Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft
File:                     7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft (raw, json)
Hash identifier:          EhJONcLAaZt/HfUcUROTeRZFrcvrter+kM6bMXT9z5Y=
Subject key identifier:   5F:95:1B:F8:3E:A5:82:00:4C:ED:66:0E:05:12:8A:E9:51:89:A5:BF
Authority key identifier: 7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92
Certificate issuer:       /CN=7D52713C0D26932DC1EECC75CB0C11784C9B0592
Certificate serial:       541DFE9360DB0AA3D5DD073226E7FD3F2EA2F045
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft
Manifest number:          0307
Signing time:             Thu 16 Apr 2026 22:01:57 +0000
Manifest this update:     Thu 16 Apr 2026 21:56:57 +0000
Manifest next update:     Mon 20 Apr 2026 02:47:57 +0000
Files and hashes:         1: 3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa (hash: 00o5kwNuKSJ5PpNjUI86eyQMeGSOAboXshPfZ04uCOQ=)
                          2: 323430353a623034303a3a2f33322d3332203d3e20313339393531.roa (hash: BOXleI82qkqA+XBkcaVMr9vBsmwOlXi/gSfu64m+8zY=)
                          3: 7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl (hash: AYRr6WIBlvlKIwFPYLw60LpGtIw/OiNdCXHSdBKBlWY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl
                          rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 02:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1d:fe:93:60:db:0a:a3:d5:dd:07:32:26:e7:fd:3f:2e:a2:f0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D52713C0D26932DC1EECC75CB0C11784C9B0592
        Validity
            Not Before: Apr 16 21:56:57 2026 GMT
            Not After : Apr 20 02:47:57 2026 GMT
        Subject: CN=5F951BF83EA582004CED660E05128AE95189A5BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:0d:92:0b:ae:0c:92:d1:64:15:31:fb:4b:
                    fb:3f:a1:ce:18:bd:aa:65:9f:ed:72:9c:cb:10:40:
                    bf:b4:b1:1f:1c:94:ce:0b:aa:9c:42:10:f3:31:5b:
                    ae:b0:bd:37:ae:df:78:11:aa:4d:c1:11:eb:93:75:
                    dd:e8:d2:45:36:14:cb:bc:23:68:a4:ef:03:71:fb:
                    94:29:67:34:e2:a5:90:63:e7:ff:8b:ec:42:08:e7:
                    5d:54:35:42:2d:d5:15:69:5d:9d:5a:e3:3f:c0:c4:
                    c0:9b:fa:4d:2f:b0:01:2a:8f:97:da:35:fd:de:bf:
                    45:17:2f:0d:74:81:48:2d:74:f2:41:73:2d:b8:76:
                    07:2c:fa:ae:9c:ac:ca:3e:31:9a:17:4b:0b:8a:5d:
                    c3:da:04:ca:94:b4:a6:df:6a:a3:38:70:f5:60:19:
                    12:cf:d6:cf:2e:77:ec:e2:92:fd:5f:5a:53:df:ba:
                    7b:11:5e:f3:64:95:a1:85:70:d6:31:0a:e3:18:58:
                    09:88:8e:ed:5a:ab:44:4e:13:48:3d:c9:e3:c0:26:
                    d3:42:ff:ac:b1:ce:7f:29:60:8d:98:88:07:1a:ff:
                    3e:ea:b0:01:1c:45:6b:21:44:ba:aa:c5:fb:d5:5c:
                    aa:da:c9:4d:c4:0d:7a:77:e6:84:8f:ea:f7:c3:2f:
                    d2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:95:1B:F8:3E:A5:82:00:4C:ED:66:0E:05:12:8A:E9:51:89:A5:BF
            X509v3 Authority Key Identifier:
                keyid:7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e9:f9:cd:e1:36:5c:c5:28:b5:63:f7:52:b9:58:7a:d8:31:
         5a:93:c8:61:61:01:84:dd:73:31:c1:d3:d5:ca:0b:3d:b5:48:
         f1:ff:1d:c2:60:eb:49:96:d6:7e:83:38:29:d1:bd:12:20:67:
         85:0b:ce:d9:26:e5:09:23:52:6e:a7:3c:9e:e1:f9:34:77:69:
         ea:d7:9b:9c:87:d3:60:f5:4d:0c:cd:45:6c:09:24:08:83:92:
         e9:1a:01:19:0d:44:33:97:d7:76:73:90:36:4f:42:1a:67:0c:
         e9:d8:67:94:9a:2b:18:33:4f:05:bb:03:71:7a:2c:4c:6e:93:
         79:4a:d5:6a:47:a3:2e:7f:87:0f:18:9c:d7:38:eb:5a:66:a5:
         7a:99:93:c7:50:aa:db:dd:dd:90:87:b6:3f:bf:c8:b6:d8:50:
         61:8d:2f:a9:29:f2:d3:93:b0:eb:b9:89:90:a1:7d:0c:49:c0:
         32:70:9e:c7:49:77:2e:58:f6:e4:7a:50:2e:fc:eb:25:24:22:
         8c:ba:12:4f:c7:ba:70:d0:2c:45:6c:1e:e2:6a:80:5c:5e:14:
         f4:6b:18:f6:2d:f9:53:f1:2c:ba:43:06:aa:96:a4:65:26:23:
         9b:50:11:90:f9:23:04:b7:d6:1f:a7:d6:e9:45:9a:af:3b:76:
         d1:ba:98:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:43 2026 by rpki-client