Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
File:                     D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft (raw, json)
Hash identifier:          B9lmgckFWua7ZpNGz0Fdckn1ev9sgCMWPNy3FhxP0bc=
Subject key identifier:   D5:36:7C:77:FC:CD:A2:FA:5E:09:4B:B7:A8:0D:DA:B2:F0:DA:A8:8D
Authority key identifier: D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B
Certificate issuer:       /CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
Certificate serial:       1C56C4ECA6FBBD94E440464DC75E0D3D53D9F8E0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
Manifest number:          01E6
Signing time:             Sun 01 Mar 2026 07:32:00 +0000
Manifest this update:     Sun 01 Mar 2026 07:27:00 +0000
Manifest next update:     Wed 04 Mar 2026 15:06:00 +0000
Files and hashes:         1: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: L4h2Wp4fQdhUrMD0z3Ssoa6P+p1dDNjkEiybK+QQebs=)
                          2: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: cN4silcvuPV22OI3IsNy5UveikGt8GvqnC8R2u5vZmI=)
                          3: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: 9Eop7Wi9KDAgTJcnqm4m9VblRXdXAgnSYGkJE3U1uCo=)
                          4: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: DZYxEEoedEoh7hUvK00A3sjPaarHyHkFwFSubpvLa90=)
                          5: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: bk766NBayeqzl2TpClpr9IhYx+ApKL2x4uzDJCxWkIk=)
                          6: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: IlfpZnqN0u5jMQ+MMy/Uh2Q/ScrlgNhJWft3oBH8Ovo=)
                          7: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: s4bQxfKSzhThJnV2s35QtgCBE4otyhr6xeMzoqnFm8Y=)
                          8: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: zofQAGzRLVSbQfa8x1HxlEvAC2rTzuC4QEGkc7xHMvw=)
                          9: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: Y4Wi8qAYZ81rv46ZtcXhKaHsjEBVaOJAYBhmKDi8JTE=)
                          10: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: WKBxmJwVLzCYBVgxt4LMTfwAcTtnh7yu4VGARK2zxgY=)
                          11: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: B48tlPMvOf7K7HzDvvhN+csuCxhTxi2XsZzldYqsXqU=)
                          12: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: XubVHR1uW/U3u8JfLGlOr8aeDpjn5EspQIPSeyKbXv4=)
                          13: D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl (hash: jokvQjsk+vJT0JtaHdp6QiMZJYpL4XHA1WzfNH6Fd1g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl
                          rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:56:c4:ec:a6:fb:bd:94:e4:40:46:4d:c7:5e:0d:3d:53:d9:f8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
        Validity
            Not Before: Mar  1 07:27:00 2026 GMT
            Not After : Mar  4 15:06:00 2026 GMT
        Subject: CN=D5367C77FCCDA2FA5E094BB7A80DDAB2F0DAA88D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:03:f4:3f:df:39:2e:06:08:48:a2:69:8b:ab:
                    d6:5f:34:d1:00:28:e7:75:41:32:dd:6e:c8:ab:96:
                    3c:ec:25:9b:0d:9b:83:1d:bc:a8:6a:63:47:92:df:
                    51:fb:54:b4:e9:37:c7:79:4b:46:07:fe:7c:8e:c1:
                    6c:c9:e4:55:fa:9d:61:73:2d:ba:b2:ef:29:da:1d:
                    0c:cb:af:a9:57:02:28:75:4f:0f:51:61:7e:12:70:
                    78:1f:69:42:00:c9:46:8f:8d:0a:31:de:27:6d:33:
                    8b:8e:f7:b0:05:75:e6:a2:76:ca:37:71:b8:ac:b1:
                    db:f4:73:37:c1:91:ea:1e:e3:fe:7e:86:98:cc:44:
                    31:c9:4a:15:e8:94:f8:28:3f:c9:84:99:e1:ca:3d:
                    74:d6:6d:fe:29:b1:b1:4e:39:75:a9:7b:a1:8d:3e:
                    5a:73:6a:93:8b:0b:0b:0d:d8:30:18:31:7e:49:b7:
                    8a:65:e5:99:f8:86:0d:c7:50:a9:79:b6:ec:67:9e:
                    f3:d0:3f:6a:46:2f:a3:42:fe:f3:2c:6e:a5:82:8b:
                    b8:cd:8b:bd:30:a1:e7:34:61:b6:d3:df:8b:6a:d4:
                    28:1e:a0:e7:60:ba:e9:5f:be:3a:4b:d8:5f:19:4b:
                    36:a0:a5:d8:70:6d:c8:50:70:3d:e3:43:81:61:29:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:36:7C:77:FC:CD:A2:FA:5E:09:4B:B7:A8:0D:DA:B2:F0:DA:A8:8D
            X509v3 Authority Key Identifier:
                keyid:D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:dc:b9:c0:1e:24:e9:78:03:ab:56:d1:93:5c:64:e6:fd:a4:
         1f:4f:ec:d7:4f:1e:ee:a0:af:88:e5:87:77:58:02:43:e6:22:
         0f:4d:07:63:a6:5a:d0:5d:11:99:13:6b:ad:ae:32:1b:ea:fd:
         dc:8b:6b:81:8d:23:20:37:06:ce:4a:b1:15:c6:72:d0:15:19:
         02:19:b3:46:b0:8a:0a:3b:d8:c1:19:cd:d1:be:bb:5f:7e:bb:
         40:78:9f:7b:21:c6:d8:2a:8d:a4:57:8b:e3:2e:c4:19:b9:22:
         39:cd:75:c7:68:4e:a9:b0:4e:27:a0:d3:1d:79:27:ae:9b:3b:
         3e:0e:9c:9c:08:2e:dc:f0:82:eb:10:d9:8a:91:0b:b5:0f:55:
         f6:9a:e7:69:7f:a4:71:a7:cf:66:cb:03:0f:f7:cf:7d:79:3e:
         55:75:d3:60:78:fb:8c:f4:b6:28:c9:c8:bd:e8:a9:7b:ec:fc:
         ea:e4:b6:26:18:a2:d2:35:f9:5b:04:76:9a:f2:1b:2e:d2:b1:
         e4:69:e2:e0:32:b0:5c:6a:a6:f1:32:c8:77:79:8a:53:ab:b4:
         e4:d2:7d:ad:cc:05:bb:63:5d:2b:9c:99:a7:51:ba:d0:a1:85:
         70:ea:98:10:a9:da:25:46:5f:9f:0f:29:f7:d7:7d:a8:b4:cc:
         1c:43:2a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:24 2026 by rpki-client