Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft
File:                     69FEA3D523BC4635AE385A6D91412834159FF34B.mft (raw, json)
Hash identifier:          xX+xaJWbOsRc1n4ulBuCmIKyuw8PfcozKQMrGvf4ecY=
Subject key identifier:   D7:A1:18:C3:67:A7:6C:A3:37:F0:D5:65:62:47:70:5D:74:49:6F:C8
Authority key identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B
Certificate issuer:       /CN=69FEA3D523BC4635AE385A6D91412834159FF34B
Certificate serial:       7F804D68D3D1531FED4940D397BE26AFDB8294D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft
Manifest number:          0104
Signing time:             Sun 01 Mar 2026 19:12:17 +0000
Manifest this update:     Sun 01 Mar 2026 19:07:17 +0000
Manifest next update:     Thu 05 Mar 2026 02:53:17 +0000
Files and hashes:         1: 69FEA3D523BC4635AE385A6D91412834159FF34B.crl (hash: jyyyHSYrD9CIUN7opDWbKnWGODcvfRwbs9RqWk+SkKw=)
                          2: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: 2H9ugvO1mqNF5HVzGPvvJyo9xLTxDYsuZlPEZxpIFQg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl
                          rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:80:4d:68:d3:d1:53:1f:ed:49:40:d3:97:be:26:af:db:82:94:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA3D523BC4635AE385A6D91412834159FF34B
        Validity
            Not Before: Mar  1 19:07:17 2026 GMT
            Not After : Mar  5 02:53:17 2026 GMT
        Subject: CN=D7A118C367A76CA337F0D5656247705D74496FC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:63:2d:32:2d:db:52:d3:9f:35:f6:bb:67:1a:
                    dd:ee:9d:b3:a3:39:30:bc:9c:cc:e1:50:cf:d5:c5:
                    21:8d:ac:f5:62:3b:75:4d:95:ea:63:4b:e2:75:87:
                    16:88:11:2d:f2:c6:6e:83:52:b0:48:b6:b8:14:7f:
                    77:79:ac:42:1a:52:7a:1a:5a:32:f4:d0:aa:91:e5:
                    fa:66:0f:bf:36:41:2a:30:6c:36:21:cf:79:f3:51:
                    4c:d7:7a:ab:92:54:8a:8d:28:fe:e4:1d:4f:9a:e7:
                    68:1b:fa:f1:cf:0e:33:06:d0:ed:cf:bf:2d:53:6c:
                    c0:78:88:94:5a:70:dc:3d:6a:be:9e:ea:ca:f4:5d:
                    dd:19:1a:51:83:36:70:40:99:96:b0:10:f4:b2:0c:
                    69:9f:8c:92:6f:27:31:b0:a8:5c:4e:0d:e8:d1:f0:
                    a7:b5:bb:a0:e1:b9:16:4c:9b:44:9c:40:dd:77:dd:
                    1c:c5:de:ae:27:0a:ee:e8:93:f0:14:3b:93:17:81:
                    cd:f7:ea:a5:12:36:f2:3a:6f:5e:ea:a7:7f:b6:94:
                    4b:7e:23:28:95:0f:0e:ab:9a:2c:5c:63:10:c9:95:
                    e1:6d:de:81:43:51:67:00:c9:60:52:55:82:4b:db:
                    d2:ad:59:91:e3:4d:57:0c:76:6d:42:70:89:a4:51:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A1:18:C3:67:A7:6C:A3:37:F0:D5:65:62:47:70:5D:74:49:6F:C8
            X509v3 Authority Key Identifier:
                keyid:69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:df:8d:75:b7:4f:f0:a4:c5:fc:b8:6c:4a:89:1a:22:48:71:
         6f:be:a9:ee:3f:3b:90:54:3c:71:e6:e0:4b:bb:c9:b5:b9:db:
         42:27:b4:1e:f1:2f:a2:10:6d:86:6a:ba:ec:62:5e:c1:91:1f:
         1c:97:3c:29:ae:b8:47:8c:9a:a2:85:1c:b1:b9:25:4d:31:f7:
         b9:10:3d:ed:a2:4f:fa:bb:fa:59:20:31:96:8e:b5:00:90:5b:
         08:0c:e4:e0:b9:51:7c:f4:b5:40:a9:63:84:4a:98:3e:c9:ff:
         75:46:9e:2d:e0:d8:fa:71:4b:05:39:70:e2:74:40:e1:1f:ce:
         2a:0c:f4:b1:fa:4e:63:27:b6:50:b5:e0:ce:f7:ef:b7:dd:52:
         50:c6:95:b6:d6:5f:a6:96:c8:85:18:9c:e5:2a:be:35:4c:97:
         fe:a9:71:f8:97:94:36:3e:e5:a5:34:ef:f9:ca:71:80:02:c1:
         1b:30:bc:65:39:27:f1:b1:93:cb:a5:78:74:b8:0d:52:db:91:
         9c:71:52:0e:3c:fc:b8:b2:83:da:41:7b:b3:f9:b4:a7:8f:cc:
         55:02:17:1c:c2:05:54:4b:a2:d6:f5:bd:de:61:20:17:7e:a3:
         9d:af:c7:b7:6d:87:de:b2:4e:fa:c6:9c:ab:17:d6:86:ba:a3:
         8c:35:a0:dd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUf4BNaNPRUx/tSUDTl74mr9uClNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQx
NTlGRjM0QjAeFw0yNjAzMDExOTA3MTdaFw0yNjAzMDUwMjUzMTdaMDMxMTAvBgNV
BAMTKEQ3QTExOEMzNjdBNzZDQTMzN0YwRDU2NTYyNDc3MDVENzQ0OTZGQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYy0yLdtS05819rtnGt3unbOj
OTC8nMzhUM/VxSGNrPViO3VNlepjS+J1hxaIES3yxm6DUrBItrgUf3d5rEIaUnoa
WjL00KqR5fpmD782QSowbDYhz3nzUUzXequSVIqNKP7kHU+a52gb+vHPDjMG0O3P
vy1TbMB4iJRacNw9ar6e6sr0Xd0ZGlGDNnBAmZawEPSyDGmfjJJvJzGwqFxODejR
8Ke1u6DhuRZMm0ScQN133RzF3q4nCu7ok/AUO5MXgc336qUSNvI6b17qp3+2lEt+
IyiVDw6rmixcYxDJleFt3oFDUWcAyWBSVYJL29KtWZHjTVcMdm1CcImkUYuhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU16EYw2enbKM38NVlYkdwXXRJb8gwHwYDVR0j
BBgwFoAUaf6j1SO8RjWuOFptkUEoNBWf80swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMC82OUZFQTNENTIz
QkM0NjM1QUUzODVBNkQ5MTQxMjgzNDE1OUZGMzRCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQxNTlG
RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi
MjgtOTE0MmUxYmFhMGJhLzAvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4
MzQxNTlGRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFrfjXW3T/Ckxfy4bEqJGiJIcW++qe4/O5BU
PHHm4Eu7ybW520IntB7xL6IQbYZquuxiXsGRHxyXPCmuuEeMmqKFHLG5JU0x97kQ
Pe2iT/q7+lkgMZaOtQCQWwgM5OC5UXz0tUCpY4RKmD7J/3VGni3g2PpxSwU5cOJ0
QOEfzioM9LH6TmMntlC14M7377fdUlDGlbbWX6aWyIUYnOUqvjVMl/6pcfiXlDY+
5aU07/nKcYACwRswvGU5J/Gxk8uleHS4DVLbkZxxUg48/Liyg9pBe7P5tKePzFUC
FxzCBVRLotb1vd5hIBd+o52vx7dth96yTvrGnKsX1oa6o4w1oN0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:29:51 2026 by rpki-client