Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft
File:                     16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json)
Hash identifier:          RFHvM9zowDvaa7oQtvod9t7NzA55YEKFRYzMLib4Aqs=
Subject key identifier:   BF:97:51:3B:96:CD:0A:1F:CC:C8:F0:1D:90:72:66:DE:29:1C:79:D8
Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89
Certificate issuer:       /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89
Certificate serial:       4C43F4D40A6E8BE2093B5D98874D6A3F681A343E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft
Manifest number:          C9
Signing time:             Sat 07 Mar 2026 04:41:19 +0000
Manifest this update:     Sat 07 Mar 2026 04:36:19 +0000
Manifest next update:     Tue 10 Mar 2026 08:11:19 +0000
Files and hashes:         1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: BLy2IIO/t25gzHYkfmO4RMXFqI37JzfK6VfmCeQNaI4=)
                          2: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: W0fyzmcSP0llENMUbIZVCAnLxhaz5W96u4GfAZFQN98=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl
                          rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 08:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:43:f4:d4:0a:6e:8b:e2:09:3b:5d:98:87:4d:6a:3f:68:1a:34:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89
        Validity
            Not Before: Mar  7 04:36:19 2026 GMT
            Not After : Mar 10 08:11:19 2026 GMT
        Subject: CN=BF97513B96CD0A1FCCC8F01D907266DE291C79D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:bc:6a:3d:66:4b:e9:64:28:b8:f3:7f:71:
                    37:2d:3d:78:c7:84:50:cf:62:45:37:a4:8e:8d:1d:
                    dd:9c:f6:5c:9a:44:67:de:57:94:10:7a:bb:6d:2f:
                    d9:f8:b2:b6:0d:9b:26:28:4a:08:4e:45:d8:30:72:
                    8a:6e:d8:58:0e:10:71:22:bd:05:3f:d0:c8:f3:8b:
                    8a:d4:5f:95:35:92:b2:fb:53:3f:42:03:96:5a:95:
                    e1:71:32:ea:a4:74:2c:61:7a:fb:b1:10:02:c6:3f:
                    75:4c:c1:e0:74:58:70:2a:9f:e2:12:13:94:ca:08:
                    0a:74:43:be:19:fb:8a:78:bf:20:59:3e:2d:2f:fa:
                    27:08:82:1e:53:ce:42:31:a2:13:6a:a9:63:80:0f:
                    46:89:f6:44:8c:1b:9b:35:bd:84:54:10:14:90:57:
                    7d:d6:7e:1a:04:8a:da:d2:14:57:9b:06:88:48:fa:
                    ac:5e:eb:96:07:fc:ff:3c:53:be:fe:c3:60:d7:c2:
                    2a:98:96:1a:be:c5:b0:65:43:39:00:dc:00:eb:64:
                    5e:fb:a7:fe:ec:5d:6b:4c:be:1b:10:e9:a3:ec:ea:
                    ff:92:ef:92:f9:9a:36:34:7e:d4:c1:0c:a2:83:67:
                    f3:97:99:aa:7a:ff:7f:ed:1e:7f:1b:bc:40:c1:05:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:97:51:3B:96:CD:0A:1F:CC:C8:F0:1D:90:72:66:DE:29:1C:79:D8
            X509v3 Authority Key Identifier:
                keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:62:26:6a:0a:47:f2:5e:77:35:0a:f3:ef:1b:83:71:a2:c9:
         b2:2e:94:aa:d7:9c:4f:d9:e6:8a:ae:3d:85:4d:a0:7f:27:05:
         a6:d0:d8:7a:a1:16:29:9f:a1:9f:52:6f:b8:16:04:7d:f6:aa:
         73:0b:55:12:72:ab:cb:d3:85:d2:77:43:3c:7d:01:82:c5:bf:
         68:48:dd:0c:89:d6:56:3b:03:90:d9:5c:2c:82:3a:68:19:de:
         2c:5a:46:dd:77:73:14:aa:4a:21:7b:23:00:bc:1a:39:6e:17:
         26:34:57:37:9b:f0:c5:e4:d5:fd:8a:aa:64:00:9c:f2:8e:6d:
         e5:67:5b:01:f7:e5:18:a0:d6:06:24:dc:c9:7a:33:cf:93:89:
         3c:c7:0b:aa:68:03:c2:c7:7c:ca:2d:45:21:68:8a:ab:54:bf:
         df:8b:eb:e5:a0:82:89:13:68:d8:56:e9:39:a1:e1:36:2d:ed:
         9a:90:e5:e9:cb:88:6a:af:d2:a3:0c:07:9b:c4:34:18:42:88:
         7a:a7:25:60:3e:b8:29:0e:94:ab:93:ea:fa:0f:80:47:d2:48:
         0f:cc:76:ec:86:47:ed:f7:b6:dd:c7:2d:d2:1e:85:fb:b1:2e:
         1d:90:34:0a:72:91:ab:e9:9e:a3:71:88:27:db:b3:db:3c:1b:
         17:54:2e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:49:04 2026 by rpki-client