Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft
File:                     00C1EB3BEE971CEAB531D756361F934BE0179628.mft (raw, json)
Hash identifier:          uNMprdwgFLqAM6XVX8mW2tTo5isE6XriV68PoSmkskw=
Subject key identifier:   0A:47:03:71:EA:02:A1:06:44:53:05:C1:F8:28:76:0D:AB:25:10:C0
Authority key identifier: 00:C1:EB:3B:EE:97:1C:EA:B5:31:D7:56:36:1F:93:4B:E0:17:96:28
Certificate issuer:       /CN=00C1EB3BEE971CEAB531D756361F934BE0179628
Certificate serial:       4BCE30DDE7EBE28BD3ACFB16AB436C7808A034B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft
Manifest number:          010D
Signing time:             Fri 17 Apr 2026 19:31:59 +0000
Manifest this update:     Fri 17 Apr 2026 19:26:59 +0000
Manifest next update:     Tue 21 Apr 2026 02:51:59 +0000
Files and hashes:         1: 00C1EB3BEE971CEAB531D756361F934BE0179628.crl (hash: 5vf3fjic1LEokgfHlzijxpKp44LpZVA7z4HL7titDYQ=)
                          2: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: 2PH25lGx4aoDxJSQ/LOSozIUBGDxDVOVLodCc7y15nU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.crl
                          rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 02:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ce:30:dd:e7:eb:e2:8b:d3:ac:fb:16:ab:43:6c:78:08:a0:34:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C1EB3BEE971CEAB531D756361F934BE0179628
        Validity
            Not Before: Apr 17 19:26:59 2026 GMT
            Not After : Apr 21 02:51:59 2026 GMT
        Subject: CN=0A470371EA02A106445305C1F828760DAB2510C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b7:58:bf:5e:c8:3f:e7:84:63:61:12:d4:f3:
                    d4:96:21:b3:d2:8b:65:08:5f:b8:7c:d3:8d:af:c6:
                    41:8e:b5:ce:b3:08:43:de:67:3d:df:bd:34:66:89:
                    c5:3b:6f:e3:45:d8:d7:75:2d:9d:c9:ec:86:09:60:
                    44:aa:5c:20:3d:0f:60:12:49:98:8e:64:23:a1:77:
                    8b:62:dc:10:a6:e8:67:26:2a:b2:1b:de:cc:9c:49:
                    ce:51:da:6a:0f:9a:52:3c:35:43:71:c6:2d:3b:86:
                    50:a6:79:af:3d:01:18:73:d4:39:9e:33:87:2c:42:
                    d3:4e:45:55:ae:aa:a1:b3:c0:5f:61:bf:4c:1f:7d:
                    62:f8:9d:0d:44:af:99:cb:e5:fb:a8:cc:0a:13:3d:
                    21:a0:98:c9:d3:bf:dd:d4:61:82:28:43:55:bc:84:
                    4c:b6:86:d1:2d:28:04:a5:32:3d:f8:1a:a0:2b:1c:
                    d5:f8:1f:d5:e8:d4:13:0b:5b:66:82:c8:12:d7:82:
                    d4:8b:91:8a:bb:62:b1:38:09:c7:4c:93:ea:b8:dd:
                    0b:0f:97:2c:58:7a:1e:73:2d:24:6a:88:92:08:77:
                    48:27:cd:d0:25:94:c6:b6:d5:bc:de:85:c8:d3:dd:
                    cc:52:1a:a2:ce:fc:d2:d3:ae:ca:2c:1b:80:f2:ed:
                    2b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:47:03:71:EA:02:A1:06:44:53:05:C1:F8:28:76:0D:AB:25:10:C0
            X509v3 Authority Key Identifier:
                keyid:00:C1:EB:3B:EE:97:1C:EA:B5:31:D7:56:36:1F:93:4B:E0:17:96:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ee:7f:ba:7e:1e:41:43:cf:26:ca:63:f7:d9:0c:16:d6:78:
         06:b8:81:9b:46:b8:4c:18:c4:15:2d:17:25:81:c0:c1:44:e9:
         fe:df:e0:a1:49:de:66:33:2f:d5:db:d7:4a:1c:cf:d2:5a:9a:
         90:3c:10:d1:c5:3e:5c:d9:0f:7a:e3:5b:9b:46:d6:fb:17:17:
         00:ff:cc:8b:c1:63:01:89:20:7a:65:69:1b:50:c5:0c:6f:e3:
         2f:fa:89:d9:11:42:92:c5:45:52:9e:1d:97:ed:d9:c6:7a:0c:
         cb:f6:92:76:ee:fb:1d:66:bd:c1:c0:b7:2f:06:7a:45:b6:56:
         c9:ed:6c:4c:49:0f:9a:49:a7:c7:3c:ab:a7:f1:c8:46:8a:86:
         59:43:30:b2:13:f5:ea:a3:76:c2:49:7b:08:6c:2a:b0:ea:0b:
         2d:cb:10:ff:08:de:c9:06:25:fd:4f:e6:02:d0:74:0b:de:d0:
         f6:73:c7:18:71:35:67:a2:e4:9d:03:7e:4e:4c:c2:c6:d7:11:
         2c:e1:7b:e1:ff:40:9f:a3:50:54:e0:64:2d:a5:0a:1e:06:44:
         4e:3e:ef:c4:16:14:48:28:45:66:87:21:cd:20:c3:86:60:32:
         fe:f7:b5:81:e0:60:00:44:57:7f:7e:85:11:3c:d2:ad:af:11:
         e2:fd:5b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:37:19 2026 by rpki-client