Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft
File:                     52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json)
Hash identifier:          98saiLqEOTPIBaAMFW48U9cHzsZK7mTMzlR4Acuj2tI=
Subject key identifier:   70:48:7F:76:6F:7D:A6:A1:9B:B2:E1:B2:04:02:2D:DE:53:53:38:52
Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE
Certificate issuer:       /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE
Certificate serial:       6E07D2BCDC5F60FB27BE211BEB95EA2DC5E574F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft
Manifest number:          015D
Signing time:             Thu 16 Apr 2026 04:21:11 +0000
Manifest this update:     Thu 16 Apr 2026 04:16:11 +0000
Manifest next update:     Sun 19 Apr 2026 11:43:11 +0000
Files and hashes:         1: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: MfOMH8pyeWOb33eVj5lGJlXFgGJnVY97tpbaPDlGeZk=)
                          2: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: y9Zdz3dExMj4aSL6w4lV2eRBaMndEHMmhurZ91gVhFc=)
                          3: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: 4v43iD9DKTufMtXesf51VzAOv6Cm6ifyUjKOJHeSXSw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl
                          rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 11:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:07:d2:bc:dc:5f:60:fb:27:be:21:1b:eb:95:ea:2d:c5:e5:74:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE
        Validity
            Not Before: Apr 16 04:16:11 2026 GMT
            Not After : Apr 19 11:43:11 2026 GMT
        Subject: CN=70487F766F7DA6A19BB2E1B204022DDE53533852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:78:ae:79:4f:28:41:6a:1c:a1:aa:02:15:
                    e5:33:e6:f7:71:ce:dd:be:f2:fa:72:e4:89:3b:bf:
                    ef:7a:6a:d2:e9:04:3f:0e:57:34:2e:27:16:1f:71:
                    e8:0f:22:45:40:23:2b:55:0e:d8:25:80:4f:a6:dc:
                    e2:cc:0d:50:b9:f4:ff:62:95:f9:c8:64:e6:51:74:
                    e0:43:e9:78:15:b0:d1:c8:04:c1:3b:3d:1a:7a:aa:
                    a6:bd:56:54:83:4f:b6:92:94:fd:fc:b6:43:01:be:
                    8a:da:dc:96:58:81:7e:a1:b7:b2:97:03:70:69:ac:
                    f3:08:cb:de:c6:b9:da:e0:19:14:8b:72:73:cc:96:
                    ce:0e:12:61:b7:46:58:ea:26:d0:84:55:4d:00:66:
                    37:93:96:cb:7e:0b:a8:4a:4a:50:f6:f4:73:8c:6a:
                    50:12:c8:88:75:fb:07:8c:12:76:bc:a0:d9:f2:e1:
                    af:ea:31:24:18:9b:ec:e8:eb:25:6e:09:59:82:e9:
                    ff:8f:1c:18:dc:99:51:7c:7b:ce:2f:19:a2:0e:6a:
                    ea:69:dc:d4:df:c4:e8:78:d9:ee:fa:a3:a9:61:6b:
                    95:f3:d1:2d:b4:2a:71:aa:66:b5:02:d7:e3:73:27:
                    f1:b3:da:35:d2:10:a2:f9:77:48:94:18:78:0f:9e:
                    52:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:48:7F:76:6F:7D:A6:A1:9B:B2:E1:B2:04:02:2D:DE:53:53:38:52
            X509v3 Authority Key Identifier:
                keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ce:ca:c5:72:57:a2:0f:12:2d:e3:bf:f1:4c:66:42:c0:e2:
         60:92:4e:85:a2:16:89:1e:6c:e6:c4:11:dd:da:c8:39:c3:2b:
         39:88:71:91:c6:8f:b1:1b:ef:4f:03:ca:b7:61:12:51:0b:df:
         4f:70:fa:ea:67:52:2b:e8:b9:c1:16:b1:3b:0f:44:5a:84:e9:
         ee:42:78:f8:37:03:e3:a1:c8:96:db:bd:23:ef:47:74:d6:5d:
         fc:4c:34:32:24:07:bb:62:da:b6:99:8d:e2:db:79:a3:d8:c7:
         42:87:08:63:4b:00:de:24:9a:2b:56:53:be:4b:a9:2d:12:fb:
         10:bf:25:83:3b:64:bb:72:98:3e:71:97:f2:d8:1a:eb:a3:13:
         75:c6:ba:ce:a5:67:f2:d0:fa:14:3c:6e:2c:b1:6d:ac:30:c0:
         4d:f1:f4:bc:56:6d:1c:65:25:0a:10:3d:78:ef:92:71:a9:2b:
         1d:83:e7:cd:0c:c0:ba:7d:68:44:ae:46:58:44:9a:d4:03:61:
         81:4c:d1:ed:ef:2c:5e:31:44:0f:e2:29:41:ef:3c:43:2e:88:
         2a:68:c1:8a:73:cc:a8:94:e7:49:06:f0:ef:26:10:9d:28:f8:
         cc:bc:2c:69:ed:9f:a8:a0:ad:17:af:e3:2c:1c:a4:d9:4a:b1:
         1d:7a:f0:8e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbgfSvNxfYPsnviEb65XqLcXldPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB
QjVCNURBRTAeFw0yNjA0MTYwNDE2MTFaFw0yNjA0MTkxMTQzMTFaMDMxMTAvBgNV
BAMTKDcwNDg3Rjc2NkY3REE2QTE5QkIyRTFCMjA0MDIyRERFNTM1MzM4NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsHiueU8oQWocoaoCFeUz5vdx
zt2+8vpy5Ik7v+96atLpBD8OVzQuJxYfcegPIkVAIytVDtglgE+m3OLMDVC59P9i
lfnIZOZRdOBD6XgVsNHIBME7PRp6qqa9VlSDT7aSlP38tkMBvora3JZYgX6ht7KX
A3BprPMIy97GudrgGRSLcnPMls4OEmG3RljqJtCEVU0AZjeTlst+C6hKSlD29HOM
alASyIh1+weMEna8oNny4a/qMSQYm+zo6yVuCVmC6f+PHBjcmVF8e84vGaIOaupp
3NTfxOh42e76o6lha5Xz0S20KnGqZrUC1+NzJ/Gz2jXSEKL5d0iUGHgPnlJDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcEh/dm99pqGbsuGyBAIt3lNTOFIwHwYDVR0j
BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE
Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC
NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw
MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw
MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJnOysVyV6IPEi3jv/FMZkLA4mCSToWiFoke
bObEEd3ayDnDKzmIcZHGj7Eb708DyrdhElEL309w+upnUivoucEWsTsPRFqE6e5C
ePg3A+OhyJbbvSPvR3TWXfxMNDIkB7ti2raZjeLbeaPYx0KHCGNLAN4kmitWU75L
qS0S+xC/JYM7ZLtymD5xl/LYGuujE3XGus6lZ/LQ+hQ8biyxbawwwE3x9LxWbRxl
JQoQPXjvknGpKx2D580MwLp9aESuRlhEmtQDYYFM0e3vLF4xRA/iKUHvPEMuiCpo
wYpzzKiU50kG8O8mEJ0o+My8LGntn6igrRev4ywcpNlKsR168I4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:48:09 2026 by rpki-client