Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft
File:                     35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json)
Hash identifier:          y66yV3VTOu9lwU55eDZ8pC5b/mVL7l5a7zpTuMmqRKg=
Subject key identifier:   5B:B6:C5:7F:3D:E3:5C:66:22:2A:B4:58:FF:EF:AF:4B:8E:1E:8A:25
Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9
Certificate issuer:       /CN=35526D55C5F4431129EA7CE9304705CE395693D9
Certificate serial:       3CE65D75B84555CA6ED78483613C087F53192EE2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft
Manifest number:          0277
Signing time:             Sat 28 Feb 2026 08:01:19 +0000
Manifest this update:     Sat 28 Feb 2026 07:56:19 +0000
Manifest next update:     Tue 03 Mar 2026 18:24:19 +0000
Files and hashes:         1: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: f+L7ii3csmrhiistFOclHlGszCBx5PVukFDFeYaelRQ=)
                          2: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: RTuAe01oZKcYw+JAnijcOaMyxK0mUgunx1L/6+eOJW8=)
                          3: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: xmE/JEyhXthuYU++MAzsO/GoVJLu7FXPu8oedNkxkIE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl
                          rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 18:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e6:5d:75:b8:45:55:ca:6e:d7:84:83:61:3c:08:7f:53:19:2e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9
        Validity
            Not Before: Feb 28 07:56:19 2026 GMT
            Not After : Mar  3 18:24:19 2026 GMT
        Subject: CN=5BB6C57F3DE35C66222AB458FFEFAF4B8E1E8A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:c8:c0:7f:1b:d8:2f:82:d8:11:fc:53:ef:
                    81:fc:08:34:51:f9:28:52:64:0b:e2:f4:18:44:b6:
                    33:8c:ae:5b:53:1a:da:45:75:91:16:76:6c:53:37:
                    e9:ad:ce:99:9b:a6:7a:74:3c:cf:c3:6c:70:27:ba:
                    03:cf:9b:c5:20:bd:96:2a:5e:a4:db:78:43:66:22:
                    19:0c:a8:af:e7:1e:c7:07:6d:a1:4c:b6:7a:14:1c:
                    d7:51:73:d5:ac:f3:c2:02:44:ab:c2:a0:3e:53:61:
                    2a:a4:71:3c:f7:7b:63:75:2f:3f:be:31:20:bd:f1:
                    a5:0d:ae:2b:c5:40:a2:39:8e:39:e0:87:7f:69:b3:
                    7d:d6:6b:a8:b1:ec:ce:13:ee:e0:2d:c8:94:b0:e6:
                    97:79:23:16:78:04:28:1d:77:f2:ae:1f:3d:cd:90:
                    70:fe:4c:7e:22:c9:d9:e5:d6:6d:d8:bf:61:b6:22:
                    ce:ee:cb:65:20:d8:4b:4e:56:2e:8b:f5:6e:5c:fd:
                    90:1e:8a:c3:fe:a5:ad:7f:95:f4:53:5c:ce:1a:e2:
                    5b:f2:b4:2e:49:7b:69:45:b3:df:86:d1:b4:58:7a:
                    92:1d:32:c1:92:03:dc:93:d5:a7:96:3e:df:67:ed:
                    e7:2e:31:17:3f:a2:a4:c8:b8:0d:9a:65:40:aa:8b:
                    ab:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B6:C5:7F:3D:E3:5C:66:22:2A:B4:58:FF:EF:AF:4B:8E:1E:8A:25
            X509v3 Authority Key Identifier:
                keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:88:3e:72:b5:2d:4f:9c:a6:0f:c8:50:b2:29:41:cf:20:19:
         f2:6f:dd:fd:1d:26:ab:b8:78:b0:8f:77:66:82:79:91:2f:d1:
         89:d3:7d:0b:dc:49:e5:d8:ca:47:f7:e7:61:e1:e3:4f:64:37:
         01:ed:97:5b:78:72:d0:15:47:52:2a:61:72:d6:36:35:bf:e6:
         4a:92:49:41:4e:04:c2:a2:e9:e3:d0:77:31:1c:a8:14:fe:0e:
         e9:c8:5b:10:d3:09:0e:5a:cc:84:af:5d:f1:2f:5b:c6:c7:1b:
         1f:23:c8:5d:18:3b:96:f9:60:9d:65:b9:1f:ca:c1:7f:16:cd:
         bb:aa:34:83:4c:50:ef:c0:26:81:cd:32:80:cb:85:b6:b1:ae:
         11:5c:a1:7a:ce:b2:4d:01:a7:2e:fb:15:ef:bd:b2:8e:0f:19:
         00:27:c9:64:3d:17:f7:0e:6d:7f:02:bd:a0:e6:60:a3:1f:45:
         e6:4b:6a:43:11:cc:ec:87:33:21:ca:bc:04:f3:73:e4:18:7e:
         21:b6:cf:7c:52:c8:b0:d2:ee:9f:fc:a0:39:cd:55:d9:11:34:
         22:8d:2c:ba:40:07:85:f1:57:2d:a0:e7:c3:c7:a8:8b:8b:f3:
         5a:11:54:0f:2e:4e:1a:f6:6c:a1:57:d5:bc:d6:0f:13:1e:92:
         ab:97:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:56 2026 by rpki-client