Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
File:                     1F969EE9B0838D22156118A888B81BF27B859BD5.mft (raw, json)
Hash identifier:          NP2b+d/estUk6CBuyk4EzLVdim1ILk1kU8lVPGvgz/E=
Subject key identifier:   B7:0C:7B:AA:51:34:E0:04:DD:51:A6:A1:62:D8:D7:6A:C8:6C:C0:3D
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Certificate issuer:       /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial:       1E0FA7E5DBE5537D0DD3613E3E073C8CAD4865AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
Manifest number:          02B8
Signing time:             Thu 19 Mar 2026 07:42:06 +0000
Manifest this update:     Thu 19 Mar 2026 07:37:06 +0000
Manifest next update:     Sun 22 Mar 2026 10:26:06 +0000
Files and hashes:         1: 1F969EE9B0838D22156118A888B81BF27B859BD5.crl (hash: lW/jt6Bkd0gTSiHJs4iRdSaon+OvMnG+r5CfkADVOcg=)
                          2: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: i0qXLSeEhZMkdN2DfH6rqQw93/yoa+3wg07gaHoYz0k=)
                          3: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: 1S76/HrjUbBiAn5ZM34FLqmHD8p3H4UjIcnlsDjI5eo=)
                          4: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: s1oc4oY30dv4ZziJEtii0WqAjWHN4yIZ+Wcll5R6Lx0=)
                          5: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: bCrGS2h+/zPAS+2DepWngEarE7NIIMpAdATexMqAfyQ=)
                          6: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (hash: Sm/MByCUVOhu6ULq3sIzfHgpRtekl1ETdukmwPQMprw=)
                          7: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: N2Cye2k2ArU32sR4BIWlxYfXaoMWkhmX2inof4bL/qc=)
                          8: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (hash: HB4BEaVD5xfGQGvt67YetoiSjWiGFie2TAF+weL5UPc=)
                          9: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: jfT+fFK9MuHkEFZ88hcVlJwwMYmz7o5P6pVJldda2zA=)
                          10: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: 0bz9arJVEpW8niw69al2HqlLatQbtnCd6cPuE1FtiQQ=)
                          11: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: pyK+jcOUykm+t8TqsiBiASQSX3weZBQz2lnXkKpEWw8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
                          rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Mar 2026 10:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0f:a7:e5:db:e5:53:7d:0d:d3:61:3e:3e:07:3c:8c:ad:48:65:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
        Validity
            Not Before: Mar 19 07:37:06 2026 GMT
            Not After : Mar 22 10:26:06 2026 GMT
        Subject: CN=B70C7BAA5134E004DD51A6A162D8D76AC86CC03D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a8:85:f6:d4:c4:c7:d6:28:72:14:71:96:d4:
                    36:f0:bb:e0:df:89:12:d9:54:46:02:65:1d:9e:11:
                    8c:89:24:22:b8:66:72:af:dd:e8:52:94:03:1b:2c:
                    07:c7:76:c3:05:49:c5:ae:f2:ad:47:86:89:9e:ca:
                    c9:15:86:68:37:84:41:2e:70:19:02:bb:66:d5:98:
                    ba:e0:a4:b8:ac:fa:1a:9a:b7:d0:a9:3a:46:35:41:
                    4c:ba:2a:91:2c:46:12:e4:e8:07:f5:18:ef:4c:5f:
                    65:d8:1e:07:76:8a:e8:59:31:b4:1a:29:2f:15:fc:
                    3a:4c:26:e3:c0:8f:d6:02:ab:51:12:28:88:c6:e1:
                    9d:fd:2e:ab:a7:21:65:55:33:5b:fb:be:98:ee:ac:
                    6e:ab:98:30:87:78:a9:80:ff:85:1b:a8:b1:a2:49:
                    3e:16:37:b8:59:e5:57:30:ae:1a:55:97:c6:ba:78:
                    2f:6a:b5:6a:6d:3e:f0:59:29:8d:b1:e5:31:35:57:
                    db:b6:49:16:3a:c6:47:cc:a7:3c:47:c0:0f:eb:40:
                    83:38:8a:d0:50:e3:e0:66:8f:92:3f:63:9a:5b:5f:
                    d8:93:51:3a:89:c9:2f:90:ab:c1:8c:bb:e7:25:06:
                    f8:70:0e:53:61:cb:6c:23:74:20:f8:01:50:41:d2:
                    d9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0C:7B:AA:51:34:E0:04:DD:51:A6:A1:62:D8:D7:6A:C8:6C:C0:3D
            X509v3 Authority Key Identifier:
                keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:5e:a5:8a:75:29:f7:96:e3:31:8d:f6:ff:c5:29:b8:1c:03:
         d8:c2:b0:17:08:10:25:65:97:76:1d:c6:31:8d:07:84:d3:aa:
         c1:aa:ed:c9:66:b2:0b:a9:51:75:08:53:6a:c4:8b:75:99:73:
         83:09:24:29:60:41:ab:d4:6b:04:69:8a:ba:f9:ba:ba:03:6f:
         9a:3e:ee:e5:2a:90:b2:94:22:7f:87:4f:48:23:a5:68:14:12:
         bb:b4:8e:d8:eb:ab:3f:bd:89:ce:8e:14:a8:c1:0e:8d:6f:6c:
         69:5c:6a:b4:10:72:2b:f0:43:7f:e8:94:84:e0:73:c9:99:d5:
         c1:70:9e:05:a2:e1:69:d4:b2:d4:f7:63:fa:d1:3a:d2:75:b9:
         17:79:d2:74:0a:c2:d5:b6:fd:f1:f9:91:b6:1f:84:7b:e5:70:
         33:9b:1c:62:d1:a8:b9:e3:0b:f7:e6:19:4d:07:bd:8f:28:f7:
         a8:17:ee:cb:ab:be:33:25:39:c4:ca:ff:04:0d:00:3f:7d:26:
         1d:03:82:d0:72:6a:6a:b4:d1:59:12:78:26:69:9a:39:9c:1b:
         2e:48:29:65:30:ff:7d:c3:de:28:36:a5:d6:2f:7d:53:36:77:
         2c:33:20:e7:bd:b9:f8:1e:55:d0:2a:3e:f7:2e:e3:9e:21:66:
         e4:21:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:13:37 2026 by rpki-client