Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft
File:                     969449FF3E24842B0CECC61AB398E88F83709FC1.mft (raw, json)
Hash identifier:          ui0P952mQn/H/bm8/jJASQfrcvmvUeRhLWVjb2OAeZU=
Subject key identifier:   E5:55:A2:26:1A:23:A8:6C:63:1C:AA:4B:3C:B7:F4:E4:51:02:B7:C0
Authority key identifier: 96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1
Certificate issuer:       /CN=969449FF3E24842B0CECC61AB398E88F83709FC1
Certificate serial:       66069BF42DE277A24F517219B46070AA67FE2B60
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft
Manifest number:          013D
Signing time:             Fri 06 Mar 2026 07:32:09 +0000
Manifest this update:     Fri 06 Mar 2026 07:27:09 +0000
Manifest next update:     Mon 09 Mar 2026 10:14:09 +0000
Files and hashes:         1: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: EGoAWeYOzKbfduhwyAgCeaaXls51T+6E5vcysGiLR90=)
                          2: 969449FF3E24842B0CECC61AB398E88F83709FC1.crl (hash: ZtYksxmfW9uJUO/HLT6v9SxpSHUGDhzwff3oxOlFQZw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl
                          rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 08:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:06:9b:f4:2d:e2:77:a2:4f:51:72:19:b4:60:70:aa:67:fe:2b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969449FF3E24842B0CECC61AB398E88F83709FC1
        Validity
            Not Before: Mar  6 07:27:09 2026 GMT
            Not After : Mar  9 10:14:09 2026 GMT
        Subject: CN=E555A2261A23A86C631CAA4B3CB7F4E45102B7C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b7:da:34:4a:87:ed:7b:73:2b:56:dc:61:5e:
                    71:14:26:9d:1c:b6:36:45:d9:5c:46:ca:d4:35:21:
                    30:cf:d7:17:89:e9:50:2d:49:a2:ef:f4:5e:b8:b6:
                    8a:9f:98:5a:6c:29:b0:dc:6d:90:d2:99:13:60:b7:
                    d6:ff:96:56:d3:81:58:00:2b:f2:5a:73:97:11:b6:
                    7f:55:d3:b5:e1:20:49:e1:07:1a:80:63:b6:59:0d:
                    86:49:6c:3f:9d:41:c6:cb:16:5e:61:00:15:55:f0:
                    c4:bb:ee:52:71:90:73:bf:39:0f:f3:0d:c2:ad:d4:
                    97:aa:18:90:dd:83:3d:82:24:97:30:84:65:7f:c3:
                    3b:64:fb:67:72:c1:8e:ee:b3:36:f2:b6:92:35:f1:
                    05:2d:75:0e:76:cf:fb:c2:92:07:bf:6b:ed:e0:cc:
                    16:80:a9:7a:74:b9:7d:9c:ef:79:93:aa:1c:11:9e:
                    35:9b:61:ab:bd:05:33:75:af:d1:49:b2:73:ac:48:
                    1e:f3:4f:a3:71:45:61:e2:a3:42:f0:2e:7c:01:ea:
                    6b:42:ac:d1:e6:48:6f:b4:65:d1:4e:73:57:10:7b:
                    c4:8e:59:54:b1:67:83:83:c6:6c:22:d2:0a:4b:3a:
                    83:c1:a3:70:db:2a:82:ed:b1:25:f0:99:7d:be:65:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:55:A2:26:1A:23:A8:6C:63:1C:AA:4B:3C:B7:F4:E4:51:02:B7:C0
            X509v3 Authority Key Identifier:
                keyid:96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:12:f2:5f:76:b3:91:f6:9d:56:68:37:45:08:6d:1a:b1:e8:
         0f:80:8b:91:4b:a4:7e:b3:eb:0e:c2:6a:18:6a:fd:ca:0a:20:
         eb:57:89:2a:39:8b:6b:66:75:2f:2d:4d:65:52:38:c3:bd:4a:
         83:fb:4b:3e:f5:7c:d9:e8:97:ae:0a:ec:63:38:cb:ef:1f:35:
         67:76:fc:5f:f2:4d:92:49:5d:2d:a5:58:a2:84:a8:2f:71:db:
         b7:09:5e:62:f4:0f:cc:da:00:84:58:54:5c:66:93:79:1b:8b:
         68:ff:92:3c:9c:5e:27:a5:e2:1a:dc:88:c5:8d:9b:ba:b2:de:
         7e:bf:52:c2:68:52:a0:2a:bb:f8:6f:10:0d:8d:28:9d:e1:e3:
         4a:99:69:04:a1:9f:02:d7:7b:f5:f4:bc:89:9b:4e:f6:24:84:
         44:21:f5:7c:8c:b7:e5:ab:1d:3f:97:3e:f2:3e:77:0d:6a:08:
         66:e9:d2:b9:39:7b:39:5f:28:a2:28:0b:c0:b7:bd:d7:3b:b3:
         3a:b0:de:14:00:e2:37:62:7e:a3:e1:ee:20:a0:ce:1b:95:f7:
         5b:47:e4:4e:1f:c6:26:cc:c0:63:a5:15:44:77:7f:cf:dc:e3:
         78:32:36:db:65:ee:97:af:cf:01:df:4f:b3:82:e5:1c:7e:3e:
         d0:2f:19:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:59:08 2026 by rpki-client