Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft
File:                     CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json)
Hash identifier:          6Sr/j+LKd9RKColRsc0hmEXkwYnPHPNbFCyVNmZ9T9I=
Subject key identifier:   DE:CD:0A:85:16:AB:E8:4E:1A:CF:36:75:12:8F:5B:48:97:99:6A:8E
Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9
Certificate issuer:       /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9
Certificate serial:       487C154983C16EA1918A639379FEA75EAF749441
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft
Manifest number:          02D1
Signing time:             Sat 28 Feb 2026 16:51:43 +0000
Manifest this update:     Sat 28 Feb 2026 16:46:43 +0000
Manifest next update:     Tue 03 Mar 2026 20:29:43 +0000
Files and hashes:         1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: 0KuXALBCRJ9IqxhIiYLXKKa0o4ntTTFp27XXPaiuyhA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl
                          rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 20:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7c:15:49:83:c1:6e:a1:91:8a:63:93:79:fe:a7:5e:af:74:94:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9
        Validity
            Not Before: Feb 28 16:46:43 2026 GMT
            Not After : Mar  3 20:29:43 2026 GMT
        Subject: CN=DECD0A8516ABE84E1ACF3675128F5B4897996A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e0:38:a8:fa:0a:7a:a7:10:a4:b6:ff:41:ec:
                    7b:8f:46:4c:c4:4b:8f:50:ae:88:b5:92:4d:17:c7:
                    ed:a8:06:25:ff:64:00:99:6c:38:4d:67:c3:42:49:
                    77:e3:22:91:de:d1:06:3d:1b:4c:87:28:4b:ec:a7:
                    d6:91:7c:8b:6a:f0:6f:0a:f3:8c:8a:86:6b:ec:0c:
                    c3:0b:40:1d:a4:4f:2a:ef:04:d2:86:28:19:a0:00:
                    b9:00:fe:94:a0:d5:5e:a0:20:bb:28:d3:de:fd:fe:
                    5e:a6:72:c1:4e:28:f1:17:b9:a5:6e:34:0d:1a:a7:
                    20:e9:25:32:63:1d:4a:40:d7:27:d5:3c:2d:11:1c:
                    91:ad:ae:12:11:fb:da:8d:86:88:d8:5d:56:a2:71:
                    6c:5b:c6:32:52:7a:21:4c:a5:b6:2f:56:ab:6a:59:
                    67:23:03:c2:84:3a:4e:53:9d:d4:26:62:2b:b8:72:
                    48:54:40:24:0f:09:f8:19:21:0b:98:ad:7a:05:20:
                    ca:f2:97:02:2d:b4:12:2e:b6:a8:ed:7f:ad:08:51:
                    88:95:fc:0e:df:a4:ad:1f:de:4f:85:1a:c1:48:5b:
                    07:f5:f7:21:c3:95:da:11:8c:a3:13:80:ea:61:4e:
                    dc:0b:9d:ac:b2:64:77:8e:dc:c4:6e:d3:0b:f9:33:
                    4c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CD:0A:85:16:AB:E8:4E:1A:CF:36:75:12:8F:5B:48:97:99:6A:8E
            X509v3 Authority Key Identifier:
                keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ad:76:b5:f5:c3:26:cf:1f:5b:24:fb:4f:87:a4:fa:9e:41:
         b3:ce:28:99:6e:bb:c7:07:27:db:6d:4a:b7:f4:41:67:9f:f5:
         16:61:37:69:77:99:77:bc:80:d5:6a:83:65:90:a7:8b:a4:85:
         ab:84:be:33:f1:5f:be:07:11:87:9e:39:60:36:ac:03:17:37:
         82:3b:7e:ba:87:11:fb:32:6f:45:ea:27:9f:00:11:5e:0b:28:
         70:4f:60:b0:96:d8:15:21:f9:40:51:72:ed:fc:f0:ac:d0:fc:
         1b:5c:f4:ac:e0:36:e9:4d:c8:6f:3c:3f:51:4a:06:88:55:4f:
         c1:cc:64:bc:41:7b:36:f9:cc:2e:3e:8b:de:26:62:08:51:84:
         6d:fa:94:39:70:1b:2e:b8:91:79:68:1d:67:cf:59:50:bf:2d:
         7f:f7:62:4b:6e:d5:39:ec:3e:06:e7:06:9e:05:1d:39:87:e5:
         19:b2:19:cb:64:da:0d:7a:a2:da:f2:08:94:bd:21:ab:2b:c4:
         ca:db:2e:9c:a4:f9:49:ac:32:7c:67:6c:a1:dd:a1:62:86:58:
         6a:e8:2d:1c:76:ea:19:20:4a:ef:3a:5a:ce:13:3a:38:5d:df:
         a7:b0:32:11:c0:33:c8:55:4b:40:e9:e2:e5:6e:33:6e:c4:c8:
         bd:6a:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:00 2026 by rpki-client