Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft
File:                     06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft (raw, json)
Hash identifier:          IIrnSzJneUaA/aZ5J9WRS909s3m3afziISYnemYb/ak=
Subject key identifier:   3D:03:A6:A9:D4:3E:80:5E:A4:8B:41:41:4A:51:5C:2E:CE:B6:50:27
Authority key identifier: 06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E
Certificate issuer:       /CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E
Certificate serial:       1517C79BCC8B3FB6A51F8D4FFF986F91BA6C3131
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft
Manifest number:          0139
Signing time:             Thu 05 Mar 2026 22:41:12 +0000
Manifest this update:     Thu 05 Mar 2026 22:36:12 +0000
Manifest next update:     Mon 09 Mar 2026 06:49:12 +0000
Files and hashes:         1: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (hash: odYW4tuHIAmBKw7Yir5Faqa6Vv8eHC6lsyyVWAOjs3U=)
                          2: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl (hash: 3dWPKm5WtsqFaEqnhK6poD4WQgIdIczUPXgvSmQNTKI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl
                          rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 06:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:17:c7:9b:cc:8b:3f:b6:a5:1f:8d:4f:ff:98:6f:91:ba:6c:31:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E
        Validity
            Not Before: Mar  5 22:36:12 2026 GMT
            Not After : Mar  9 06:49:12 2026 GMT
        Subject: CN=3D03A6A9D43E805EA48B41414A515C2ECEB65027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:02:99:62:26:79:16:27:94:99:a9:e2:4a:c1:
                    eb:c1:da:6f:e6:35:d0:38:28:53:0e:e3:fc:33:d5:
                    02:d5:52:df:68:1b:97:44:5c:99:4f:28:b2:23:92:
                    80:d6:0b:4d:e3:b7:a3:f1:9b:5f:bc:94:00:a2:d2:
                    8d:19:6b:61:2e:25:df:f1:d1:10:4a:62:d3:bc:89:
                    47:79:ed:32:b8:e2:08:c4:5d:df:7f:3b:10:f9:eb:
                    f2:00:63:9f:1c:bb:45:89:7e:99:fc:b4:f2:32:a7:
                    6c:b7:4c:01:ef:49:f3:4a:30:78:ed:18:53:a7:d7:
                    a6:4f:cc:c4:c3:af:73:33:e4:aa:79:37:c7:29:43:
                    55:64:74:37:e4:14:03:37:be:32:de:d3:32:70:ce:
                    d6:ac:21:a2:38:35:f3:2e:be:2f:df:75:3d:f1:4c:
                    11:61:09:3e:0c:34:99:fa:37:ec:9f:93:a8:43:02:
                    2f:82:0d:4a:a6:34:3d:ac:e1:3c:ad:69:2d:4e:0f:
                    40:3c:aa:6b:c2:21:7c:78:5d:7a:22:12:5c:1c:fd:
                    d6:88:cf:f9:52:6a:fe:e7:39:67:d2:0b:c2:ba:8b:
                    a2:00:a7:2d:35:29:ee:00:12:5a:22:1b:ac:c7:7c:
                    e1:c4:d9:e8:d0:9d:0f:c0:1a:65:5b:c7:03:be:6b:
                    2f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:03:A6:A9:D4:3E:80:5E:A4:8B:41:41:4A:51:5C:2E:CE:B6:50:27
            X509v3 Authority Key Identifier:
                keyid:06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:9d:b8:00:c8:65:a3:5a:49:e4:cf:13:77:3e:b3:04:ec:1a:
         b5:52:28:60:bb:80:c4:8f:2d:3c:70:bd:19:b3:2d:a8:ed:68:
         6e:2b:4d:9d:79:7f:08:73:a8:46:fd:0a:47:4a:ad:31:53:38:
         f1:e7:f8:9b:55:ce:49:e4:a6:94:66:ba:56:39:1c:71:61:72:
         8b:b4:78:7b:20:3a:a7:5c:80:1c:18:5d:06:4e:89:71:19:d3:
         5c:79:8d:c8:6c:5c:83:40:3e:10:b8:f9:b9:db:7c:d5:68:a3:
         d9:ec:74:7a:fd:ba:e1:2b:e0:b3:d8:32:ec:83:23:66:e7:93:
         e7:e0:e8:06:99:05:a5:b3:12:e8:17:17:90:64:a1:fd:77:a3:
         ad:ed:41:c7:e8:b7:a5:b9:ff:ad:49:7b:8a:55:fd:8d:61:73:
         16:e3:44:f9:7a:d4:9d:0a:ce:96:69:f1:c6:d6:80:b1:af:0e:
         0d:8f:a0:a5:f2:94:94:fd:29:91:f3:f6:e4:bb:e8:43:46:34:
         e1:b7:6e:d5:9f:2f:68:7b:77:d6:17:45:c8:da:00:4a:dc:46:
         8b:59:08:90:70:cc:31:70:ff:bf:e4:a3:83:0c:d9:4e:f1:e7:
         93:0b:58:f3:77:b2:e9:14:ec:a3:0e:30:18:2d:04:b0:d6:45:
         7d:9f:a1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:50:33 2026 by rpki-client