Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft
File:                     A5D12164B9484E51D4BE4B03823526989B147558.mft (raw, json)
Hash identifier:          5x4Bym3M5Ffy74IcAbF+EFYA115EBjvFIpkMMkhwUmM=
Subject key identifier:   53:48:12:26:DE:2B:93:A9:A1:CE:B8:0E:6A:ED:00:6B:94:C6:38:87
Authority key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58
Certificate issuer:       /CN=A5D12164B9484E51D4BE4B03823526989B147558
Certificate serial:       2064B5D69B61C84A4BDEC3B96C17CE0DC805C4EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft
Manifest number:          026A
Signing time:             Tue 21 Apr 2026 15:11:53 +0000
Manifest this update:     Tue 21 Apr 2026 15:06:53 +0000
Manifest next update:     Fri 24 Apr 2026 18:29:53 +0000
Files and hashes:         1: A5D12164B9484E51D4BE4B03823526989B147558.crl (hash: FkO1W3kRtPJRYH1zI+44pnqBj37FOtDDWULhh+2VgeQ=)
                          2: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: PXxNlgw2OfA/wRFGRdyIWGrXN37hg4U811iQwNKlUIk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl
                          rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 18:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:64:b5:d6:9b:61:c8:4a:4b:de:c3:b9:6c:17:ce:0d:c8:05:c4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5D12164B9484E51D4BE4B03823526989B147558
        Validity
            Not Before: Apr 21 15:06:53 2026 GMT
            Not After : Apr 24 18:29:53 2026 GMT
        Subject: CN=53481226DE2B93A9A1CEB80E6AED006B94C63887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:b1:e7:a7:34:1a:ac:24:1f:ad:f0:a4:51:
                    5b:d4:99:40:19:8d:cd:47:db:83:cb:a1:d0:ba:c0:
                    c4:76:7c:fa:32:c1:e1:47:ef:19:a0:fe:a9:4f:c9:
                    4f:b2:34:d8:bf:30:1d:29:23:3c:c9:01:ae:38:cd:
                    40:03:a7:2b:5a:86:be:58:e6:a0:f8:e8:c5:94:fd:
                    49:40:a8:e1:93:d2:a6:b6:f7:a9:20:0d:d2:4e:b8:
                    54:f1:ec:53:2e:09:0e:90:d8:b4:28:5c:62:15:19:
                    80:3b:c8:4e:76:b9:04:cd:e7:86:2a:5f:df:59:f7:
                    e7:8d:3e:71:ae:c4:17:a6:80:27:6c:6e:7c:b4:44:
                    8f:12:35:0d:50:4d:ea:53:02:36:61:43:a2:db:fc:
                    bc:75:2d:ef:61:62:0d:4e:2a:63:91:c5:b7:80:ae:
                    e3:21:3e:23:79:7c:ed:23:43:06:ac:02:ef:18:39:
                    69:de:b5:09:ff:a2:09:9f:8f:0a:a8:fe:8c:37:a9:
                    bc:f9:d1:49:c6:c1:d8:6b:60:25:9c:66:2d:71:8e:
                    b9:e6:2d:b9:db:72:5f:92:bb:cb:b1:ab:b2:a2:69:
                    2d:83:48:dd:91:80:1e:62:f3:63:ea:8b:07:5f:55:
                    d4:47:e1:52:f8:9f:ba:42:e9:5e:d4:27:55:93:44:
                    53:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:48:12:26:DE:2B:93:A9:A1:CE:B8:0E:6A:ED:00:6B:94:C6:38:87
            X509v3 Authority Key Identifier:
                keyid:A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:70:e0:fa:e0:d5:84:b1:c7:04:45:dc:ae:7d:ef:84:23:fc:
         5c:9d:62:5e:bf:76:1b:47:c5:b1:78:30:2b:40:71:ae:b7:f5:
         b4:46:27:f1:7c:6e:17:5c:be:ca:cf:26:f3:1c:da:c2:b4:1e:
         1f:15:53:f0:af:8a:69:ad:82:3f:89:54:fa:ea:2c:c8:df:6d:
         fa:92:8a:b8:31:a1:10:6f:78:30:84:8e:bd:a3:d3:29:84:da:
         5a:8c:58:9f:6b:e9:33:6c:55:50:9c:56:0d:3a:1b:ad:18:91:
         32:a0:51:a2:dc:f0:78:00:b2:f4:43:57:cc:8b:5b:52:cc:e4:
         af:05:32:93:59:8f:92:1c:64:bf:29:dc:ba:c9:9f:eb:48:1e:
         14:56:de:52:37:72:33:fd:ad:47:1a:d6:94:b0:59:3d:b4:cf:
         fd:a8:d8:d2:99:66:5c:5a:2c:43:2d:3c:be:a2:dc:62:5f:00:
         f6:3f:36:50:a0:e0:7d:00:99:d0:ec:c0:de:f7:e6:2b:18:dd:
         df:e4:3d:db:25:e7:e9:d1:20:ad:97:a5:9c:a9:de:d8:3d:43:
         4e:73:2b:6b:e0:d3:57:30:2c:67:b1:f4:56:db:83:e4:3b:30:
         21:c4:05:19:be:ca:17:fc:8b:ea:be:03:5d:5f:66:99:4f:ce:
         75:05:b5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:27:18 2026 by rpki-client