Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
File:                     1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft (raw, json)
Hash identifier:          c2zkpuRyZiq3Zn9bdabVnv/mLJrK2EwwTRG0TbHZlj8=
Subject key identifier:   02:98:AD:62:F8:67:D3:F8:CA:10:F1:0F:FE:62:A2:4B:C7:33:B1:7F
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Certificate issuer:       /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial:       367C663A64EA5FCDDE9107DEE6E1E4E48DF0D1F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
Manifest number:          01FA
Signing time:             Sun 01 Mar 2026 11:20:05 +0000
Manifest this update:     Sun 01 Mar 2026 11:15:05 +0000
Manifest next update:     Wed 04 Mar 2026 19:00:05 +0000
Files and hashes:         1: 3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (hash: FBwLiD7U4sCYynBhJGjAu+VAe5YUj9+FUjVO+L+zaEo=)
                          2: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: vo3txQHD1GP/JznijvlkQTtQaeBbi729kAiguRxIkyE=)
                          3: 3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa (hash: p/6KK4JMbgCv5VkdanC2JpAp7VpmlbyPcWCjqL4KniM=)
                          4: 3131342e3134312e39352e302f32342d3234203d3e20313338383138.roa (hash: qVIOTxzkHoMtUEEPyvvgBkFKT9oB5BtmkPkZiQLq0ng=)
                          5: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 31rqAW06+FuDJELvsb/0uxq0ocORo684ERfMQVWzj54=)
                          6: 3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa (hash: YqkCvMl0PPv/SjM86CmSE7YV2BzpnMMQxQbEuJOY7ws=)
                          7: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl (hash: iGOo1YCh2bN3YzsOKDykMSoypckCK+6EEbN5w7HWA40=)
                          8: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: rfAEDfb98EmJrbbYSOsJh0R3GKeVtrdV920jQ6JYXXk=)
                          9: 3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (hash: 8bb25AjKY+CfhaHD2T35vRoSHcpGFrksD2snYFX7/PA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
                          rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 19:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7c:66:3a:64:ea:5f:cd:de:91:07:de:e6:e1:e4:e4:8d:f0:d1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
        Validity
            Not Before: Mar  1 11:15:05 2026 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject: CN=0298AD62F867D3F8CA10F10FFE62A24BC733B17F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:58:33:fc:f0:65:7d:56:6a:29:68:bb:04:17:
                    9b:23:70:22:f6:57:20:e9:a0:2d:48:29:c0:c1:71:
                    ba:11:16:f3:cb:32:5c:43:5d:a6:de:d0:ed:34:1a:
                    44:c5:6a:ee:49:51:e0:9a:f3:e5:d4:ad:78:93:89:
                    76:ec:ba:26:3c:e4:c1:b7:47:3f:e6:57:8f:be:47:
                    84:3c:11:83:6c:2c:bf:c2:c8:76:43:59:60:df:90:
                    de:33:89:4c:b8:e7:e0:6f:7c:31:16:09:65:d4:d9:
                    90:59:23:9f:a3:90:43:98:7b:ca:ad:f8:b9:cf:c1:
                    3e:8e:5c:38:eb:73:72:77:51:7c:58:5c:ff:54:a9:
                    14:c1:33:23:ba:c9:a9:a7:d5:e7:a2:5f:96:5e:59:
                    f3:11:f4:e6:fa:46:85:3f:45:5f:51:4b:0b:1f:a1:
                    4e:35:2f:e4:3e:e3:28:8d:13:fe:03:2d:95:9d:72:
                    f9:b7:5f:31:d2:d0:68:79:a2:b4:dc:2d:66:55:f9:
                    2b:18:5b:8f:fc:d2:8d:7b:ed:74:fb:57:35:53:ca:
                    a2:82:ab:ef:bd:c0:6c:76:c0:d6:43:7b:45:62:2c:
                    9d:41:fe:a2:7e:0d:a8:72:6b:01:73:3b:e8:e5:11:
                    a1:46:62:74:06:27:87:b6:5c:c5:b1:0e:46:e1:33:
                    c6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:98:AD:62:F8:67:D3:F8:CA:10:F1:0F:FE:62:A2:4B:C7:33:B1:7F
            X509v3 Authority Key Identifier:
                keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7e:02:83:b0:ce:73:6b:c4:33:a1:a8:c0:b4:29:e9:67:3c:
         49:93:5f:9b:11:d1:45:6d:27:20:fd:ea:be:f8:79:1c:e2:5b:
         11:58:bd:f8:ee:29:02:2a:70:53:72:ed:d2:90:27:da:02:ec:
         19:d3:f0:fe:b0:7d:22:5b:25:39:f3:89:a8:56:2a:d4:fb:9a:
         7a:e0:17:1f:45:c1:9e:e2:0a:7a:e9:8a:1b:fb:71:99:b9:cf:
         8e:1d:e2:b3:e1:94:7d:87:19:3f:45:ef:79:f2:4b:82:5e:12:
         a5:8e:6f:33:71:d0:11:25:a6:2a:70:6c:fb:cd:e9:38:2f:f2:
         f0:51:07:83:65:bb:72:82:1a:a0:14:fe:f6:8d:52:a3:c1:2d:
         93:2d:c2:94:fe:e9:76:a7:76:e3:3b:89:a1:bd:eb:1a:08:71:
         4f:33:e2:be:6c:5d:fd:f4:50:6e:61:26:d9:b5:34:71:4a:78:
         9c:36:b2:d2:db:99:3b:fc:1f:f1:6d:e5:c3:d5:e6:10:53:b6:
         4f:13:56:8a:ff:b4:0e:66:58:6a:55:11:20:82:7b:3c:b7:b0:
         ce:05:a1:70:79:46:6c:66:c0:38:19:29:f9:6e:89:74:8e:4c:
         97:d4:52:8d:12:2d:b6:d3:19:1b:b2:3b:18:cf:3e:e8:9b:7d:
         d7:b9:43:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:23:30 2026 by rpki-client