Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
File:                     00EE953FD699788668C724460F4D8D420238194F.mft (raw, json)
Hash identifier:          nAuqU2IoN3Csnej8rcrBReWAJentYpPhnlRbGrnFvtw=
Subject key identifier:   DD:01:E4:E9:BC:47:FC:A0:0B:AF:4D:0F:BB:25:2A:B9:FB:42:20:3D
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Certificate issuer:       /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial:       34168CE9A0AB7D03B6ECCAE27495C43C66A8A3D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
Manifest number:          0266
Signing time:             Fri 17 Apr 2026 13:10:44 +0000
Manifest this update:     Fri 17 Apr 2026 13:05:44 +0000
Manifest next update:     Mon 20 Apr 2026 16:31:44 +0000
Files and hashes:         1: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: bvNupIpWmDhaL8rFDaTnVFDhI5fuAg0k+27/VGkzYJs=)
                          2: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: V10gFKQc+WgMolRvJOryKxPX23lt9/y0uKRD456elbI=)
                          3: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: rkVkBOM1gxwGdr/crh5svI3UEvA+KgJo/zG78neJc4s=)
                          4: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: /6F+dCYfhj8nILz7NzSN2rSqER4M9P3bFQ45j14GuDI=)
                          5: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: sAwAc9IZ0DLVOhouh4zmTpqaxK9YADxytwY1+gNq8u0=)
                          6: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: +0IYJt+ldEx6hRx5/LkWzdAnyMowfs90g5flb4WhwNI=)
                          7: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: ebM/F6KIH60LQhN77naN07o0NG2yDX1tXydmaED/mYQ=)
                          8: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: P5LJ10k2BHWyFCmNYnH84ZTaEVA9KJ8Poi0f/ODMh70=)
                          9: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: YWPfLwfnjAzwyRdQ8HMatujMpctNGsrqPWB+mJd3o7c=)
                          10: 00EE953FD699788668C724460F4D8D420238194F.crl (hash: cXpWq2Q8YuPJqaIKt2gfHE/DOJp/PmHSsWPlkCGNou8=)
                          11: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: FgOjY7TNj+vVOTY+T0f+/7XZ2PEhUJFN/481ZR8iBC4=)
                          12: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: oOdkzUMhWiV8RYKVpP+DjzstiVGxbGTPIWzG22cdnjM=)
                          13: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: SFv+wuFNNUXZIPzGgJ8H4FmCqsXvXTtUEEjtGiij04Q=)
                          14: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: jtfCyTfV0URchGl+wzEZEXq1ZK6wyh3Rdim0gK9JxbY=)
                          15: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: s40PNuPdNfcWQatEkq0oOjj78y3YVxe60B1MhUs2hPU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
                          rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 16:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:16:8c:e9:a0:ab:7d:03:b6:ec:ca:e2:74:95:c4:3c:66:a8:a3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
        Validity
            Not Before: Apr 17 13:05:44 2026 GMT
            Not After : Apr 20 16:31:44 2026 GMT
        Subject: CN=DD01E4E9BC47FCA00BAF4D0FBB252AB9FB42203D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:de:5e:9d:a9:b4:2b:5f:ae:af:cb:39:33:
                    5f:0c:a3:8e:ab:f1:65:a9:f3:d3:df:8a:3f:71:b9:
                    74:a9:e5:9f:4d:90:95:79:4d:bd:fb:19:e6:ea:14:
                    cd:33:39:c8:ce:54:3d:47:a0:d4:d2:f5:df:d1:39:
                    95:3f:bc:d5:05:b8:90:20:5c:6c:1e:e1:80:01:13:
                    44:6c:11:c6:1a:73:33:a1:5f:db:90:07:65:ae:47:
                    75:2c:3f:c3:35:72:63:f3:2b:f6:fe:18:9b:c2:28:
                    6a:5c:54:d3:7e:15:fe:1a:a8:be:4b:84:f0:19:a2:
                    a6:99:10:ee:bb:2d:0d:aa:f3:0f:87:71:29:d6:a9:
                    5e:b2:d1:8a:c4:aa:91:38:e8:f0:13:32:20:d8:a8:
                    e0:9f:3d:9c:8d:2a:0a:71:2e:2e:3b:98:12:a2:c5:
                    dd:09:cf:a8:fd:c9:fb:38:6a:d8:05:e5:a7:e1:9e:
                    f1:11:c1:35:53:07:c7:bc:aa:51:4b:20:bb:27:28:
                    45:23:34:cf:7b:6e:4f:7f:9c:b9:a6:fb:e1:e0:fa:
                    01:8e:d7:62:50:a5:6d:63:c7:6b:03:96:4a:86:6b:
                    bc:4c:3f:d3:8a:80:2d:a9:8e:66:04:e0:b4:29:ec:
                    32:e5:bf:cb:6e:23:ae:11:8e:ba:79:13:9b:32:4e:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:01:E4:E9:BC:47:FC:A0:0B:AF:4D:0F:BB:25:2A:B9:FB:42:20:3D
            X509v3 Authority Key Identifier:
                keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7d:e7:70:24:bd:e5:00:79:fe:05:23:21:ab:1e:2c:a2:f5:
         09:0d:03:d4:ef:7c:40:c6:53:a8:21:3b:ff:10:51:d7:08:f8:
         02:f3:43:51:73:89:1a:96:ea:26:be:d9:32:c6:43:b7:12:d5:
         3d:fd:fb:81:f3:43:79:e4:52:c7:a5:c3:d9:7f:50:d9:41:98:
         87:5d:77:2a:b2:39:06:d4:37:24:ca:f9:ab:0c:4b:cd:f2:36:
         20:78:ef:6e:68:a9:08:7b:04:9e:26:02:d5:d0:cd:13:8e:7b:
         ab:bd:50:4b:2a:2d:af:cb:38:70:82:ee:1c:b7:5c:e0:72:27:
         cc:71:97:71:37:ae:32:b4:b0:ce:33:32:93:e7:98:f3:a6:1e:
         77:70:c9:b4:47:25:f1:9b:42:69:6f:d3:5d:fe:68:89:82:8e:
         45:8f:d5:08:46:f2:d9:ea:f9:7a:c1:d5:93:96:49:cd:fe:3d:
         99:75:92:88:a8:9c:e6:d3:0a:0e:2d:75:19:b3:8a:69:8f:0a:
         9f:f8:9a:24:f8:c9:34:9d:6b:0b:39:74:2a:36:d9:23:a6:d2:
         87:5b:4e:9d:5a:c5:e3:a4:8e:3f:99:e2:11:3e:3d:c9:7f:6e:
         57:5a:6e:69:c8:6d:23:81:29:1c:e6:54:9b:7e:2b:98:40:69:
         f4:15:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:28:34 2026 by rpki-client