Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
File:                     DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft (raw, json)
Hash identifier:          qEZrYxFmLNQmu059mpDqYnOLlYRxGbPF9UxGFKW2ZoA=
Subject key identifier:   BB:1F:DE:7A:F8:B7:29:9E:88:7C:64:A5:89:A0:5F:4B:47:F9:8B:76
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       1484CC4FC94AC9C3846739DB4583B3DCF1ACD423
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
Manifest number:          0270
Signing time:             Sun 19 Apr 2026 14:31:04 +0000
Manifest this update:     Sun 19 Apr 2026 14:26:04 +0000
Manifest next update:     Wed 22 Apr 2026 20:26:04 +0000
Files and hashes:         1: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: KPKrPz0YzctEoNy5UO4oigiT9NHKd9vJZjKP6xPujts=)
                          2: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: 9VVgVBP3adXECeGaUmGjEbyWL7h2Cz/v6afOABuMPOU=)
                          3: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl (hash: BqEmlxTAz452DV9DRG/chZmiYV2mVOu6UVaZ9OMM0BA=)
                          4: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: ov8mTxysBfKB49F8VOvh3Huj6S60dY93AQe/+n5tsMc=)
                          5: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: C59km8D95YTkQZBlbVQquyxssvqtNo5HAADp8Vd+f+A=)
                          6: 3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa (hash: pVaHbqfkYlKE16pP1J0jFdeFxprYFeVPJ3tLOmdu69I=)
                          7: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: scIeroRPWT1wsIkMgDYKxH7mdRNRBrNreM+NffWY2p4=)
                          8: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: rc8xkPlM0IAiISld2NaNMtVOLPaAMnMMDgSp7h4RUB8=)
                          9: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: sKvsWSZRk2Vbnc3VRnyjBITW2uztFDtyA1J8CjQFtLo=)
                          10: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: lEADDciE7WBSbNP5koTkRL7uI/ZWk2oPkXCMKNkGcIk=)
                          11: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: BudoqincKc1GD3R0XKH1VG2/DReqrJGsxd0biSt/A2g=)
                          12: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: j2o/pDeHHUWyPpnU7hleAseAiou++xGgujWM5uSRf7g=)
                          13: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: dn0hoBF+CH56DzGU1zhx2jZmJX4TGe9tH88uR+PmlVw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 20:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:84:cc:4f:c9:4a:c9:c3:84:67:39:db:45:83:b3:dc:f1:ac:d4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Apr 19 14:26:04 2026 GMT
            Not After : Apr 22 20:26:04 2026 GMT
        Subject: CN=BB1FDE7AF8B7299E887C64A589A05F4B47F98B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5f:b3:b7:7d:af:8e:f7:4b:8e:db:d9:8f:6f:
                    de:ae:dd:ef:2f:92:43:2b:eb:27:28:34:55:aa:f1:
                    e6:26:44:72:dd:01:f2:6e:08:18:90:9a:3a:3c:9a:
                    c3:67:7a:53:26:56:eb:94:2a:3a:ed:7f:fe:55:2a:
                    ee:af:cb:93:b6:fa:60:d7:a3:51:6b:4a:96:aa:1d:
                    ac:67:88:c5:a8:27:07:08:0f:33:37:87:b9:e8:4b:
                    25:18:e1:8e:8e:41:84:4c:2b:d2:1c:4c:be:96:a4:
                    c4:49:17:f2:fb:f8:38:81:22:f2:5e:93:94:97:16:
                    1b:6c:04:b5:42:00:ad:fd:94:ba:a6:95:84:1e:ee:
                    6d:e8:0d:22:96:8d:2c:8c:b2:1a:59:22:04:59:a6:
                    ce:62:9e:51:05:8b:f7:fa:f1:3b:5d:1f:6a:63:5e:
                    8a:d3:32:5a:88:4b:5b:37:2d:47:6b:45:02:44:d8:
                    1f:46:6c:4f:ed:32:38:fa:fe:3d:dd:3f:99:97:f7:
                    88:b3:de:54:1e:82:80:be:27:8d:d4:cc:15:66:f8:
                    be:49:a8:5c:55:e0:f5:2c:bc:8b:3e:98:88:34:7b:
                    ba:c3:dc:d9:27:a0:a7:73:d1:e7:3f:9a:2d:73:da:
                    5d:05:4d:2f:ef:8a:11:f8:9f:8b:1f:29:04:0d:57:
                    76:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1F:DE:7A:F8:B7:29:9E:88:7C:64:A5:89:A0:5F:4B:47:F9:8B:76
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3c:09:c5:91:e7:f5:41:82:35:ef:0b:67:69:c0:f6:fa:05:
         50:dd:8b:b5:4c:81:a7:a3:60:ed:f5:01:f6:4f:0b:f2:80:19:
         de:19:6a:84:14:28:1b:0a:7f:7a:63:ee:77:28:de:77:8f:3a:
         ae:a6:e8:f1:e1:9f:81:1e:05:31:76:aa:fc:69:8b:6c:58:8f:
         ef:4e:25:91:ba:9d:79:9a:47:be:c1:2f:4a:79:94:e0:2f:41:
         cf:b8:39:14:7e:34:7c:c4:b9:bd:62:d6:43:41:8c:93:51:32:
         9d:49:21:de:91:01:20:bd:e6:d5:af:e1:37:6a:09:59:10:23:
         24:45:20:c8:6c:dd:e3:53:7d:f8:a7:65:eb:33:28:43:32:79:
         eb:e2:b9:0b:6e:38:92:95:d9:1c:b4:47:78:4c:ed:a6:ea:d0:
         4a:03:2a:0b:af:fd:5c:ef:01:33:68:21:f6:69:74:8d:18:96:
         12:2d:d4:9c:83:60:51:10:cd:56:b1:90:ee:82:d5:3b:67:a4:
         50:54:70:d9:0c:c2:30:82:0c:21:61:bb:0f:71:cf:30:7b:f7:
         4c:0c:9b:da:d2:30:2a:c7:cb:c9:69:28:e0:82:2e:66:49:c6:
         1b:bf:59:ac:0a:08:b2:d5:c2:3c:7d:a4:b0:ca:34:b9:c7:57:
         58:45:94:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 09:38:19 2026 by rpki-client