Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
File:                     DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft (raw, json)
Hash identifier:          0U4lNpvpcBpm3mvkHTekEinbIMqQWUqCcmopDdZyfH0=
Subject key identifier:   67:3F:47:42:AE:3E:C5:80:74:DF:2F:DB:70:F6:3D:83:5F:A7:1E:15
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       17C9F3EA07E615620B4FF99A8B438E712D659311
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
Manifest number:          026F
Signing time:             Fri 17 Apr 2026 11:01:47 +0000
Manifest this update:     Fri 17 Apr 2026 10:56:47 +0000
Manifest next update:     Mon 20 Apr 2026 14:25:47 +0000
Files and hashes:         1: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: BudoqincKc1GD3R0XKH1VG2/DReqrJGsxd0biSt/A2g=)
                          2: 3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa (hash: pVaHbqfkYlKE16pP1J0jFdeFxprYFeVPJ3tLOmdu69I=)
                          3: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl (hash: MvVw8dI5NRY2E6nTu8V+8DFXQaBlsqbu1hQ/eUuuKoY=)
                          4: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: ov8mTxysBfKB49F8VOvh3Huj6S60dY93AQe/+n5tsMc=)
                          5: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: C59km8D95YTkQZBlbVQquyxssvqtNo5HAADp8Vd+f+A=)
                          6: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: sKvsWSZRk2Vbnc3VRnyjBITW2uztFDtyA1J8CjQFtLo=)
                          7: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: 9VVgVBP3adXECeGaUmGjEbyWL7h2Cz/v6afOABuMPOU=)
                          8: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: scIeroRPWT1wsIkMgDYKxH7mdRNRBrNreM+NffWY2p4=)
                          9: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: dn0hoBF+CH56DzGU1zhx2jZmJX4TGe9tH88uR+PmlVw=)
                          10: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: KPKrPz0YzctEoNy5UO4oigiT9NHKd9vJZjKP6xPujts=)
                          11: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: lEADDciE7WBSbNP5koTkRL7uI/ZWk2oPkXCMKNkGcIk=)
                          12: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: j2o/pDeHHUWyPpnU7hleAseAiou++xGgujWM5uSRf7g=)
                          13: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: rc8xkPlM0IAiISld2NaNMtVOLPaAMnMMDgSp7h4RUB8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 14:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c9:f3:ea:07:e6:15:62:0b:4f:f9:9a:8b:43:8e:71:2d:65:93:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Apr 17 10:56:47 2026 GMT
            Not After : Apr 20 14:25:47 2026 GMT
        Subject: CN=673F4742AE3EC58074DF2FDB70F63D835FA71E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:1c:e0:6b:df:0e:c4:48:4b:89:8b:76:07:
                    b8:4a:b6:78:97:65:74:e6:7d:c9:cf:ae:a9:3e:2c:
                    ce:26:d5:01:f2:12:63:1f:7d:ff:76:40:6b:e6:c6:
                    9a:25:57:9f:aa:11:12:e8:49:46:b9:3a:73:d0:39:
                    2b:35:2b:93:e0:7e:95:eb:94:f8:91:1f:38:28:a3:
                    ff:54:52:6b:10:c1:68:89:a0:99:c0:1a:72:e6:41:
                    14:ea:83:d9:9b:dd:ab:e2:2e:83:8d:13:ad:61:c1:
                    4a:21:27:20:e3:c6:e3:f7:bf:bc:89:91:0c:33:9c:
                    86:8a:3c:e2:31:37:85:01:c9:66:16:50:e0:4a:42:
                    84:89:9b:eb:02:6d:87:08:23:f0:30:c8:0f:21:70:
                    c1:eb:60:8b:62:10:24:58:93:e4:e1:38:a7:38:3c:
                    d0:93:aa:95:06:b1:6b:f3:07:9a:cc:26:e7:df:47:
                    9d:2f:e8:9a:80:60:26:78:6f:a2:a2:b4:7b:11:f7:
                    51:f6:51:8c:3f:fc:b9:42:86:10:2b:67:09:14:a0:
                    7f:07:ec:e3:50:e2:19:89:a2:31:5e:f2:54:6a:d6:
                    dd:31:63:69:27:2d:e3:74:bd:47:23:f5:72:5c:a5:
                    f5:da:d9:a7:ba:ef:d6:69:2e:ee:df:e2:02:7c:32:
                    76:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3F:47:42:AE:3E:C5:80:74:DF:2F:DB:70:F6:3D:83:5F:A7:1E:15
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:21:f2:59:b4:48:7e:fa:70:64:c2:98:69:05:c7:c1:87:dc:
         d6:c9:3a:16:21:17:fc:aa:b8:4c:f6:2b:21:48:60:a5:83:bf:
         f6:d3:0f:d2:36:30:ed:ac:3d:c8:d2:35:fa:99:a3:12:81:62:
         57:51:09:d3:63:56:9d:b2:be:7a:35:df:0a:b8:7c:35:fd:84:
         ea:5f:a4:b3:42:07:cd:c6:5b:62:69:e6:ff:46:86:a0:b7:15:
         48:f5:d6:ff:44:19:17:05:d9:f8:67:9d:b1:28:3e:15:8d:7f:
         06:1e:b8:80:83:dc:e5:f3:6c:56:bb:55:8e:67:17:9d:b6:30:
         27:c7:7e:b1:4c:98:4e:20:14:08:d9:42:2a:17:73:89:c3:86:
         45:15:39:ed:30:28:53:88:cc:cd:08:b3:13:ba:dd:fc:fd:73:
         a3:0e:69:eb:1c:44:c2:c9:ca:68:9c:5f:0d:0a:d4:07:64:bf:
         d8:5f:f1:a8:34:c5:a8:58:4a:5a:76:0e:2b:fc:b7:88:a7:9e:
         00:48:2d:6c:c7:6b:57:95:9b:85:88:80:2f:30:fd:a9:c7:86:
         34:70:22:03:98:04:40:ca:e0:bc:81:ab:6b:24:69:b0:b1:96:
         a7:9d:b6:43:d3:41:0e:14:fe:95:9b:34:13:3d:b7:c6:4c:73:
         8b:c7:ef:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:12:41 2026 by rpki-client