Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
File:                     C16E46D556A47D2429EC847E95E7C429D38AC26D.mft (raw, json)
Hash identifier:          HrJgKt19uAtATFItwwqrvUPs+/LYbYa2S8X3jBUpQnA=
Subject key identifier:   AB:68:F2:99:7A:92:12:0C:71:AD:78:CF:3D:72:C3:08:DC:E6:22:30
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       5B3362866357D5E0E54094554D8AAC2021C72A24
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
Manifest number:          03BC
Signing time:             Sun 01 Mar 2026 10:42:24 +0000
Manifest this update:     Sun 01 Mar 2026 10:37:24 +0000
Manifest next update:     Wed 04 Mar 2026 18:29:24 +0000
Files and hashes:         1: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: Giz7os34qxdcaeyi2EtKcr2LS4LsMlTnJlV8pqSpEa4=)
                          2: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: q+4LJqnEtPR8u/O7vXDxEMWbUC+3pBdRVabjnpWaIW8=)
                          3: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: /wV95wT81KDKro/jg/Buo94wrPpWyGBGso5Gssi1qLc=)
                          4: C16E46D556A47D2429EC847E95E7C429D38AC26D.crl (hash: Z54sH/RLtw3ZIs5i0pgqwVVLjNW7WN1NrEP5bLNmr/A=)
                          5: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: r1xG0EZ+diPvqjo3maUSgSdAXF/PbzNzYbElj3DkPms=)
                          6: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: TPAjUCjHJnWAtWeWIogMrgqyIk1DQzed8sLTl5HA/OY=)
                          7: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: xUdwOu6GtGdzxItV3iA1A5hAD2Ey5dnmQ19p3DcRu10=)
                          8: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: VEDwBMu7e2mzL/h9CHSnsP+W8nFPBXkEhV06ak5Sn4k=)
                          9: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: f0QuTjuXU3+PMwtOvyLhhE3F7fk0wnPs64pd29FWWiY=)
                          10: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: jAH5xZ0mM2gJ4zgC+LxXgivI18TAlcZ5CPYpBlGyxP0=)
                          11: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 8c4EuCrXR9USSkoSueUSWcZF3Vya08SYcqUOI9OfmOY=)
                          12: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: TzoAuOSZ6mXbYFD7JpUog8X7cU+aL4pu97WqgSsQlww=)
                          13: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: OxhA3uXfrHkYk9hpK8Kprlt50rQpJAHKf4/psbChj9g=)
                          14: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: cNjA+vEY4etZqGchJ8HDvYFIMYzWVJuVGOU4SD9SCJc=)
                          15: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: WivqrExuW/czATKs+PzCjFZrJxIri49e6BcoDofHA0A=)
                          16: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: VdRAPx9PRO631CUuDsRT3G+gpxtg4/VX90lYsk0SMVU=)
                          17: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: YtgOnaLw1bxl1wUrgM2neAz8Qf57lo3CvBW85nMyhJg=)
                          18: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: s1sd22aoOx7eVnGzzPZfaCEnUeLM+0ey0B/Ng0FNQzE=)
                          19: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: pMSHdCGU3wSWW64VJ8Q+XCnRMyb8p81kTgkpP+Gwk14=)
                          20: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: BEXTqeRuOYeCds/GtbXckcTCx17EaQiOC1/BtPp70DI=)
                          21: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: 8NBF7TYD3mv93Ahcm2U3DCAxcvF4PEalBVAFdo0PIhA=)
                          22: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: GE7T9YC/kqBLoYKuMN7OgXcO8QMg0KTigD9MICwdRZo=)
                          23: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: YfbB3z09y4MNoTi1HjR4+z9IdxMYyBM89bj8p3WiTw4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 18:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:33:62:86:63:57:d5:e0:e5:40:94:55:4d:8a:ac:20:21:c7:2a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Mar  1 10:37:24 2026 GMT
            Not After : Mar  4 18:29:24 2026 GMT
        Subject: CN=AB68F2997A92120C71AD78CF3D72C308DCE62230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:17:0c:45:94:3b:a9:4c:89:7d:90:cb:e2:
                    6e:69:1c:67:a9:f4:c4:d3:c4:8c:9d:ac:7f:04:02:
                    8c:c6:8d:a7:11:cf:20:15:a5:15:3b:e5:86:32:c5:
                    0b:96:9f:f2:70:cf:ca:ad:90:00:98:b4:bf:f3:b7:
                    b9:2f:23:2e:9a:f0:dc:82:ec:39:83:75:a5:f7:4a:
                    54:f8:71:eb:54:69:58:b2:09:38:00:d4:d1:6c:c9:
                    a2:28:1a:f0:fe:3a:95:52:57:47:25:12:75:a3:fe:
                    37:e2:6f:f5:21:e1:51:ba:53:2c:91:58:a8:6b:77:
                    3a:c1:2d:41:7f:88:4b:a6:9d:fd:0c:70:4c:db:eb:
                    7e:e3:c2:fb:e3:3b:1e:e6:76:ab:3b:cf:4d:e5:5a:
                    67:fa:13:bb:bd:1a:8b:38:de:3c:83:f1:ab:3f:f6:
                    71:88:a7:49:57:af:b8:eb:28:32:9a:0a:d3:3d:1a:
                    bc:49:39:93:e0:e8:ac:92:05:e3:83:3c:d8:2e:2f:
                    6d:6f:c4:dd:d6:d1:79:27:10:e8:61:b6:c6:0b:56:
                    81:3a:18:18:06:c8:ed:07:58:e5:54:9d:3c:91:76:
                    16:3e:2a:5e:5d:19:fb:d2:0d:c0:ec:68:0e:e5:43:
                    ee:1a:f7:3c:fd:0e:08:f7:8f:14:91:69:7b:ba:52:
                    c9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:68:F2:99:7A:92:12:0C:71:AD:78:CF:3D:72:C3:08:DC:E6:22:30
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a9:2c:e9:1c:db:f8:02:f7:53:9d:73:40:9d:f9:f2:2b:37:
         d7:2e:02:da:5e:d6:ea:09:fd:c6:6d:32:ef:60:1d:ae:46:19:
         b1:50:88:be:03:8e:2e:0c:74:08:0c:fd:0a:9e:f0:32:26:b8:
         ad:81:14:b9:e5:3a:1c:9b:d4:39:04:7c:4c:a4:36:74:c4:49:
         e5:46:57:bf:de:66:cd:82:a2:10:75:80:85:83:90:62:74:ec:
         d5:53:ae:68:9a:af:87:6c:90:99:39:63:ee:dd:15:fe:dd:5a:
         21:9e:d3:46:16:8b:42:2d:d8:fe:94:e4:80:74:d5:9d:a8:db:
         a7:1e:b4:b3:c6:88:9e:7d:c0:d4:b6:dc:79:fa:be:80:d8:c3:
         c2:8c:43:48:3c:94:7f:17:5a:6d:ad:1f:3a:b9:fc:1c:2e:7f:
         0b:4d:08:0f:b0:79:b8:6c:a5:98:ed:ba:ff:17:ab:fa:10:16:
         30:d7:6c:7a:de:91:b6:f2:3d:a8:0a:f1:73:f0:e9:34:ed:93:
         b2:31:f2:5a:7b:3a:eb:c8:a6:54:6a:ea:cd:31:22:40:44:34:
         85:a3:b2:37:41:e1:fe:7a:19:c4:a5:2e:dd:fd:79:83:05:e0:
         d1:a3:dc:36:be:c5:6d:2d:41:b8:d4:71:c7:9a:54:52:fb:5c:
         09:2a:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:54 2026 by rpki-client