Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft
File:                     A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft (raw, json)
Hash identifier:          wrsT5gMuSEHgS//P4mXEs+lwsfq1BT1t6uftL/XvEPw=
Subject key identifier:   D3:42:22:69:B5:97:78:A6:6F:BA:60:49:51:ED:7E:30:D1:71:80:A4
Authority key identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD
Certificate issuer:       /CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD
Certificate serial:       0AAF40EBD8ACE1062371CDBEC545F84B34CDBB92
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft
Manifest number:          0226
Signing time:             Thu 16 Apr 2026 13:01:19 +0000
Manifest this update:     Thu 16 Apr 2026 12:56:19 +0000
Manifest next update:     Sun 19 Apr 2026 23:26:19 +0000
Files and hashes:         1: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl (hash: rY3TywQttSdSZUUhG08qlDraicHjcFVWWx2Q3KEPYFU=)
                          2: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: PrW1B+JOk51E9zyJqPaIkQOhvDojGNHgAHNsvo2TOSQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl
                          rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 23:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:af:40:eb:d8:ac:e1:06:23:71:cd:be:c5:45:f8:4b:34:cd:bb:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD
        Validity
            Not Before: Apr 16 12:56:19 2026 GMT
            Not After : Apr 19 23:26:19 2026 GMT
        Subject: CN=D3422269B59778A66FBA604951ED7E30D17180A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:de:53:77:77:ee:12:33:cd:8b:9d:b5:26:d4:
                    57:b4:32:01:e4:11:83:b6:6f:a8:da:0c:11:29:0a:
                    bd:ad:67:07:10:05:ed:ee:2d:23:d7:bf:a1:3b:5d:
                    b7:d6:aa:b9:86:41:38:a9:21:ad:65:e2:d0:c9:db:
                    18:07:59:09:d5:5c:f4:6b:67:f3:c4:bf:96:5c:6e:
                    ef:79:40:2e:36:f4:3d:ea:17:3a:db:2a:53:68:24:
                    f9:a8:6c:c1:b3:87:81:ef:1d:77:9c:07:41:67:5e:
                    fc:4b:5e:c6:06:41:27:6b:f4:10:49:06:b4:4a:39:
                    b4:33:47:06:37:dc:80:cf:17:d3:c2:b3:dd:af:7f:
                    17:ca:4e:ea:1c:1f:40:25:db:8f:80:60:6f:43:49:
                    b7:5a:e0:1d:19:eb:94:ba:e8:e9:c6:ce:bd:9b:05:
                    08:90:b2:eb:21:c0:27:37:a7:8d:5d:dd:7f:ff:3d:
                    ca:a9:5f:80:34:95:bc:81:60:24:25:11:cf:00:d7:
                    23:c7:ae:26:2c:1a:22:d4:12:4e:82:15:c9:36:bd:
                    e8:c3:76:69:33:19:f7:bc:ee:c4:cf:99:18:06:23:
                    2d:c3:e8:a1:de:7f:5e:66:f5:89:4e:56:6a:22:67:
                    45:bf:5e:ba:6e:c5:56:8a:24:08:ea:91:11:75:a6:
                    43:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:42:22:69:B5:97:78:A6:6F:BA:60:49:51:ED:7E:30:D1:71:80:A4
            X509v3 Authority Key Identifier:
                keyid:A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:10:af:2b:a6:0f:b6:7a:ab:16:a5:ac:fe:ed:a3:f7:a3:1c:
         b2:aa:63:2b:38:51:72:74:c6:b0:3a:2c:6a:8c:18:e0:eb:72:
         0a:27:16:cb:73:c2:8d:2c:6f:6f:f6:ee:1a:b7:53:55:dd:7d:
         7b:78:42:4f:d8:d4:e0:d3:5f:d3:f6:6f:aa:6a:49:51:ea:0e:
         31:40:7c:c2:25:8c:12:92:af:43:74:01:ab:d3:3a:e8:57:48:
         1a:12:27:58:b9:68:65:81:59:4d:0b:71:bd:fe:15:09:38:e3:
         fe:32:02:f0:bc:2f:9d:c7:46:0e:61:e3:78:69:4d:65:ed:0f:
         28:0d:c9:e6:df:1a:bc:22:18:92:b2:92:b3:83:81:4e:67:6c:
         4d:22:e1:32:ae:b3:fa:05:e5:45:c0:a3:4c:08:44:22:5f:e6:
         3c:e1:25:a7:6b:0e:14:cc:88:c1:1c:cc:8c:8a:17:35:fd:01:
         5e:f6:2f:54:21:51:1f:4a:c4:6c:09:26:92:2e:a6:68:ba:e1:
         92:e8:d5:80:9a:43:fb:ce:b7:24:2b:af:fe:89:3e:9d:1d:9a:
         45:cd:b8:2e:56:d2:2f:87:2f:12:a0:6a:35:0e:12:90:b2:a5:
         b0:36:76:bb:50:80:97:de:8f:c2:6b:5a:d1:a2:e7:c7:2a:bc:
         30:45:bb:15
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCq9A69is4QYjcc2+xUX4SzTNu5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgx
MUNGMTRCRDAeFw0yNjA0MTYxMjU2MTlaFw0yNjA0MTkyMzI2MTlaMDMxMTAvBgNV
BAMTKEQzNDIyMjY5QjU5Nzc4QTY2RkJBNjA0OTUxRUQ3RTMwRDE3MTgwQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3lN3d+4SM82LnbUm1Fe0MgHk
EYO2b6jaDBEpCr2tZwcQBe3uLSPXv6E7XbfWqrmGQTipIa1l4tDJ2xgHWQnVXPRr
Z/PEv5Zcbu95QC429D3qFzrbKlNoJPmobMGzh4HvHXecB0FnXvxLXsYGQSdr9BBJ
BrRKObQzRwY33IDPF9PCs92vfxfKTuocH0Al24+AYG9DSbda4B0Z65S66OnGzr2b
BQiQsushwCc3p41d3X//PcqpX4A0lbyBYCQlEc8A1yPHriYsGiLUEk6CFck2vejD
dmkzGfe87sTPmRgGIy3D6KHef15m9YlOVmoiZ0W/XrpuxVaKJAjqkRF1pkMLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU00IiabWXeKZvumBJUe1+MNFxgKQwHwYDVR0j
BBgwFoAUoteQJD7WULJ9elTr0WrcaBHPFL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZmYwYWY2YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMC9BMkQ3OTAyNDNF
RDY1MEIyN0Q3QTU0RUJEMTZBREM2ODExQ0YxNEJELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgxMUNG
MTRCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli
OTItOWFhOTNkOWMwMTZjLzAvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURD
NjgxMUNGMTRCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE0QryumD7Z6qxalrP7to/ejHLKqYys4UXJ0
xrA6LGqMGODrcgonFstzwo0sb2/27hq3U1XdfXt4Qk/Y1ODTX9P2b6pqSVHqDjFA
fMIljBKSr0N0AavTOuhXSBoSJ1i5aGWBWU0Lcb3+FQk44/4yAvC8L53HRg5h43hp
TWXtDygNyebfGrwiGJKykrODgU5nbE0i4TKus/oF5UXAo0wIRCJf5jzhJadrDhTM
iMEczIyKFzX9AV72L1QhUR9KxGwJJpIupmi64ZLo1YCaQ/vOtyQrr/6JPp0dmkXN
uC5W0i+HLxKgajUOEpCypbA2drtQgJfej8JrWtGi58cqvDBFuxU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:47 2026 by rpki-client