Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
File:                     9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft (raw, json)
Hash identifier:          IolTkgv/iRvACwTw65no+vtg+cy8UXHgyL/lBj2DEFY=
Subject key identifier:   8B:F4:C8:61:FB:49:71:56:40:CA:C3:4C:C7:49:64:8E:9F:32:30:23
Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68
Certificate issuer:       /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768
Certificate serial:       774CDB270FF3F5F7272F242C7953CAB286FB2546
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
Manifest number:          0553
Signing time:             Sat 28 Feb 2026 09:11:47 +0000
Manifest this update:     Sat 28 Feb 2026 09:06:47 +0000
Manifest next update:     Tue 03 Mar 2026 16:59:47 +0000
Files and hashes:         1: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: dkJQYTGEN+d871bmbCtyZrcgdRwxS2PuzfLsM/c0oM0=)
                          2: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 5HPmnH87KI1FMg8JnGalALCpcbOZusq5GP+rz9eFFOc=)
                          3: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: Bf7BsiVAOIoOpjZrq1myZIFa+NHL4UH0RSw6g7HOTug=)
                          4: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl (hash: kytugn/b5mPMvdYlhv5yHjcav4L4Txnq4Gih9bbeTqA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl
                          rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 16:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4c:db:27:0f:f3:f5:f7:27:2f:24:2c:79:53:ca:b2:86:fb:25:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768
        Validity
            Not Before: Feb 28 09:06:47 2026 GMT
            Not After : Mar  3 16:59:47 2026 GMT
        Subject: CN=8BF4C861FB49715640CAC34CC749648E9F323023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fb:f5:d8:2d:7c:89:b6:e5:a6:f8:4f:da:81:
                    0c:11:eb:88:24:9d:44:30:f5:84:a6:ca:4c:96:0f:
                    4b:d5:2d:4d:20:cd:69:eb:00:31:32:74:4a:96:69:
                    85:a8:ea:8c:7d:7e:3f:62:2b:f8:63:ca:e2:c2:aa:
                    57:38:ca:21:84:c1:d3:7c:15:cc:40:ce:b4:bd:89:
                    eb:c2:13:06:b8:16:27:c5:25:a3:9e:e8:e2:72:c3:
                    a0:dd:c0:e4:89:de:d9:0b:2b:c9:53:b1:ed:e6:c0:
                    ec:a2:e2:60:d6:44:f5:48:d3:41:5e:b3:f1:25:20:
                    75:69:12:38:ec:6b:04:59:c7:40:0c:67:90:7e:77:
                    df:e7:34:98:24:c5:69:cb:5b:9f:d9:5d:8b:29:6f:
                    43:8b:fd:fd:7b:fa:50:33:0a:18:9b:b5:46:db:da:
                    88:6b:95:c3:12:18:4b:38:c1:85:c8:0f:ac:62:2e:
                    79:1d:28:4b:28:9e:ed:2b:a1:bf:1a:1c:bc:64:44:
                    70:3a:ef:00:bc:e1:3d:8e:b6:ea:41:bd:e5:bd:ab:
                    4d:26:4f:33:1e:a3:d9:55:06:b5:83:19:69:e9:09:
                    b6:67:13:07:39:5f:de:eb:d1:1e:d9:01:49:38:d9:
                    98:cc:9a:70:42:92:9e:6e:7e:8f:f7:19:db:15:89:
                    d0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F4:C8:61:FB:49:71:56:40:CA:C3:4C:C7:49:64:8E:9F:32:30:23
            X509v3 Authority Key Identifier:
                keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a0:eb:e7:d1:cb:8c:f7:85:7d:91:a2:52:b5:0d:9f:d0:f2:
         ce:7d:f5:bf:80:dd:78:a8:e0:e7:15:63:4f:8b:81:7f:a1:c1:
         e0:73:25:aa:6e:a4:f7:cc:17:b7:67:65:b6:de:2a:ea:b8:d6:
         d6:e4:cc:8d:33:b0:e0:3e:25:37:6e:35:3c:b2:d6:40:10:ab:
         c5:e5:60:5d:c8:e1:c8:e6:36:b6:42:4f:79:3d:9a:cc:82:f5:
         e8:5f:57:32:51:11:71:cd:ae:1f:9e:1d:9e:6d:d5:42:42:e3:
         7b:e1:a8:9e:a4:d9:f5:dc:55:80:d8:32:68:74:4f:6d:55:d2:
         ec:6e:05:48:c4:1c:55:55:73:98:11:e4:a7:80:3a:9b:cf:14:
         33:b3:72:63:ff:72:59:8e:18:b1:05:80:14:28:7a:44:26:fb:
         19:cf:fa:cb:44:8b:fa:15:cb:8b:4b:95:00:f4:83:07:01:67:
         69:f1:2d:ec:9e:8b:7f:ea:3f:be:d3:27:38:ff:b0:3d:47:f6:
         00:e8:81:8b:dc:b1:f6:ab:6a:32:ef:2b:00:fd:3d:96:f8:16:
         4e:6c:ba:ea:0c:f4:16:bd:53:32:b5:90:dc:7f:9c:ff:aa:e3:
         0e:ae:01:7f:3b:d2:7b:e7:d7:3f:96:3f:73:15:14:4c:6f:d6:
         19:a3:a3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:32 2026 by rpki-client