Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft
File:                     C816A670D0EF35D7923125F4B2671225E2E843FB.mft (raw, json)
Hash identifier:          Nc9oiSOTbiIl0vRjtpQW4lF4b/Ghb+4SaWok86dosEI=
Subject key identifier:   C0:B7:0C:1F:44:1A:2B:73:6E:45:2B:05:D8:7B:E5:03:FF:D8:15:DC
Authority key identifier: C8:16:A6:70:D0:EF:35:D7:92:31:25:F4:B2:67:12:25:E2:E8:43:FB
Certificate issuer:       /CN=C816A670D0EF35D7923125F4B2671225E2E843FB
Certificate serial:       5CF4D34DFE0057A00FDD0029CE7B402821D100F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C816A670D0EF35D7923125F4B2671225E2E843FB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft
Manifest number:          13
Signing time:             Sun 01 Mar 2026 17:52:02 +0000
Manifest this update:     Sun 01 Mar 2026 17:47:02 +0000
Manifest next update:     Thu 05 Mar 2026 03:24:02 +0000
Files and hashes:         1: 3130332e3134312e36322e302f32332d3234203d3e20313338383935.roa (hash: m788pI8kuW1mAz5aJj9/QdtxJsGtB244M/fnoZxh0tA=)
                          2: C816A670D0EF35D7923125F4B2671225E2E843FB.crl (hash: zU2ShCkd6IYTKDKw5f4YmZ2c5qmdwBTCyAfykg4uCAE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.crl
                          rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C816A670D0EF35D7923125F4B2671225E2E843FB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 03:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f4:d3:4d:fe:00:57:a0:0f:dd:00:29:ce:7b:40:28:21:d1:00:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C816A670D0EF35D7923125F4B2671225E2E843FB
        Validity
            Not Before: Mar  1 17:47:02 2026 GMT
            Not After : Mar  5 03:24:02 2026 GMT
        Subject: CN=C0B70C1F441A2B736E452B05D87BE503FFD815DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:89:16:15:1b:d9:5c:68:ea:c8:0f:a9:14:
                    0d:dd:41:11:79:7e:8e:1a:f1:6d:99:85:cf:7d:c8:
                    57:fb:7a:47:ef:b8:b0:33:14:70:83:72:35:b7:db:
                    ca:da:1d:b2:08:df:a3:d3:23:f6:04:93:ef:3e:00:
                    84:26:73:25:61:4b:be:30:1d:ea:f3:c4:1b:aa:f3:
                    ca:c9:99:dc:77:3d:24:d4:7c:fb:e8:49:71:68:83:
                    e5:77:6d:45:53:ae:d3:54:52:cc:1d:bb:fd:ea:b0:
                    3a:be:d4:7b:6d:2f:f0:3c:b6:d4:4a:09:ff:29:aa:
                    55:86:39:da:fe:b3:35:ca:f6:1d:15:7c:fb:5d:c2:
                    4d:e6:f9:f2:95:bb:b0:18:a4:de:7a:64:ef:1e:f6:
                    a2:50:d8:21:97:08:4d:cc:3a:7c:7a:70:4e:88:76:
                    9d:d6:a0:c4:81:6b:97:3a:5e:d3:9c:3b:9e:dc:c4:
                    91:3c:47:cd:75:2c:aa:b4:39:45:98:98:0f:cf:3e:
                    36:fb:68:e9:32:05:1d:3d:e8:b0:6a:1a:b2:3a:9b:
                    93:78:2d:8c:d7:1d:df:85:76:13:e5:61:1f:79:6b:
                    df:9c:82:54:e3:5b:12:c1:85:42:78:f4:bf:76:24:
                    18:36:67:b5:73:79:b0:6b:c8:5b:7a:9a:fe:35:be:
                    2b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B7:0C:1F:44:1A:2B:73:6E:45:2B:05:D8:7B:E5:03:FF:D8:15:DC
            X509v3 Authority Key Identifier:
                keyid:C8:16:A6:70:D0:EF:35:D7:92:31:25:F4:B2:67:12:25:E2:E8:43:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C816A670D0EF35D7923125F4B2671225E2E843FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:50:01:c9:a0:68:4c:ae:99:76:0f:3f:73:7b:38:5f:25:09:
         ba:c9:65:8a:2e:8e:5a:fd:c0:4d:9e:91:91:26:ac:95:d1:5d:
         7a:97:61:ec:57:e1:65:26:fa:df:99:27:3d:3d:0d:11:9e:88:
         1d:7a:3d:ed:ef:40:9d:89:d0:95:00:80:01:ac:91:54:a7:0e:
         46:ed:61:70:04:b3:bc:91:b8:da:a3:f3:54:06:a6:4e:89:37:
         60:6d:a9:80:8c:40:fe:58:0d:b7:6e:5e:8f:92:6a:ae:f6:98:
         e3:a2:11:a1:06:7c:06:71:e5:ae:4a:21:ed:d1:63:a2:79:37:
         40:20:20:c6:ca:07:f7:89:c5:e3:7f:f5:24:b5:f1:52:6e:33:
         43:f7:3f:b5:e2:26:8f:41:58:04:c0:ad:8c:c8:dd:ef:aa:25:
         c7:55:42:7d:99:17:6d:4a:1c:1b:84:da:7a:7f:27:49:c2:f1:
         eb:48:ed:24:97:6d:c4:56:3d:eb:c7:36:65:20:9b:e6:34:bd:
         fb:c9:20:69:bc:f7:02:fe:1c:1e:5b:32:af:51:74:8d:4a:a7:
         17:c6:6f:41:f8:07:cb:50:86:5a:6a:2f:37:18:b1:a9:7a:1f:
         85:51:75:69:7f:f1:b2:0e:3f:b5:51:d0:56:08:2a:18:5a:20:
         73:ef:aa:30
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXPTTTf4AV6AP3QApzntAKCHRAPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgxNkE2NzBEMEVGMzVENzkyMzEyNUY0QjI2NzEyMjVF
MkU4NDNGQjAeFw0yNjAzMDExNzQ3MDJaFw0yNjAzMDUwMzI0MDJaMDMxMTAvBgNV
BAMTKEMwQjcwQzFGNDQxQTJCNzM2RTQ1MkIwNUQ4N0JFNTAzRkZEODE1REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmrokWFRvZXGjqyA+pFA3dQRF5
fo4a8W2Zhc99yFf7ekfvuLAzFHCDcjW328raHbII36PTI/YEk+8+AIQmcyVhS74w
HerzxBuq88rJmdx3PSTUfPvoSXFog+V3bUVTrtNUUswdu/3qsDq+1HttL/A8ttRK
Cf8pqlWGOdr+szXK9h0VfPtdwk3m+fKVu7AYpN56ZO8e9qJQ2CGXCE3MOnx6cE6I
dp3WoMSBa5c6XtOcO57cxJE8R811LKq0OUWYmA/PPjb7aOkyBR096LBqGrI6m5N4
LYzXHd+FdhPlYR95a9+cglTjWxLBhUJ49L92JBg2Z7VzebBryFt6mv41viudAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwLcMH0QaK3NuRSsF2HvlA//YFdwwHwYDVR0j
BBgwFoAUyBamcNDvNdeSMSX0smcSJeLoQ/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ODdkNDQ2Yy0xMTQ0LTQwMDktYmQ5OC0wNjc4ZDY0N2Y0Y2UvMC9DODE2QTY3MEQw
RUYzNUQ3OTIzMTI1RjRCMjY3MTIyNUUyRTg0M0ZCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzgxNkE2NzBEMEVGMzVENzkyMzEyNUY0QjI2NzEyMjVFMkU4
NDNGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg3ZDQ0NmMtMTE0NC00MDA5LWJk
OTgtMDY3OGQ2NDdmNGNlLzAvQzgxNkE2NzBEMEVGMzVENzkyMzEyNUY0QjI2NzEy
MjVFMkU4NDNGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFBQAcmgaEyumXYPP3N7OF8lCbrJZYoujlr9
wE2ekZEmrJXRXXqXYexX4WUm+t+ZJz09DRGeiB16Pe3vQJ2J0JUAgAGskVSnDkbt
YXAEs7yRuNqj81QGpk6JN2BtqYCMQP5YDbduXo+Saq72mOOiEaEGfAZx5a5KIe3R
Y6J5N0AgIMbKB/eJxeN/9SS18VJuM0P3P7XiJo9BWATArYzI3e+qJcdVQn2ZF21K
HBuE2np/J0nC8etI7SSXbcRWPevHNmUgm+Y0vfvJIGm89wL+HB5bMq9RdI1KpxfG
b0H4B8tQhlpqLzcYsal6H4VRdWl/8bIOP7VR0FYIKhhaIHPvqjA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:34:42 2026 by rpki-client