Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft
File:                     7DF6602C113DDEE922AA019C74EF4283764A4695.mft (raw, json)
Hash identifier:          V3UTgItI77hODr++Lw+sWbu/lnW589FgFBMMwKKxCVI=
Subject key identifier:   2D:C8:51:21:D3:15:08:11:63:1B:E7:2D:28:5F:0C:64:C2:C4:C8:0B
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Certificate issuer:       /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial:       210E7EE6164817648CE00803DFE52C87F6355F32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft
Manifest number:          0143
Signing time:             Tue 24 Mar 2026 20:52:05 +0000
Manifest this update:     Tue 24 Mar 2026 20:47:05 +0000
Manifest next update:     Sat 28 Mar 2026 04:53:05 +0000
Files and hashes:         1: 3137352e3130362e31342e302f32332d3234203d3e203436303233.roa (hash: sUKTeiiwWRT9o1vhhHlYaFAly4XwJ1Yk2goX2/YXKK4=)
                          2: 3130332e32342e3130362e302f32342d3234203d3e203436303233.roa (hash: m0ukEnki+xJNJOa/UMnxKZIf2rKzPZuNCM9iGXdakhM=)
                          3: 3137352e3130362e382e302f32342d3234203d3e203436303233.roa (hash: u1Jzd5LTNJR2tska5qtt9y1HiVxEJREtWOvly+vbKiU=)
                          4: 7DF6602C113DDEE922AA019C74EF4283764A4695.crl (hash: 4f9b95r+E3r+XjhK41IXYMLhawe6RjfggjR8bSPhE54=)
                          5: 3137352e3130362e382e302f32322d3234203d3e203436303233.roa (hash: rpkWB7EF9f2VDZPZvi9WZlKgMOfp/s/933xbbbI5MTA=)
                          6: 323430363a623930303a3a2f33322d3332203d3e203436303233.roa (hash: PMX8ZqgbpqURDR8GMUH8zTHwxoexOVMu35PWtXHySJY=)
                          7: 3137352e3130362e31352e302f32342d3234203d3e203436303233.roa (hash: ekyVWzxOuC8uMjubJuvpwYgrlxp+lLVxIvziHbo028g=)
                          8: 3130332e32342e3130342e302f32332d3234203d3e203436303233.roa (hash: XMlO3rIsDiZJxbDoGoa7GiILZo7hsae1E2b2SF6baik=)
                          9: 34332e3235322e31302e302f32342d3234203d3e203436303233.roa (hash: cWthNOM+z9qO9AV+rh20bciNyes/mcgidArsrV2N8iM=)
                          10: 3130332e32342e3130342e302f32342d3234203d3e203436303233.roa (hash: 9d4Ahybo//xTmpbdLHDqoyzgv8f31YhkbQoP7qL6aIQ=)
                          11: 3137352e3130362e31302e302f32332d3234203d3e203436303233.roa (hash: KMYqqlosz7KsFgVhB1Gw6pXufxw7vOqEYMILCGT1TC0=)
                          12: 3137352e3130362e382e302f32332d3234203d3e203436303233.roa (hash: MgMzZhpXSVdRb7dy5DImnXaGG5aUkB79RtHA8qW/5rc=)
                          13: 3137352e3130362e31342e302f32342d3234203d3e203436303233.roa (hash: od4iJmOvILrmb5MVv1WQveZDVJy5MlCLV6gmvnl1krw=)
                          14: 34332e3235322e31302e302f32332d3234203d3e203436303233.roa (hash: 8wWB7snx4AQJCsHBykhpv83WUAzcbqrc8hIFjFqrzkk=)
                          15: 3137352e3130362e31312e302f32342d3234203d3e203436303233.roa (hash: 9vd6uWXxGx5CshBnk+T51BHJerBQBJgal3kZ8ZwQQc4=)
                          16: 3130332e32342e3130342e302f32322d3234203d3e203436303233.roa (hash: CX2ZP6cagSLSAvBKeUpb5mXO/mcViGXi1Xun2TAs7HU=)
                          17: 34332e3235322e382e302f32322d3234203d3e203436303233.roa (hash: ew8ixv2h2tSjaEY3/TThrhcZ+9lWnQ16DmQ536uNxCE=)
                          18: 3130332e32342e3130352e302f32342d3234203d3e203436303233.roa (hash: xd5mRm99GZM6bw3tAc15/1C0c62fVUJtrbe9eEbMfgA=)
                          19: 3137352e3130362e31332e302f32342d3234203d3e203436303233.roa (hash: vflwwSqnNxtZTo1bb4g/TQDm0U9LOl5Qz0RAMKFkWgg=)
                          20: 3137352e3130362e31302e302f32342d3234203d3e203436303233.roa (hash: 7sUTtRuwPg8kw2M8sdWZBF9ShneER3Nh48oUxki4MRs=)
                          21: 34332e3235322e382e302f32332d3234203d3e203436303233.roa (hash: ilwqP0a2EROqnWMrI6tFyM0XI6D9J9qieJDIsCCXazc=)
                          22: 3137352e3130362e31322e302f32322d3234203d3e203436303233.roa (hash: 0onTB3vpkwuNndpMrZVrud2+dK89zcDAYNzvDydUeyM=)
                          23: 3130332e32342e3130372e302f32342d3234203d3e203436303233.roa (hash: 1ubegA0v0Yo9muCttBAys2d8VRGial77vQAMM/VReBM=)
                          24: 34332e3235322e31312e302f32342d3234203d3e203436303233.roa (hash: HegjrvuZI5NfxN1PRZk5KKSgNGlgiBZ/cbpw7z37+iA=)
                          25: 3137352e3130362e392e302f32342d3234203d3e203436303233.roa (hash: 9YE74eLrZ9oWDaiU70PKbL0C5W+gR8HMdBrMUgsZ/QY=)
                          26: 34332e3235322e392e302f32342d3234203d3e203436303233.roa (hash: to/mu6NEC+VgYXIYqUqeGeZXt110gpC9r+Amh1BFayY=)
                          27: 3137352e3130362e31322e302f32342d3234203d3e203436303233.roa (hash: avqRwGLYmUNy5Pq5VgHDGaOsHZd+tYxIhyqpQllX8ME=)
                          28: 3137352e3130362e31322e302f32332d3234203d3e203436303233.roa (hash: puOBMlRabKx1arYa8qhCGUA7BHMr63pCDZUImuR6utQ=)
                          29: 3130332e32342e3130362e302f32332d3234203d3e203436303233.roa (hash: /2Kl1IiUL6nX94Sr4GVxgxuNXprutPNg3TxwcvXxbeE=)
                          30: 34332e3235322e382e302f32342d3234203d3e203436303233.roa (hash: MylNbQ3pfEQjDh2i4KH5StS5aNisYTCYBgRMi9fa1v4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
                          rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 04:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0e:7e:e6:16:48:17:64:8c:e0:08:03:df:e5:2c:87:f6:35:5f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
        Validity
            Not Before: Mar 24 20:47:05 2026 GMT
            Not After : Mar 28 04:53:05 2026 GMT
        Subject: CN=2DC85121D3150811631BE72D285F0C64C2C4C80B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ab:e4:0e:f6:d7:ba:b4:4f:ef:94:6d:ba:0f:
                    e8:64:38:75:c2:db:1e:ac:d3:c6:2c:bc:d2:ac:79:
                    78:5d:99:4c:77:22:05:07:4a:74:42:5b:5b:24:fa:
                    80:a4:91:f2:45:21:dd:4d:78:4e:5b:50:a4:15:d2:
                    c6:bc:27:b7:a1:89:ac:f4:96:96:a7:f8:e3:75:6f:
                    29:aa:d4:76:b1:e3:a9:a8:19:81:ee:1f:7b:b9:73:
                    e1:bf:9d:15:45:78:4f:d0:82:78:f3:62:31:38:bd:
                    b9:1e:9e:0d:3d:08:2e:52:e8:00:cc:70:32:13:13:
                    0f:a6:57:1a:9f:e3:12:fb:d5:23:b6:e6:3c:15:6f:
                    19:10:99:0b:cf:b1:99:55:43:af:08:28:7c:91:68:
                    6b:ef:e7:eb:1a:b7:b9:20:7e:24:bf:32:44:c9:41:
                    96:b3:c7:14:7d:cc:77:28:cc:a9:eb:65:0c:eb:fa:
                    e2:d8:3e:79:9a:bc:54:71:8d:d5:31:f1:a7:10:d1:
                    b4:39:87:bc:7f:ea:e8:da:9a:06:4d:10:54:54:30:
                    a0:e2:24:fd:3f:a4:18:02:c4:22:ff:d9:8c:90:56:
                    58:b4:94:3a:64:0d:49:38:89:a2:f7:59:50:da:46:
                    5b:73:62:ef:39:27:4e:3a:0a:4a:ec:0f:23:60:e1:
                    d2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C8:51:21:D3:15:08:11:63:1B:E7:2D:28:5F:0C:64:C2:C4:C8:0B
            X509v3 Authority Key Identifier:
                keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:6f:33:3d:18:5e:41:48:ac:31:fa:8f:17:ff:c2:9a:4e:f2:
         e3:33:aa:b9:40:e7:8a:a8:c4:ca:64:00:18:e3:30:9e:2a:14:
         f6:b2:64:62:25:40:8c:f8:05:24:30:57:3d:52:f3:ea:af:a0:
         a5:c9:6d:5b:b0:58:05:76:02:e1:87:0e:64:54:38:67:b4:62:
         eb:b3:fe:46:09:25:37:a4:3b:0a:8f:f5:a8:94:6d:a7:60:64:
         45:4e:ba:8d:9c:24:d3:50:1e:75:1f:38:79:04:6d:23:3f:b5:
         33:66:2d:be:18:60:a7:82:d6:87:eb:a1:96:62:bc:8e:6e:36:
         1e:81:70:35:cd:f7:7d:b8:ec:4a:ba:91:70:66:fc:d5:10:16:
         8e:9c:5c:86:c2:f3:17:de:28:b1:96:8c:1d:5c:b9:db:8f:7c:
         d5:27:e7:e8:b7:f8:b1:65:01:66:70:c2:a0:d9:14:76:b4:49:
         bd:72:ff:9c:0f:db:3c:fd:4b:67:63:e3:f0:1b:f6:03:5f:f4:
         19:55:6b:61:d5:23:f8:b9:5b:5d:e8:f1:da:c1:4f:28:fe:09:
         52:da:f7:b6:41:57:4b:d7:2d:cf:cf:50:d9:4b:ed:41:6a:99:
         7d:95:33:86:b6:b9:af:b6:9e:51:ea:dc:6e:ad:40:57:cd:a2:
         15:15:8d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:25:43 2026 by rpki-client