Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft
File:                     7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft (raw, json)
Hash identifier:          MzsysYTDw1vBJibZp+uYgjPPDRToIlwlD/vSFNbLEaw=
Subject key identifier:   30:7C:0F:04:26:F2:05:96:25:CC:DB:B7:A2:B2:2F:69:40:3E:A0:F6
Authority key identifier: 79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5
Certificate issuer:       /CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5
Certificate serial:       468DE7B8BF8BBB5B1E4CC43B285A10983AEC0188
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft
Manifest number:          41
Signing time:             Sat 18 Apr 2026 00:04:25 +0000
Manifest this update:     Fri 17 Apr 2026 23:59:25 +0000
Manifest next update:     Tue 21 Apr 2026 11:53:25 +0000
Files and hashes:         1: 34352e3234392e3232312e302f32342d3234203d3e203535363634.roa (hash: QaVL8FZIkXQEPUlKXDz1K7gc9JnXnHYzpgLLHSEIXzo=)
                          2: 3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa (hash: Vp8nm0q1fVdfpoUq1ph6iBsHdLxuIgv5gZec72xD2Lk=)
                          3: 34352e3234392e3232322e302f32342d3234203d3e203535363634.roa (hash: IjL8U7j0DmBIXMsuGkW1RQCn11k2vE+wQV790Ok5z/U=)
                          4: 3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa (hash: 2gNt0b6scD0Vr6P6DjjlOCkxUmLu97iptlipFu8yVHU=)
                          5: 3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa (hash: vN+gGGeaJ1gj8tThDKmMiECC35znNoNYchE+0HwB4qo=)
                          6: 34352e3234392e3232302e302f32342d3234203d3e203535363634.roa (hash: UnBNpg7Ki5yb8nLJihGU6CQzLaBHjw3/oRDo43eNzRA=)
                          7: 34352e3234392e3232332e302f32342d3234203d3e203535363634.roa (hash: JpmEn7WaRdkeEFa5ZGloCMsN5J170hstOwttgz6U1Z0=)
                          8: 7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl (hash: gPxrqIlYJ2WxePKkkbbyCf3gey/UemkpMXdy2jXsW5M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl
                          rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 11:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8d:e7:b8:bf:8b:bb:5b:1e:4c:c4:3b:28:5a:10:98:3a:ec:01:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5
        Validity
            Not Before: Apr 17 23:59:25 2026 GMT
            Not After : Apr 21 11:53:25 2026 GMT
        Subject: CN=307C0F0426F2059625CCDBB7A2B22F69403EA0F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d3:6b:47:11:89:fb:fd:47:72:08:9b:e7:f8:
                    54:81:46:db:41:39:e7:02:55:e1:13:1f:23:fa:f7:
                    57:d7:69:72:68:8a:f1:fe:59:28:fe:58:3a:d9:30:
                    89:6f:87:4d:02:2a:e5:80:01:1b:89:f8:98:9b:e3:
                    55:04:4d:dd:bc:ce:32:b5:a8:f4:59:c9:8f:00:fe:
                    3f:4e:62:29:d9:af:0c:cd:85:31:cd:f6:e1:e0:bc:
                    c6:14:d9:26:75:69:d1:3a:17:b0:98:c4:72:8d:66:
                    d7:21:a8:87:8f:3d:c3:98:a7:88:29:d6:c1:fb:42:
                    9f:86:6d:da:53:98:e0:48:2c:35:b9:ce:6d:46:f8:
                    96:74:9d:78:02:b0:da:65:eb:b1:ef:23:a4:45:28:
                    c9:92:4f:28:36:4a:35:0a:ac:a8:ee:5d:ea:f8:33:
                    0f:ba:62:60:74:ce:fb:d8:2e:48:9b:a1:7a:16:f2:
                    53:d7:c2:31:60:b6:bd:db:da:cf:99:32:e4:83:6d:
                    b0:3a:af:7b:f5:ad:53:09:ce:f3:8f:24:50:48:1d:
                    8a:ce:31:3f:5c:0f:aa:52:37:4f:4a:74:ac:91:af:
                    b2:2c:bb:01:31:73:5e:0f:a0:f9:c5:62:60:a9:b4:
                    c3:22:c2:17:51:f6:c4:09:2e:1b:eb:18:ad:57:83:
                    16:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7C:0F:04:26:F2:05:96:25:CC:DB:B7:A2:B2:2F:69:40:3E:A0:F6
            X509v3 Authority Key Identifier:
                keyid:79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:48:22:a3:40:97:8b:c5:ad:a1:6f:be:08:26:cb:64:bc:b0:
         61:e0:46:ac:7c:aa:e3:18:06:f0:ee:a7:b3:3f:32:5e:c2:d3:
         3f:c3:49:de:d1:7c:81:98:fd:25:0e:9b:de:5e:20:50:e5:b0:
         9a:ce:e5:6b:90:35:07:1e:23:25:74:19:44:db:4c:c5:c7:fc:
         66:c4:2a:b5:e6:2e:3e:5e:07:f9:c2:f9:70:c7:9d:bb:93:e4:
         e2:51:5f:ff:16:3a:1c:b0:99:6c:8a:c1:01:bf:7c:36:60:c7:
         69:b2:e9:2f:d5:52:9c:12:1f:58:45:b9:5a:94:cd:01:e3:7a:
         ea:e6:94:75:fe:86:48:ba:9d:ce:b0:6f:e6:74:8e:78:43:97:
         43:bc:15:8a:01:8d:ba:8e:ca:de:89:3d:2e:38:8a:fe:97:79:
         45:26:77:2a:98:ec:fa:9b:60:9a:88:1b:0a:60:e9:de:6c:99:
         93:04:de:2b:39:ed:c6:31:88:13:bc:4e:4d:13:aa:ec:c4:0c:
         0f:48:e4:5c:d6:74:be:58:be:33:44:ee:1e:02:52:f7:62:59:
         da:40:da:62:26:ba:34:b9:1f:27:9b:0f:fe:62:04:eb:fe:9a:
         ad:e8:59:33:f9:e3:fd:cd:06:8a:f3:fe:45:d7:20:2d:1b:f2:
         c4:8c:9b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:37 2026 by rpki-client