Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft
File:                     22476F90C7B08131974F5B19834906C325ABEF12.mft (raw, json)
Hash identifier:          DUlIa4tSZaPJjXI+A1LWCEmN6mdASGG3TfBhwNCYSlc=
Subject key identifier:   C6:BA:FF:81:92:80:71:82:2A:42:25:D9:65:8E:A2:35:21:CB:78:5B
Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12
Certificate issuer:       /CN=22476F90C7B08131974F5B19834906C325ABEF12
Certificate serial:       38CC31B8132EC5FD53B7DCA7B51326408DDD35E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft
Manifest number:          FE
Signing time:             Sat 28 Feb 2026 22:41:33 +0000
Manifest this update:     Sat 28 Feb 2026 22:36:33 +0000
Manifest next update:     Wed 04 Mar 2026 03:05:33 +0000
Files and hashes:         1: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 4w2+kmxxLlJwHRO1aqXjBz7ml3HwCrINsFeyiZehHq0=)
                          2: 3136302e32352e36392e302f32342d3234203d3e20313532383430.roa (hash: ZNeRwTvPRwYBLE5sdbgUPVVh8TQyG01EFXBOC/uWJbI=)
                          3: 22476F90C7B08131974F5B19834906C325ABEF12.crl (hash: +oPlR8gElqOl0C2eHfrKPxFnAcmrVUfHw2cyzKaheG4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl
                          rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 03:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:cc:31:b8:13:2e:c5:fd:53:b7:dc:a7:b5:13:26:40:8d:dd:35:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12
        Validity
            Not Before: Feb 28 22:36:33 2026 GMT
            Not After : Mar  4 03:05:33 2026 GMT
        Subject: CN=C6BAFF81928071822A4225D9658EA23521CB785B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cc:35:1b:c2:86:23:f3:d4:f5:f9:6b:19:31:
                    53:56:a2:63:85:be:2a:aa:62:b6:b4:4e:2d:4a:c2:
                    c9:7a:ff:26:92:e8:ba:93:a1:60:69:ab:cc:c6:e6:
                    95:cd:a9:ad:70:c1:82:e6:dc:57:62:f7:dc:81:1b:
                    1b:c2:04:55:52:93:44:f3:6f:f8:a3:9e:88:c9:5a:
                    08:11:ad:6d:61:b1:43:c4:1d:08:ef:40:0f:9d:72:
                    81:f3:e2:2a:20:d3:86:4d:a0:f5:3e:d7:07:4e:bf:
                    63:b0:e9:0e:b9:c2:a8:de:bc:87:93:d5:0e:06:35:
                    3d:8c:b8:04:11:8d:6a:fd:24:e7:b1:32:32:3f:3a:
                    59:e1:60:e2:f0:be:3f:82:73:b3:93:8c:3a:70:45:
                    02:be:fc:e8:71:a1:ad:07:8a:c5:26:e2:d8:93:e6:
                    ce:e0:29:c7:5c:a5:a4:a8:f9:bd:34:16:43:aa:88:
                    89:f3:a7:7a:1c:ca:a2:af:38:d2:8a:c4:95:f2:9b:
                    78:81:67:c3:25:33:68:d4:2f:fe:16:09:7b:d2:e9:
                    d7:c6:2b:30:cf:03:67:ff:4c:ec:a5:32:02:1f:49:
                    6a:91:bc:a7:61:e8:3d:80:c6:4d:39:8b:0b:b3:56:
                    d2:ec:af:87:34:44:c9:73:98:4d:11:a9:46:4b:14:
                    c8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BA:FF:81:92:80:71:82:2A:42:25:D9:65:8E:A2:35:21:CB:78:5B
            X509v3 Authority Key Identifier:
                keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:18:b1:1b:63:7d:73:2c:69:39:6d:6c:d2:30:dd:f0:65:40:
         e9:59:32:8b:b6:53:84:78:12:fe:3c:cb:74:05:1d:a4:8c:bc:
         67:67:5e:3a:10:10:77:74:07:22:b1:a6:78:c1:e3:37:11:5c:
         9b:5f:85:dc:fb:4c:e0:d3:00:7d:47:f0:0a:5c:b8:17:d2:e5:
         9b:73:b3:7c:2d:87:d9:60:85:49:03:88:8e:15:ba:67:88:8e:
         ed:b2:a7:11:59:19:0f:16:9e:51:87:d7:cd:92:da:92:84:3c:
         31:66:87:33:40:67:9e:33:b0:57:50:86:22:f3:c2:db:bf:29:
         00:ea:05:6d:0c:2f:8c:57:e6:45:e3:db:c3:15:3e:50:65:d5:
         8d:49:28:fb:bc:07:c5:4a:c7:b8:77:f1:04:21:4d:8c:22:28:
         d0:bb:5d:82:ef:32:92:3b:7d:56:31:9a:b0:c3:2a:7b:7a:bc:
         c6:f7:53:60:c1:da:0e:1c:c4:52:5a:2b:98:86:30:dc:c4:12:
         ba:01:c0:35:9d:1a:f0:2d:a2:2d:cd:30:3c:c1:de:6d:b8:5c:
         24:e3:0b:9a:0e:db:3f:19:bd:e6:26:06:6b:1d:20:26:b9:8f:
         5c:c1:8a:ff:eb:ad:80:af:99:25:30:37:90:05:44:38:11:c0:
         28:64:a8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:04 2026 by rpki-client