Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft
File:                     2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json)
Hash identifier:          kRWyr4d84d+XhRXLmWYipUQ5XB4+NJRAl2o42cyywLU=
Subject key identifier:   6E:57:7C:F6:78:47:E9:4C:FD:7D:1E:8A:DB:23:E3:6C:FC:9F:16:A6
Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D
Certificate issuer:       /CN=2370B87417B78EB4410F4394F29FB327D1401F0D
Certificate serial:       2B48D3537D702B62249DCDBC73B70FD916574F3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft
Manifest number:          0219
Signing time:             Sat 28 Feb 2026 17:11:58 +0000
Manifest this update:     Sat 28 Feb 2026 17:06:58 +0000
Manifest next update:     Tue 03 Mar 2026 20:06:58 +0000
Files and hashes:         1: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: 44Rdq/W13buuab1pRJEMfThEXZTbWo0Vnn8CVJdDTEE=)
                          2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl
                          rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 20:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:48:d3:53:7d:70:2b:62:24:9d:cd:bc:73:b7:0f:d9:16:57:4f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D
        Validity
            Not Before: Feb 28 17:06:58 2026 GMT
            Not After : Mar  3 20:06:58 2026 GMT
        Subject: CN=6E577CF67847E94CFD7D1E8ADB23E36CFC9F16A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:5e:47:13:0b:7c:e6:53:c7:3d:30:94:8c:
                    4a:d5:91:f8:56:9c:0f:72:7e:80:4f:cc:a4:69:0f:
                    74:11:0d:57:2f:7f:d2:61:bf:25:47:40:3a:7c:c6:
                    6b:7b:8e:05:45:28:17:e8:27:a6:03:4a:5a:ed:58:
                    8d:cb:ed:59:8e:35:7b:cf:b2:60:88:4d:02:f0:10:
                    be:b3:f2:76:e0:ab:49:f6:52:34:7d:6f:b8:c6:90:
                    bf:bf:75:90:18:c5:7c:b5:c5:f0:08:1e:16:f3:99:
                    b4:03:97:96:7f:32:de:47:90:22:91:91:46:29:f5:
                    d4:7a:a2:00:57:40:f0:e9:05:9e:25:59:88:8e:95:
                    30:9b:4e:11:82:ec:86:f6:e2:55:9f:3d:10:f1:2a:
                    26:1d:64:38:63:cb:7b:13:9e:38:9b:b3:e7:73:5c:
                    0d:55:d9:96:d2:5d:76:43:2c:c3:b1:b6:1c:06:8e:
                    df:e8:af:4d:15:aa:cf:bc:e7:7a:39:da:e3:78:e5:
                    bd:27:b5:93:08:9c:22:7d:c8:99:9b:1d:6e:3b:13:
                    f3:bf:fa:af:34:8f:2b:78:10:28:f7:c4:6a:d4:36:
                    b4:a9:4a:4e:95:aa:24:0e:cf:46:ec:5b:84:44:6e:
                    4a:27:a0:e4:30:28:61:8c:09:02:bf:9f:0f:70:5c:
                    57:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:57:7C:F6:78:47:E9:4C:FD:7D:1E:8A:DB:23:E3:6C:FC:9F:16:A6
            X509v3 Authority Key Identifier:
                keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f9:1f:e4:43:1e:e7:30:66:42:db:a5:77:f8:d7:a7:6e:a4:
         ab:6a:31:f5:e6:e8:e9:80:bc:de:bb:42:33:d2:3c:26:ba:cc:
         6f:bc:bd:21:05:af:45:86:40:39:cf:aa:83:c1:62:23:4b:54:
         35:0b:73:48:29:cc:c7:12:43:ce:6b:77:37:30:fd:71:00:85:
         28:c2:e8:86:47:dd:c5:4f:c2:1a:ac:ec:85:9c:b2:28:45:88:
         8c:9a:72:ff:f6:8b:94:4f:48:7c:28:ee:93:0a:ff:e9:af:1f:
         f9:7b:c2:20:00:e1:35:6b:7c:70:e0:7f:9b:85:7a:4d:d4:c3:
         7a:0c:56:65:43:1e:be:dd:dd:39:fc:3a:93:b2:27:3c:66:24:
         4e:7c:9c:ac:b8:9d:ac:79:a3:03:a2:d3:8e:35:df:16:18:1d:
         65:ad:9b:a0:27:11:17:94:aa:82:e1:05:aa:a6:a7:a9:84:f9:
         b0:3b:e8:de:d8:2f:f5:07:fe:d4:a6:30:4f:47:2d:74:71:48:
         33:10:93:83:3f:8f:81:36:37:87:7b:71:b4:aa:72:40:ba:7d:
         b4:05:70:76:2b:ad:d3:a5:2b:66:d4:ef:44:48:69:98:50:54:
         e4:48:bb:9f:a4:c1:d7:f5:40:bd:cb:fc:85:b4:10:73:8a:56:
         d9:d8:52:3c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUK0jTU31wK2Iknc28c7cP2RZXTz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE
MTQwMUYwRDAeFw0yNjAyMjgxNzA2NThaFw0yNjAzMDMyMDA2NThaMDMxMTAvBgNV
BAMTKDZFNTc3Q0Y2Nzg0N0U5NENGRDdEMUU4QURCMjNFMzZDRkM5RjE2QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIF5HEwt85lPHPTCUjErVkfhW
nA9yfoBPzKRpD3QRDVcvf9JhvyVHQDp8xmt7jgVFKBfoJ6YDSlrtWI3L7VmONXvP
smCITQLwEL6z8nbgq0n2UjR9b7jGkL+/dZAYxXy1xfAIHhbzmbQDl5Z/Mt5HkCKR
kUYp9dR6ogBXQPDpBZ4lWYiOlTCbThGC7Ib24lWfPRDxKiYdZDhjy3sTnjibs+dz
XA1V2ZbSXXZDLMOxthwGjt/or00Vqs+853o52uN45b0ntZMInCJ9yJmbHW47E/O/
+q80jyt4ECj3xGrUNrSpSk6VqiQOz0bsW4REbkonoOQwKGGMCQK/nw9wXFcPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbld89nhH6Uz9fR6K2yPjbPyfFqYwHwYDVR0j
BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3
Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw
MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz
MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz
MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHT5H+RDHucwZkLbpXf416dupKtqMfXm6OmA
vN67QjPSPCa6zG+8vSEFr0WGQDnPqoPBYiNLVDULc0gpzMcSQ85rdzcw/XEAhSjC
6IZH3cVPwhqs7IWcsihFiIyacv/2i5RPSHwo7pMK/+mvH/l7wiAA4TVrfHDgf5uF
ek3Uw3oMVmVDHr7d3Tn8OpOyJzxmJE58nKy4nax5owOi04413xYYHWWtm6AnEReU
qoLhBaqmp6mE+bA76N7YL/UH/tSmME9HLXRxSDMQk4M/j4E2N4d7cbSqckC6fbQF
cHYrrdOlK2bU70RIaZhQVORIu5+kwdf1QL3L/IW0EHOKVtnYUjw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:32 2026 by rpki-client