Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft
File:                     81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft (raw, json)
Hash identifier:          lAzFcijhFdBHA71oBkEXLuoqoovJhSWext4tYUKOOaQ=
Subject key identifier:   28:11:59:FE:C2:1E:3B:A1:BA:9D:DC:0D:65:0B:83:90:2E:27:8C:D9
Authority key identifier: 81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52
Certificate issuer:       /CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652
Certificate serial:       0E7DACF3950F1E75298CB2888E257B99E32D0F21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft
Manifest number:          032B
Signing time:             Thu 16 Apr 2026 23:02:45 +0000
Manifest this update:     Thu 16 Apr 2026 22:57:45 +0000
Manifest next update:     Mon 20 Apr 2026 03:30:45 +0000
Files and hashes:         1: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: aeR78T4SgFq62LUVaHNT0OWQnz8U1jUNL74Pz+jaUQ8=)
                          2: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: 39I2VRz2Pwheop/Q/95GW6wOO98caUDbgzZuoNjlDio=)
                          3: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl (hash: a8qpAHpWAJLLrBhbxR1kv+Rbl1MQu6OEaYvEjy3j5PU=)
                          4: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: yyP1s7Drm4K7i/5vyWhbMeYMvkp/vo6vSFKCXgZUuLI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl
                          rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 03:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7d:ac:f3:95:0f:1e:75:29:8c:b2:88:8e:25:7b:99:e3:2d:0f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652
        Validity
            Not Before: Apr 16 22:57:45 2026 GMT
            Not After : Apr 20 03:30:45 2026 GMT
        Subject: CN=281159FEC21E3BA1BA9DDC0D650B83902E278CD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:cf:6f:44:d6:b3:69:92:96:4b:72:6e:b4:
                    89:d4:7c:52:74:bf:7d:42:e2:d8:5b:98:d2:52:b1:
                    45:14:56:bd:ec:49:22:4e:49:9a:b0:56:5f:17:e7:
                    3f:1f:1d:ff:ac:1f:0b:80:ca:f4:28:b0:05:c7:b4:
                    7a:ba:3e:42:1e:05:c5:3e:2b:48:b4:a2:cd:0d:22:
                    05:19:98:cc:72:d1:ba:a1:d6:a0:f8:a9:c2:7e:ec:
                    12:11:75:eb:d6:94:62:64:b5:05:d9:ee:04:cc:43:
                    5a:8e:b5:ea:78:28:0d:75:e3:94:03:09:4c:d6:2f:
                    aa:9d:dd:d2:53:18:e5:b3:fa:1e:81:b7:6b:de:98:
                    07:55:19:dd:96:76:45:cf:2d:0b:a7:17:e4:5c:00:
                    e4:71:a6:d8:66:a0:bf:01:bc:17:e1:14:99:f1:21:
                    e1:8b:40:d6:64:2b:94:89:f8:f6:24:3e:1c:16:01:
                    e9:3d:2a:4f:81:2f:e1:6e:38:7b:c5:46:e8:7f:9a:
                    a4:dd:63:28:6d:a7:32:f5:e8:17:f2:a7:22:1e:18:
                    f3:44:9d:8d:f8:33:e5:3d:7f:21:74:2c:f4:8d:fa:
                    8d:e7:b1:61:34:29:21:47:b3:60:95:4e:dc:87:9f:
                    78:83:50:1a:46:59:74:fe:9f:08:a0:1b:dd:f0:8a:
                    e3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:11:59:FE:C2:1E:3B:A1:BA:9D:DC:0D:65:0B:83:90:2E:27:8C:D9
            X509v3 Authority Key Identifier:
                keyid:81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:81:6f:e9:45:c7:05:7e:30:39:f6:34:a2:42:18:40:7b:fe:
         aa:35:08:ab:14:f3:80:8f:0c:92:9a:0b:68:03:59:0d:59:ff:
         c7:e7:c6:40:f4:0a:93:38:32:e6:66:d8:f3:f2:b4:48:f6:4d:
         f1:c8:a4:15:71:aa:ef:ea:c4:b3:36:af:3e:ad:e4:17:01:62:
         3b:41:4b:90:03:fa:96:76:fe:d9:eb:7b:1d:89:a1:6d:80:44:
         42:e6:f9:84:94:11:d6:12:a9:01:8b:0a:87:5e:13:28:7a:34:
         c6:30:a9:ad:b3:21:53:ee:99:ec:89:31:4e:8f:fa:2a:7a:83:
         63:77:c6:d7:6a:09:c6:e2:7b:21:51:1f:a3:99:53:40:c7:39:
         33:77:eb:04:cf:7c:7b:5c:70:37:40:75:ce:a6:a1:b6:74:d2:
         8d:2d:b1:e3:66:64:33:1b:6f:4d:d3:ad:08:07:5c:36:a8:2d:
         35:d7:24:10:63:ec:7b:18:d3:21:2f:0f:c5:ab:71:36:00:8a:
         0f:8c:c7:f1:ab:20:80:99:45:69:9c:7f:0d:01:63:10:b6:e2:
         64:1c:09:f2:aa:76:89:12:f6:b3:5b:5d:f5:04:2a:87:51:69:
         e6:6d:c9:9c:32:79:e3:10:f9:71:b3:f3:03:34:f7:85:22:11:
         bb:de:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:15 2026 by rpki-client