Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft
File:                     473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft (raw, json)
Hash identifier:          oQb8obgXNfVOan3qp/ua+F8OU0CaGfjbzlaptn9Y8aA=
Subject key identifier:   49:AE:5B:9A:4E:1C:DD:0E:05:74:DF:E1:5E:19:2C:B4:EB:50:B2:83
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Certificate issuer:       /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial:       1F8ABDA98CD8A03C855B4BEEF6FE68603FA5629D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft
Manifest number:          03AB
Signing time:             Tue 24 Mar 2026 18:10:49 +0000
Manifest this update:     Tue 24 Mar 2026 18:05:49 +0000
Manifest next update:     Sat 28 Mar 2026 03:11:49 +0000
Files and hashes:         1: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: d1xIlC4+oMPbH5ZnyANomWLmufu1teeAjrpvqQHhDOY=)
                          2: 323430343a393763303a323232393a3a2f34382d3438203d3e20313533303837.roa (hash: zTksbOmqht4ASG3w9kn+fk27ebr6uQPh0aGUqp5VAz0=)
                          3: 3130332e3133362e3136322e302f32342d3234203d3e20313533303837.roa (hash: 7sx7l6VJIw9JOLYLALmlodoEMTutKJjhP096rgyTvSM=)
                          4: 323430343a393763303a3333343a3a2f34382d3438203d3e20313533303837.roa (hash: LJ44LKDM9Ovqp7HIdQ+WGCgJ/9nkhxs+EQSXrS2ADcc=)
                          5: 323430343a393763303a323234383a3a2f34382d3438203d3e20313533303837.roa (hash: ja2kEjkcjC0E3aWRDERlnAgw1nnkTcoTgKAJNBKS2+Y=)
                          6: 323430343a393763303a323234353a3a2f34382d3438203d3e20313533303837.roa (hash: +FM4I+w7B6+tO/3MqEz8YhoqcUcc7yqMtsQdbHOkj70=)
                          7: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: JCCAJ/EDgS27ycZ3628tTPH6fZQnrNGTI3WkVYF+XvQ=)
                          8: 323430343a393763303a333135303a3a2f34382d3438203d3e20313533303837.roa (hash: tgnEOAz4ln6k9iWDx9KpeIgmfHkJg4X1mSwrhZ0iEyY=)
                          9: 323430343a393763303a333133303a3a2f34382d3438203d3e20313533303837.roa (hash: fVhv8M53mX+/Xg2OBBncO7dhuspALhYrRfqRAzuy/nc=)
                          10: 323430343a393763303a323233353a3a2f34382d3438203d3e20313533303837.roa (hash: KHwY6Z0jHMbfBDdJGFU2rVGCmizq7lJHRW86nQaCbGc=)
                          11: 3130332e3133362e3136322e302f32332d3234203d3e20313533303837.roa (hash: 8oG5aiPghQtjdiXfmI/b7Mhj9+Qy7KvOcmqLxLJ7ROs=)
                          12: 323430343a393763303a33333a3a2f34382d3438203d3e20313533303837.roa (hash: PMHOYTmMn+D/6C7InXFcTGR3429Se5vXqgpWqmRx6Jg=)
                          13: 323430343a393763303a323233333a3a2f34382d3438203d3e20313533303837.roa (hash: VlY5JXD98wE4H0cHdXyksMDdtt7hVewJ5NJJOtJnXRY=)
                          14: 323430343a393763303a333134363a3a2f34382d3438203d3e20313533303837.roa (hash: J9+H0zfCZWn+xjuPGRv9Wz6RTUrilx0oA3r8oIJzJFw=)
                          15: 323430343a393763303a333235343a3a2f34382d3438203d3e20313533303837.roa (hash: AEyx1AtkkV+lNL6jZfOdqxPTjSpoHYEiDbViZO547jQ=)
                          16: 323430343a393763303a333235333a3a2f34382d3438203d3e20313533303837.roa (hash: 0xXkjkgCpmYrxupQ310OgFO7dkQmSP4ati1POwwztq8=)
                          17: 323430343a393763303a323233323a3a2f34382d3438203d3e20313533303837.roa (hash: ZkLZWI0jB7dJZ6WubOlT7zrZwPS6RmK5BS65LX0KVa0=)
                          18: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: 7VS0s3GgK3f9yXNytEbD8DVTlbSNP6Xg/+gEgqJ4UrY=)
                          19: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: fED9SfLOtNo9Mv4euRXv52ZKTW2j2xHnzBv3Lqo4jps=)
                          20: 323430343a393763303a323234313a3a2f34382d3438203d3e20313533303837.roa (hash: O+L2NKK6XL7RRmdht/X7FCEZJs6nLEGWAPXfgqD654A=)
                          21: 323430343a393763303a323234393a3a2f34382d3438203d3e20313533303837.roa (hash: N43lK9hmv37nrvHFfaSPukTJSDp5n3ODLI0RhFM+TW0=)
                          22: 323430343a393763303a323134343a3a2f34382d3438203d3e20313533303837.roa (hash: ZvaCyP0hBpTAjSkrJvCl/1D5ltEJ/rIFnU1OaqnjovY=)
                          23: 323430343a393763303a313533303a3a2f34382d3438203d3e20313533303837.roa (hash: rJbHJ1TpKo5d9P8LB/4fj3DGBwHz+zDrdeS4FXSE73c=)
                          24: 323430343a393763303a31333a3a2f34382d3438203d3e20313533303837.roa (hash: 7AJdrVciogRsyJh9VJN1ZAYGcSdPhk7iG4Y4zS8Ipws=)
                          25: 323430343a393763303a323136373a3a2f34382d3438203d3e20313533303837.roa (hash: 9lZbMQy1jqbL+y5QmmPw53tmeX8I05Kc/ztEEnvz6IU=)
                          26: 323430343a393763303a313338383a3a2f34382d3438203d3e20313533303837.roa (hash: OHsuASvmzBD1DPmsUBDtaXS67lDP+sik8wAvJIg6b6M=)
                          27: 323430343a393763303a323233313a3a2f34382d3438203d3e20313533303837.roa (hash: ihN8lJl3Azu7F6lolqu5tw5Z5mPw8NSUnRwinjOW5ao=)
                          28: 323430343a393763303a323138323a3a2f34382d3438203d3e20313533303837.roa (hash: ZQTbq5cPEbxcE82LsUghN3qOvjbLcaoobncFa5DyW6I=)
                          29: 323430343a393763303a333137363a3a2f34382d3438203d3e20313533303837.roa (hash: /raK2qdDpwYj0i6Kp22hBVDSF72DS0AJK0oGb8ZTOdY=)
                          30: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: fkMEnTikk0AxLd9lclRcINz/SNAXYAn4q9ByCS3D+jw=)
                          31: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: mFGkwzIdR0mZAObni9tyvyUAOcwtdXd3lFjhbnsL0NA=)
                          32: 3130332e3133362e3136332e302f32342d3234203d3e20313533303837.roa (hash: pHqgayQLjWF22csV0caPZ6zbekahaLO6LcYoKB4tSEE=)
                          33: 323430343a393763303a323232353a3a2f34382d3438203d3e20313533303837.roa (hash: hK0K/ReeabWCEUV4uzz5EeRxjvVEqezAn7FNpKdSBio=)
                          34: 323430343a393763303a323232363a3a2f34382d3438203d3e20313533303837.roa (hash: FZYhJoD5RQXVQ3rMDYQ3hfzgb5WFT+kakfKJU+gJ0+w=)
                          35: 323430343a393763303a323233393a3a2f34382d3438203d3e20313533303837.roa (hash: +AION4xshL8iIxtHjO2ni1RMztsHD4O/HMoUXLigSYw=)
                          36: 323430343a393763303a323232383a3a2f34382d3438203d3e20313533303837.roa (hash: k3Oc7Qox61g/81QkNkpKWgvduR5WrhOGQt7cFtDOMd8=)
                          37: 323430343a393763303a323136383a3a2f34382d3438203d3e20313533303837.roa (hash: ++vuEkt1o291s1BLNHuaNrPIR85iMOGPnEEHnaXmxY8=)
                          38: 323430343a393763303a3236363a3a2f34382d3438203d3e20313533303837.roa (hash: sApDse45FiPhyvfCWElReYdPrJ0u2Q0Gyubyvqovoic=)
                          39: 473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl (hash: 3wVTT+PFR4IQ8wgqzDLzFZpZmRTlqs1WdD1zVzABsIU=)
                          40: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: Nmp+qyCgxlPGSEMy9NEBVMpCbGYPUy7tS1mb3Hhynm4=)
                          41: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: /MLEcgRPFresPJTtTKFIBROPBjpRyOo/7m6Kr8fyqXU=)
                          42: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: o33weiAlctPbdV3C1kWuH2apUUi1fsw+0mPXwm0wqIo=)
                          43: 323430343a393763303a323235303a3a2f34382d3438203d3e20313533303837.roa (hash: xsolw2PY1oa8F/8bKzGripyHuLDXXmNm6Ht0jCbIpSI=)
                          44: 323430343a393763303a323233303a3a2f34382d3438203d3e20313533303837.roa (hash: XlVjEd/S/3h4K5hOFhdAwkIbfyxJ2Bmky7HfaDQm+F4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
                          rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 03:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8a:bd:a9:8c:d8:a0:3c:85:5b:4b:ee:f6:fe:68:60:3f:a5:62:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
        Validity
            Not Before: Mar 24 18:05:49 2026 GMT
            Not After : Mar 28 03:11:49 2026 GMT
        Subject: CN=49AE5B9A4E1CDD0E0574DFE15E192CB4EB50B283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:35:d7:fb:aa:b9:0d:72:c8:3e:fd:35:30:
                    36:8c:52:2c:6e:1a:a6:2d:3b:e4:48:d7:d0:af:05:
                    dc:36:d0:b8:69:fd:b9:76:99:c4:b5:ce:6d:59:29:
                    0d:9e:8f:48:96:5a:76:9b:dc:d7:35:7f:34:49:2e:
                    ef:40:08:28:09:b1:0c:06:21:c4:c1:71:10:77:0a:
                    8c:c1:8a:71:74:73:ca:d6:67:0e:a1:07:2f:ae:8d:
                    c9:87:5c:e0:ff:71:43:ec:e5:33:15:6b:ea:57:e9:
                    ee:0c:8b:10:44:c4:5a:20:3d:da:b7:c1:8e:55:b0:
                    68:88:0e:d5:4f:cc:6c:10:f5:ab:28:73:7f:f3:df:
                    18:c9:67:9b:ba:a6:1b:19:18:64:43:8d:53:82:86:
                    17:02:30:eb:2b:b2:66:5f:3a:e1:1b:c6:e7:59:f9:
                    4e:4e:27:f1:c2:ad:d5:e2:6f:86:a6:55:2b:b7:d4:
                    c0:a5:c0:6e:d6:70:c8:91:7b:16:6b:15:2b:70:b5:
                    e8:d0:8f:34:d6:53:af:a9:32:8a:ca:a3:b4:2e:1d:
                    23:54:91:a4:3b:1e:59:31:82:3c:b5:23:cb:2f:39:
                    e2:34:45:a6:42:36:55:75:23:9e:e3:d1:39:16:32:
                    4f:0e:70:7c:41:05:f6:e5:db:32:4e:b7:eb:fb:dd:
                    3d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AE:5B:9A:4E:1C:DD:0E:05:74:DF:E1:5E:19:2C:B4:EB:50:B2:83
            X509v3 Authority Key Identifier:
                keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:91:16:5e:af:8f:be:5e:9a:fd:80:ac:41:25:72:7c:aa:39:
         bc:0a:68:15:d9:ef:57:3d:e1:f9:82:b0:c6:ff:a0:50:e5:c1:
         94:f5:90:1f:07:ac:1e:bb:f0:d0:cf:0f:28:b7:a1:cf:9c:66:
         9b:9c:b1:78:9a:c3:5c:97:16:e3:5e:4c:59:15:7a:cc:8d:85:
         69:b5:d7:7d:c7:2d:82:02:5a:10:6c:12:a5:3f:d1:09:07:7b:
         b5:f8:53:c0:b6:66:e7:f3:f6:08:8e:21:a8:b2:16:b3:98:66:
         49:40:4f:5a:08:a1:04:7a:e2:9b:f8:06:92:21:cb:70:8c:16:
         cc:2c:63:b6:d4:b4:2c:6a:e2:2e:ee:65:49:bc:f8:b0:71:46:
         bb:f3:c2:af:65:ab:82:c0:25:31:6f:d2:63:6c:56:bf:97:4f:
         c5:a1:de:20:f3:52:a7:e6:26:61:2d:90:6a:26:02:6d:16:61:
         59:2e:b6:f8:bf:56:e9:0a:38:e8:35:ae:41:79:c7:f5:48:c8:
         16:d9:d3:59:32:90:27:2b:e0:1d:b3:66:7d:5f:d0:0d:31:cd:
         01:67:c0:ff:04:fe:64:6a:df:b6:3f:29:9d:a5:96:07:dc:e6:
         ef:ff:b8:84:22:6a:5f:71:13:e9:2e:24:a5:a7:4f:b7:22:62:
         f6:d3:96:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:57:40 2026 by rpki-client