Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
File:                     D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json)
Hash identifier:          ALPTy3p1f3NNakjpcKc1gctHRYGHRtQY/wJfFF0nwMg=
Subject key identifier:   08:25:00:EE:96:2C:9A:B3:F6:8D:B7:81:CD:F6:89:96:BF:9F:CE:02
Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06
Certificate issuer:       /CN=D6FA07102C8726922074D42DFF59946144A13506
Certificate serial:       41FD31A185DA111DB26F67043B6621AF0A23CE5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
Manifest number:          CB
Signing time:             Sun 01 Mar 2026 15:22:33 +0000
Manifest this update:     Sun 01 Mar 2026 15:17:33 +0000
Manifest next update:     Wed 04 Mar 2026 16:38:33 +0000
Files and hashes:         1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: ZiDCulAPWPttBHoXAoLjcdO3/dablBdbkW8P46xHHvQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl
                          rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 16:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fd:31:a1:85:da:11:1d:b2:6f:67:04:3b:66:21:af:0a:23:ce:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506
        Validity
            Not Before: Mar  1 15:17:33 2026 GMT
            Not After : Mar  4 16:38:33 2026 GMT
        Subject: CN=082500EE962C9AB3F68DB781CDF68996BF9FCE02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5b:bb:fe:e4:a2:35:b8:f5:aa:d9:98:d2:9e:
                    82:62:e2:8c:58:4f:57:15:77:ca:e0:6e:8a:bf:ec:
                    8b:10:e1:42:c4:14:4f:a9:43:dd:1c:a0:44:58:c8:
                    8f:fc:31:2d:1c:72:a8:4b:70:2f:7a:f2:61:47:b2:
                    f3:73:eb:a5:fa:db:8b:1f:d6:c6:7e:dd:22:7c:20:
                    b7:eb:27:06:ed:3d:99:cb:3c:2f:15:d6:e1:ed:05:
                    9c:d5:12:90:60:b1:42:c3:04:f3:65:21:04:61:35:
                    fe:20:d9:d8:5c:65:c2:d5:63:45:01:43:6b:e4:44:
                    dc:da:8d:53:94:17:77:f0:be:4c:c1:4a:9a:3a:b5:
                    eb:62:4e:a5:bf:39:00:e2:8e:0c:57:bf:7d:e9:a6:
                    b5:e9:dd:83:18:56:5e:40:57:b4:60:d0:bb:60:63:
                    a0:c7:44:a0:0a:0e:b2:9a:6b:61:b8:93:6f:5a:4b:
                    a1:0b:fe:ca:17:95:03:19:98:14:df:f0:25:71:d2:
                    95:29:1b:7e:bd:09:56:da:3b:32:af:87:6a:5a:ae:
                    d1:7f:c4:28:ee:9d:6d:f7:7e:7d:b8:a5:5a:d8:13:
                    a1:fd:7e:69:ed:11:68:1b:31:cf:aa:5d:2c:80:88:
                    1d:ee:e6:7c:fd:09:74:8e:4a:26:04:5e:0c:54:26:
                    92:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:25:00:EE:96:2C:9A:B3:F6:8D:B7:81:CD:F6:89:96:BF:9F:CE:02
            X509v3 Authority Key Identifier:
                keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:13:b0:47:c7:08:58:24:08:1d:7f:6a:93:1f:03:e0:2f:97:
         68:76:c5:9f:00:cc:89:a2:34:26:a6:aa:09:98:53:0d:3d:ef:
         07:27:01:04:c6:15:bc:9d:8a:5e:1a:c9:4e:c2:01:cc:cd:a0:
         66:b5:2d:f3:08:6e:2a:44:3d:53:29:5f:16:58:a5:cf:18:cb:
         51:6c:c0:49:38:d1:4d:f3:af:d7:53:79:96:1a:8b:13:81:ee:
         f5:03:a6:d3:24:c1:a4:70:1f:c4:13:85:7d:de:6a:4c:7c:41:
         b7:cc:e6:08:ec:86:04:63:c7:a0:c9:44:2d:16:d6:e3:34:79:
         70:aa:50:64:83:fd:9c:e4:10:d2:3b:79:1c:69:3b:cb:71:94:
         bc:67:18:45:db:ca:56:36:48:3c:4f:14:dc:9f:16:e9:a1:55:
         94:9e:41:09:0a:b7:11:4f:0b:5d:30:ba:ee:a3:eb:16:d7:f2:
         ca:41:dc:46:10:7b:f2:15:03:1e:d6:4e:e2:35:05:bc:da:59:
         02:43:a6:b1:ff:28:2c:a4:d2:ac:20:ab:b2:df:79:4a:cc:f2:
         6e:8f:7b:fd:08:79:38:86:3f:1f:7a:e5:2c:d7:1c:97:f8:19:
         10:9f:9d:21:c3:2e:a8:03:a2:ef:5b:f1:5d:dd:12:03:54:5b:
         fa:4d:c1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:20:25 2026 by rpki-client