Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft
File:                     957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json)
Hash identifier:          LcElQgq9PWsO+PAMqOf06pFFUB7hwghYayVQn1VYgdA=
Subject key identifier:   80:D6:01:0F:BA:44:10:CE:5E:92:D3:9F:BD:C1:77:41:89:90:FB:55
Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02
Certificate issuer:       /CN=957CC5B55223EC29F2E71324C678334C4348BE02
Certificate serial:       496A32A4C96852CC207B099E6E8A721F12D4AF03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft
Manifest number:          021A
Signing time:             Thu 12 Mar 2026 09:00:58 +0000
Manifest this update:     Thu 12 Mar 2026 08:55:58 +0000
Manifest next update:     Sun 15 Mar 2026 10:43:58 +0000
Files and hashes:         1: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: xRWDlDZG3EENP4Ot4Pcp3fVk5/DHv0SnqH1TzDRrUVY=)
                          2: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: sKfx76+Sncyrs9mYumqkFI6ie1K7xxqfJijMwgYJ3J8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl
                          rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Mar 2026 10:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6a:32:a4:c9:68:52:cc:20:7b:09:9e:6e:8a:72:1f:12:d4:af:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02
        Validity
            Not Before: Mar 12 08:55:58 2026 GMT
            Not After : Mar 15 10:43:58 2026 GMT
        Subject: CN=80D6010FBA4410CE5E92D39FBDC177418990FB55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:95:d3:03:e6:27:29:6f:41:b8:1d:5e:70:5a:
                    e0:25:e5:6b:26:b5:40:5e:53:96:49:5f:11:13:89:
                    a6:a3:63:40:22:e9:51:49:43:cd:1c:eb:9d:da:d9:
                    82:e2:ff:cf:8d:cb:7c:02:a9:7e:05:2d:2b:fd:42:
                    0d:d4:2b:c1:99:4e:e9:de:65:a8:5c:3a:e8:d2:d2:
                    ef:e0:63:33:1a:6d:84:d4:fe:56:1e:9b:99:19:e4:
                    35:ef:c5:a9:bf:b7:ea:f4:30:d4:cb:12:ea:6e:01:
                    ed:00:04:83:99:a2:04:0c:e7:16:92:3d:6c:66:e7:
                    bb:5d:93:46:e1:34:31:2f:87:de:37:54:38:b2:4c:
                    0e:d4:dc:a8:73:8c:71:a6:ea:3b:11:09:fe:1e:1b:
                    32:94:34:bc:bb:0a:3f:67:1a:dd:78:ca:9b:44:e0:
                    4d:d3:8f:43:4d:54:0a:b8:8e:9b:3d:05:be:ac:6b:
                    29:7f:6d:e1:38:79:0a:ff:8d:75:94:9b:98:7a:c6:
                    04:c0:85:e2:f3:bd:b0:6a:10:a2:a6:ea:d4:bb:6c:
                    d3:b3:e1:d5:15:9a:2f:bd:06:cb:ec:a3:c6:53:77:
                    bb:51:8b:8e:c6:f7:3d:e1:ca:af:c2:4c:aa:61:6d:
                    7b:23:b4:f6:df:69:13:27:e2:7b:11:2b:7f:b3:70:
                    44:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D6:01:0F:BA:44:10:CE:5E:92:D3:9F:BD:C1:77:41:89:90:FB:55
            X509v3 Authority Key Identifier:
                keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8e:51:a1:6e:2d:c0:3a:7d:1b:a1:98:11:03:e0:c5:e2:75:
         22:c9:63:51:b4:97:2c:77:4e:f6:bc:e1:9d:7e:7e:55:b6:e0:
         43:97:b4:3a:85:c2:8d:7b:00:f7:e3:05:07:80:e2:6e:05:59:
         ac:59:06:e7:a0:7c:93:bf:f7:31:d3:3e:97:71:00:b9:78:4b:
         d8:4e:5f:3e:af:48:66:ee:93:43:a2:56:ca:b0:e6:bd:c8:be:
         8d:57:63:b1:17:56:ec:99:ed:6e:2c:db:28:17:a0:61:4b:d0:
         54:3f:12:a0:9b:57:1c:3d:11:7d:a8:ee:6a:f3:bc:74:0d:5a:
         d5:4a:1a:81:9e:33:ee:cf:79:f5:69:c6:39:e6:78:0a:4a:2d:
         97:cf:58:f0:d3:8c:c2:ba:e0:0b:e4:c1:e0:35:d0:15:38:bd:
         15:45:3a:43:e7:65:3f:c6:63:eb:80:76:37:44:9d:42:d0:b4:
         ed:cf:f8:d5:93:98:8c:2a:d7:e8:44:a0:5a:9a:3d:3a:67:52:
         9b:2b:52:5f:84:ee:d3:22:79:b8:18:9e:93:db:75:29:d1:8f:
         e1:26:bf:1f:95:a0:f0:8e:5f:82:25:9b:2f:f4:85:09:af:d0:
         83:60:cb:1d:b8:4d:e7:43:d3:e6:c8:d7:57:e9:2b:f3:c6:f9:
         4c:c7:76:48
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSWoypMloUswgewmebopyHxLUrwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0
MzQ4QkUwMjAeFw0yNjAzMTIwODU1NThaFw0yNjAzMTUxMDQzNThaMDMxMTAvBgNV
BAMTKDgwRDYwMTBGQkE0NDEwQ0U1RTkyRDM5RkJEQzE3NzQxODk5MEZCNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTldMD5icpb0G4HV5wWuAl5Wsm
tUBeU5ZJXxETiaajY0Ai6VFJQ80c653a2YLi/8+Ny3wCqX4FLSv9Qg3UK8GZTune
ZahcOujS0u/gYzMabYTU/lYem5kZ5DXvxam/t+r0MNTLEupuAe0ABIOZogQM5xaS
PWxm57tdk0bhNDEvh943VDiyTA7U3KhzjHGm6jsRCf4eGzKUNLy7Cj9nGt14yptE
4E3Tj0NNVAq4jps9Bb6sayl/beE4eQr/jXWUm5h6xgTAheLzvbBqEKKm6tS7bNOz
4dUVmi+9Bsvso8ZTd7tRi47G9z3hyq/CTKphbXsjtPbfaRMn4nsRK3+zcETpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgNYBD7pEEM5ektOfvcF3QYmQ+1UwHwYDVR0j
BBgwFoAUlXzFtVIj7Cny5xMkxngzTENIvgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MGE3OGMwNi0xZDZlLTQzYjYtYmYzMC04NjBjZWJkZGZiMzIvMC85NTdDQzVCNTUy
MjNFQzI5RjJFNzEzMjRDNjc4MzM0QzQzNDhCRTAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0MzQ4
QkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm
MzAtODYwY2ViZGRmYjMyLzAvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMz
NEM0MzQ4QkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJqOUaFuLcA6fRuhmBED4MXidSLJY1G0lyx3
Tva84Z1+flW24EOXtDqFwo17APfjBQeA4m4FWaxZBuegfJO/9zHTPpdxALl4S9hO
Xz6vSGbuk0OiVsqw5r3Ivo1XY7EXVuyZ7W4s2ygXoGFL0FQ/EqCbVxw9EX2o7mrz
vHQNWtVKGoGeM+7PefVpxjnmeApKLZfPWPDTjMK64AvkweA10BU4vRVFOkPnZT/G
Y+uAdjdEnULQtO3P+NWTmIwq1+hEoFqaPTpnUpsrUl+E7tMiebgYnpPbdSnRj+Em
vx+VoPCOX4Ilmy/0hQmv0INgyx24TedD0+bI11fpK/PG+UzHdkg=
-----END CERTIFICATE-----
Generated at Sat Mar 14 00:33:16 2026 by rpki-client