Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft
File:                     41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft (raw, json)
Hash identifier:          TlrQ2pdvm3BD+hTQvjTqPhWqrP+h4k0aPjhYCD7FQR0=
Subject key identifier:   7A:9E:04:08:D1:7E:58:0A:6D:6D:A3:F9:A8:F9:E3:7B:E9:A9:07:BC
Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C
Certificate issuer:       /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
Certificate serial:       27D78410B3B4520C06E7C2E73126C6B81565D5A4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft
Manifest number:          020D
Signing time:             Sat 18 Apr 2026 06:41:42 +0000
Manifest this update:     Sat 18 Apr 2026 06:36:42 +0000
Manifest next update:     Tue 21 Apr 2026 11:37:42 +0000
Files and hashes:         1: 3230322e3137332e36392e302f32342d3234203d3e203233363935.roa (hash: IWpRULjWlGR9Jzsp+ASiF1flr+SwQ4Q2L5sVUGqiiWo=)
                          2: 3230322e3137332e36372e302f32342d3234203d3e203233363935.roa (hash: BE8RKzWufUmY8gM5pF6f7oeSsMvCQ/US3VwzzqZjX3g=)
                          3: 3230322e3137332e39322e302f32342d3234203d3e203233363935.roa (hash: MAZtj8wCYeyMLR/QhCtmH1rAozS439X8LKLLq7J1p+k=)
                          4: 3230322e3137332e37312e302f32342d3234203d3e203233363935.roa (hash: HSD+rz78f30+7qMkNj8RIXAP7toiDue03fxCDLpd1gQ=)
                          5: 3230322e3137332e38342e302f32342d3234203d3e203233363935.roa (hash: ebTZrvCC33wSXgS/vmMuYEvFlyItzY4A65tpm7b8XjA=)
                          6: 3230322e3137332e38312e302f32342d3234203d3e203233363935.roa (hash: 3yHj4lXLINuzyHkwTxJmt8yGObuCgxfBF7xbnpVP4Bw=)
                          7: 3230322e3137332e37392e302f32342d3234203d3e203233363935.roa (hash: nAoSDJuqF6hbVEgVPLS26WtbrrypCt6JFjNgyc3rJL8=)
                          8: 3230322e3137332e37372e302f32342d3234203d3e203233363935.roa (hash: DT1voxU1N/hSTql3ltjbouW8VYAmulvadfX76qaEZ6s=)
                          9: 3230322e3137332e37382e302f32342d3234203d3e203233363935.roa (hash: zhJMlvXTxLuBFeVwFK4r4fNyStbf/Ql6Yg1ubq1FG9U=)
                          10: 3230322e3137332e39312e302f32342d3234203d3e203233363935.roa (hash: jEFMN+/YArKXHWvdd9szTx7AeesDaLCCXkcmKURU2fg=)
                          11: 3230322e3137332e38392e302f32342d3234203d3e203233363935.roa (hash: MoFSi1IdrKnDxvbOT8+bwDmrwlZs7D30PErF64rXmY4=)
                          12: 3230322e3137332e38362e302f32342d3234203d3e203233363935.roa (hash: Kuw7lUkD47qMQ8N9t8f+0cUPW15btvt7raHQz8c4jwE=)
                          13: 3230322e3137332e36382e302f32342d3234203d3e203233363935.roa (hash: mjkSgcJgLX5SOFtOhOviOBQgprMVBBer7U2vhkGwvLU=)
                          14: 3230322e3137332e37352e302f32342d3234203d3e203233363935.roa (hash: Ioz2g+UnY5qDj9ZEs6aQkN93zUApuLGpJfPqtPZmzZA=)
                          15: 3230322e3137332e39342e302f32342d3234203d3e203233363935.roa (hash: PFFF7wOzswXkUvuXZAL6iT8tVDgOdkVdZ6Rau5XCsgs=)
                          16: 3230322e3137332e38332e302f32342d3234203d3e203233363935.roa (hash: +q3wlg13BeY7XP8EgfGzrDoOCR+6sfClfQe2l9amwig=)
                          17: 3230322e3137332e37342e302f32342d3234203d3e203233363935.roa (hash: 3cx2QRjGVSumggdxVl9lyK0OrH1snPi5KBCV6wfSuVs=)
                          18: 3230322e3137332e38302e302f32342d3234203d3e203233363935.roa (hash: Vmt2hMQ1PzBTrS/Zf6NsqZ+thU+zV90I3cLmY00k7VU=)
                          19: 3230322e3137332e37322e302f32342d3234203d3e203233363935.roa (hash: jKUx0Kb59Rg6MFPSq2RoJeJiSFX4TEG4M2H5FmtzNtA=)
                          20: 3230322e3137332e38382e302f32342d3234203d3e203233363935.roa (hash: MTpdwnhfQZSQAh1ZGXABlj9jbImFIxLfXoLJhkWTtoM=)
                          21: 3230322e3137332e36342e302f31392d3139203d3e203233363935.roa (hash: 3zAwn0LWduUa/pmYsLoRj2cHE8oZcWbcaPjPRgNxwJg=)
                          22: 3230322e3137332e37302e302f32342d3234203d3e203233363935.roa (hash: IuagBHs+wXzOnacnPUkJxU6l40oN7NESENKBCYPpsBU=)
                          23: 3230322e3137332e38372e302f32342d3234203d3e203233363935.roa (hash: Z/thAbfiH6aci7mCfAjuPHRMycQOfIBu73zKFBwRIHE=)
                          24: 3230322e3137332e39302e302f32342d3234203d3e203233363935.roa (hash: aqr9G7daeMRwOwIQcJJyRek+PwNLD3VNhiJaFW2F3a8=)
                          25: 3230322e3137332e38322e302f32342d3234203d3e203233363935.roa (hash: 9TJpLgLS7LUO5wsdFqczCLAa4nlbwR69+ZuGz4M7mRY=)
                          26: 41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl (hash: ZvjOQw0bQwJ91q4jEl4GVEZZlLJaw5v0j4byat8O7Bw=)
                          27: 3230322e3137332e39352e302f32342d3234203d3e203233363935.roa (hash: 7hZ1/d8z8cuNOvDlKPy5v/4BiAJKyyXEJBjiAsWqzoc=)
                          28: 3230322e3137332e36342e302f32342d3234203d3e203233363935.roa (hash: 4WyGaw7pg5UYftsuxKZALRkqNDYf7OEez6Nq5nSCM4U=)
                          29: 3230322e3137332e37332e302f32342d3234203d3e203233363935.roa (hash: UWg1+ZlqcjDvHPPT1k4EQ/Rdg1I29Yb8QcAkFZktGvo=)
                          30: 3230322e3137332e39332e302f32342d3234203d3e203233363935.roa (hash: HqyHWbtOd5kjnZpc1shELfkBvMAEJDpjVjZ/6MOE3xA=)
                          31: 3230322e3137332e38352e302f32342d3234203d3e203233363935.roa (hash: CZ00gqTzVUJ95u4ziPkcHi+fVrKdKn0XMZAWrlb+XPc=)
                          32: 3230322e3137332e37362e302f32342d3234203d3e203233363935.roa (hash: X5jy5VzIopKMThtZkzTbzLShWD3aXUht7jnGIoGc1v4=)
                          33: 3230322e3137332e36362e302f32342d3234203d3e203233363935.roa (hash: 8jqzos5S6OkN9Ee6v+YzMqAqC0wNC8Krr96CfUxfSYE=)
                          34: 3230322e3137332e36352e302f32342d3234203d3e203233363935.roa (hash: RaKEgFfPBag0Nqmq1W+hCtI9Ea7HFEcZBDAtujJERJk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl
                          rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 11:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d7:84:10:b3:b4:52:0c:06:e7:c2:e7:31:26:c6:b8:15:65:d5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
        Validity
            Not Before: Apr 18 06:36:42 2026 GMT
            Not After : Apr 21 11:37:42 2026 GMT
        Subject: CN=7A9E0408D17E580A6D6DA3F9A8F9E37BE9A907BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:ea:4e:54:93:63:e5:76:9d:ea:2a:ab:88:
                    fd:71:db:60:f9:7e:e5:5b:8e:59:46:1b:f7:55:d7:
                    80:43:a5:64:f2:d3:a9:51:db:02:df:8c:31:dc:61:
                    96:2a:aa:bc:03:51:a6:17:89:b7:8b:50:0e:21:47:
                    38:94:87:f3:64:a9:a5:3e:c1:91:5c:b8:76:da:a8:
                    e7:d9:eb:26:3c:fc:42:4e:4d:51:4d:9f:7c:3f:51:
                    e5:18:2d:6b:3f:07:e3:e7:88:ec:c8:2d:87:be:65:
                    01:04:05:e1:6e:f3:29:10:d8:22:a0:59:85:64:60:
                    dd:a7:b4:22:91:b3:98:fc:ce:24:da:73:1b:0d:df:
                    41:c8:4f:95:69:5c:b2:61:30:15:22:1b:04:ac:5d:
                    12:06:d2:10:42:52:02:a3:4d:19:c4:34:d3:79:80:
                    5b:dc:12:1d:eb:49:87:87:58:43:6b:35:ab:ff:7b:
                    bd:93:ef:dc:7c:45:5b:10:60:60:30:3a:8f:b2:48:
                    18:27:34:0f:cb:22:a9:f8:60:49:49:8a:dc:52:69:
                    c0:8c:e2:33:8b:81:2f:e7:5c:5b:73:d2:06:b4:d5:
                    3e:95:1e:20:b5:b8:36:05:8d:17:6c:fd:1b:ee:ad:
                    ac:36:35:74:be:24:cb:7c:c2:96:58:32:2a:85:85:
                    7b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9E:04:08:D1:7E:58:0A:6D:6D:A3:F9:A8:F9:E3:7B:E9:A9:07:BC
            X509v3 Authority Key Identifier:
                keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e7:b7:d6:41:a5:c4:a5:6e:0e:48:46:71:16:35:92:8b:a9:
         a6:34:28:b5:52:18:4d:61:a0:88:a0:b6:0d:70:ae:74:41:40:
         9d:03:b8:d8:50:c4:a2:e0:34:ab:0d:2b:87:c1:dc:e3:19:22:
         94:43:b6:58:c8:9e:ea:f5:3e:9b:68:1d:8c:81:21:d4:57:a5:
         c7:10:35:ce:37:a7:79:dd:a8:c7:1e:f9:6a:12:48:fc:b5:f8:
         99:be:54:ea:5b:20:3b:4c:10:6a:6e:6b:18:ea:0a:63:05:89:
         c1:0c:9c:f5:a5:d6:16:ed:3d:2f:cf:ee:04:9c:28:9c:b0:e3:
         60:cc:19:b7:af:31:06:55:04:3b:b5:2a:1b:b8:7f:83:46:69:
         89:3a:be:30:e2:74:60:26:29:a3:95:cd:3c:69:4b:86:bf:23:
         3d:b6:f5:11:f4:8f:73:c6:95:ee:46:ae:35:9f:1a:4a:ca:4b:
         44:49:42:a3:c6:77:0c:6e:ba:c7:23:fb:d3:f5:43:1e:a0:e6:
         cf:21:34:58:bf:11:71:e9:c9:ad:56:39:a3:8d:cd:dd:c1:9c:
         fe:57:d0:74:12:5c:20:b4:72:d3:ca:3a:b0:34:1d:ab:96:6c:
         8c:5c:95:b4:2c:0c:89:aa:8a:29:08:3c:eb:64:e2:50:10:a3:
         53:89:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:22 2026 by rpki-client