Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
File:                     C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft (raw, json)
Hash identifier:          WCa++RJO6Ywluov99cW0qFLZ7guJqGIzCyTZKskSe0k=
Subject key identifier:   58:BA:2D:69:3C:90:F6:A8:0A:5A:1F:48:03:21:26:15:51:60:B2:50
Authority key identifier: C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7
Certificate issuer:       /CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7
Certificate serial:       775BA9246409C43C15FB6A0280DBBF1FC992811A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
Manifest number:          055C
Signing time:             Tue 24 Mar 2026 09:44:10 +0000
Manifest this update:     Tue 24 Mar 2026 09:39:10 +0000
Manifest next update:     Fri 27 Mar 2026 17:14:10 +0000
Files and hashes:         1: C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl (hash: NcyH5JXWrqPwLjCnQF51RauDNIRUqfKTG65r/2OgeLQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl
                          rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 17:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5b:a9:24:64:09:c4:3c:15:fb:6a:02:80:db:bf:1f:c9:92:81:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7
        Validity
            Not Before: Mar 24 09:39:10 2026 GMT
            Not After : Mar 27 17:14:10 2026 GMT
        Subject: CN=58BA2D693C90F6A80A5A1F48032126155160B250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:51:16:39:c7:ba:5f:e4:00:2d:ab:fe:e6:
                    17:44:cb:12:36:4a:92:40:1c:ea:99:77:52:35:82:
                    96:36:a4:d6:1d:df:cc:d5:c4:a1:b6:fa:a5:1f:43:
                    a4:4d:2d:4d:39:9f:9d:49:b7:f1:92:6c:8a:62:3a:
                    ee:bc:2b:2e:1f:56:ac:b4:8d:d0:3d:51:52:c7:9f:
                    24:83:79:cb:be:81:c1:3c:53:4b:98:42:a2:8d:b6:
                    76:92:05:f4:0e:86:c8:5b:d1:a3:89:d5:72:75:fd:
                    42:d6:8a:1e:6f:a5:6d:9d:ff:d0:cb:d3:e0:a5:22:
                    33:6a:d6:ef:ee:2a:a5:69:9a:e9:64:ed:09:f5:0e:
                    3b:cc:91:1c:40:9c:42:28:fd:1c:a6:36:69:8a:a3:
                    1b:15:ce:15:5f:7d:c9:00:10:ea:67:ad:3e:ae:17:
                    86:6e:9a:97:41:90:fe:d3:08:b8:85:02:8a:a9:81:
                    74:8f:cd:a8:48:41:39:0c:92:89:97:39:36:07:85:
                    40:6f:cc:b6:5d:af:c4:60:21:62:1a:77:f7:5f:d5:
                    2a:01:ce:ee:da:02:2c:6f:49:01:4b:ed:8e:7e:5d:
                    29:16:e0:74:47:eb:cf:3a:75:24:11:aa:a3:1f:87:
                    ff:e7:15:a8:53:fa:16:43:23:40:7c:13:76:c8:35:
                    14:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BA:2D:69:3C:90:F6:A8:0A:5A:1F:48:03:21:26:15:51:60:B2:50
            X509v3 Authority Key Identifier:
                keyid:C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:fd:c4:3f:11:69:ae:88:36:13:31:c3:49:a6:09:60:e0:4c:
         b1:c6:18:fd:e2:cb:78:8e:9f:d2:d1:67:68:44:f2:8d:1a:bb:
         79:e5:7a:0f:20:ef:27:0f:84:4a:30:00:58:7b:d1:37:88:2d:
         4c:6e:ca:dc:c6:f2:49:f7:a1:c2:f0:cd:ab:7f:40:1f:74:32:
         5a:c0:f8:ed:c6:53:d3:84:e7:54:61:47:ed:66:76:85:52:dc:
         b6:c7:e6:6f:d2:c0:42:4e:cd:b5:00:85:94:7e:c7:40:ab:46:
         f2:09:ff:b2:48:f8:f7:1e:bc:a3:85:ff:c3:7e:b0:b9:e0:ab:
         4d:36:e9:3a:f9:ca:79:77:5c:11:27:8e:6f:9e:1f:b4:2d:23:
         eb:5e:66:d2:5b:11:fa:61:99:e8:3d:67:30:2e:b1:61:39:b7:
         57:16:38:a5:0a:33:4e:86:ef:b5:c4:1a:03:e9:d9:e6:f4:02:
         47:21:6b:6c:bc:47:97:97:b6:30:f6:a6:b9:85:eb:f8:eb:c6:
         00:f8:1e:25:77:8e:44:7c:ec:24:27:65:0b:4e:cb:9f:8b:76:
         cf:3d:57:17:e5:1a:25:39:ac:87:e8:4a:e2:bb:fe:b2:51:9c:
         04:ee:52:76:65:8e:8e:1d:0f:71:b2:70:ac:d3:89:75:8d:a4:
         dc:bd:8e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:58 2026 by rpki-client