Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft
File:                     6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft (raw, json)
Hash identifier:          NgfGFwPFSNgENOTtT0tw/Ecy+O1jh3ukNFNdwdlZvIs=
Subject key identifier:   DD:4F:93:A8:8D:D7:EA:7C:04:19:E7:2D:84:15:0F:2E:B9:F0:09:E3
Authority key identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95
Certificate issuer:       /CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95
Certificate serial:       6BCB9C8C83FD0BCF16770C1CD64807ACADB2204A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft
Manifest number:          055F
Signing time:             Thu 26 Mar 2026 03:22:49 +0000
Manifest this update:     Thu 26 Mar 2026 03:17:49 +0000
Manifest next update:     Sun 29 Mar 2026 08:20:49 +0000
Files and hashes:         1: 3130332e3130352e3235322e302f32322d3234203d3e20313336383835.roa (hash: 78aRtA03tdL6oV14dW3aN00qRLjvVDFQ6jhLRcjVdxc=)
                          2: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl (hash: nYW/7H3U4UghV7+GJkFJBP/3qAighvyacTD1jcosDNg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl
                          rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 08:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:cb:9c:8c:83:fd:0b:cf:16:77:0c:1c:d6:48:07:ac:ad:b2:20:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95
        Validity
            Not Before: Mar 26 03:17:49 2026 GMT
            Not After : Mar 29 08:20:49 2026 GMT
        Subject: CN=DD4F93A88DD7EA7C0419E72D84150F2EB9F009E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:81:f9:1a:c2:a6:65:ac:ad:08:db:a9:c8:95:
                    41:f1:2a:02:bf:8f:a8:2f:e1:f5:4f:81:31:15:ed:
                    0b:92:a6:a0:eb:b7:8f:79:7f:20:4a:84:24:d3:eb:
                    96:22:3e:84:56:f1:d0:2f:90:87:39:ad:5f:e3:25:
                    24:c2:68:ff:28:44:f6:85:38:87:69:61:9a:96:0e:
                    63:9e:28:84:f0:0f:f5:9b:21:0d:55:40:ea:a6:77:
                    e3:68:b9:3c:95:72:d5:41:4a:21:10:69:db:72:5a:
                    ac:d2:85:c0:08:5d:06:49:c6:5b:3d:21:71:44:89:
                    9b:44:c8:a1:e6:e6:dc:3b:07:b7:e9:bc:a0:9c:2d:
                    a1:f1:76:15:7a:dc:77:8f:00:81:36:20:da:4c:6a:
                    15:74:eb:bd:34:29:24:c7:72:1e:65:9d:2d:9a:32:
                    85:f6:2c:20:06:cf:22:c8:44:59:13:fc:12:b5:bb:
                    26:9f:91:47:ab:1e:be:87:3a:51:01:b8:9b:fc:9e:
                    b5:38:d3:77:67:f3:22:9b:f0:27:96:52:24:88:3f:
                    82:b3:33:fc:4c:c1:5a:dc:09:70:b6:cc:2b:a1:ac:
                    f9:a5:b4:58:b5:c9:d3:4d:ef:ad:df:fc:85:39:dd:
                    c7:04:1f:f0:06:30:51:7f:9f:1a:89:ae:53:1e:94:
                    56:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4F:93:A8:8D:D7:EA:7C:04:19:E7:2D:84:15:0F:2E:B9:F0:09:E3
            X509v3 Authority Key Identifier:
                keyid:6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:27:7d:a9:6b:5e:97:3f:c9:9a:ad:a2:ae:dd:cb:09:07:38:
         1e:c4:a8:86:c2:d1:95:9b:e0:2a:04:cb:cc:f1:4e:07:00:28:
         fa:f1:1d:b4:e7:1a:56:c2:8c:10:ea:48:a4:32:59:57:25:80:
         d9:6f:43:82:81:87:3a:b9:d5:8e:da:94:5a:57:8d:53:3d:53:
         57:14:77:61:ad:56:97:eb:ec:bd:f4:e2:c6:78:5f:4f:77:04:
         ff:c6:d5:27:fd:0c:7e:30:aa:62:8c:84:0c:06:f3:09:81:a8:
         e4:5d:76:22:95:e8:8f:1e:c8:59:21:3f:f0:83:83:4a:36:86:
         73:3d:59:5e:f7:db:4f:0a:60:bc:b6:25:35:61:a7:33:58:93:
         d2:35:00:a8:b2:f2:b9:69:54:c4:a1:8d:99:da:2e:0c:85:2d:
         45:d4:d1:d4:79:51:c6:0d:d6:a7:98:21:91:f6:11:74:fd:32:
         b3:32:8f:10:50:50:38:57:4a:81:b3:25:1b:fa:de:56:0e:59:
         cc:9a:d1:50:2d:48:a2:0c:ea:81:38:49:f8:b4:d9:79:92:0d:
         ec:17:3b:3c:5a:8e:f2:73:a2:50:6f:7d:cf:f8:21:fa:7d:0d:
         ca:b1:da:9f:26:19:a0:84:04:c6:dc:ef:a8:ac:60:6c:a4:a3:
         9e:be:65:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:12:52 2026 by rpki-client