Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
File:                     6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft (raw, json)
Hash identifier:          GOF3f9oPuFDL0nVE28FK/63K8QShVejRFrRoNrB/AYY=
Subject key identifier:   FB:0D:EF:9C:43:C6:CE:67:DC:28:48:B0:3C:91:5F:63:C6:08:74:AE
Authority key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8
Certificate issuer:       /CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8
Certificate serial:       21D32B9FA03EBF0191AF871D58E4386202ED1057
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
Manifest number:          F2
Signing time:             Tue 21 Apr 2026 17:01:37 +0000
Manifest this update:     Tue 21 Apr 2026 16:56:37 +0000
Manifest next update:     Sat 25 Apr 2026 02:29:37 +0000
Files and hashes:         1: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl (hash: VgzEoIJNQk1BqRYNdQhi/dyedXOcmro/qb5OlJ92V+k=)
                          2: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: EZ7jR9+lQhRaaJFDwK6y0EbEgy21NUoqJfk8uRlaKvI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl
                          rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 02:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d3:2b:9f:a0:3e:bf:01:91:af:87:1d:58:e4:38:62:02:ed:10:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8
        Validity
            Not Before: Apr 21 16:56:37 2026 GMT
            Not After : Apr 25 02:29:37 2026 GMT
        Subject: CN=FB0DEF9C43C6CE67DC2848B03C915F63C60874AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:71:c1:9f:d2:fc:35:a4:b5:da:15:02:48:
                    d1:34:84:6c:6b:1d:fd:a7:b5:40:37:cf:b4:fd:b2:
                    c8:fb:ab:9e:5e:6c:3d:be:04:c3:b5:57:ee:d8:6d:
                    6e:e1:dc:e2:9e:04:3f:7f:69:9f:7b:84:bc:26:23:
                    79:c5:05:08:fe:5d:ae:3f:ce:1b:96:6e:7a:94:be:
                    6a:1f:b3:0e:31:b3:43:fa:e1:02:ba:97:0c:c4:bb:
                    66:e9:58:44:3b:da:20:41:a9:1f:17:51:65:34:c2:
                    b3:e4:77:47:cf:a4:24:83:41:aa:f7:a5:21:05:de:
                    fe:f0:e7:7e:14:24:96:0c:3c:9c:e5:7d:9c:c3:87:
                    fc:70:8f:43:c3:6c:15:ed:64:c6:c8:6a:5d:99:a2:
                    14:5c:4f:13:4a:4a:5c:a3:ec:8f:cf:56:57:fb:e1:
                    a4:87:91:71:fb:06:3e:8f:a5:01:fe:65:67:40:c5:
                    e0:db:9a:f8:cc:a8:71:1d:26:4d:b8:e4:a3:c4:c9:
                    65:ab:ae:79:3a:44:72:3c:10:df:0b:e9:61:b5:42:
                    1a:b2:6f:3f:a9:61:36:4f:85:46:3f:0b:04:4d:db:
                    42:03:43:aa:5d:66:d3:b2:73:62:b5:af:4b:6d:0d:
                    f3:9d:56:50:48:4e:6c:ee:35:db:25:67:9b:49:49:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0D:EF:9C:43:C6:CE:67:DC:28:48:B0:3C:91:5F:63:C6:08:74:AE
            X509v3 Authority Key Identifier:
                keyid:6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:13:9e:15:70:2c:53:06:9d:63:1a:ae:8e:81:13:ee:02:86:
         d2:b9:c0:01:08:5b:53:33:d6:13:26:e9:c9:ae:f0:6d:9b:73:
         9d:00:e9:80:64:34:97:2c:31:ee:c8:d6:91:af:71:c9:1c:b4:
         7f:24:d7:33:f6:6e:9e:a9:0e:e6:c6:e5:fe:f1:95:97:be:d7:
         ae:47:d7:75:96:1e:e3:d7:e0:ca:46:a6:0c:3c:71:88:7d:ad:
         bb:ff:7a:c3:ca:bd:8b:db:1b:9c:ad:a5:ed:f2:ca:c0:34:97:
         5e:3b:a4:31:d2:a8:19:e0:08:23:be:97:02:e7:2e:2e:fc:f8:
         a3:d3:6a:4d:67:9d:3d:d7:5e:1d:ef:7f:15:83:65:3b:a2:8a:
         80:f9:51:55:12:58:72:69:7d:de:83:13:76:4c:18:5f:9c:42:
         be:29:3e:df:73:0c:2d:d3:e8:25:fe:fb:3a:ef:e3:bc:6e:d2:
         27:03:b8:87:bf:77:63:ff:1f:10:c8:7a:7f:dc:aa:f7:f5:5b:
         38:4e:7d:03:bb:3a:44:dc:fa:2e:1e:96:35:f6:9d:ff:5b:c7:
         a5:39:34:87:7b:14:25:03:2c:40:b0:00:71:8e:42:27:c5:7d:
         07:8c:be:20:9b:52:da:61:a8:64:50:86:7c:41:0b:7d:74:f7:
         74:7f:5b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:58:23 2026 by rpki-client