Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft
File:                     DC19ED76CCD72AB435328C48847EF794698443FE.mft (raw, json)
Hash identifier:          U9k5tvl368nRAQ5eCEmpmEjEPHd3iZZEiwDpczf6suA=
Subject key identifier:   29:D9:02:1C:A1:2B:97:AB:BB:D6:9A:F7:24:28:FB:CE:65:25:08:A2
Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
Certificate issuer:       /CN=DC19ED76CCD72AB435328C48847EF794698443FE
Certificate serial:       021823ACD7989F86570D805D1C6E51ED00717DAB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft
Manifest number:          0266
Signing time:             Thu 16 Apr 2026 18:32:31 +0000
Manifest this update:     Thu 16 Apr 2026 18:27:31 +0000
Manifest next update:     Sun 19 Apr 2026 22:17:31 +0000
Files and hashes:         1: DC19ED76CCD72AB435328C48847EF794698443FE.crl (hash: 0LzQOb0WsF4zbvu/BiZULiwoqsooLVeyDtFIW7XmI1c=)
                          2: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: WW9tBSldj8iyWpSA5bF/L55RlpOsbOMVhaRQFMrUgB0=)
                          3: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: GHHb1yqE1wOoGtgYPHtE6eZxVJDfpmBbJSSPPvGdsuE=)
                          4: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: 6YppYQBmze+QjQsjns3D6bEx0CLiUBYJBxjSLx6K1N0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl
                          rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 22:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:18:23:ac:d7:98:9f:86:57:0d:80:5d:1c:6e:51:ed:00:71:7d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE
        Validity
            Not Before: Apr 16 18:27:31 2026 GMT
            Not After : Apr 19 22:17:31 2026 GMT
        Subject: CN=29D9021CA12B97ABBBD69AF72428FBCE652508A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a8:2c:f4:58:d9:eb:8f:39:62:bc:44:ce:13:
                    26:36:6d:9d:21:70:f0:96:d8:07:f8:5b:64:9f:88:
                    c9:3a:e2:43:d7:af:f4:c0:0f:e3:52:45:d8:13:6e:
                    a5:4e:55:0d:94:6f:72:a7:b8:62:12:c0:c7:11:89:
                    09:8d:32:48:1a:ad:0d:cb:96:1b:c2:8a:d1:e0:7f:
                    81:38:34:7a:ba:aa:c5:72:cb:a9:c8:64:fd:c0:46:
                    c6:23:91:de:97:40:66:99:90:d0:6d:d3:73:99:9b:
                    b8:5b:a7:5e:1a:ba:26:3f:79:3b:69:f3:ea:8a:2d:
                    93:47:b7:9c:7a:8f:75:b7:5c:d0:02:3d:fd:ce:64:
                    04:38:0c:82:f1:5b:f2:13:3a:d1:d8:b1:6a:be:97:
                    ba:ca:8e:80:64:7a:4a:33:be:1b:76:82:cd:17:ff:
                    27:42:8d:00:b6:6d:82:0f:91:83:27:4c:87:ef:f2:
                    77:90:b9:f0:7c:9a:d5:f3:9c:14:1d:ba:e0:79:29:
                    45:5a:78:bd:70:8e:bf:2c:a6:2f:36:9e:58:26:3d:
                    aa:3f:3c:a3:43:0d:88:68:1f:b7:81:6c:4e:9e:e6:
                    c3:16:c9:8a:b3:1d:33:0c:a1:64:55:7e:bd:3a:a9:
                    b4:1e:ed:0f:21:99:29:e6:72:ba:43:16:ce:67:ea:
                    48:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D9:02:1C:A1:2B:97:AB:BB:D6:9A:F7:24:28:FB:CE:65:25:08:A2
            X509v3 Authority Key Identifier:
                keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d8:64:78:8f:9c:ec:5d:3c:c7:b3:ed:de:07:25:7f:e7:5b:
         36:a9:ad:d7:87:29:ff:e3:59:74:23:29:b8:e1:b0:77:47:fd:
         77:d4:00:45:8f:f6:a4:06:ad:12:99:5c:cc:6b:76:4d:02:29:
         3e:e5:ef:67:dd:d7:3d:8a:fb:7d:52:e9:ff:47:45:8f:90:5a:
         a8:43:85:65:63:49:ed:48:ef:b2:8b:21:68:e9:c2:5f:6a:b2:
         bf:81:7f:de:d0:a7:90:c7:1a:85:e7:22:f7:ec:e9:66:c4:c5:
         7d:bc:94:46:91:9b:37:44:4e:51:cc:c3:cf:bf:6d:29:f6:9b:
         b4:4a:2d:50:2e:41:0c:47:27:e0:d5:48:7a:40:99:9d:ec:9e:
         8d:ed:71:26:c8:dd:f3:9a:99:3f:79:e8:1a:b3:ed:20:50:83:
         e4:b3:c2:f2:5b:1a:e9:18:fc:8d:91:54:88:a8:ca:da:0b:d3:
         26:63:af:43:05:ab:b7:9a:4a:70:79:c2:01:c0:01:71:e4:32:
         d3:7f:b3:fc:17:27:6d:35:ef:85:47:c0:a8:4f:2e:d4:e0:43:
         9d:2e:cf:ba:e3:b7:e0:f9:c9:5a:37:5f:c1:09:e6:ab:4c:78:
         b1:22:8f:a8:fe:c5:de:76:6a:0b:06:00:3a:90:09:9b:9c:8b:
         6d:ea:47:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:35:22 2026 by rpki-client