Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
File:                     42467B1885830A9908EAE67935311639B090AA77.mft (raw, json)
Hash identifier:          oyydESWf0YaTm23uxjwoi8ANKRFcgQyshoOLSU3IbT0=
Subject key identifier:   97:EC:B1:9D:C1:B0:4C:9F:17:B1:D3:B6:63:F2:B8:56:D3:D8:DF:D4
Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77
Certificate issuer:       /CN=42467B1885830A9908EAE67935311639B090AA77
Certificate serial:       47A874B00B8E56F64A6DEB7B2B2EF6DB87CF67EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
Manifest number:          019C
Signing time:             Wed 15 Apr 2026 11:21:58 +0000
Manifest this update:     Wed 15 Apr 2026 11:16:58 +0000
Manifest next update:     Sat 18 Apr 2026 19:14:58 +0000
Files and hashes:         1: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: DxKIyMO6WjD2qxH8BuKIvj+fKDvOwuaoHadDVnwc7A0=)
                          2: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: ZWtRALMquKEFwYIWcUiF1poTwDnT8MPEPPx4FTc8PK0=)
                          3: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: /gK+B8SqV3I66Tf4ZForIJYNwQZcUlqSOvSBYm54+3c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl
                          rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 19:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a8:74:b0:0b:8e:56:f6:4a:6d:eb:7b:2b:2e:f6:db:87:cf:67:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42467B1885830A9908EAE67935311639B090AA77
        Validity
            Not Before: Apr 15 11:16:58 2026 GMT
            Not After : Apr 18 19:14:58 2026 GMT
        Subject: CN=97ECB19DC1B04C9F17B1D3B663F2B856D3D8DFD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2d:83:68:98:25:da:ec:c4:60:96:b4:43:a7:
                    38:3a:ca:d0:14:63:06:a4:72:e1:34:c5:68:f2:60:
                    ea:b0:8c:5e:9f:10:97:ca:c9:4e:e1:ae:12:f8:b2:
                    3a:39:4a:29:5d:3c:dd:d9:fd:38:b1:d8:93:31:7c:
                    39:73:65:75:9b:cf:e2:71:c7:5c:60:93:32:b8:f2:
                    14:ee:b1:90:1b:33:28:52:2f:3c:f7:45:7f:a2:64:
                    eb:db:c4:cd:f6:2b:92:37:b4:8d:6a:b1:38:07:2e:
                    30:0f:90:89:c3:dc:99:2f:ea:32:bf:55:6c:cc:68:
                    21:03:4e:ae:b9:05:10:55:e3:7e:4e:bc:95:08:7b:
                    24:f2:52:0e:42:88:59:5c:74:ec:d4:48:86:eb:65:
                    b2:97:de:eb:57:18:6a:0f:3c:80:86:52:db:52:d4:
                    91:f4:51:b6:9a:38:0e:7f:e7:ec:39:5a:7b:df:f7:
                    30:ae:eb:95:56:8e:07:ef:d7:9c:14:7e:bf:b8:a5:
                    c5:53:27:97:6a:16:78:45:2a:de:ef:44:64:ef:93:
                    40:3e:4f:78:29:e4:9b:a3:4c:83:82:f3:59:48:a2:
                    68:62:6d:70:54:b3:29:10:9d:14:1e:5e:e4:e0:52:
                    8e:b8:46:85:b5:bf:29:f6:24:ed:d6:d1:95:d7:b9:
                    bf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EC:B1:9D:C1:B0:4C:9F:17:B1:D3:B6:63:F2:B8:56:D3:D8:DF:D4
            X509v3 Authority Key Identifier:
                keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:92:04:e2:01:ce:4e:f5:94:be:60:18:33:20:51:37:68:84:
         9f:7f:18:df:84:d0:06:de:67:5c:be:32:9a:d0:66:d2:f7:3d:
         09:70:07:9e:07:21:75:c6:a3:bc:d6:96:3e:2a:a6:d1:19:31:
         78:ae:d5:ed:e3:44:c3:f7:5d:5a:f0:6f:35:d3:92:5b:56:10:
         a2:d5:a4:eb:47:39:02:9a:e9:57:e5:dc:ab:5e:6d:78:57:cd:
         b3:2e:0a:e8:26:03:05:3c:ec:94:ad:b1:78:7d:bd:1a:f6:3a:
         9b:c1:28:95:7d:d0:8f:f7:94:ff:00:33:36:18:94:67:99:9d:
         55:bf:f3:6c:19:90:6e:d9:64:77:73:83:1f:7a:26:17:04:28:
         f1:45:a5:63:95:15:0a:03:a8:79:06:3c:39:9e:b1:29:db:ea:
         64:08:e5:9b:4f:de:63:be:30:55:bc:cb:a2:ff:01:59:02:d9:
         e1:f0:c4:0b:53:e7:c0:d4:8f:02:0d:3f:76:b6:87:d2:cc:1e:
         53:f2:71:2c:3e:38:e8:96:78:30:fd:af:97:ab:24:6a:67:50:
         ff:d7:82:3a:bc:bc:39:53:3a:ed:b9:7f:e9:27:f6:c6:92:d8:
         99:1a:25:6e:e8:f3:2d:da:8d:92:81:0b:d3:31:21:a1:f8:c8:
         67:c4:88:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:05:44 2026 by rpki-client