Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
File:                     295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json)
Hash identifier:          neJFa4GBj5oj8AL4+pIfL8xW6E7sOv9TRuEhGvslLHI=
Subject key identifier:   A3:C7:62:C7:1F:10:E1:41:DE:5C:B4:F5:6F:80:65:61:49:5B:13:7B
Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33
Certificate issuer:       /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
Certificate serial:       5600CE4D5BEFF939DAEE91C638E433DA8E190C44
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
Manifest number:          0560
Signing time:             Mon 02 Mar 2026 09:41:51 +0000
Manifest this update:     Mon 02 Mar 2026 09:36:51 +0000
Manifest next update:     Thu 05 Mar 2026 19:43:51 +0000
Files and hashes:         1: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: 73W8GLSa6I8P01k3aFdjjpvb756Sn1uc1jeTJZ00bq4=)
                          2: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: nhGmrbnsJZJKbXEVM2224rOUYqSyOnxXP3J6DVLRP58=)
                          3: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: ECzNZR+t4Bdt6LAAlKcBfTJvufVHsod6z7EXxaTCQXQ=)
                          4: 3232332e3133302e32322e302f32342d3234203d3e20313338313238.roa (hash: XnGn/2+w4AJO6NSWZOl6oPCbIBn8oHiJVNfmgtkBLgs=)
                          5: 3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa (hash: Z00cWWLpoEgJbs9IwwNUQ+8l5Sk95TAHVLqYoXdZIhA=)
                          6: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: PLHCyTUqb7zW5Agax10kjv/j/fXAPiSoxdzmKiW4IWM=)
                          7: 3232332e3133302e32322e302f32332d3233203d3e20313338313238.roa (hash: hEy0rDvTYQnHKZCVMINLjOdzcBCjo3uIeSctB/ZGBr8=)
                          8: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: PMWu4w2Q+6FhMFUf3/IiRjbR53qP/H9SS7SsSz4BOlo=)
                          9: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: S3vWYnYF+l4dhX20RDpIzaZuA3umTZ3b74Itz4An65E=)
                          10: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 0qgtJcGFp2PSnsHTLVJD3e7NXsCz70cPkWqnqoXUWi0=)
                          11: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: pPyEloQMF0TdeYTY5eM6CCjgFQy8xkkymm+/u9Rl4Cw=)
                          12: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: 6l4eA4hgKKdV7HePb7GT4qkO7B2rOBXkYrSr+9u6X7c=)
                          13: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: 4XaAtrPhzGDBzDHWlHXMB0whCb6rytr+C1+HuznU5f0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl
                          rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:00:ce:4d:5b:ef:f9:39:da:ee:91:c6:38:e4:33:da:8e:19:0c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
        Validity
            Not Before: Mar  2 09:36:51 2026 GMT
            Not After : Mar  5 19:43:51 2026 GMT
        Subject: CN=A3C762C71F10E141DE5CB4F56F806561495B137B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:dd:1c:76:81:8e:d9:68:08:3f:2f:c2:9c:
                    d7:0b:51:f3:d9:53:a5:8f:31:1c:8d:c7:73:ad:95:
                    a5:47:b4:d1:8c:cd:f3:c7:62:c0:5a:ba:89:ca:b9:
                    84:9c:71:5f:4c:df:dc:91:25:6d:a5:54:11:b9:61:
                    22:2c:e9:e5:2a:64:4d:02:7b:b0:94:8e:91:c7:84:
                    39:31:13:3e:9d:d8:64:25:e4:fd:ca:d4:97:a1:c5:
                    e4:01:2d:53:ce:8f:37:73:ec:90:0e:1c:c0:6d:e7:
                    11:c9:18:6d:8c:14:5c:6b:70:1a:8c:18:1b:66:3b:
                    81:8b:a7:c9:aa:9f:37:df:81:cb:0a:1c:4a:33:94:
                    64:47:09:b3:07:55:df:34:fa:77:81:7f:ab:86:95:
                    37:c5:5a:d1:6a:ce:8f:45:fc:47:d5:31:3b:b7:ca:
                    cf:aa:e6:fe:43:18:92:b2:3a:b5:24:2f:76:a7:a5:
                    5f:01:0f:14:a2:bf:a1:4f:a1:b9:09:b4:7c:b2:a1:
                    e6:33:90:98:f1:a7:db:af:e1:cf:62:bd:75:c3:ee:
                    70:c7:27:8f:27:0b:fe:f3:d1:dd:b3:63:e8:45:8e:
                    8f:c6:c1:d1:8a:38:c4:ca:14:30:55:ad:d6:6a:6c:
                    1f:cd:26:40:55:90:d8:d1:a6:5e:bb:1a:4a:78:4f:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C7:62:C7:1F:10:E1:41:DE:5C:B4:F5:6F:80:65:61:49:5B:13:7B
            X509v3 Authority Key Identifier:
                keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1a:16:75:d7:bd:13:e2:99:2e:b5:8b:61:de:12:b6:9f:11:
         f7:17:86:76:65:5d:89:c0:0d:4a:8c:b6:b3:17:37:e5:62:1d:
         96:d5:0f:8f:8e:a6:65:5d:60:7a:f8:9a:81:64:a9:33:15:54:
         44:8b:40:9a:df:e2:f6:ae:26:00:ec:70:90:56:55:6f:89:a0:
         5a:9b:22:82:aa:82:e1:7c:e0:92:7d:b8:88:81:be:a0:a9:bb:
         30:e8:00:f6:96:b4:eb:5f:43:2d:05:a6:92:9c:8a:e6:c2:96:
         40:c7:62:d7:26:1e:6e:99:b7:6d:a9:7c:ce:78:d0:33:cd:31:
         74:e8:6e:95:58:f1:19:cb:65:cc:ed:6f:cf:3b:19:d5:2c:c4:
         7b:dd:ea:3f:70:77:d1:b5:2f:1c:05:57:0c:98:f2:d1:0b:e4:
         d5:2e:cc:ab:e3:1a:c9:40:7f:44:2b:da:2a:4a:bb:ae:79:98:
         bc:9a:9a:a6:fc:0f:9c:3f:d6:1e:44:cd:9d:8a:ea:94:71:d9:
         01:f3:16:88:1d:d9:d9:64:5b:b2:8f:1a:57:ad:d9:90:4c:b9:
         b1:3b:64:c0:5b:0d:ed:12:ee:cb:7d:6b:15:6d:13:82:d8:14:
         a6:8e:2e:de:70:33:1d:f4:43:2d:d9:fe:05:47:b6:b8:a7:21:
         58:46:e3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:27:50 2026 by rpki-client