Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
File:                     9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json)
Hash identifier:          +uXTVtu6/+6fC/Btjc5bGyfzqiW9v3KMWmNOVOiQn5E=
Subject key identifier:   19:56:9B:00:45:05:82:5D:33:19:0D:DD:CD:ED:BD:B9:F3:B6:BE:89
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Certificate issuer:       /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial:       1632B3B5313E98D7F9570282A4156E0BAE9ACF2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
Manifest number:          026F
Signing time:             Thu 16 Apr 2026 11:51:14 +0000
Manifest this update:     Thu 16 Apr 2026 11:46:14 +0000
Manifest next update:     Sun 19 Apr 2026 15:19:14 +0000
Files and hashes:         1: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: vBsCZpSLsG8TyyHzBprL3UJo7rlFoPAmHEwc5gmedk8=)
                          2: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: FxTnIw5vjqoZ72+CAYm/fpZrJZrtFwulq6Su/flXW3g=)
                          3: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: EposWqNhqTBV+ThXQA6xbonlZoMNLwQUM8Vh9hXvDGM=)
                          4: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: aiEQUHBNmT2EYIMF6U+PL/eCCGa3TZkcETojuN2/9y0=)
                          5: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: 8q9FunYMiC4JUDNMrbMunq+kGGfV2MdAlwFbpWvTdhQ=)
                          6: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: +9kGEt9FMbzyaqnQ3HEkWMHJN2f1S3notrK/o+QNX2M=)
                          7: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: hjm0LUhYDn2I8CxksukPnoNnaeAZf+/VHTSQqPF6sIo=)
                          8: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: kqGfNPGo8vr6qEuioNQey/aEeNu4t6Mg5faJoQyQKYs=)
                          9: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: mNmdnMu5oYSkMpGBbuVRpLEZatNmYnyhrSrV5OzZZhM=)
                          10: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: mhEqOvUFx3lE0vII+brzmnr7/SGFot2kwuR99kk7PAA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
                          rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 15:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:32:b3:b5:31:3e:98:d7:f9:57:02:82:a4:15:6e:0b:ae:9a:cf:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
        Validity
            Not Before: Apr 16 11:46:14 2026 GMT
            Not After : Apr 19 15:19:14 2026 GMT
        Subject: CN=19569B004505825D33190DDDCDEDBDB9F3B6BE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:69:85:2c:8f:5a:67:40:d7:b7:37:65:bb:9d:
                    23:40:6d:9c:47:cd:1d:92:60:28:b3:fa:e5:1c:76:
                    83:60:a7:11:98:69:bd:72:79:33:60:fd:63:32:98:
                    25:1f:e9:1a:35:89:9f:ad:54:1b:0d:0a:43:65:cf:
                    61:fc:44:3c:f5:31:df:b3:c4:ec:b5:c4:ea:f6:8e:
                    8d:cc:58:fc:f9:cd:14:de:13:5d:ef:4a:b2:5b:19:
                    dc:c9:78:a9:92:4f:fc:5e:d8:74:ce:cf:c4:f0:15:
                    1a:6b:bb:e9:bb:e4:91:23:9b:50:de:ce:83:64:02:
                    a8:1f:03:77:83:af:c3:3a:71:2b:4d:eb:e6:0f:11:
                    79:99:8c:08:ad:1b:71:e2:e3:54:39:5e:36:91:84:
                    18:c3:73:cd:9c:6d:b2:58:69:bc:2a:01:e0:f4:1f:
                    26:eb:35:e5:25:dc:31:28:7e:28:7c:62:ad:1b:39:
                    8e:84:00:84:02:c6:ca:5a:40:69:56:c0:6c:2e:f4:
                    7e:b4:2c:98:d0:04:5c:44:d8:d2:17:b6:df:e5:2b:
                    b1:56:8b:79:64:f4:e6:65:3b:5c:5d:53:f2:d1:ca:
                    24:41:c0:cd:ea:9f:41:97:28:eb:05:3e:5e:cf:a9:
                    ec:b2:90:80:66:0c:16:79:b1:77:55:86:63:a1:5a:
                    d8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:56:9B:00:45:05:82:5D:33:19:0D:DD:CD:ED:BD:B9:F3:B6:BE:89
            X509v3 Authority Key Identifier:
                keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:95:a9:0a:82:13:3b:b4:58:ef:02:64:e7:b3:5a:da:3f:fa:
         9a:2d:60:30:1e:f9:bb:3d:f2:9a:92:e2:4b:a6:5c:5e:74:a5:
         66:a3:c2:5f:5f:fc:e7:be:79:95:fa:61:66:a3:7c:c8:d5:8d:
         16:7d:7b:0d:2a:c5:59:52:80:09:e2:68:4a:0b:b9:12:59:6c:
         03:72:c8:08:b1:a2:d5:71:52:e0:75:0b:b2:26:ef:97:a3:92:
         50:aa:f7:6c:40:11:88:0f:a5:d7:a7:b0:61:75:28:5b:a7:ae:
         7d:8d:5f:4a:a9:54:0e:02:bf:a2:b1:d9:ff:4d:b9:39:c7:7e:
         e7:b2:8f:bc:4f:dd:f3:dc:c2:18:a0:24:2c:87:f4:66:8a:9a:
         7a:a9:ec:2e:ad:80:c2:79:37:0d:96:03:9f:06:4b:d4:4b:2f:
         08:b3:cd:d7:53:bd:f4:03:43:43:b7:5e:02:54:9d:6b:22:fa:
         63:6b:d9:6b:8f:0c:9b:ce:06:47:64:e2:79:0c:6a:ec:4b:27:
         34:0a:a8:fc:27:a8:8b:4b:eb:2a:2d:60:d7:2e:4f:46:10:64:
         9f:82:2f:47:cc:17:ba:e5:b3:ee:c1:71:c4:25:6d:49:37:55:
         41:a4:57:65:22:61:a0:13:db:d1:f0:b1:8c:19:c1:ce:2e:f9:
         91:1e:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:51:51 2026 by rpki-client