Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
File:                     49CDCA308C289D688C649C2303BECB3ED76B5054.mft (raw, json)
Hash identifier:          cYFQRikIT3eUHf9jEf0ekLY+79o7Asqk+HByWs/9lSY=
Subject key identifier:   3E:4B:A5:3F:36:B8:88:50:1D:90:18:AF:76:D6:5F:92:BB:F5:8B:2A
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       1DAE24C11AE769D6C2E81D9E79286D2860A89FD2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
Manifest number:          0569
Signing time:             Tue 24 Mar 2026 22:51:20 +0000
Manifest this update:     Tue 24 Mar 2026 22:46:20 +0000
Manifest next update:     Fri 27 Mar 2026 23:47:20 +0000
Files and hashes:         1: 49CDCA308C289D688C649C2303BECB3ED76B5054.crl (hash: +uXA51AvjdlQNdndJmnFjeM5ahfrYO5L/LKvWC/t8DY=)
                          2: 3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa (hash: gEYK+18FP+7kBMfZJoRXCpV612TXysZxOtU9C0Gw8cc=)
                          3: 3130332e31362e3139382e302f32332d3233203d3e20313331373735.roa (hash: 04eyxXbv9jngQdgYmmSjLsuCye8qiexJidy0wMhDXkQ=)
                          4: 3230322e37342e3233392e302f32342d3234203d3e20313331373735.roa (hash: +XaFO38Q9dXCmJ85JQuHQCLrxReLtpZeqTNCnHE/ld8=)
                          5: 3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa (hash: 6e4gMBIWBCHTWU94MEtj6eyxSIoX56aVHgjbVxpfxNg=)
                          6: 3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa (hash: 2ttGNYSIno2YUVrl5iMDUeYoXTM+0/k8iShvnFHSZUg=)
                          7: 3230322e37342e3233362e302f32342d3234203d3e20313331373735.roa (hash: 6VuJVE5V+cRzw0YC3j26AjnB200tu5ynyJ2PlMkHwdk=)
                          8: 3130332e31362e3139392e302f32342d3234203d3e20313331373735.roa (hash: lh1ua1Y9ZtE2dDW45ObJ8+6IvX0lmoDB+fa6NG7jmTA=)
                          9: 3130332e3235312e34342e302f32332d3233203d3e20313331373735.roa (hash: 38apIlW13UqRkBJC0AvLF1JxLSXx4uzPA7tj9m0g40E=)
                          10: 3230322e37342e3233382e302f32342d3234203d3e20313331373735.roa (hash: PNF09SxEelapDmbcZhAv/JlSjlnccRnMVMsb6Vjd5Cs=)
                          11: 3130332e3235312e34342e302f32342d3234203d3e20313331373735.roa (hash: Ha3WoHQ/zP70el2yWIeTgLkGHqYuIOHL7pH96V5JFfw=)
                          12: 3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa (hash: VOPS8e3VH0l6ubQIOcds4q8+0PaehGxHMdByhPPUMRk=)
                          13: 3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa (hash: 6lzTZpzOtbXaisX77lh3zqfu4RoYr39Ke230rMF+BLA=)
                          14: 3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa (hash: GUJzG7I21c6XIuzE+3MXjSNzND91626bZhTZv88Tj9U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 23:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ae:24:c1:1a:e7:69:d6:c2:e8:1d:9e:79:28:6d:28:60:a8:9f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Mar 24 22:46:20 2026 GMT
            Not After : Mar 27 23:47:20 2026 GMT
        Subject: CN=3E4BA53F36B888501D9018AF76D65F92BBF58B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:4e:af:c1:e7:9a:40:ca:66:f8:0c:f8:f1:
                    8d:e2:a6:9a:04:2d:e4:a6:cf:b5:22:9a:4c:02:ef:
                    b6:72:b7:0f:12:19:44:85:e3:9e:37:b3:f8:a5:d7:
                    94:d3:29:b4:72:ce:d2:97:55:4b:2f:21:fb:e8:ca:
                    fd:14:d2:48:d2:60:a8:9d:15:99:87:03:bc:b9:bf:
                    15:56:19:d3:20:17:e2:ef:07:a5:a7:9f:09:13:d8:
                    a9:5b:b4:40:61:cb:5c:39:b8:25:38:77:a4:ca:3c:
                    cf:ba:92:22:26:d1:4e:4d:9f:fe:cb:f1:cb:43:c6:
                    04:9b:45:e9:82:76:01:2a:f9:ab:e1:6b:f0:eb:11:
                    55:6b:51:69:db:5c:53:0a:03:28:a1:6f:bd:2d:97:
                    6a:39:70:55:53:ce:81:0e:46:6c:78:b9:2c:c6:02:
                    d6:ca:46:c0:b7:f0:c2:4c:67:17:2b:fb:2a:d5:ab:
                    7b:2e:24:39:1b:40:b7:ba:cf:95:0c:d5:89:d5:6c:
                    3f:e5:b5:45:06:de:7f:f6:fd:c4:78:72:81:6b:ba:
                    53:fa:19:ca:33:af:f4:db:c1:90:76:6f:72:79:3f:
                    18:3b:02:68:87:9c:ee:d1:5a:c2:42:3f:f8:6e:18:
                    59:07:22:8d:a4:22:00:28:ea:e1:77:ef:1a:95:e2:
                    19:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4B:A5:3F:36:B8:88:50:1D:90:18:AF:76:D6:5F:92:BB:F5:8B:2A
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:20:f2:b5:79:9a:f4:9f:ed:ab:68:4f:2b:79:7f:76:06:6e:
         99:1b:d2:65:c1:29:9c:4f:48:f6:aa:d0:63:d8:1d:d1:c5:a3:
         15:1f:97:4a:bc:c2:a4:7f:7c:68:79:14:30:ea:d0:d6:c1:a6:
         c8:0a:ea:87:5a:ae:bf:0f:19:cd:0b:a4:53:c0:43:5c:fb:b1:
         b9:d6:86:3a:4a:0d:cb:66:cf:6d:48:6f:d1:5b:8c:3d:3c:ce:
         2a:1d:05:68:92:6e:3d:ce:b6:18:0c:ff:d2:78:8e:7f:33:68:
         d4:fb:b7:2b:01:70:0c:cf:d7:e5:d7:ef:91:6e:55:c8:2a:58:
         85:fc:8f:4d:d0:f5:2c:3d:8e:4f:bb:19:f8:ba:1c:09:b8:2a:
         12:a9:f8:ce:6f:6b:f3:e7:d1:a4:1f:fc:f5:cf:a1:3a:78:78:
         3a:2c:9a:8c:0e:68:ed:b6:a2:01:54:96:e6:69:66:a2:e0:5a:
         87:db:36:6b:bd:e3:14:c9:aa:32:08:c7:b4:22:55:8b:b4:af:
         9d:83:23:f1:4e:32:dd:17:c5:9c:e5:1b:22:d1:89:95:6d:5a:
         2e:cb:21:77:21:18:04:eb:c8:44:23:c4:a6:6e:a5:96:54:d5:
         2f:f7:fa:59:64:17:c9:26:08:77:97:f1:dc:04:d2:18:8d:62:
         ac:5b:14:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:57:25 2026 by rpki-client