Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
File:                     A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json)
Hash identifier:          OWFY4CMMg6gt14QJaQoSGE2u4ciMKDdvWjjw55vA4ek=
Subject key identifier:   99:29:B1:7A:E0:65:6A:FD:9B:9F:EB:96:B4:0E:BA:9E:8F:FF:CA:67
Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4
Certificate issuer:       /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
Certificate serial:       1E65A127A336298100C9881A6F795F649D08300B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
Manifest number:          0264
Signing time:             Sat 28 Feb 2026 04:02:38 +0000
Manifest this update:     Sat 28 Feb 2026 03:57:38 +0000
Manifest next update:     Tue 03 Mar 2026 10:21:38 +0000
Files and hashes:         1: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: NSGM9TUDBLgn7kcSNJpmMZxpHG9VLSqJuwmSL+bAMEQ=)
                          2: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: 4MEAYppP3Kf6rajqc79fnAA8c3MS4YwlbMABho8ytVM=)
                          3: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: apN+h9rMVlve5QQ11UHOBtDmWt+4qBPMklHSwzuoZf0=)
                          4: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: S64Q0+NezJtdPbpt9eumP+mb0KsVAoheGDNrj5S6dZM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl
                          rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 10:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:65:a1:27:a3:36:29:81:00:c9:88:1a:6f:79:5f:64:9d:08:30:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
        Validity
            Not Before: Feb 28 03:57:38 2026 GMT
            Not After : Mar  3 10:21:38 2026 GMT
        Subject: CN=9929B17AE0656AFD9B9FEB96B40EBA9E8FFFCA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:4e:d0:8d:bf:ed:79:e3:cf:8a:94:b7:aa:
                    f1:dc:a1:1e:8d:f3:2d:91:f2:16:a9:ed:bd:3f:46:
                    6e:6e:e7:0b:1d:8f:1c:98:b2:35:6b:ad:19:6f:48:
                    0d:80:be:45:34:1f:eb:b6:5d:ac:8b:6a:65:51:f4:
                    97:12:5e:3a:51:17:bc:c8:b7:e6:53:e8:75:ea:15:
                    26:77:6e:0f:ce:93:3b:26:9c:10:d6:47:86:22:bb:
                    cd:09:33:ee:00:ec:ad:43:0c:28:77:53:a6:d7:8c:
                    f7:36:10:0b:e6:1a:10:e0:6a:a1:0f:2b:ec:bb:cd:
                    a7:dd:65:78:5b:ab:ce:99:d0:60:da:f4:3f:df:07:
                    ae:a1:e3:fc:f9:1b:fb:f8:08:a9:74:b2:96:aa:6a:
                    0c:29:80:75:27:bf:81:0a:9f:95:06:c1:74:9f:28:
                    79:7d:7c:20:ff:10:b4:a9:31:20:2f:93:e6:19:ce:
                    5c:66:0b:1e:2a:5c:b7:8e:77:4e:78:8f:58:f7:b0:
                    9b:2d:c6:db:30:cc:11:94:45:15:2e:b9:6a:99:20:
                    e8:b9:33:0d:38:2c:1c:d5:a1:28:74:1a:f7:64:40:
                    33:56:1a:eb:b4:d7:dc:d3:fc:e9:7a:97:0f:60:db:
                    b0:c3:d1:2f:38:bc:ac:35:a7:7f:96:d2:4e:4e:39:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:29:B1:7A:E0:65:6A:FD:9B:9F:EB:96:B4:0E:BA:9E:8F:FF:CA:67
            X509v3 Authority Key Identifier:
                keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:0b:50:fd:7b:c7:07:02:a1:a0:e5:d9:40:fd:30:f4:c4:35:
         54:90:5e:09:59:36:eb:a3:2f:8d:a2:59:f9:10:11:11:86:fe:
         75:e2:c8:ac:f1:36:08:86:20:c0:44:61:54:87:bf:55:da:71:
         48:0d:b6:38:ad:44:d7:4c:a7:e7:44:12:0d:3d:36:a0:d1:39:
         f7:4f:0e:67:58:49:33:9b:ef:c5:95:a6:78:f0:30:7c:46:de:
         ea:55:56:e5:0d:41:9e:c5:60:49:e1:70:7c:86:58:da:38:ba:
         db:da:5e:66:a7:d2:8e:3d:dc:29:05:d4:2a:9a:e1:cd:65:23:
         08:91:b8:19:0d:0e:31:8e:c9:e2:1b:52:7d:6a:20:88:0b:47:
         4f:32:b4:8c:58:55:dd:07:81:6d:28:b2:d7:88:09:37:16:d0:
         15:b5:d2:04:19:aa:d3:cf:2e:fb:23:f9:d2:df:74:de:53:77:
         fd:9e:92:19:67:9e:f5:70:a5:68:71:8c:6e:88:30:6a:ae:c5:
         92:dd:56:51:50:82:87:42:8e:5d:d5:5d:ca:d5:38:0a:db:60:
         e4:d1:c1:5e:72:64:f0:01:c0:fd:73:80:a7:b6:f9:f2:8a:73:
         98:3b:b0:62:64:46:9a:47:cb:d4:15:e3:dc:b9:8c:26:a6:28:
         84:93:e8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:06 2026 by rpki-client