Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
File:                     9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft (raw, json)
Hash identifier:          pSblaJbBRKjXy5Gij2w5LGO7K1bmFiOOl1DpwK04DVY=
Subject key identifier:   B7:CD:65:5E:E3:30:67:4E:F1:F4:08:E9:90:85:FF:A6:E3:9A:9F:31
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       656D2EC931433AF36370A94B8D62A8C9D8B0C80B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
Manifest number:          055D
Signing time:             Tue 24 Mar 2026 11:02:05 +0000
Manifest this update:     Tue 24 Mar 2026 10:57:05 +0000
Manifest next update:     Fri 27 Mar 2026 14:36:05 +0000
Files and hashes:         1: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: puA8mGw1TnOQCrFl0iIg04HJ41wfz+xZ95LuowhMI30=)
                          2: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: EK9rY9vWtmYUd01V3dBua2aCRXikcRS54y0+DlHE8Ko=)
                          3: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: aVpC1UpUq5xM3EjtXbH8DkIG+zAdeuUyTigDv05h9yc=)
                          4: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: t7w75yjsYibdXaLt3vYd+nK8iJahfzez7vWvTqDQHwA=)
                          5: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: JEDVGjWCNlyZky1kCfxZHNHeqn82swpdHlq9u9cjPE8=)
                          6: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: G3k2TGIZtD0G6kIsLYuxmLupEQGsTsKhUmFGnPgDNkk=)
                          7: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tWUdaCi6USMMsgIMwxNhIvyYJg4UE5mGg0yF8mZruBw=)
                          8: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: 0v8AgN7r/4c1TsSHnJh2jh4MvGOfXWjrDArdHCr4Jyk=)
                          9: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: ZIgEMhAvryXvDTGrETcZ8TflN3USBddmvWjLfCuExYA=)
                          10: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: 8NWlJt4CJ8mG05Kksh2s5LLd0tjsRxbEV7dAV2EGZp0=)
                          11: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl (hash: TtljGbjZ9788D8Ol0auAFEh5PRvYN52hEpaU3I1zZFg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 14:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6d:2e:c9:31:43:3a:f3:63:70:a9:4b:8d:62:a8:c9:d8:b0:c8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Mar 24 10:57:05 2026 GMT
            Not After : Mar 27 14:36:05 2026 GMT
        Subject: CN=B7CD655EE330674EF1F408E99085FFA6E39A9F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c3:15:ba:70:1a:4c:13:ec:c7:de:ab:b1:c0:
                    f1:69:30:06:f3:6b:50:7b:20:67:ac:ab:ca:c5:15:
                    4a:2e:7f:bc:7c:1a:48:82:91:8a:c7:8d:5d:ca:58:
                    ed:90:7c:39:92:8e:0f:b3:dd:f1:eb:85:f1:43:a8:
                    da:0d:48:a7:30:eb:8c:cf:6a:4f:97:18:80:e9:b1:
                    c3:32:7f:79:da:e4:34:a2:05:05:38:3b:f9:c5:dd:
                    c3:a3:15:14:57:34:4e:8a:82:90:d0:62:1a:1c:29:
                    34:f3:cd:5d:4f:8b:1c:60:67:b7:e7:f6:0f:6a:9e:
                    89:3d:37:04:a5:96:9b:dd:43:3a:88:f2:d9:45:c9:
                    d9:30:67:0f:64:1a:ea:55:91:3e:58:b9:82:4c:92:
                    7a:a1:18:0c:8e:10:46:6b:a6:5e:96:86:b6:aa:1a:
                    5c:59:24:a3:e3:1c:e1:d1:37:ef:ed:8e:9b:4c:82:
                    07:6c:5b:5b:22:c7:83:3b:14:8c:e7:25:1b:94:51:
                    28:bd:cd:be:66:9c:3a:fd:ed:f1:cb:86:70:5c:e6:
                    7d:2a:b3:3b:ac:3d:b5:4e:40:68:28:e2:d1:65:c4:
                    ae:d1:e3:5f:7d:34:4c:00:51:81:90:86:d3:7f:ae:
                    7b:d8:1a:65:59:2d:7b:e5:47:f7:27:a0:fe:89:9e:
                    cf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CD:65:5E:E3:30:67:4E:F1:F4:08:E9:90:85:FF:A6:E3:9A:9F:31
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f9:fd:7f:75:c4:bd:68:64:bd:66:4c:7e:59:67:79:a0:4f:
         87:bb:ce:cd:88:c0:e4:8c:8d:e7:e1:9e:e3:58:72:72:85:27:
         3c:f5:b1:69:c0:80:ec:8f:85:3a:44:e4:d2:e6:88:63:ec:05:
         d9:30:97:fb:01:8b:6e:e1:02:c7:a3:34:17:b1:24:49:61:8b:
         62:86:8e:49:dd:b9:55:ea:da:ac:70:5c:5e:53:aa:82:67:c0:
         44:0c:22:b4:99:a7:f4:07:dd:bc:0e:da:f9:f9:0f:24:40:18:
         64:cf:c4:a7:f0:4b:1f:d5:35:b7:c3:2f:8b:3d:06:60:0a:a4:
         9d:ca:89:f9:e1:57:d5:0d:c0:ad:9f:a5:ee:ec:12:3c:2e:85:
         8c:15:5d:47:67:10:b0:2d:30:bc:b1:7a:4d:7e:68:e7:8e:3d:
         42:7f:64:6d:ac:9e:63:37:b0:39:c3:21:0f:ac:af:ec:45:30:
         d1:0e:72:06:89:ac:66:98:08:fe:ef:5f:e1:a1:00:43:04:88:
         db:da:bd:74:a6:7e:bd:e8:91:59:b4:c2:0b:f5:20:cb:67:f2:
         bd:4c:8a:bf:7b:03:a7:84:03:b9:1d:a7:7b:04:a5:05:93:a4:
         e2:91:e2:62:4d:65:97:c1:37:15:14:f6:46:3e:6e:86:8b:e3:
         68:2b:3f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:37:13 2026 by rpki-client