Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
File:                     2993EFF92300988A33773DD8C4B502F74B907112.mft (raw, json)
Hash identifier:          Ccg9Q2BVM8QxN6Yy1IgjGoVR0HPQNua5bz8/e13fNyI=
Subject key identifier:   A1:36:15:A5:B3:76:48:3A:55:4D:BB:33:BA:2D:DD:4D:C8:EC:B7:60
Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12
Certificate issuer:       /CN=2993EFF92300988A33773DD8C4B502F74B907112
Certificate serial:       4A2F44CEC7AFA35286485F0A06A24053E03DD096
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
Manifest number:          024A
Signing time:             Sat 18 Apr 2026 17:12:35 +0000
Manifest this update:     Sat 18 Apr 2026 17:07:35 +0000
Manifest next update:     Tue 21 Apr 2026 18:59:35 +0000
Files and hashes:         1: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: 8FISrQYbnFOpjiQHBztskExqHRou9e+XROYZoHoylq0=)
                          2: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: JCzAZhJKrjcnXPRUzXNAKrf8B2XJvFX+OCG60Nl0Dgk=)
                          3: 3130332e3130352e37392e302f32342d3234203d3e203535363736.roa (hash: 8akbgTHcBzy09cH/zWkvU4LNiBkusQqjKfIeLuC7DA4=)
                          4: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: nyiH5XZRu3exSPXepkvkOwB2m2ULxFRKVzAk8qvL/Rg=)
                          5: 3130332e3130352e37382e302f32342d3234203d3e203535363736.roa (hash: jFVbs/Ft4bO73kf8lHPUr8+y5jJNNuINBps0Q/t8tqg=)
                          6: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: MQCiIDyqzNBQYpoR0MRnkXubNFQEv31SOdbwjwRhFAI=)
                          7: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: 9H4P2m2Q86+wvaB6C5BWHbuw5/CMaL6D8SYn5Utxj3g=)
                          8: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: /T3q0aKMlccwCqwpvQMGCHEcfpAgRAD32J67j3q+a2M=)
                          9: 2993EFF92300988A33773DD8C4B502F74B907112.crl (hash: aEVJMI6HMOQC1WZK859RagHE4GxKJYy2uUvsYE4rdQQ=)
                          10: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: u1/FWvhkUX8NdpjOfCEzIQ83rh9KfgiQw+mbq+Uaf5Y=)
                          11: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: dcc/bwTW1oTsN+Z0h/Aw94q6mQUdzuyzIAdCoesD/EQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl
                          rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 18:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2f:44:ce:c7:af:a3:52:86:48:5f:0a:06:a2:40:53:e0:3d:d0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112
        Validity
            Not Before: Apr 18 17:07:35 2026 GMT
            Not After : Apr 21 18:59:35 2026 GMT
        Subject: CN=A13615A5B376483A554DBB33BA2DDD4DC8ECB760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:6b:4f:95:73:fd:3a:f4:7b:df:ae:5c:69:
                    a7:b6:16:ee:ea:df:4f:d4:3e:b6:ff:d4:2a:4f:6e:
                    de:41:68:52:0d:5d:a8:d7:b0:63:07:5d:1b:78:d7:
                    84:02:8d:33:19:1c:da:56:f3:1b:25:80:8d:3b:50:
                    69:6f:c7:2b:e7:23:1a:2e:80:01:2f:49:46:ee:5c:
                    81:78:66:99:66:e3:e8:63:c5:36:ee:c7:f2:0c:52:
                    1c:2a:31:b6:ad:ee:11:02:c6:ef:7d:83:ab:e4:99:
                    47:14:48:d4:0e:3b:95:98:45:f2:5f:be:5a:20:c5:
                    43:40:be:0e:f5:d7:41:35:28:9d:e0:a2:96:b2:e7:
                    65:3b:6e:48:06:5a:48:00:40:0d:f6:f6:ed:0f:4b:
                    e2:d9:6b:93:89:c9:53:42:7d:22:8f:b3:1b:e6:69:
                    11:2a:44:66:a2:65:e4:68:95:6f:bb:6d:1f:3d:5f:
                    c1:22:0e:de:a9:05:60:80:34:fd:e1:4e:e7:07:d6:
                    a8:9e:66:77:2e:0a:dd:be:05:3c:df:34:6e:c3:af:
                    34:5a:49:62:27:44:78:e0:ee:44:20:da:ff:97:b5:
                    06:8e:85:5f:ee:ac:aa:cb:45:4e:1c:8b:57:50:27:
                    76:c3:47:48:3f:84:26:63:ee:67:6f:06:60:55:6e:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:36:15:A5:B3:76:48:3A:55:4D:BB:33:BA:2D:DD:4D:C8:EC:B7:60
            X509v3 Authority Key Identifier:
                keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:22:a2:f8:0a:1f:8f:e2:0b:81:ce:b7:71:37:47:cb:45:13:
         6f:b6:01:13:d1:28:b1:8f:61:4b:1e:de:1b:e8:29:19:a4:ce:
         15:2f:be:4f:cc:a6:32:19:22:6a:5e:dd:ca:9e:a0:56:69:3b:
         2a:89:d7:52:e4:76:8c:48:5c:e3:6d:4c:2c:15:d7:e1:fe:67:
         e0:42:24:e9:e0:5e:37:2e:43:15:e8:16:0d:13:a5:2c:3b:ef:
         5f:0a:16:f7:71:4c:3c:ee:b1:cd:9b:78:7d:38:a9:3a:9b:ee:
         90:56:dc:55:c0:45:f2:95:df:5e:43:4f:f4:73:ba:97:3e:91:
         cc:0d:53:fc:94:22:6e:10:b9:90:e0:b6:16:49:f8:28:8b:8a:
         04:93:ce:48:a1:1c:41:83:a0:fc:24:01:55:eb:a7:98:f4:ca:
         8a:89:7b:1e:89:75:5e:f8:0e:5d:06:10:54:11:75:e6:10:b8:
         3e:3e:b3:a8:cd:62:f5:f8:d3:9e:6d:91:df:5e:a6:16:89:af:
         0c:70:96:69:e1:3b:4a:94:57:b0:f8:c1:81:8c:8c:73:e7:85:
         62:c4:5b:a2:22:d1:04:79:c6:29:53:bf:f8:8e:90:3b:e6:18:
         1a:a1:12:8d:5a:fe:55:e5:73:cc:0b:47:fe:fa:70:9f:c8:ce:
         92:01:bb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:22:17 2026 by rpki-client