Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
File:                     AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json)
Hash identifier:          stR2TaBJ17P+AN3QjOMipyLLv6JB1fphSZqDAXeQVxU=
Subject key identifier:   FC:75:F6:81:E3:EE:40:22:6B:B8:77:41:50:13:BB:44:58:01:07:19
Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F
Certificate issuer:       /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F
Certificate serial:       028C547A0943AB083A9813EB232DDBB5557E2BA8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
Manifest number:          02FC
Signing time:             Sat 28 Feb 2026 06:21:37 +0000
Manifest this update:     Sat 28 Feb 2026 06:16:37 +0000
Manifest next update:     Tue 03 Mar 2026 12:41:37 +0000
Files and hashes:         1: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: vFZDJyrW7Nf7Z4DcMgOnKecQwvqUWGovWuuXKrThLwM=)
                          2: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: XsQr2cZBJrqrxKiedEtkU8+T8cRo0bVz5mTLzUeMGVk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl
                          rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 12:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8c:54:7a:09:43:ab:08:3a:98:13:eb:23:2d:db:b5:55:7e:2b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F
        Validity
            Not Before: Feb 28 06:16:37 2026 GMT
            Not After : Mar  3 12:41:37 2026 GMT
        Subject: CN=FC75F681E3EE40226BB877415013BB4458010719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:d4:38:80:c4:2b:2d:18:8e:9c:e5:a8:3d:
                    9e:23:c6:b0:ad:90:ab:56:21:fd:05:cd:01:a7:f0:
                    5f:8a:e2:b8:c1:a7:ec:1b:24:44:a9:f0:51:20:95:
                    a9:8d:45:51:67:11:41:7d:fe:07:28:6c:1b:fe:a2:
                    e3:3c:0d:34:70:0e:18:04:94:e1:e1:10:52:99:14:
                    66:0a:96:f6:3b:15:31:f1:fb:d9:ec:5f:1f:88:7a:
                    88:7f:90:55:aa:f3:c9:ad:24:63:ff:18:5a:c9:93:
                    14:19:2e:6f:24:06:64:96:dd:fc:bc:de:4a:1e:1d:
                    14:2d:07:53:5c:f3:de:a9:70:d8:c8:cd:71:bf:bc:
                    3f:7f:b0:23:3f:21:df:9b:07:79:67:34:0b:16:cd:
                    50:dd:ff:62:86:7e:00:8a:4e:db:70:8e:a9:14:c7:
                    7c:fd:07:c1:e6:6f:2a:8c:4f:41:83:6c:72:2e:2e:
                    fb:0d:d6:d8:1d:96:d0:3b:bf:5e:ea:65:ae:31:aa:
                    19:04:37:7e:23:e9:d8:8b:06:e6:e4:3a:41:a0:36:
                    12:81:0f:83:bb:59:8f:0e:f2:79:8b:69:0b:4f:67:
                    f4:5e:59:5d:db:38:77:2c:40:9f:f4:ff:ad:76:b0:
                    e2:d3:6d:e0:9b:4f:2e:dc:5c:cd:a0:28:0c:96:79:
                    31:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:75:F6:81:E3:EE:40:22:6B:B8:77:41:50:13:BB:44:58:01:07:19
            X509v3 Authority Key Identifier:
                keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:fd:90:ed:b4:c0:86:de:7a:ba:0d:65:63:94:d2:ec:93:82:
         e8:c9:9d:39:e9:80:1d:ec:70:27:0f:db:8e:3f:99:6f:b3:27:
         1f:17:82:ff:53:15:0f:58:ab:a0:8c:47:6c:53:6b:49:9e:56:
         e7:8d:41:bb:fa:b3:1a:58:68:81:cd:da:3b:d6:8a:42:ab:38:
         52:ad:12:6e:75:e9:56:56:70:4f:53:60:99:79:fb:a4:90:b7:
         1a:46:64:b2:61:ab:5a:db:1b:79:f5:9b:aa:47:5a:bb:c5:12:
         e7:c7:26:18:bf:17:72:bb:cb:f6:2a:f8:e7:88:fc:1f:6f:3a:
         8b:f5:42:3f:3d:d1:c7:24:b7:e3:37:81:3e:7d:95:e6:54:5e:
         ee:d6:17:3d:92:3d:12:37:dc:85:4d:04:d0:b9:1b:a0:36:df:
         d7:e5:87:76:36:03:45:c8:fb:af:84:36:84:27:39:26:e5:2e:
         71:ed:00:31:ba:a8:43:9f:ca:eb:a7:e3:db:93:c5:29:bc:bf:
         8a:ec:14:c2:6f:22:dd:f8:5c:30:e0:46:2e:4b:47:c3:69:79:
         3a:32:40:27:86:6d:d8:82:3a:d9:fb:24:20:be:d3:60:fb:2e:
         e6:be:bb:bf:6a:47:f9:56:e5:87:f7:b0:76:2a:ac:66:e9:7d:
         aa:70:e2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:20 2026 by rpki-client