Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
File:                     07D6388316655597AEA703AEBFDD2869F80A8984.mft (raw, json)
Hash identifier:          4NsQ2c91xKI2uZAaVEOwEB40sBDXHDoWGQz4nUL6KyU=
Subject key identifier:   50:5C:91:82:AD:28:B0:01:B1:DF:E2:F7:97:2E:7B:E1:39:53:9D:4F
Authority key identifier: 07:D6:38:83:16:65:55:97:AE:A7:03:AE:BF:DD:28:69:F8:0A:89:84
Certificate issuer:       /CN=07D6388316655597AEA703AEBFDD2869F80A8984
Certificate serial:       2E05B23BCAB1BF70CD26B7AB8C024E32C2000538
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
Manifest number:          033C
Signing time:             Sun 01 Mar 2026 11:13:04 +0000
Manifest this update:     Sun 01 Mar 2026 11:08:04 +0000
Manifest next update:     Wed 04 Mar 2026 14:46:04 +0000
Files and hashes:         1: 3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa (hash: Dk+kadZF8jy8Jr2gvM5PjhVeLC3W+zlB4SeDi9Hh4BA=)
                          2: 07D6388316655597AEA703AEBFDD2869F80A8984.crl (hash: XvudsJ65Sz+qPoabS8oxtwRaUz34vvosAucvzW7cd9o=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.crl
                          rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 14:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:05:b2:3b:ca:b1:bf:70:cd:26:b7:ab:8c:02:4e:32:c2:00:05:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07D6388316655597AEA703AEBFDD2869F80A8984
        Validity
            Not Before: Mar  1 11:08:04 2026 GMT
            Not After : Mar  4 14:46:04 2026 GMT
        Subject: CN=505C9182AD28B001B1DFE2F7972E7BE139539D4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f3:d9:d2:2d:67:0a:c7:9a:e4:ef:97:b7:e5:
                    40:ba:2d:5f:08:40:7b:9f:a5:e4:17:12:06:9b:63:
                    6e:d2:4c:67:d9:e9:68:5c:52:4e:e6:b6:8f:67:c6:
                    55:53:db:f1:55:f8:78:fb:f2:5f:79:97:2b:d0:ac:
                    aa:bc:64:29:23:0d:75:bc:1c:83:9f:81:14:d3:96:
                    ba:99:17:bb:84:94:d2:8c:47:52:35:4b:7e:67:08:
                    82:bf:24:a8:b9:65:f7:6a:b6:d2:b0:c4:61:35:19:
                    79:ee:d3:6e:2c:32:d8:15:d9:51:02:53:40:32:54:
                    2f:80:01:64:06:69:66:59:1e:55:a6:ec:01:f5:5f:
                    78:1a:ec:23:68:08:b5:12:8c:22:52:b6:f5:60:c0:
                    02:92:65:42:e2:76:5e:c7:57:a7:c4:b1:33:25:80:
                    9b:75:b5:02:0e:4e:7a:41:1b:fa:10:9a:93:4c:06:
                    7b:18:88:f8:a5:8b:f4:80:05:2b:e2:9e:bd:e5:a0:
                    18:99:c6:41:62:33:7e:26:87:a3:c8:30:ad:00:ee:
                    61:89:2f:6e:d6:52:2d:13:6a:02:05:44:3b:b4:2b:
                    1a:25:22:81:c9:fd:6c:e9:fb:0f:52:94:01:77:e7:
                    70:10:42:32:f3:5f:0d:d5:8b:cd:fc:52:69:9f:a6:
                    38:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5C:91:82:AD:28:B0:01:B1:DF:E2:F7:97:2E:7B:E1:39:53:9D:4F
            X509v3 Authority Key Identifier:
                keyid:07:D6:38:83:16:65:55:97:AE:A7:03:AE:BF:DD:28:69:F8:0A:89:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:cc:db:e5:b4:4c:30:89:1d:27:03:e2:42:55:3a:55:eb:29:
         91:c7:8d:7f:6c:f1:f6:a0:44:c8:25:a8:ab:b0:3a:c7:c3:2b:
         b5:af:51:90:a2:c4:f9:2b:2e:e7:cc:af:3f:60:b5:ce:51:74:
         24:5a:58:4d:17:fe:e8:d9:7e:f4:68:cb:34:00:98:c8:72:bc:
         05:e8:f3:bf:f0:b3:be:b8:ea:98:8e:f6:27:53:c0:26:e3:46:
         4f:0a:0e:e5:0f:6e:54:2c:8c:ee:96:65:9a:28:5b:5d:f0:50:
         93:f5:b3:bc:4e:d2:b0:3c:f1:fc:1b:d0:75:4c:28:38:8c:20:
         0a:43:b8:2f:64:d3:d4:39:b0:6f:df:e4:ad:a3:22:88:db:83:
         3b:bc:96:ef:ac:ea:c2:a3:0d:1e:5a:bb:c5:9d:3a:46:76:02:
         19:2c:e6:90:8b:3e:44:f6:63:86:cb:8a:f6:05:55:ab:87:a9:
         57:8a:67:09:df:0d:6f:b8:ac:a0:f6:45:0a:7e:0e:12:6a:af:
         c8:7b:aa:5d:5e:2a:eb:7e:9a:9d:a9:43:7e:d7:88:5d:3e:05:
         f4:7e:cf:b8:15:e5:34:7f:07:b0:a1:4a:47:76:8b:4a:a6:a5:
         c4:0d:e2:14:5e:46:ef:c3:e5:61:9d:65:c1:6a:dc:55:fd:8a:
         c6:ce:4f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:22 2026 by rpki-client