Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft
File:                     26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft (raw, json)
Hash identifier:          rxwq/KObsh7vvz/1MGyWQt7MX7ukUU+Ipgm8eNANBjo=
Subject key identifier:   CC:7A:D1:6E:37:E7:CB:46:BB:40:05:2C:76:69:01:A4:8B:04:7D:48
Authority key identifier: 26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F
Certificate issuer:       /CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F
Certificate serial:       20FF1B42EBEFDE6612088AC90E2D476521645CB8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft
Manifest number:          0260
Signing time:             Tue 28 Oct 2025 19:10:40 +0000
Manifest this update:     Tue 28 Oct 2025 19:05:40 +0000
Manifest next update:     Fri 31 Oct 2025 21:33:40 +0000
Files and hashes:         1: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: iq5IAgV/ZMFtmge6dr231dN4pxG0uQlklK/RGgI/gfc=)
                          2: 26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl (hash: F5k42hKJZYKPzeZP2Cldm/ucj0J3EUPYgBzb8dPtjTA=)
                          3: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: 9Y+dv1ubLJjpj3Eq8ePmSnjNO3gF9XEsyFx3D6UDQmg=)
                          4: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: D79Y8BsRJ6VHRaHIcDQn8DwQcFro3NZoMHr7zu28hbo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl
                          rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Oct 2025 21:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ff:1b:42:eb:ef:de:66:12:08:8a:c9:0e:2d:47:65:21:64:5c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F
        Validity
            Not Before: Oct 28 19:05:40 2025 GMT
            Not After : Oct 31 21:33:40 2025 GMT
        Subject: CN=CC7AD16E37E7CB46BB40052C766901A48B047D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:cc:f1:75:dc:a6:62:36:b6:46:6b:39:b9:b4:
                    18:22:95:fe:84:63:14:78:d0:07:fe:66:8b:be:0b:
                    fe:75:46:87:ac:fb:2a:39:dd:63:b5:87:f0:36:28:
                    4d:ac:c7:4e:8f:16:5a:3e:0e:2e:aa:cb:99:c7:9f:
                    b4:d7:dd:e6:04:f1:18:4e:30:d6:df:6b:28:6e:9c:
                    ee:3c:d5:10:cd:65:51:00:2a:6a:21:ed:68:f9:23:
                    9c:31:54:6b:c3:da:b0:e9:12:6a:28:b8:85:42:97:
                    e3:94:aa:8f:84:44:d9:b0:86:22:a8:1b:53:9e:b5:
                    37:08:79:52:9b:55:65:f1:3d:7b:a9:07:30:23:95:
                    d6:42:14:da:48:9a:a8:78:42:c0:f3:0b:6b:38:8c:
                    24:1d:0f:42:f2:77:71:e7:33:ce:b9:53:5e:d1:c5:
                    e2:1f:fa:1d:67:74:94:f6:4a:da:99:fb:11:0e:ef:
                    0e:c1:4f:e3:e6:f1:87:45:b9:b7:2b:8b:a1:d1:d5:
                    88:b9:10:e0:48:52:92:52:3f:02:61:73:47:d0:f8:
                    03:64:30:92:fd:41:85:91:50:99:41:11:d5:67:63:
                    92:cc:0d:b7:99:1f:d2:b0:ab:ef:d3:12:ef:0b:4e:
                    be:e9:b0:ce:7b:dd:71:cd:70:76:ba:90:e9:ad:19:
                    42:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7A:D1:6E:37:E7:CB:46:BB:40:05:2C:76:69:01:A4:8B:04:7D:48
            X509v3 Authority Key Identifier:
                keyid:26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:3e:bb:b7:e1:5d:90:38:fb:01:b4:cb:58:02:21:fa:9e:0c:
         5a:8c:4e:8e:9f:37:41:6b:36:2e:b5:7e:b6:95:9b:43:ec:d9:
         27:0b:b5:a3:8c:3f:f0:97:04:b6:5e:b5:05:7b:84:e9:1b:bb:
         d0:e3:56:31:e3:70:1f:b2:d6:14:ba:9a:e0:52:6b:02:cf:46:
         d6:60:1d:75:82:48:b2:66:83:55:92:d1:c3:fe:aa:f2:e5:c6:
         18:2f:00:f9:8e:39:94:cb:64:51:08:0b:d0:90:e7:fb:b2:50:
         31:56:bc:2a:2a:7a:3e:fe:ae:72:58:fe:2d:72:e5:4d:fe:ee:
         98:66:d4:c3:91:d0:d7:f2:85:3c:0b:ef:84:17:0a:06:49:c9:
         55:df:e4:47:89:af:40:e0:8d:8c:5d:86:de:53:4a:ad:d6:ab:
         27:9e:2d:e6:99:13:3b:13:10:f2:dc:19:46:67:e2:50:f0:37:
         ea:60:9e:6d:71:85:14:00:35:bd:89:b3:d9:ea:01:84:74:6a:
         cb:52:a8:d3:cd:96:da:22:9b:ba:63:2b:2f:2b:90:81:1d:89:
         85:11:ab:b2:eb:66:e3:67:75:78:f1:cd:c1:8b:1b:a8:a9:74:
         1a:35:58:03:28:1a:73:30:06:1e:0c:d2:7f:c7:e4:19:52:2b:
         97:78:34:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 14:55:33 2025 by rpki-client