Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
File:                     DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft (raw, json)
Hash identifier:          Zh9j/d9RkpD5MolP66jA5YCjz90qvoSoVcDsgc5zlKc=
Subject key identifier:   EB:3D:4D:6A:A9:B5:AE:8B:E9:14:48:D2:7D:E1:19:17:8C:4D:91:C6
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       4C48CB67460E5409774EA4DCE509987A90DF30F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
Manifest number:          0264
Signing time:             Tue 24 Mar 2026 10:31:03 +0000
Manifest this update:     Tue 24 Mar 2026 10:26:03 +0000
Manifest next update:     Fri 27 Mar 2026 10:38:03 +0000
Files and hashes:         1: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 9b88BYrc5fW60hCTvccg2BM34mQg6ZvvmRF6BzjVMcc=)
                          2: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: BudoqincKc1GD3R0XKH1VG2/DReqrJGsxd0biSt/A2g=)
                          3: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: j2o/pDeHHUWyPpnU7hleAseAiou++xGgujWM5uSRf7g=)
                          4: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: 9VVgVBP3adXECeGaUmGjEbyWL7h2Cz/v6afOABuMPOU=)
                          5: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: dn0hoBF+CH56DzGU1zhx2jZmJX4TGe9tH88uR+PmlVw=)
                          6: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: 7NwT3lu9JZjfjgapimGfIHaWTUgpUh5i3OuwyUj48VY=)
                          7: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: sKvsWSZRk2Vbnc3VRnyjBITW2uztFDtyA1J8CjQFtLo=)
                          8: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: lEADDciE7WBSbNP5koTkRL7uI/ZWk2oPkXCMKNkGcIk=)
                          9: 3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa (hash: pVaHbqfkYlKE16pP1J0jFdeFxprYFeVPJ3tLOmdu69I=)
                          10: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl (hash: QQJ9JjA9CIVjRYetkytRB4y6ptWfXJCDSh51263cgVA=)
                          11: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: ov8mTxysBfKB49F8VOvh3Huj6S60dY93AQe/+n5tsMc=)
                          12: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: 1GWI9DsalLLnVqal8oinWe9NrHYqZtqJkFvL9lNkK+c=)
                          13: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: scIeroRPWT1wsIkMgDYKxH7mdRNRBrNreM+NffWY2p4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 10:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:48:cb:67:46:0e:54:09:77:4e:a4:dc:e5:09:98:7a:90:df:30:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Mar 24 10:26:03 2026 GMT
            Not After : Mar 27 10:38:03 2026 GMT
        Subject: CN=EB3D4D6AA9B5AE8BE91448D27DE119178C4D91C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:4d:2a:60:20:6c:7e:96:0a:64:99:82:d1:
                    eb:de:1c:6e:47:7e:b5:94:b2:ce:c0:16:23:bb:dc:
                    4b:89:7b:20:1e:18:4c:92:77:96:7a:b6:c5:25:23:
                    b6:d1:07:11:08:21:4a:4d:5e:fc:97:c4:fb:d1:2b:
                    7c:d8:b3:49:d1:8e:4b:35:8f:91:41:41:1a:ae:2a:
                    43:8f:81:6b:15:ed:b9:93:69:ee:6a:bb:57:c6:b8:
                    1b:74:ff:c9:5d:ab:c9:6a:c7:f1:35:6a:a4:cb:46:
                    63:b7:7c:a4:e8:2b:6d:5e:00:f8:9c:41:e6:fb:06:
                    48:3f:da:8e:79:65:a7:13:ab:53:9e:e8:13:63:12:
                    fc:14:a8:b7:18:c0:6b:1e:46:3f:e8:27:31:b2:5b:
                    f1:8c:80:b7:c3:05:d0:19:7d:a1:44:b4:c5:cd:12:
                    c0:21:7d:5f:94:9e:6a:1a:0a:c4:61:b0:bb:25:d6:
                    c9:d5:dc:67:0e:92:c1:8c:5c:1d:89:b0:6b:80:6b:
                    78:a6:c6:96:67:28:c7:c1:ee:e4:b1:2f:b4:6f:04:
                    fc:6a:69:92:0d:25:81:bd:17:59:8d:ed:eb:81:91:
                    2e:de:a5:ae:06:d3:4a:69:dd:5e:b4:06:40:30:32:
                    67:ca:09:4b:97:e0:bd:21:29:a2:54:b3:33:cc:0e:
                    ab:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3D:4D:6A:A9:B5:AE:8B:E9:14:48:D2:7D:E1:19:17:8C:4D:91:C6
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:71:37:75:22:5b:46:4a:c0:4a:d1:39:65:48:dc:c2:a1:77:
         0c:53:d0:e7:8a:6b:6b:04:f8:3a:a2:25:63:79:c2:66:f9:27:
         0c:97:df:c4:c8:48:b0:95:76:da:14:d5:f5:02:b2:3d:6d:58:
         00:b9:1f:a2:bb:86:2d:32:4b:3a:5f:90:17:e0:86:a5:2c:b4:
         a7:54:3e:62:6f:10:53:62:99:1e:b3:7e:57:11:61:bd:b2:5b:
         91:b4:d2:fb:59:10:9d:32:62:46:43:3a:3f:5d:b0:e7:bc:fb:
         06:b3:44:d6:00:57:89:a3:46:94:d6:a8:29:56:97:2b:33:c7:
         61:0b:cb:2c:8b:e1:97:29:20:15:0f:f9:72:76:4f:ae:28:33:
         be:21:4d:f5:fe:9d:fd:7a:d6:5f:bd:61:95:99:94:b5:dc:b0:
         af:81:5a:5a:54:27:c2:7f:82:62:62:9c:77:f3:8f:98:d2:b9:
         c5:d8:48:df:d7:75:6b:c7:2a:c8:ba:d3:35:d3:06:ee:26:dd:
         36:b8:b3:25:58:ba:76:2c:6a:0c:fd:15:f6:c3:0c:14:4f:31:
         75:ac:ef:95:16:d8:bc:44:87:49:d0:c8:e9:dd:8f:e9:af:3d:
         d4:dc:ea:9b:a3:0e:5b:b6:fb:06:5c:4d:63:0d:e2:7c:74:88:
         86:10:7d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:59 2026 by rpki-client