Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
File:                     0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft (raw, json)
Hash identifier:          FS7EzhGDZfGzhjNgIzfXhBuOe3YEfjV5IQGjlUte4mI=
Subject key identifier:   61:38:67:9B:E2:34:82:73:9E:82:59:5F:E8:1E:57:9B:37:BD:4B:C9
Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD
Certificate issuer:       /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD
Certificate serial:       5B2D8CA5211A68CC12901E56C39DB9DE11252204
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
Manifest number:          F3
Signing time:             Sat 07 Mar 2026 12:31:17 +0000
Manifest this update:     Sat 07 Mar 2026 12:26:17 +0000
Manifest next update:     Wed 11 Mar 2026 00:17:17 +0000
Files and hashes:         1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: ksjiqtTAWCgIRtUjPZtNzrKoQay+iOF9ttjO6dpoPs4=)
                          2: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl (hash: DD8HUr1SkkhRBgv6erKmP+btuEO9p30yAxnZoCOt5BM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl
                          rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 08:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2d:8c:a5:21:1a:68:cc:12:90:1e:56:c3:9d:b9:de:11:25:22:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD
        Validity
            Not Before: Mar  7 12:26:17 2026 GMT
            Not After : Mar 11 00:17:17 2026 GMT
        Subject: CN=6138679BE23482739E82595FE81E579B37BD4BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:21:1c:05:2d:4a:6b:1a:ed:13:17:63:61:33:
                    89:e0:d1:f9:4e:89:c2:f3:a3:66:7c:10:fd:e8:ff:
                    f6:7c:c1:87:10:15:be:ab:3e:03:ac:98:94:ce:75:
                    c3:5f:ad:0f:79:11:86:0f:ee:9e:b1:02:27:9a:c0:
                    e3:f8:ec:4c:97:ed:60:94:72:34:fb:c9:14:ed:3e:
                    dc:25:7a:ff:50:3e:29:8b:22:73:76:ef:9e:24:ae:
                    23:0f:47:5f:6b:84:55:d8:2e:24:59:34:85:c7:ff:
                    6a:4a:6f:f8:f4:03:aa:33:5e:6a:83:de:c7:88:08:
                    67:85:1c:e1:3c:bb:d0:bd:c5:00:9c:bf:20:8f:e2:
                    df:ec:a3:fc:28:6b:85:5d:e4:26:94:55:27:03:30:
                    77:30:22:3c:7d:5a:94:4d:4e:02:7c:e1:33:6f:49:
                    f6:55:de:b9:ef:40:69:c4:1a:0a:68:a3:9a:5c:95:
                    cf:2b:08:ad:65:1c:63:4b:7f:f9:1f:79:69:dd:77:
                    d4:5d:6e:4e:68:80:27:c8:c6:bd:e6:f2:5a:17:ef:
                    4c:c4:c7:79:84:b5:9f:65:68:43:6f:16:9a:1f:5a:
                    e8:8a:83:d2:8b:71:d3:fd:79:73:67:ff:31:77:b0:
                    c8:04:77:2e:33:ad:c9:ca:f6:43:9b:12:e5:45:4d:
                    1e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:38:67:9B:E2:34:82:73:9E:82:59:5F:E8:1E:57:9B:37:BD:4B:C9
            X509v3 Authority Key Identifier:
                keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ec:75:5b:d7:4a:6d:1b:c5:19:60:58:03:38:11:73:23:01:
         fb:08:96:55:0a:7f:ae:a8:72:b8:62:a1:85:bb:4a:52:c6:7f:
         10:14:44:35:2d:f3:48:80:de:a4:f7:27:ed:e8:c3:b6:a1:41:
         d9:15:19:4c:e9:e7:39:d1:7c:3c:45:de:94:69:c9:d5:0a:bc:
         2d:36:e3:41:e1:49:6f:6b:bd:9f:9c:14:21:ca:a7:21:c8:9f:
         65:cb:94:42:04:4c:a4:08:cb:07:24:29:52:55:b2:ee:27:6f:
         31:e4:60:a6:36:a9:7b:8f:5a:76:11:f3:8e:62:9d:da:b5:f2:
         b5:81:27:04:77:b7:52:30:1f:54:0c:68:00:05:86:16:86:0e:
         65:96:e4:82:2f:42:5d:84:14:6d:f0:4e:22:15:df:ec:50:dd:
         97:d5:d0:54:a0:36:bd:d5:be:4a:67:ea:7c:66:13:a1:bf:b7:
         f1:1f:88:2a:d0:85:11:70:ae:b1:75:10:1b:d9:ce:6e:54:4c:
         e3:4b:0d:99:6d:4a:d3:e6:9b:01:6b:1c:3e:79:ae:6f:ab:24:
         3d:86:d0:a0:db:7f:48:eb:2b:28:e4:b9:df:b2:67:af:69:ad:
         e6:7c:96:c2:38:75:00:33:5c:ac:a8:59:e5:09:4d:74:7b:5e:
         c1:51:0d:43
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWy2MpSEaaMwSkB5Ww5253hElIgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4
M0ZCN0RDRDAeFw0yNjAzMDcxMjI2MTdaFw0yNjAzMTEwMDE3MTdaMDMxMTAvBgNV
BAMTKDYxMzg2NzlCRTIzNDgyNzM5RTgyNTk1RkU4MUU1NzlCMzdCRDRCQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IRwFLUprGu0TF2NhM4ng0flO
icLzo2Z8EP3o//Z8wYcQFb6rPgOsmJTOdcNfrQ95EYYP7p6xAieawOP47EyX7WCU
cjT7yRTtPtwlev9QPimLInN2754kriMPR19rhFXYLiRZNIXH/2pKb/j0A6ozXmqD
3seICGeFHOE8u9C9xQCcvyCP4t/so/woa4Vd5CaUVScDMHcwIjx9WpRNTgJ84TNv
SfZV3rnvQGnEGgpoo5pclc8rCK1lHGNLf/kfeWndd9Rdbk5ogCfIxr3m8loX70zE
x3mEtZ9laENvFpofWuiKg9KLcdP9eXNn/zF3sMgEdy4zrcnK9kObEuVFTR75AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYThnm+I0gnOegllf6B5Xmze9S8kwHwYDVR0j
BBgwFoAUDB++gPIesmaGl4s+dpSFwIP7fc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
MzQ2YzBlMi04MTk0LTQwMjQtYmNiMy1kMDI5NTZjZTNhOTkvMC8wQzFGQkU4MEYy
MUVCMjY2ODY5NzhCM0U3Njk0ODVDMDgzRkI3RENELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4M0ZC
N0RDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0NmMwZTItODE5NC00MDI0LWJj
YjMtZDAyOTU2Y2UzYTk5LzAvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1
QzA4M0ZCN0RDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFPsdVvXSm0bxRlgWAM4EXMjAfsIllUKf66o
crhioYW7SlLGfxAURDUt80iA3qT3J+3ow7ahQdkVGUzp5znRfDxF3pRpydUKvC02
40HhSW9rvZ+cFCHKpyHIn2XLlEIETKQIywckKVJVsu4nbzHkYKY2qXuPWnYR845i
ndq18rWBJwR3t1IwH1QMaAAFhhaGDmWW5IIvQl2EFG3wTiIV3+xQ3ZfV0FSgNr3V
vkpn6nxmE6G/t/EfiCrQhRFwrrF1EBvZzm5UTONLDZltStPmmwFrHD55rm+rJD2G
0KDbf0jrKyjkud+yZ69preZ8lsI4dQAzXKyoWeUJTXR7XsFRDUM=
-----END CERTIFICATE-----
Generated at Sat Mar 7 19:38:25 2026 by rpki-client