Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
File:                     DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft (raw, json)
Hash identifier:          d0LEt1wr1VKJWUO7eOVUEqF7pHTXcDqBM3N250SgPxc=
Subject key identifier:   07:E3:D1:B2:41:81:C9:C9:8B:0A:8A:2C:F8:E5:0C:53:F3:5E:86:5F
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       6CA7DB0328B422DDFDFB0E9F163F50C75E8705E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
Manifest number:          025A
Signing time:             Tue 03 Mar 2026 21:21:04 +0000
Manifest this update:     Tue 03 Mar 2026 21:16:04 +0000
Manifest next update:     Sat 07 Mar 2026 06:04:04 +0000
Files and hashes:         1: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: 9VVgVBP3adXECeGaUmGjEbyWL7h2Cz/v6afOABuMPOU=)
                          2: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: ov8mTxysBfKB49F8VOvh3Huj6S60dY93AQe/+n5tsMc=)
                          3: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: BudoqincKc1GD3R0XKH1VG2/DReqrJGsxd0biSt/A2g=)
                          4: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: 1GWI9DsalLLnVqal8oinWe9NrHYqZtqJkFvL9lNkK+c=)
                          5: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: scIeroRPWT1wsIkMgDYKxH7mdRNRBrNreM+NffWY2p4=)
                          6: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: D7vL0dWhHLWGMsR8H6EfhySZTfu+/ovgCxiI8LpMnhg=)
                          7: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: j2o/pDeHHUWyPpnU7hleAseAiou++xGgujWM5uSRf7g=)
                          8: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: sKvsWSZRk2Vbnc3VRnyjBITW2uztFDtyA1J8CjQFtLo=)
                          9: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: 7NwT3lu9JZjfjgapimGfIHaWTUgpUh5i3OuwyUj48VY=)
                          10: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: lEADDciE7WBSbNP5koTkRL7uI/ZWk2oPkXCMKNkGcIk=)
                          11: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 9b88BYrc5fW60hCTvccg2BM34mQg6ZvvmRF6BzjVMcc=)
                          12: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl (hash: Ou89nCMsQsrtD7DUwaxRMJfdW42DUJ8WFYDEawjy6PM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 06:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a7:db:03:28:b4:22:dd:fd:fb:0e:9f:16:3f:50:c7:5e:87:05:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Mar  3 21:16:04 2026 GMT
            Not After : Mar  7 06:04:04 2026 GMT
        Subject: CN=07E3D1B24181C9C98B0A8A2CF8E50C53F35E865F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:d8:dd:e4:c6:d5:67:eb:fe:d3:08:80:a8:
                    4e:a7:86:23:d6:0f:0f:14:c5:88:ad:13:95:e4:a2:
                    50:b3:d1:da:75:a4:7f:e7:ff:55:18:58:fa:02:e8:
                    2a:30:4e:ca:b8:04:e7:1c:f2:7b:9c:6b:cf:2b:87:
                    3c:1b:68:fa:45:c9:0e:b6:82:0d:f7:95:9a:ab:a7:
                    31:cd:29:7c:36:d6:fc:ee:ea:61:68:34:4e:34:c5:
                    77:c6:59:b1:bf:3d:b3:91:71:3c:a6:70:eb:f9:a6:
                    9d:b0:ec:51:09:6f:ca:19:37:f8:5d:d1:1b:b0:eb:
                    72:6b:ab:54:15:65:73:be:c1:e2:b5:b7:d9:24:c0:
                    5f:7f:51:48:c9:66:1f:d9:34:ce:d2:66:8c:07:ac:
                    ab:6f:b9:a4:34:8a:a3:9d:1a:ea:c3:0d:c6:b5:86:
                    9d:6c:bc:7e:31:9a:c4:2c:a9:d3:fe:b6:e5:91:1e:
                    e6:ed:4d:83:27:96:4e:c2:fb:d1:24:53:6e:f2:8a:
                    6b:df:96:df:58:16:96:35:78:48:e5:76:b0:57:3b:
                    9a:77:b7:c7:0f:54:98:96:49:32:57:a5:72:9e:e6:
                    8b:85:6e:db:cc:58:57:a3:a5:a7:f6:48:5b:0f:7f:
                    33:0d:e7:93:4e:01:be:39:fa:e6:c7:f8:e2:54:e2:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E3:D1:B2:41:81:C9:C9:8B:0A:8A:2C:F8:E5:0C:53:F3:5E:86:5F
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:80:4b:6f:92:11:9f:83:55:26:66:d6:61:1e:cc:f5:14:55:
         cf:49:9b:ec:79:52:9b:f2:92:89:3b:d3:7d:93:57:9b:c4:52:
         90:31:d3:31:f4:bd:c3:69:84:9f:02:9c:c9:57:dd:d7:77:34:
         2a:56:17:dc:f8:b0:f8:99:cf:f8:01:9d:89:b9:a4:11:fb:92:
         10:68:ab:72:d7:e7:a2:3a:1a:94:e9:0f:00:09:2f:34:40:e1:
         65:ce:c7:69:e3:5e:71:9a:73:fd:51:25:62:6a:74:b9:fe:a6:
         40:60:5d:d0:36:61:d5:96:34:86:98:5c:86:54:4e:98:c7:d6:
         59:ec:1b:be:30:54:ab:7a:10:9c:b4:88:16:3b:bf:1b:81:fa:
         1a:68:1e:c6:98:17:d3:24:a2:94:68:7d:b5:cd:ea:d3:07:b9:
         30:9f:f4:82:b6:52:6c:50:41:50:f7:06:d0:6f:a5:a2:c6:b7:
         1d:c2:be:ca:4b:36:61:b7:2f:c2:3e:7a:14:75:a6:c8:96:55:
         a2:5a:c8:ab:3f:c7:f4:6c:f1:cf:d2:90:65:fe:b6:f4:48:10:
         40:39:c1:3a:e0:68:10:5d:27:29:9d:2e:e3:06:38:26:85:cf:
         37:44:66:39:ec:47:aa:e9:14:eb:4f:ac:3e:c5:99:0e:1b:11:
         1e:c3:22:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 03:58:37 2026 by rpki-client