Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
File:                     945AD192B10F71CE48362295A9C6281FE3395786.mft (raw, json)
Hash identifier:          wz7TDvXax2FqeY1ftzRI00sfHRqCFIr4svDSDZkj1Rc=
Subject key identifier:   6E:2E:00:7D:41:76:4C:4A:8A:06:9C:2C:E5:27:56:84:DE:96:E4:07
Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86
Certificate issuer:       /CN=945AD192B10F71CE48362295A9C6281FE3395786
Certificate serial:       792AB4A112A8EB92BDE30B4571582D66880DAEE7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
Manifest number:          026F
Signing time:             Thu 16 Apr 2026 11:52:32 +0000
Manifest this update:     Thu 16 Apr 2026 11:47:32 +0000
Manifest next update:     Sun 19 Apr 2026 21:20:32 +0000
Files and hashes:         1: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: wuBJwpKwOiGhlkXr5a00YrNTyDMK7HD3QVMHitGSpjk=)
                          2: 945AD192B10F71CE48362295A9C6281FE3395786.crl (hash: UbqNX8s4m+TZxmFpQ9TIyWdsyDfeTi4IAsm71dWVNsE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl
                          rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 21:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2a:b4:a1:12:a8:eb:92:bd:e3:0b:45:71:58:2d:66:88:0d:ae:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786
        Validity
            Not Before: Apr 16 11:47:32 2026 GMT
            Not After : Apr 19 21:20:32 2026 GMT
        Subject: CN=6E2E007D41764C4A8A069C2CE5275684DE96E407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3e:6f:0c:db:79:4e:ba:74:a0:44:52:55:eb:
                    e3:de:d8:10:78:61:d7:d3:94:0a:a6:77:97:63:cb:
                    ca:df:03:6b:2a:50:f4:a7:75:65:95:24:42:93:fe:
                    f6:1a:46:73:bc:22:7f:62:12:41:f2:db:47:86:d9:
                    b7:02:fe:91:0d:65:3b:1e:56:4b:ac:0b:3c:c1:e5:
                    a7:b1:0f:d3:e3:5f:6f:98:5c:98:d6:fe:2c:55:cf:
                    7d:f7:f7:c0:ad:7f:8c:44:2f:49:0c:8e:bd:30:9c:
                    3f:05:09:b4:ee:da:58:68:72:0d:66:f2:0b:20:6f:
                    de:b4:dd:53:aa:fb:e6:1a:40:11:74:0d:14:97:69:
                    50:7a:e1:8d:1e:2f:69:c4:1c:33:a8:ab:f9:8f:f1:
                    e2:09:9f:6e:3b:29:6a:42:57:4f:7f:27:a2:85:06:
                    0d:c2:0e:0e:32:2c:7f:f0:f7:64:21:76:b7:76:2c:
                    ce:65:1e:60:a7:c3:f3:54:62:0b:48:d3:5e:41:00:
                    e4:0d:c8:3e:da:53:05:f4:cb:c1:b1:d3:03:e6:12:
                    3a:d1:0d:d2:1d:b6:5c:4a:6d:3c:9e:52:2a:5e:fb:
                    c4:94:56:f4:ee:2c:5f:45:1b:94:29:07:8f:55:00:
                    97:a1:66:8f:0f:2b:e8:8d:16:a6:fa:47:cd:2b:ae:
                    84:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2E:00:7D:41:76:4C:4A:8A:06:9C:2C:E5:27:56:84:DE:96:E4:07
            X509v3 Authority Key Identifier:
                keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:76:bf:d8:87:97:56:fb:ab:96:f2:f2:23:93:a0:86:a7:d4:
         b3:33:ca:cc:80:5f:4a:4b:20:24:65:01:1d:f8:d0:a9:37:0f:
         fc:3b:64:1b:8a:07:d1:49:f4:bd:ea:3f:33:b4:0c:0c:17:51:
         6c:63:8a:ae:04:86:82:54:76:24:95:01:09:18:b8:82:4c:20:
         1c:da:46:26:0a:8f:b4:28:d6:e9:c7:b8:c8:6b:b1:a0:2a:22:
         28:6b:dd:02:3d:b9:20:9a:a7:98:e6:2b:ab:fd:d7:9e:af:25:
         2e:a0:17:92:11:0a:0a:b5:26:19:44:40:c2:f1:1a:60:42:20:
         c9:bc:57:ed:5a:37:0c:85:31:bc:3f:3c:80:8a:47:b0:3c:5e:
         b3:9f:8f:60:8a:65:0c:04:22:02:49:84:7e:7a:ef:73:a5:c1:
         bb:66:62:3d:30:c2:5b:d2:f2:5e:09:8e:67:74:b5:62:22:d9:
         9b:e4:06:d9:03:42:99:83:f8:58:c6:1c:aa:73:a0:1f:b6:ce:
         1f:0b:c5:68:88:11:d1:38:e2:96:11:d8:fe:82:cb:40:be:8e:
         21:81:08:24:86:5f:ff:44:48:93:1b:df:30:5e:35:59:20:b5:
         4e:c5:cd:e3:06:49:68:61:84:b2:dc:29:bf:b2:d3:93:f4:cb:
         9b:89:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:52 2026 by rpki-client