Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
File:                     9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft (raw, json)
Hash identifier:          4RsB9aXtJiJen2vDDGtbce7IN+uTeHVGNWokCl3t7ds=
Subject key identifier:   F5:A0:C6:59:6F:61:B9:C3:23:E5:D5:A1:26:E4:87:44:ED:2A:33:E2
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       4075E8DCBB9E52F1F9DFC498294D573695D5D893
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
Manifest number:          055C
Signing time:             Wed 25 Mar 2026 18:01:59 +0000
Manifest this update:     Wed 25 Mar 2026 17:56:59 +0000
Manifest next update:     Sat 28 Mar 2026 21:59:59 +0000
Files and hashes:         1: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: AMgNEXA3HgeJ9JW4vEN8yPqkkgaxJIY9BD1424Sv1Zo=)
                          2: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: WjmWZuOqqVrHpn2Iht/6D/CnYopSoMqLYwKVON2A9VQ=)
                          3: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: kpFmjz57IgAP8PtBxnCHq8wcPp57kSPI2nlME92Fnyg=)
                          4: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: fs11mYHw0N1XTmtPs5VLrZKEd/NebYnoDSeOf+OjB1M=)
                          5: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: oTh96cvu9N7dUKNXeMRvCfiS16/pskUDIN5zzPcyPFs=)
                          6: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: pHeh4WZc6QAiJI01oIhwHizGh3B/+0TL7uxRsM4Hqog=)
                          7: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: RS9Byz+j3EdqEQMObrbAR7PmpA8rmEiuqCAVbbyaqzQ=)
                          8: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: EdvOiYuEQSs6Tte4v6yMNFw5asiVZESXMxoQoYWb3vI=)
                          9: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl (hash: z5jMKpF3jS3m+ZVjoBzznxnsBwnpx0f5sG3iDQHBrhc=)
                          10: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: lTXl5JSGNXk2H6QC/ExXfaBTFR2N2ANdTqoiPB9R7qw=)
                          11: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: fpx270ixaq11nCmgYzT3PO4j149L6mmMafh/Cax7edM=)
                          12: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: CXQZIZNdSuRyo3numXoAqSwoFv1BpTDqqmtfJIixEeM=)
                          13: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: vr66fn8B7rAPP+TZSIsfhj0n+lp991jln8PENhk4tOQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 21:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:75:e8:dc:bb:9e:52:f1:f9:df:c4:98:29:4d:57:36:95:d5:d8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Mar 25 17:56:59 2026 GMT
            Not After : Mar 28 21:59:59 2026 GMT
        Subject: CN=F5A0C6596F61B9C323E5D5A126E48744ED2A33E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:99:d9:ac:8e:1c:c4:25:16:10:7e:1a:3b:
                    c9:9f:37:00:6a:53:6d:a3:fa:5c:8f:39:ff:76:7f:
                    09:45:29:a6:07:21:c2:32:56:55:d7:26:48:44:1f:
                    ae:db:f9:00:85:f1:2b:88:3d:48:56:1d:35:3e:ca:
                    77:0d:1a:19:b4:07:e2:84:05:3a:5c:f5:d4:58:6a:
                    3e:05:34:c0:e1:92:a9:65:e4:79:15:25:f1:de:c4:
                    f3:4c:b0:e5:e5:04:95:57:2f:6e:2a:79:1e:d7:3a:
                    8e:35:2c:87:b4:a7:32:94:b3:96:6a:e7:d4:9c:a0:
                    ab:a7:34:0f:b1:54:13:76:ad:c4:6e:9f:0e:7b:a3:
                    14:c8:8d:a7:95:4f:ce:36:42:d4:51:77:94:28:ac:
                    7e:a1:01:9a:9b:0d:b5:91:f3:9d:da:a6:b8:58:cd:
                    21:74:f9:7c:01:2b:99:4f:01:08:2d:b3:aa:74:2c:
                    89:12:3b:5a:d8:ef:31:d7:82:e6:b5:78:b9:e7:92:
                    80:3a:b4:d3:a2:c2:90:90:f1:6c:b5:2b:00:42:f8:
                    46:17:e8:e2:63:7d:97:bc:3a:4a:f8:94:d7:b2:99:
                    0a:89:93:77:75:2a:b6:81:d7:3a:8a:7f:44:bf:ce:
                    79:0f:40:33:27:6b:0e:b7:67:d8:52:35:09:18:92:
                    4c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A0:C6:59:6F:61:B9:C3:23:E5:D5:A1:26:E4:87:44:ED:2A:33:E2
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d5:bb:fb:7c:3a:90:b9:cf:22:61:b2:79:e1:75:e1:bd:01:
         2c:d7:6f:7d:ef:e2:1a:2c:55:72:4f:af:38:22:98:3a:dd:eb:
         0c:45:39:a5:45:7d:85:31:29:6e:ca:6f:1c:9a:60:f4:3c:29:
         75:e1:44:e1:67:a9:50:6a:91:02:c3:cf:6d:80:59:31:94:17:
         27:b6:00:d7:d8:53:95:63:82:9a:dc:f1:4d:43:67:9f:1b:19:
         7f:0b:b5:8e:c1:9a:8c:04:83:0d:5b:26:3f:6a:f0:5e:c1:66:
         d0:20:0b:32:0f:61:bf:60:63:70:bc:c5:51:ad:90:f5:28:c2:
         2f:16:0c:69:21:d5:66:99:e2:f0:e2:70:52:c2:cf:1a:b7:93:
         f4:6a:23:73:c0:bc:bd:2b:24:62:90:2e:ba:b7:25:f6:e4:75:
         fe:68:82:08:7f:c1:31:ad:82:54:bd:fc:e0:93:42:3a:ba:93:
         96:b4:10:3a:0a:e1:e4:d4:02:ba:35:b2:7d:b0:02:be:5d:05:
         fa:00:0a:ed:5b:d4:b9:da:a8:bf:8b:53:52:db:9d:be:ab:7e:
         24:d0:4a:aa:f7:59:24:83:8a:b9:38:58:34:be:8a:0b:da:fb:
         12:76:cb:17:ea:43:9b:d9:12:79:cb:d2:d2:84:21:11:19:f8:
         ae:36:2d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:06 2026 by rpki-client