Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
File:                     CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json)
Hash identifier:          44FjK8UA3vnd+i19nllLgu56Ktrb79GqFGXaAX7TBlM=
Subject key identifier:   A2:E9:3B:D2:25:C2:C3:8F:40:C5:D1:E9:80:DC:3C:EE:DD:B9:71:53
Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
Certificate issuer:       /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Certificate serial:       4AB8E3390E4353AD34BE175A56F3D2B86BC7E52A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
Manifest number:          0575
Signing time:             Fri 17 Apr 2026 03:02:41 +0000
Manifest this update:     Fri 17 Apr 2026 02:57:41 +0000
Manifest next update:     Mon 20 Apr 2026 14:54:41 +0000
Files and hashes:         1: 34332e3235342e3132352e302f32342d3234203d3e203538343832.roa (hash: 9k0Dch7Ak/Z6QMfcr+CZARJzHwZAuvWS8RON6gwZ8+8=)
                          2: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: 253PIIaf2Tfe4dVA8SfkSeenzrn1yLojxg1BjltDWcI=)
                          3: 3130332e32382e3232362e302f32342d3234203d3e203538343832.roa (hash: znVQQu+fIshyxf4G9mODoMFhYbJt3eH/0GuMVl8IwkA=)
                          4: 3130332e32382e3232372e302f32342d3234203d3e203538343832.roa (hash: 9Ew1E8zQmp44/WcA6xsjn9DG+Pj2XFS0Nowbj2INal8=)
                          5: 34332e3235342e3132362e302f32332d3233203d3e203538343832.roa (hash: eZci8ugTs0KdDJxBSy4Gimtbte6tWVKKsSs87Z+r/R0=)
                          6: 3130332e32382e3232342e302f32342d3234203d3e203538343832.roa (hash: 6xVTWVhJwHlTuupRqckmEH+2N+SG40cJCesUx/LAQVI=)
                          7: 34332e3235342e3132362e302f32342d3234203d3e203538343832.roa (hash: DbGnB1DqBC848hiKo1po0MqE4Gsa4J0OUdCykpEG2OQ=)
                          8: 34332e3235342e3132342e302f32332d3233203d3e203538343832.roa (hash: iXtClCML1N9IxFKEnUu67jBHGm8QPJyw41HrxTVVN1g=)
                          9: 3130332e32382e3232352e302f32342d3234203d3e203538343832.roa (hash: BGVByiTWnar+G9klrtY285yoFDo2RjE2YjBcwnHtPF0=)
                          10: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: oU26K1WNdmD4+eVmiwc4bkVkpstGiJjSdrNC9yEyagk=)
                          11: 3130332e32382e3232342e302f32332d3233203d3e203538343832.roa (hash: 6VLiq/I44WcMCT+b35Hhj3WDvps84mPpDnwbEu/ZNyQ=)
                          12: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: mRGf6gs/ABp9PzNS6T0PAqoLPxz5BcKwihHdj2zL8mM=)
                          13: 3130332e32382e3232362e302f32332d3233203d3e203538343832.roa (hash: 4fMJzq8Nq1YJP9z1+S+a93o7lbnttq7OojId/hUDTmM=)
                          14: 34332e3235342e3132342e302f32322d3232203d3e203538343832.roa (hash: hBuj8wbQYmHqntGj0o/eUNV+3o0v8DMJLG22gmNYBVk=)
                          15: 34332e3235342e3132342e302f32342d3234203d3e203538343832.roa (hash: q6ov1LjBJ1C3MscONi3jd31fdQpeg7xo73ISZgsB13M=)
                          16: 34332e3235342e3132372e302f32342d3234203d3e203538343832.roa (hash: QBHhnk1VzpNswo5xP4biYnK0qXDI4z1xHEPaP9wifbk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
                          rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 14:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b8:e3:39:0e:43:53:ad:34:be:17:5a:56:f3:d2:b8:6b:c7:e5:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
        Validity
            Not Before: Apr 17 02:57:41 2026 GMT
            Not After : Apr 20 14:54:41 2026 GMT
        Subject: CN=A2E93BD225C2C38F40C5D1E980DC3CEEDDB97153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:65:ff:7d:07:36:74:15:51:5c:51:46:79:
                    38:35:00:0d:b5:a2:35:e9:fa:8a:ff:e9:e8:4c:1c:
                    66:eb:53:8c:7c:d1:d6:24:e7:5e:e6:3a:84:b0:b1:
                    84:2a:dc:e1:9e:d6:6c:1a:5a:73:b1:64:b0:15:77:
                    a0:f0:85:12:7d:c2:b3:28:22:8c:65:bc:f2:18:c4:
                    e1:3b:d6:67:23:f5:1f:4f:13:bf:6f:22:87:aa:c9:
                    55:a8:c7:71:bd:d9:07:2b:9b:62:3a:db:ea:b6:66:
                    1d:b6:95:3a:35:4e:a0:6b:27:20:bc:7d:b3:69:2f:
                    a8:c0:9d:97:d4:3d:fb:7b:99:1a:91:f4:4b:ba:be:
                    2e:d0:14:7e:9b:d7:f2:ab:35:6f:4b:e5:d0:47:82:
                    65:a1:83:10:71:43:46:b5:84:18:67:4d:7b:1a:4a:
                    2e:f8:3c:e5:b9:1b:a6:97:fc:a2:f2:ae:1b:10:5b:
                    c3:f6:55:45:8a:a0:2a:54:8d:5a:fe:01:2e:fe:11:
                    b0:b6:eb:f1:08:ea:cb:b3:f8:3c:8c:fc:e0:1e:d3:
                    4e:d9:68:ef:92:9d:3e:88:27:2d:ff:d4:96:98:f1:
                    c4:ba:69:99:c9:25:f3:c3:1e:2d:dd:3c:ad:b0:ff:
                    b0:e4:b1:d5:20:ff:bf:4f:96:1f:5d:5a:38:4c:8a:
                    15:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E9:3B:D2:25:C2:C3:8F:40:C5:D1:E9:80:DC:3C:EE:DD:B9:71:53
            X509v3 Authority Key Identifier:
                keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ef:ca:78:92:4b:be:bd:6d:4a:e8:b2:b2:34:14:f8:02:05:
         48:d1:d0:fd:3b:94:92:76:d5:fd:3d:06:9b:0c:a4:3c:c5:85:
         94:df:c3:8c:25:35:e2:12:44:0d:04:d9:78:cf:1f:e4:bb:80:
         5b:d7:99:41:b4:27:28:fc:3f:39:aa:13:0f:7d:ac:89:a6:90:
         53:c3:20:50:50:e9:c3:47:89:24:44:12:b1:0e:71:4f:f7:cb:
         87:e8:a3:de:c5:97:51:08:1f:18:5c:f7:ce:8a:58:e1:39:54:
         18:e3:5b:78:65:7a:e7:9c:ba:dd:ae:7a:8a:d8:93:3f:23:09:
         e8:f4:5f:47:f0:f6:b1:3d:aa:a0:67:0c:7f:78:e4:8b:04:8f:
         4b:c2:56:7e:3a:97:77:39:af:2f:16:00:74:cc:89:b0:c4:91:
         ee:52:a7:17:ba:ab:43:d8:5e:a2:8e:75:ee:7c:1f:ad:d7:f9:
         f4:32:e5:07:b9:1a:80:2d:f3:ec:37:c9:25:d7:93:4a:46:8b:
         d3:c2:6b:09:34:7d:04:9c:d9:5d:48:ff:93:a1:03:b7:bd:db:
         37:c7:95:e3:26:9b:3c:09:10:6e:86:b3:04:d1:35:9a:46:df:
         d9:88:32:fb:ff:c0:8a:bb:c9:e1:73:82:01:10:e6:97:81:14:
         d7:1c:90:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:32:30 2026 by rpki-client