac:43:b1:0e:fc:2b:f8:50:66:
                    66:7e:35:7e:47:46:3f:c8:36:09:56:f7:c1:8f:9c:
                    12:e6:d4:4f:2a:6f:fa:b3:b5:4e:10:eb:b5:26:97:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FB:11:62:7D:37:1A:D2:DF:E4:9E:62:AB:B4:B1:5C:33:B7:F0:DD
            X509v3 Authority Key Identifier:
                keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:4a:b3:52:ce:17:df:a4:72:78:7e:50:b6:74:8c:3f:b1:8a:
         ef:31:66:8d:dc:cb:d9:38:81:cb:81:08:a8:4e:cc:7b:f5:39:
         25:5d:35:4a:f3:79:fd:c1:8c:87:f0:c9:9e:32:98:43:b9:ea:
         e2:7b:a6:bb:86:da:8c:c8:aa:f2:8f:a6:0b:81:06:4e:c0:d7:
         ee:23:da:f4:2f:4f:28:20:ed:55:26:f2:d1:08:a3:06:cb:24:
         5f:87:07:2b:36:61:f8:28:5c:0c:95:fe:f2:e5:61:86:e4:8b:
         d2:32:46:49:7f:8d:26:35:5d:95:c1:ef:0e:37:c6:f1:ad:b4:
         91:5f:91:ad:74:03:5a:e8:b2:2c:72:45:22:70:7e:99:3b:1f:
         80:3a:e9:09:ec:30:68:75:f8:fb:f6:e4:8d:01:e0:89:0a:d7:
         db:fd:d9:a6:a2:7f:58:b8:06:3c:27:75:aa:37:69:60:7b:17:
         05:00:32:88:74:7d:27:d3:c3:c6:cc:1e:31:c7:0d:8b:87:ae:
         7f:9b:4c:d2:2a:83:55:44:f5:e6:d0:da:60:b5:76:9f:c6:a5:
         f3:53:82:8b:ab:89:6f:25:d8:58:df:19:bf:0b:7f:1d:5b:30:
         90:25:c9:0a:82:ba:63:ad:78:31:fe:03:0d:29:20:0b:e9:e7:
         c3:13:fd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:49 2026 by rpki-client