Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
File:                     9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json)
Hash identifier:          6upoibEAUkJ5K6pAXNncJNMWVQEAdMg6rM9u8vQROFc=
Subject key identifier:   14:95:B6:22:08:8F:69:83:48:19:5A:AB:FF:64:25:7E:F3:11:3A:76
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Certificate issuer:       /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial:       2A6B0A82B3F29B94267CA34E69870CD4925F60F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
Manifest number:          0257
Signing time:             Sat 28 Feb 2026 10:41:11 +0000
Manifest this update:     Sat 28 Feb 2026 10:36:11 +0000
Manifest next update:     Tue 03 Mar 2026 14:38:11 +0000
Files and hashes:         1: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: Rl+vIZHqpKLQ+zEdVxcDzBikcA2vcYpw3IxauTfHLDQ=)
                          2: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: kqGfNPGo8vr6qEuioNQey/aEeNu4t6Mg5faJoQyQKYs=)
                          3: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: L+chPyitKggq6YV3uJXNnAD2SduLB4kVYgMaedVJt6w=)
                          4: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: 0nCsQuHiJcysOdQG67cdBrKLq4eorrPh092YcQYvFmk=)
                          5: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o92oWma+qVg7kDpp1dBbsZyfIxt7kWwBQcOjSnqRqMk=)
                          6: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: mAhuKWaZwCU2ddZVNRemmjaIEoWPi+10pFfmb3yzyIg=)
                          7: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: tNlmP7pZ6Y/fxhCmjBMnla95rEILFfMcM572+/x8IhI=)
                          8: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: lEeS6vsNWcZ17S5/mxWNgu2oa8p6QhZGfAbhq4nCm2A=)
                          9: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: nQIMnNv0zD1kzZE1OsmGchXVsI7eh3j6LWcU1vJtAB8=)
                          10: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: FvX6HOu240BmC0Xjx609uR2xk59ob67iwFxIeabyR18=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
                          rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 14:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6b:0a:82:b3:f2:9b:94:26:7c:a3:4e:69:87:0c:d4:92:5f:60:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
        Validity
            Not Before: Feb 28 10:36:11 2026 GMT
            Not After : Mar  3 14:38:11 2026 GMT
        Subject: CN=1495B622088F698348195AABFF64257EF3113A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:00:cd:a1:54:b4:6d:ff:01:42:b7:8e:fb:61:
                    05:29:94:52:11:05:2e:26:2a:54:a1:2c:1f:b8:28:
                    1c:88:4e:ba:62:00:f8:4c:39:9d:7d:6f:1f:4b:6c:
                    33:90:93:11:63:ec:7e:eb:18:24:15:78:ba:b0:fa:
                    d1:8e:1b:bf:c4:61:44:bc:de:e6:6e:91:0d:a1:eb:
                    19:56:06:b9:54:3d:23:40:d8:89:9f:1b:66:c8:53:
                    ee:cf:17:5b:5f:ae:c0:11:88:f2:e2:47:fe:b0:94:
                    07:5a:4f:ac:e0:f5:eb:96:51:5e:1d:5f:58:fd:4d:
                    cc:2c:e0:a2:3e:cd:b8:83:a1:75:33:8e:92:ba:16:
                    13:03:cd:4a:4b:60:74:3d:5a:15:0e:d6:eb:06:52:
                    53:54:b8:9c:0d:9c:8e:fe:da:a7:a9:03:8e:19:f8:
                    b6:72:b8:f9:15:dc:d6:9a:a0:08:25:62:b2:f3:7f:
                    c1:22:f6:ff:a4:b6:81:53:b1:a6:dc:66:9c:c3:7a:
                    3d:6b:c7:c8:fa:49:9e:23:8e:f4:0c:07:43:ea:c1:
                    8e:55:db:a2:11:9a:d6:34:84:c5:a8:66:a2:45:ac:
                    05:7b:ee:e7:b9:7c:30:16:55:71:ac:f0:34:7d:b6:
                    bf:9f:a8:cf:f3:ec:ce:17:21:0a:4b:f0:bc:2d:83:
                    6a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:95:B6:22:08:8F:69:83:48:19:5A:AB:FF:64:25:7E:F3:11:3A:76
            X509v3 Authority Key Identifier:
                keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:46:d1:eb:b7:5e:6b:ae:4f:56:62:74:aa:b8:f7:b5:9f:f1:
         3d:fa:8a:f3:1a:92:b2:7c:77:45:1e:7c:36:11:97:aa:f9:a4:
         ee:98:0e:05:97:fd:15:86:5f:c9:26:fe:88:d0:76:b0:42:69:
         ca:43:84:b2:88:8c:ea:f3:c5:d2:22:06:d6:cd:27:93:ff:45:
         07:fa:70:1e:5e:24:c9:e2:59:49:53:a6:f8:7f:d7:9e:5e:ca:
         8c:c3:fb:29:33:e7:60:bf:5f:7f:0d:92:94:50:7d:c8:bb:db:
         bf:a9:ed:0b:28:7d:d9:03:95:45:2b:d0:5f:98:60:75:1e:43:
         a0:25:04:04:ec:98:ea:f7:66:cb:59:ca:9f:fd:85:42:be:0a:
         71:03:52:2d:82:b1:16:e2:34:73:18:46:a8:0b:70:05:6e:58:
         68:5c:dc:44:9b:a0:33:c4:d2:23:b1:f8:6f:00:03:39:3b:2d:
         02:98:cc:25:e3:c3:1e:6e:51:aa:ae:75:3d:32:28:dd:d3:56:
         ae:de:d4:48:8e:51:fd:69:9f:4b:a6:f9:64:96:c9:b1:51:32:
         06:00:f2:04:d5:0d:91:b8:10:a5:99:cb:a2:95:d9:a6:21:bd:
         04:7d:82:cc:2e:f0:25:02:89:c9:04:90:36:ef:30:7d:ed:3e:
         df:29:57:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:56:16 2026 by rpki-client