Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft
File:                     22476F90C7B08131974F5B19834906C325ABEF12.mft (raw, json)
Hash identifier:          J6esanAtiXAioR0tDUhN3a/1aG878gjBO3yQVq36Tto=
Subject key identifier:   37:16:ED:63:25:AB:BE:7A:6A:C1:CE:AC:04:2E:DD:74:A4:7A:52:2A
Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12
Certificate issuer:       /CN=22476F90C7B08131974F5B19834906C325ABEF12
Certificate serial:       0DBC9A5071B9CC70DAECF227E5300DA2482C51B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft
Manifest number:          0100
Signing time:             Thu 05 Mar 2026 06:41:41 +0000
Manifest this update:     Thu 05 Mar 2026 06:36:41 +0000
Manifest next update:     Sun 08 Mar 2026 17:02:41 +0000
Files and hashes:         1: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 4w2+kmxxLlJwHRO1aqXjBz7ml3HwCrINsFeyiZehHq0=)
                          2: 22476F90C7B08131974F5B19834906C325ABEF12.crl (hash: ELLENsRad+pb7+odNBh3EAVUAsUaY7TBiDhs7yEQIIo=)
                          3: 3136302e32352e36392e302f32342d3234203d3e20313532383430.roa (hash: ZNeRwTvPRwYBLE5sdbgUPVVh8TQyG01EFXBOC/uWJbI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl
                          rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 17:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:bc:9a:50:71:b9:cc:70:da:ec:f2:27:e5:30:0d:a2:48:2c:51:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12
        Validity
            Not Before: Mar  5 06:36:41 2026 GMT
            Not After : Mar  8 17:02:41 2026 GMT
        Subject: CN=3716ED6325ABBE7A6AC1CEAC042EDD74A47A522A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e2:66:20:ca:dd:34:61:6e:7c:e0:9d:4c:16:
                    02:0b:16:52:ef:f0:18:1e:6f:89:8f:c3:19:70:74:
                    69:98:5b:55:4c:22:5e:12:f9:fc:d2:b0:8b:3c:29:
                    ff:24:74:b8:72:46:eb:91:3f:86:c3:c3:e0:fd:93:
                    69:36:1e:56:99:fe:cb:ef:e6:4f:a2:ad:5f:ee:03:
                    55:4a:40:ab:36:5b:75:64:99:e3:db:18:41:9c:95:
                    7f:25:5b:e6:64:48:28:c2:44:78:81:66:a3:ca:b7:
                    09:fb:11:4c:39:c1:6a:84:f2:8e:e6:1b:7a:ce:45:
                    cb:a7:11:99:94:dd:3c:46:4e:6e:e3:09:40:77:c5:
                    23:f1:f0:59:cb:69:98:1e:54:3b:50:31:c6:82:de:
                    70:74:20:83:2e:48:91:91:b5:db:87:36:40:ba:04:
                    b0:39:af:34:bb:10:e4:0a:13:6d:26:ee:82:0e:e7:
                    c7:f3:11:43:2d:8c:9a:96:a2:86:74:3a:b5:80:74:
                    0f:c2:b9:80:18:37:0e:c8:78:b4:25:8d:7c:35:ba:
                    7d:07:74:ef:58:af:7a:83:84:a1:fe:a4:8e:4d:f7:
                    e7:8d:6f:38:01:c5:93:5c:67:ba:4b:25:72:dd:2f:
                    c1:78:31:37:33:0e:da:19:6b:f9:b8:36:51:e3:ce:
                    a3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:16:ED:63:25:AB:BE:7A:6A:C1:CE:AC:04:2E:DD:74:A4:7A:52:2A
            X509v3 Authority Key Identifier:
                keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:de:f6:aa:0c:86:11:b9:14:e9:55:20:7c:cb:f0:41:dc:8f:
         dc:d7:b2:8e:90:f1:16:fb:0d:9d:90:8f:8c:20:72:fc:00:8c:
         c9:30:9c:6c:3f:cc:02:b0:0c:76:56:0b:e3:24:ef:0d:fa:dc:
         e9:ce:a7:11:3b:7a:75:6a:e2:a9:74:8b:a0:77:ca:8e:a3:f0:
         07:d9:d9:cf:85:31:dd:23:62:a2:b3:e8:6c:a8:a9:d7:fd:43:
         29:52:74:4a:f2:22:7a:3f:fe:84:96:64:bc:18:ff:df:e2:87:
         0b:86:9a:3b:30:d0:a6:80:f0:44:de:48:2f:a9:0c:74:4f:01:
         ab:7a:23:60:92:5c:dd:ad:5f:63:e7:6b:c1:19:2f:5e:e5:e2:
         68:be:bd:dd:da:b3:9c:4c:5d:a1:26:12:d1:cf:0d:15:c6:6e:
         46:62:ad:79:c3:83:e4:48:dc:5d:82:13:ca:d9:a7:9e:6f:53:
         a1:49:69:89:af:cf:81:54:5b:43:04:75:e1:54:75:f7:cb:f6:
         17:ac:c4:f0:12:db:dd:ec:05:87:d3:18:51:64:30:d9:b1:db:
         c7:8c:db:46:ea:71:31:9a:32:5e:8f:65:8d:14:d1:e3:56:b2:
         7a:44:23:2f:0d:48:12:a4:6c:e4:29:ab:cd:e2:7e:d1:98:58:
         bc:40:f4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:49:19 2026 by rpki-client