Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
File:                     1952B074D19D5AB562D7EE537AD3059EA097353B.mft (raw, json)
Hash identifier:          9l2LYnI2icszDuxrA786P+K74OCzZBbOXVjrRxyZ50I=
Subject key identifier:   AA:26:EF:F2:68:EC:7E:83:18:1F:84:6D:DC:01:57:02:7E:FF:37:26
Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
Certificate issuer:       /CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Certificate serial:       741700D9106A3AAC30FE0EBE010591D66C1C8045
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
Manifest number:          0252
Signing time:             Sun 01 Mar 2026 23:11:46 +0000
Manifest this update:     Sun 01 Mar 2026 23:06:46 +0000
Manifest next update:     Thu 05 Mar 2026 00:47:46 +0000
Files and hashes:         1: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (hash: ykRWiMSaAsP4Z39Whyu3kvlehUT+9RaQnqBPMyF4FR0=)
                          2: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (hash: EFHYC7XhG7MQGG+p71C9PeqM87F/0AnjgXarEbD+y4E=)
                          3: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: 83g1exgFqaTQKU38X1D6x0BtWT5D2KATwMghhQSp0Hg=)
                          4: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (hash: AS7ErBWYOh3ltpqaacXCmV2CVPom+cE/4rFVdqtAK+c=)
                          5: 1952B074D19D5AB562D7EE537AD3059EA097353B.crl (hash: ZhVH4S7ghhg3LPFwgCepix9bR4oe9bgmhha3gg0Yp9o=)
                          6: 323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa (hash: mPh7GdsHOCij5+t8LRe0pT3jX8ibPd0uc3fcqsjEKco=)
                          7: 323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa (hash: Ty7LXGWFu77417YzD9LySsWN2AIJ4KwCcp3kNzWJAIM=)
                          8: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (hash: sJCm2ee/pkpEqZ3CTb0n1XRlqsVPP4kAsamQV7lnrGA=)
                          9: 323430363a616563303a623a3a2f34382d3438203d3e20313431363735.roa (hash: D0b7YQ9CGnuoR/guzqV8sUGQy2lE5KoINh6LVHdhIG8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl
                          rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 00:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:17:00:d9:10:6a:3a:ac:30:fe:0e:be:01:05:91:d6:6c:1c:80:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B
        Validity
            Not Before: Mar  1 23:06:46 2026 GMT
            Not After : Mar  5 00:47:46 2026 GMT
        Subject: CN=AA26EFF268EC7E83181F846DDC0157027EFF3726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cc:28:c0:78:ac:44:41:ec:8d:ec:dc:80:b2:
                    d5:48:b2:50:91:9f:71:0d:98:d0:15:08:13:4f:d5:
                    5a:af:60:2f:f1:50:09:43:e2:27:3b:a7:cb:82:4c:
                    cf:78:77:7a:e1:b2:c3:83:b4:8e:75:40:37:40:78:
                    25:13:9f:4a:c6:4f:db:1f:be:5b:ad:c1:4d:8f:97:
                    44:48:d5:43:74:0c:2d:7a:c2:2c:f0:29:86:dc:61:
                    93:85:2d:10:06:3a:44:15:c1:80:80:d3:2e:70:4f:
                    54:32:1b:a8:7a:fd:30:09:d7:8f:34:b3:3b:da:57:
                    e5:d4:17:ad:8b:1d:27:ed:0e:3f:c0:aa:cb:1f:70:
                    08:ca:cf:20:f5:b6:a1:8c:2b:2a:a1:c4:92:9a:56:
                    aa:4d:ae:7b:7a:b0:19:43:48:82:8e:02:a3:95:34:
                    7a:bf:67:84:92:c2:13:f1:73:49:20:97:c6:79:cf:
                    32:bf:14:1f:12:de:ce:66:1f:c0:b3:49:ea:c7:6c:
                    67:68:f0:27:d0:02:ae:f4:0f:d9:db:5e:17:b9:7f:
                    69:d2:95:37:0a:af:f6:f0:ce:3c:6d:d7:4f:d0:b4:
                    11:b9:c4:4d:93:c7:19:2f:c6:fa:93:d9:15:a1:f3:
                    5b:6d:46:73:2a:ac:36:57:3b:dd:a9:06:70:69:6d:
                    32:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:26:EF:F2:68:EC:7E:83:18:1F:84:6D:DC:01:57:02:7E:FF:37:26
            X509v3 Authority Key Identifier:
                keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c2:11:7b:4a:c6:26:15:e1:20:c1:f0:0f:ea:ee:8b:b9:df:
         d2:b7:32:0b:98:28:3e:c0:fe:6c:4c:e5:bd:18:17:20:3b:00:
         9b:cd:b6:ce:ae:57:6a:6d:d8:d2:50:a8:04:83:87:1e:32:cf:
         ad:b7:71:dc:f9:30:65:da:2c:b5:df:5d:c7:a8:7b:c9:f0:a2:
         79:05:ec:91:e8:51:61:26:c5:8d:d3:3e:18:fa:b3:5b:00:92:
         5b:28:20:58:da:14:47:62:d3:77:a5:3f:07:ab:dc:af:df:f7:
         3b:55:d3:f5:d9:d2:ff:98:2d:ae:9d:48:54:75:8e:4f:e2:22:
         5b:fb:dc:d5:35:94:b4:9c:e3:89:7b:93:52:3d:25:6f:61:db:
         59:5e:9e:88:ce:25:1f:2f:8b:f2:b4:b9:5d:b7:83:0d:28:a1:
         d7:1e:fc:ba:71:05:66:9b:ad:8c:b9:d5:7b:e7:c3:d7:0c:77:
         6e:00:3e:ad:48:71:15:8e:f7:df:97:ed:77:a3:14:24:28:87:
         ad:95:55:ba:db:bc:cc:70:a0:64:61:aa:ae:4c:4d:64:e8:46:
         69:a2:ad:b6:1f:76:a1:fc:8e:e5:f9:dc:2b:4d:5b:a3:2e:4a:
         29:31:f1:b3:72:8a:05:39:d0:6e:07:fc:31:3b:a8:19:22:90:
         b5:c2:54:a5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdBcA2RBqOqww/g6+AQWR1mwcgEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVB
MDk3MzUzQjAeFw0yNjAzMDEyMzA2NDZaFw0yNjAzMDUwMDQ3NDZaMDMxMTAvBgNV
BAMTKEFBMjZFRkYyNjhFQzdFODMxODFGODQ2RERDMDE1NzAyN0VGRjM3MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSzCjAeKxEQeyN7NyAstVIslCR
n3ENmNAVCBNP1VqvYC/xUAlD4ic7p8uCTM94d3rhssODtI51QDdAeCUTn0rGT9sf
vlutwU2Pl0RI1UN0DC16wizwKYbcYZOFLRAGOkQVwYCA0y5wT1QyG6h6/TAJ1480
szvaV+XUF62LHSftDj/AqssfcAjKzyD1tqGMKyqhxJKaVqpNrnt6sBlDSIKOAqOV
NHq/Z4SSwhPxc0kgl8Z5zzK/FB8S3s5mH8CzSerHbGdo8CfQAq70D9nbXhe5f2nS
lTcKr/bwzjxt10/QtBG5xE2TxxkvxvqT2RWh81ttRnMqrDZXO92pBnBpbTJpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqibv8mjsfoMYH4Rt3AFXAn7/NyYwHwYDVR0j
BBgwFoAUGVKwdNGdWrVi1+5TetMFnqCXNTswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NGYyYzAyNS0xZDc2LTRhMzYtODE2MC1hOWU4YWZlMzU3OWYvMC8xOTUyQjA3NEQx
OUQ1QUI1NjJEN0VFNTM3QUQzMDU5RUEwOTczNTNCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVBMDk3
MzUzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmMmMwMjUtMWQ3Ni00YTM2LTgx
NjAtYTllOGFmZTM1NzlmLzAvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1
OUVBMDk3MzUzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHfCEXtKxiYV4SDB8A/q7ou539K3MguYKD7A
/mxM5b0YFyA7AJvNts6uV2pt2NJQqASDhx4yz623cdz5MGXaLLXfXceoe8nwonkF
7JHoUWEmxY3TPhj6s1sAklsoIFjaFEdi03elPwer3K/f9ztV0/XZ0v+YLa6dSFR1
jk/iIlv73NU1lLSc44l7k1I9JW9h21lenojOJR8vi/K0uV23gw0oodce/LpxBWab
rYy51Xvnw9cMd24APq1IcRWO99+X7XejFCQoh62VVbrbvMxwoGRhqq5MTWToRmmi
rbYfdqH8juX53CtNW6MuSikx8bNyigU50G4H/DE7qBkikLXCVKU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:45 2026 by rpki-client