Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft
File:                     EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json)
Hash identifier:          zaYXT2gVHp1Vq6pwDUIrmmXTUN0AjVlO7J7qF4zpKhs=
Subject key identifier:   D3:C6:8E:19:2C:31:59:39:C5:7E:25:8F:3C:3F:A5:68:7F:0F:99:1F
Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54
Certificate issuer:       /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454
Certificate serial:       1FD8952845490A073D03563E23FD9785D854C00D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft
Manifest number:          021C
Signing time:             Sat 18 Apr 2026 01:41:38 +0000
Manifest this update:     Sat 18 Apr 2026 01:36:38 +0000
Manifest next update:     Tue 21 Apr 2026 03:27:38 +0000
Files and hashes:         1: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: 80MS0ZuTW+5iQNzQYBDQPZfjWsQsANAR7yyCgQ7zGBU=)
                          2: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: UA0HnHtk5JYpWebzngmGvcDfILcZTJdtlXq/+Y6vO3I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl
                          rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 03:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d8:95:28:45:49:0a:07:3d:03:56:3e:23:fd:97:85:d8:54:c0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454
        Validity
            Not Before: Apr 18 01:36:38 2026 GMT
            Not After : Apr 21 03:27:38 2026 GMT
        Subject: CN=D3C68E192C315939C57E258F3C3FA5687F0F991F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:31:41:e3:0f:44:3a:cc:34:b0:7f:8a:d9:
                    c2:9f:c3:33:4d:b7:ef:7d:88:18:2d:b1:df:d5:c0:
                    e3:69:a2:81:12:44:c7:53:ce:6b:3a:03:86:a7:96:
                    eb:c2:c3:3a:15:48:18:e2:91:8e:53:bd:4b:3a:58:
                    a0:c9:18:5c:6b:52:74:0b:e0:3a:b0:8d:ca:57:9e:
                    37:fc:00:44:3c:8f:c1:4e:5b:9c:4b:21:24:cf:38:
                    cd:e3:93:d1:74:3e:6d:e9:88:70:2f:01:19:6b:f0:
                    a2:4e:01:4b:aa:b6:61:49:ec:ba:20:03:f6:d6:a8:
                    a1:a2:7f:e5:f8:75:ea:2c:45:67:86:2e:30:c9:ac:
                    b5:f8:8b:2f:45:69:d4:c4:e6:25:6e:38:06:6b:d7:
                    f9:ba:8b:df:15:2f:80:c3:0d:c9:3f:00:8d:2e:09:
                    3c:3e:f2:5d:d6:ee:f3:c4:bb:cc:d2:be:a3:57:c8:
                    c4:f2:5e:e2:ae:fb:ca:68:6f:4a:a8:f9:0d:98:96:
                    79:32:57:fa:14:80:28:bf:06:d9:6d:b6:1f:a8:50:
                    74:3d:b2:b8:28:f0:89:e1:41:24:34:d0:4a:c5:01:
                    11:df:0e:8b:ed:6a:cb:4c:88:75:20:d8:24:f2:be:
                    d6:af:bf:bc:cf:af:3c:71:1f:78:3f:41:57:7a:67:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C6:8E:19:2C:31:59:39:C5:7E:25:8F:3C:3F:A5:68:7F:0F:99:1F
            X509v3 Authority Key Identifier:
                keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:04:6d:17:b9:d5:0e:50:cb:49:92:dd:69:84:d8:fe:4f:99:
         3d:96:85:30:20:11:2f:3f:cf:c5:4c:38:07:1c:71:dc:c6:32:
         eb:c3:fc:84:84:fa:5a:1a:b3:dd:a1:86:5e:3a:55:dc:8b:92:
         b5:6a:f4:5a:9f:cc:af:9c:28:ec:e4:cd:f9:58:28:12:76:11:
         e0:0c:5c:4f:01:d9:6c:e7:41:d1:c3:f2:f8:6c:f4:b3:29:b7:
         f4:e3:70:af:da:14:bc:99:fa:34:69:37:bb:15:f7:b7:b1:eb:
         63:e4:1c:54:d1:9e:1f:7c:8a:f9:23:8f:3c:ff:8f:6a:54:87:
         8d:d3:60:23:87:d5:ee:af:9e:05:95:92:54:3f:be:38:b2:ca:
         c9:a6:d9:6f:e4:b1:d2:f5:06:c2:02:1f:d0:7e:15:c5:b6:bc:
         f4:36:8d:fe:29:b2:85:19:28:c5:c8:55:ac:be:cc:29:82:b7:
         f7:3c:44:19:6a:30:d3:b0:d5:47:d0:c1:16:68:48:89:6c:92:
         e4:1d:1e:82:ce:bb:a6:12:ee:f5:26:a3:13:87:2b:1a:ba:9c:
         5e:8a:fa:f5:56:fb:7e:bc:60:b7:c3:56:fc:e1:6d:5f:b8:ae:
         02:fd:8e:4d:3c:c3:19:97:f0:e4:75:0c:83:7a:fd:22:26:65:
         7a:34:6d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:59:54 2026 by rpki-client