Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
File:                     9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft (raw, json)
Hash identifier:          Wy9xBrfA3/jLo7YtMPXxZFgOraT2o5f7XWPm+1OBuz4=
Subject key identifier:   70:E0:59:32:E4:BC:26:0F:83:DF:1F:FA:96:DD:1C:1B:7B:7D:09:9C
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       50553BAECA9EE294B47E6A6A2231A65AEFDDA4D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
Manifest number:          055B
Signing time:             Fri 20 Mar 2026 05:02:05 +0000
Manifest this update:     Fri 20 Mar 2026 04:57:05 +0000
Manifest next update:     Mon 23 Mar 2026 08:21:05 +0000
Files and hashes:         1: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: 0v8AgN7r/4c1TsSHnJh2jh4MvGOfXWjrDArdHCr4Jyk=)
                          2: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: G3k2TGIZtD0G6kIsLYuxmLupEQGsTsKhUmFGnPgDNkk=)
                          3: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: 8NWlJt4CJ8mG05Kksh2s5LLd0tjsRxbEV7dAV2EGZp0=)
                          4: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: EK9rY9vWtmYUd01V3dBua2aCRXikcRS54y0+DlHE8Ko=)
                          5: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl (hash: 7pJ/qvYcFxuMPE7wzn+j47KgwOvauvB10Z+3KOBGXwM=)
                          6: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: JEDVGjWCNlyZky1kCfxZHNHeqn82swpdHlq9u9cjPE8=)
                          7: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: aVpC1UpUq5xM3EjtXbH8DkIG+zAdeuUyTigDv05h9yc=)
                          8: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: t7w75yjsYibdXaLt3vYd+nK8iJahfzez7vWvTqDQHwA=)
                          9: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: ZIgEMhAvryXvDTGrETcZ8TflN3USBddmvWjLfCuExYA=)
                          10: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tWUdaCi6USMMsgIMwxNhIvyYJg4UE5mGg0yF8mZruBw=)
                          11: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: puA8mGw1TnOQCrFl0iIg04HJ41wfz+xZ95LuowhMI30=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Mar 2026 08:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:55:3b:ae:ca:9e:e2:94:b4:7e:6a:6a:22:31:a6:5a:ef:dd:a4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Mar 20 04:57:05 2026 GMT
            Not After : Mar 23 08:21:05 2026 GMT
        Subject: CN=70E05932E4BC260F83DF1FFA96DD1C1B7B7D099C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e7:e8:6c:13:47:9b:95:39:b2:a4:4d:1b:55:
                    b2:fd:00:79:c2:94:c0:5e:42:2d:aa:d3:09:f4:9f:
                    3a:64:94:0d:cf:ef:58:03:f5:73:b4:ee:25:e7:38:
                    ae:64:7b:b6:ac:a1:b7:73:5d:60:df:97:75:a0:9e:
                    b4:1f:04:35:76:3b:0e:aa:8b:46:f1:73:71:f2:08:
                    40:22:0c:58:c9:d4:5e:18:d5:6a:3e:fc:38:1e:4b:
                    35:c6:31:4c:eb:6b:26:88:bf:69:87:be:6e:ef:6d:
                    d3:0f:7a:9d:5a:89:12:2c:83:18:b4:e4:65:4f:e9:
                    16:08:17:f6:16:51:1f:7d:db:6c:9b:d2:92:37:b4:
                    b8:17:c9:ed:c5:39:01:1e:49:22:c1:5e:13:d4:0a:
                    f4:43:1e:61:0d:de:1c:1f:e3:53:f4:e9:5c:92:72:
                    98:a7:38:3a:8c:ed:fc:45:35:27:ca:30:6a:47:dc:
                    06:02:22:fa:a7:e7:bb:24:b2:bf:b0:c5:a7:e4:00:
                    de:8f:5b:bc:e7:aa:2a:ac:96:59:9e:75:15:21:45:
                    8d:7c:99:df:91:72:24:17:71:85:4e:5b:5d:f0:bb:
                    db:1b:05:08:2f:ce:18:9d:3b:a0:9f:aa:eb:53:53:
                    0c:b4:11:41:d7:26:83:aa:72:20:a2:fb:60:57:be:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E0:59:32:E4:BC:26:0F:83:DF:1F:FA:96:DD:1C:1B:7B:7D:09:9C
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:96:37:fd:30:71:2e:49:ad:ab:0c:03:98:d1:2a:9e:9f:fe:
         84:02:75:a8:cc:58:f3:0d:32:28:6c:e9:b2:16:6e:e2:48:cc:
         57:60:56:de:57:40:10:0e:76:3a:e1:aa:e6:4e:8f:91:91:a5:
         a1:1b:53:f9:fd:ff:cd:82:5b:a4:40:3b:e5:f3:89:cf:a8:e3:
         85:f7:5b:58:c0:33:82:d9:e0:13:8c:05:3a:cf:57:30:b8:7a:
         e4:76:de:36:54:25:6d:99:a6:a1:7a:7d:46:01:ca:66:a5:e6:
         dd:43:98:ed:37:2c:a2:6f:ff:a2:9e:d5:6b:4a:d4:c7:ac:3e:
         93:d9:5b:d0:46:ff:4b:eb:0f:02:d7:74:6f:dd:cf:1f:c4:d6:
         2e:92:ed:e9:5f:e4:7e:eb:93:59:a4:6c:da:da:27:b4:77:b5:
         e0:f3:fa:c0:59:fe:c5:da:e0:ce:9c:ae:6c:a0:92:18:a7:cf:
         2b:df:b2:28:1b:f8:0e:03:3a:4e:68:57:fb:1c:f6:5f:77:b4:
         c5:bb:f2:02:1a:dc:bb:04:ce:a9:84:41:e9:3c:0f:e0:70:06:
         1a:54:b6:19:cc:d7:b6:32:ff:3f:c4:84:c6:96:32:94:61:e7:
         d4:67:be:28:b1:7b:78:36:49:c7:ec:48:8c:4c:e2:77:6e:8e:
         3d:47:b3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 13:38:50 2026 by rpki-client