Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
File:                     CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json)
Hash identifier:          ut6dNXskQysItigsgSoUBTZXf6iVH8M0UAeP3vdOWxA=
Subject key identifier:   1F:30:9D:B6:F1:92:10:82:10:4F:15:61:17:75:56:CA:19:AD:ED:40
Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
Certificate issuer:       /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Certificate serial:       2A7437AB71A51A6E165DD9C3B848A13C847180F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
Manifest number:          056B
Signing time:             Wed 25 Mar 2026 04:02:37 +0000
Manifest this update:     Wed 25 Mar 2026 03:57:37 +0000
Manifest next update:     Sat 28 Mar 2026 11:40:37 +0000
Files and hashes:         1: 34332e3235342e3132342e302f32322d3232203d3e203538343832.roa (hash: hBuj8wbQYmHqntGj0o/eUNV+3o0v8DMJLG22gmNYBVk=)
                          2: 34332e3235342e3132342e302f32342d3234203d3e203538343832.roa (hash: q6ov1LjBJ1C3MscONi3jd31fdQpeg7xo73ISZgsB13M=)
                          3: 34332e3235342e3132342e302f32332d3233203d3e203538343832.roa (hash: iXtClCML1N9IxFKEnUu67jBHGm8QPJyw41HrxTVVN1g=)
                          4: 34332e3235342e3132352e302f32342d3234203d3e203538343832.roa (hash: 9k0Dch7Ak/Z6QMfcr+CZARJzHwZAuvWS8RON6gwZ8+8=)
                          5: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: 253PIIaf2Tfe4dVA8SfkSeenzrn1yLojxg1BjltDWcI=)
                          6: 3130332e32382e3232362e302f32342d3234203d3e203538343832.roa (hash: znVQQu+fIshyxf4G9mODoMFhYbJt3eH/0GuMVl8IwkA=)
                          7: 3130332e32382e3232342e302f32342d3234203d3e203538343832.roa (hash: 6xVTWVhJwHlTuupRqckmEH+2N+SG40cJCesUx/LAQVI=)
                          8: 34332e3235342e3132362e302f32332d3233203d3e203538343832.roa (hash: eZci8ugTs0KdDJxBSy4Gimtbte6tWVKKsSs87Z+r/R0=)
                          9: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: mMsIBK2n8Bw1EWKSo+WGJ7NqQYqPXp5ugGOZPn6TMkw=)
                          10: 34332e3235342e3132362e302f32342d3234203d3e203538343832.roa (hash: DbGnB1DqBC848hiKo1po0MqE4Gsa4J0OUdCykpEG2OQ=)
                          11: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: oU26K1WNdmD4+eVmiwc4bkVkpstGiJjSdrNC9yEyagk=)
                          12: 3130332e32382e3232372e302f32342d3234203d3e203538343832.roa (hash: 9Ew1E8zQmp44/WcA6xsjn9DG+Pj2XFS0Nowbj2INal8=)
                          13: 34332e3235342e3132372e302f32342d3234203d3e203538343832.roa (hash: QBHhnk1VzpNswo5xP4biYnK0qXDI4z1xHEPaP9wifbk=)
                          14: 3130332e32382e3232342e302f32332d3233203d3e203538343832.roa (hash: 6VLiq/I44WcMCT+b35Hhj3WDvps84mPpDnwbEu/ZNyQ=)
                          15: 3130332e32382e3232352e302f32342d3234203d3e203538343832.roa (hash: BGVByiTWnar+G9klrtY285yoFDo2RjE2YjBcwnHtPF0=)
                          16: 3130332e32382e3232362e302f32332d3233203d3e203538343832.roa (hash: 4fMJzq8Nq1YJP9z1+S+a93o7lbnttq7OojId/hUDTmM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
                          rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 11:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:74:37:ab:71:a5:1a:6e:16:5d:d9:c3:b8:48:a1:3c:84:71:80:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
        Validity
            Not Before: Mar 25 03:57:37 2026 GMT
            Not After : Mar 28 11:40:37 2026 GMT
        Subject: CN=1F309DB6F1921082104F1561177556CA19ADED40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:1a:f9:dd:fb:e5:07:79:33:b6:05:da:30:
                    8e:ab:81:34:68:27:c1:69:b6:9f:fb:ba:cc:d8:46:
                    26:5b:4a:40:b7:ce:11:35:93:22:48:9e:ae:75:7c:
                    b9:42:0b:81:86:80:5f:0b:03:23:3d:5e:7e:61:4f:
                    b3:02:6d:b2:13:d2:ee:47:b6:87:47:b6:eb:ec:55:
                    99:a5:94:32:90:e2:01:78:3c:a6:72:7e:25:25:9c:
                    8c:ce:05:e1:ef:f7:86:ff:e4:30:00:79:a2:31:69:
                    95:26:16:c4:8c:2c:32:a0:86:c6:f7:9f:ad:96:2d:
                    5a:a9:fc:26:84:d3:08:bc:79:1f:b2:81:a5:2a:1a:
                    d2:ab:4a:93:3d:56:ce:e7:b1:c4:1f:7c:0e:f5:4d:
                    20:b7:e7:02:85:cd:4f:7f:3f:14:de:1a:46:d5:64:
                    22:95:ee:43:54:9d:b8:11:6e:a5:fd:30:46:59:8e:
                    30:65:c3:cf:7b:9f:47:a5:fa:f0:62:a8:f9:27:a5:
                    4d:74:dc:a2:07:0d:1f:e0:75:d6:aa:d4:9a:df:21:
                    07:08:60:7d:18:32:b5:c3:a7:52:a1:eb:bb:02:d0:
                    f5:8e:09:46:8d:e7:c1:55:ce:1b:91:bc:5e:68:14:
                    51:47:4a:bd:61:05:f8:ec:59:fd:51:d9:b0:46:b0:
                    e5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:30:9D:B6:F1:92:10:82:10:4F:15:61:17:75:56:CA:19:AD:ED:40
            X509v3 Authority Key Identifier:
                keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:84:b7:c2:21:0c:9c:2a:42:65:a9:56:ec:04:84:d5:e6:d5:
         17:f6:e2:3a:97:d3:f3:aa:1d:b2:5f:fb:51:fb:ea:1e:8f:29:
         8b:03:ac:3f:78:ad:dd:e5:39:8d:ca:ab:3a:4b:65:ba:b0:2c:
         a0:ef:dc:21:6a:6f:df:b5:92:2f:37:a0:d5:39:f7:a0:43:15:
         fb:1d:b3:c7:cf:70:32:0b:7a:be:33:da:51:fe:6f:8c:49:ff:
         eb:a4:2b:3b:09:a7:1e:7b:85:ab:4c:4d:71:ca:4a:71:8d:38:
         6f:b6:03:ad:ce:7a:9c:b9:2e:87:c4:ea:72:fe:ea:ad:ce:b1:
         87:11:d8:c5:bb:cf:21:19:47:25:f5:f7:42:32:90:6f:1a:39:
         71:f1:c8:08:fd:6d:c4:e2:64:cc:97:d9:c3:26:14:95:fe:75:
         35:98:f5:55:05:77:9d:ba:8b:f4:49:68:51:11:39:9f:3a:af:
         a1:ea:d3:b3:4e:af:2c:6c:3f:67:57:f2:e2:cc:5f:62:a3:21:
         43:8b:c5:3a:06:b1:bc:ad:79:61:e8:49:d3:b7:82:87:e5:9d:
         bf:46:dd:91:cf:a4:0f:ef:f9:98:ee:79:a8:1d:63:59:9e:0e:
         44:24:c8:2b:d8:e5:6b:45:5b:7a:75:0f:b7:d4:aa:3b:3b:a6:
         6a:23:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:04:22 2026 by rpki-client