Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft
File:                     AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json)
Hash identifier:          FsEziRzW7iF865ambX3nuKeIxOpiz/nypjfS4rS2aHQ=
Subject key identifier:   B1:CE:2E:97:C8:8F:4A:7E:52:2D:C3:6D:13:D0:9E:F8:61:BA:2B:24
Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2
Certificate issuer:       /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2
Certificate serial:       13371BCEEB6A78F0915053FD6480677DFD418D96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft
Manifest number:          01E9
Signing time:             Sat 28 Feb 2026 01:01:15 +0000
Manifest this update:     Sat 28 Feb 2026 00:56:15 +0000
Manifest next update:     Tue 03 Mar 2026 06:34:15 +0000
Files and hashes:         1: 3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa (hash: CyqCQFsLxJfTBDBdmJ04cZzDUHG5T26HrmU816zhY/E=)
                          2: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: 5/bb2m/l4G8bQopKZ9eyezGHRGaLv9nfRV9c/BB9Gks=)
                          3: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: 75pqfCfzo/s+Lg2P9nDS2cDKuWGob0mgANyWQovTVe4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl
                          rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 06:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:37:1b:ce:eb:6a:78:f0:91:50:53:fd:64:80:67:7d:fd:41:8d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2
        Validity
            Not Before: Feb 28 00:56:15 2026 GMT
            Not After : Mar  3 06:34:15 2026 GMT
        Subject: CN=B1CE2E97C88F4A7E522DC36D13D09EF861BA2B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c5:d5:2d:38:c1:9e:55:09:c3:03:5e:cc:d9:
                    f0:b0:57:55:89:de:12:18:d2:dc:81:84:ce:27:0d:
                    9f:54:f7:67:28:fa:3f:75:47:50:a0:58:ec:e4:84:
                    cd:a9:6f:3f:d9:15:66:6e:53:b6:61:06:64:48:6a:
                    0e:8d:58:d9:16:86:74:b1:7b:28:6b:ac:11:e7:30:
                    5d:15:5c:a6:3d:30:31:26:08:16:33:86:20:5e:c6:
                    80:8c:32:e3:4b:6c:5c:5c:d2:4a:21:d7:75:6f:f7:
                    df:ab:6c:a9:2f:a1:36:b0:9d:0e:b0:96:95:7f:cb:
                    15:5a:66:e9:6a:c7:15:f3:9c:f9:89:05:75:e2:ae:
                    49:da:a6:40:2e:e7:0a:22:9d:d1:57:d5:60:e9:ab:
                    fd:b8:68:e7:3f:e8:fb:cd:9b:2c:c8:9e:00:b4:0a:
                    65:dd:84:fe:93:6c:07:99:07:0b:a0:3c:24:bc:7d:
                    af:5a:b1:42:b7:c4:f2:0f:ec:12:f4:07:64:fe:a2:
                    40:cc:52:cb:f4:9b:aa:28:d7:bc:6d:1b:14:b8:fa:
                    7e:3f:b5:fe:d3:82:6f:b5:42:82:79:9b:df:f0:67:
                    49:ff:11:42:f7:73:27:86:7f:c7:35:55:63:cc:fa:
                    00:0d:a2:52:b0:0f:25:c0:22:48:06:38:5b:d7:1c:
                    5a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CE:2E:97:C8:8F:4A:7E:52:2D:C3:6D:13:D0:9E:F8:61:BA:2B:24
            X509v3 Authority Key Identifier:
                keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:82:79:7b:3f:e9:75:b5:65:f0:cb:eb:42:52:2d:ee:65:e4:
         53:c1:15:be:45:69:bf:b9:c1:6c:a9:ae:db:26:ac:c8:01:df:
         b2:a9:70:7b:cd:14:e4:02:61:d5:44:f5:55:7a:77:54:65:2f:
         25:55:fb:cb:0b:d5:4f:a2:3b:29:54:9f:d0:68:0c:3b:2f:d2:
         9a:21:b3:db:4c:80:3f:a8:5c:de:0d:79:34:7a:17:06:74:26:
         66:2f:32:b8:e1:86:93:89:fb:61:6f:c6:f5:c8:14:9d:89:ef:
         21:c5:c0:08:b8:5c:a2:92:81:80:d3:ba:0f:71:54:b6:a9:82:
         5a:a1:a1:15:5f:8a:ab:69:a0:65:64:14:5a:50:5a:1d:74:55:
         de:a5:33:86:81:0e:e0:1d:d0:04:4b:e8:a1:6b:8f:0d:0e:d4:
         05:34:60:ec:49:52:9a:a2:3c:22:dd:dc:94:4c:6d:f1:1f:fa:
         11:eb:42:62:be:53:d7:d9:0e:57:b9:16:12:5d:70:8c:ff:b7:
         94:e5:2e:c6:00:f4:91:b7:8f:c4:e9:da:95:b8:7a:0e:84:31:
         11:10:ae:c7:7d:d1:93:88:95:f0:3d:57:71:34:5e:76:c2:f8:
         f6:50:4d:1c:ac:e3:a4:a2:c4:47:1f:6b:bd:53:de:5e:33:2c:
         0f:60:8d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:54 2026 by rpki-client