Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft
File:                     34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft (raw, json)
Hash identifier:          MzNn+bLu71fia287WU2HNvuknCIpL9Jw1sfSnqRJx4Y=
Subject key identifier:   29:7D:99:5A:42:58:BD:FC:4B:B3:01:54:E3:21:9B:3C:DF:B1:E1:9E
Authority key identifier: 34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86
Certificate issuer:       /CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86
Certificate serial:       6B03ECEA15445B6858AFF48328C5C0DE73FF096E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft
Manifest number:          0553
Signing time:             Sun 01 Mar 2026 09:01:57 +0000
Manifest this update:     Sun 01 Mar 2026 08:56:57 +0000
Manifest next update:     Wed 04 Mar 2026 19:38:57 +0000
Files and hashes:         1: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: kKtyC8DvD1kFWPV1z+RnB0U+nvEXhXYqRj3464Lwcpo=)
                          2: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: dFNLpydRcAPmDjut8v5fQywiAbtwD5YuSOmNSLuBbfk=)
                          3: 34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl (hash: qGZfOOug38MihLAe48myiDe8N39xXd2AEYJ4K8dNQsw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl
                          rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 19:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:03:ec:ea:15:44:5b:68:58:af:f4:83:28:c5:c0:de:73:ff:09:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86
        Validity
            Not Before: Mar  1 08:56:57 2026 GMT
            Not After : Mar  4 19:38:57 2026 GMT
        Subject: CN=297D995A4258BDFC4BB30154E3219B3CDFB1E19E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:ea:48:85:6c:28:23:d7:75:23:be:f0:54:
                    c2:6f:e9:15:5f:42:27:a2:e4:71:a7:66:ce:84:02:
                    0e:78:58:64:91:e7:93:f1:1c:70:cf:3c:9b:ab:28:
                    f3:16:c7:41:af:61:c9:d8:ee:5e:9c:68:d5:f5:86:
                    ec:e3:64:92:94:ae:d4:72:fb:5c:40:76:dd:15:e4:
                    d1:7b:d4:7e:d4:60:22:0a:07:0b:19:94:28:90:52:
                    20:22:b3:69:cf:71:4b:b9:10:18:d2:80:37:17:2c:
                    f4:81:a7:64:13:b3:9e:60:c6:69:a6:04:87:4a:39:
                    2e:f7:35:d3:36:9a:94:c0:b8:51:f6:fb:eb:60:1f:
                    4e:06:9c:ae:9e:3d:8a:1f:fd:5d:ea:3c:55:98:41:
                    99:ce:f9:04:b7:21:f1:ef:d4:48:c3:7c:d6:fc:5f:
                    a2:d4:d7:a1:c2:57:cb:b9:16:01:61:96:a1:ba:5b:
                    99:0b:3d:68:9f:4b:18:c9:69:3c:88:f3:56:55:65:
                    46:d0:aa:c7:00:8a:35:c6:48:15:88:35:e6:5f:01:
                    49:c6:7b:c8:f7:fd:e1:95:d5:28:e0:2b:60:b2:f6:
                    15:68:f8:0f:e3:d2:e6:a5:2f:ef:fa:b8:04:5f:b8:
                    ff:83:08:e4:c3:15:86:27:d2:75:bc:5a:42:b5:03:
                    61:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7D:99:5A:42:58:BD:FC:4B:B3:01:54:E3:21:9B:3C:DF:B1:E1:9E
            X509v3 Authority Key Identifier:
                keyid:34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2d:34:d4:81:0d:74:db:0d:c4:b4:bb:c1:cd:d8:39:e3:36:
         ee:06:82:55:59:59:1e:a2:4a:46:46:9c:6e:01:1b:de:a5:86:
         cb:c7:28:00:f3:83:b8:74:8d:36:34:d9:48:d0:02:ec:4e:bc:
         b1:85:59:5b:32:88:a2:de:f0:ed:18:2f:24:58:da:4f:84:99:
         3c:9f:02:39:ae:4a:4c:97:d4:e5:db:8d:c8:17:da:9d:9f:60:
         f0:c3:be:20:14:dc:ed:86:82:c0:cd:df:99:3b:0d:22:cb:79:
         73:12:58:25:36:2b:59:21:81:7f:b0:14:16:55:c1:bf:89:53:
         e4:a9:af:bd:a8:41:81:08:52:32:22:a4:cb:6e:ae:95:38:aa:
         b9:4f:b9:cc:4a:0c:a7:5e:a7:e6:5b:7d:05:d3:f2:f7:26:7b:
         dc:81:64:46:c1:c6:3a:e1:06:67:41:f2:e8:e9:75:89:bd:6e:
         97:22:af:19:05:3a:70:7c:b8:5e:e7:fc:da:fc:4b:49:59:17:
         9e:e8:20:41:47:c6:fa:33:84:82:9e:3a:25:d0:a0:69:8d:9a:
         49:70:cf:2a:1e:68:a9:4a:16:d0:f3:b1:3e:33:c3:2a:60:b2:
         ae:9e:56:50:89:d9:c5:91:8e:a5:df:96:14:83:a5:fe:f3:03:
         dd:7d:d0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:58 2026 by rpki-client