Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
File:                     C451166D49539649063AF8F493F51CB1ACE0AB09.mft (raw, json)
Hash identifier:          vevDdMDELi3SF026mvNgKCUdM0D14wE4ydg/ghPFD+8=
Subject key identifier:   7D:A9:86:55:1D:61:69:DA:9E:AF:37:AC:97:C2:4A:F7:C0:CC:93:C0
Authority key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09
Certificate issuer:       /CN=C451166D49539649063AF8F493F51CB1ACE0AB09
Certificate serial:       0220BD80DA7836DEE2ABAC76A5E5B5443AE1C3C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
Manifest number:          0231
Signing time:             Tue 24 Mar 2026 16:01:06 +0000
Manifest this update:     Tue 24 Mar 2026 15:56:06 +0000
Manifest next update:     Fri 27 Mar 2026 23:33:06 +0000
Files and hashes:         1: 3230322e35352e3137322e302f32342d3234203d3e203137373639.roa (hash: IjrbLlYEZOkT769gFvToei/FjO23eUDwwXgDIinpfEU=)
                          2: 3230322e35352e3136322e302f32342d3234203d3e203137373639.roa (hash: T5jlMftgO+al5AvueUPJMaV5GzIbWRKqrYOhtXYmc+8=)
                          3: 3230322e35352e3137342e302f32342d3234203d3e203137373639.roa (hash: AZl1WqvrrGaN/Hqm3PzVhhQNyD550/D+bGuAXNwzmmo=)
                          4: 3230322e35352e3137332e302f32342d3234203d3e203137373639.roa (hash: 39FnZF9lwp6Zy6W9tvLZyBge1M+UPl6WPVxqAcRECPc=)
                          5: 3230322e35352e3137312e302f32342d3234203d3e203137373639.roa (hash: s4QV2LJdIkwWHWXsfO0kzma2mgtldKYGhA7Yd0ZrUKw=)
                          6: 3230322e35352e3136332e302f32342d3234203d3e203137373639.roa (hash: fj4+D3FnvWC2jZGh29lA6NhBfEm+9p3F5NFsLJJnOOA=)
                          7: 3230322e35352e3137352e302f32342d3234203d3e203137373639.roa (hash: 6C+M2mKjL0ChxPYmBY/5rPDruxQaFvTx4uNnx5SBd5k=)
                          8: C451166D49539649063AF8F493F51CB1ACE0AB09.crl (hash: 3qfYusKLDrocUk/FJ8EfIJo/sk2TaO08sZHaZoxFbNw=)
                          9: 3230322e35352e3137302e302f32342d3234203d3e203137373639.roa (hash: FcauiWQCAo10b4251JHpBxlXw/DF6Tp3LqTDNrIkFZE=)
                          10: 3230322e35352e3136352e302f32342d3234203d3e203137373639.roa (hash: g5FIe96NvzXk1l3G1SZk+E0uR323nS4gh8FFBV8v4lc=)
                          11: 3230322e35352e3136342e302f32342d3234203d3e203137373639.roa (hash: 9n+k1wYDMgpMgw+A5gACjEnWZSRILaiiNarAGXe5WNY=)
                          12: 3230322e35352e3136362e302f32342d3234203d3e203137373639.roa (hash: rh4Hq0+PJnkMYodh0EEu2Rh0F1326cFssYTeQOpe6mo=)
                          13: 3230322e35352e3136392e302f32342d3234203d3e203137373639.roa (hash: E22Utfr9APhC4z7JcllyNf8HweB95Yf5C8me+CdvyFE=)
                          14: 3230322e35352e3136382e302f32342d3234203d3e203137373639.roa (hash: GjZ1cbaTXfnbMXe6NXLIE1G8vG8knT78bA2UOSSfXJY=)
                          15: 3230322e35352e3136312e302f32342d3234203d3e203137373639.roa (hash: E6giWYKilOtzuxxyRR5Bf2onxUq+uVzIL/QgDucECFM=)
                          16: 3230322e35352e3136302e302f32342d3234203d3e203137373639.roa (hash: p+Uf34Mmlfgto2vZAGmKX9zPbb85GAX+5DX29eoUl2g=)
                          17: 3230322e35352e3136372e302f32342d3234203d3e203137373639.roa (hash: cWz9uXSlQWLa9Ng0/c4IO1YEuQsv0PGxvtj/Shq2axY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl
                          rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 23:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:20:bd:80:da:78:36:de:e2:ab:ac:76:a5:e5:b5:44:3a:e1:c3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C451166D49539649063AF8F493F51CB1ACE0AB09
        Validity
            Not Before: Mar 24 15:56:06 2026 GMT
            Not After : Mar 27 23:33:06 2026 GMT
        Subject: CN=7DA986551D6169DA9EAF37AC97C24AF7C0CC93C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:20:39:8d:9d:30:aa:9d:d4:7b:7b:89:1f:
                    dc:e5:82:1a:09:b5:86:68:e7:3a:d7:26:d3:b6:6e:
                    40:5f:21:86:ec:d5:61:b2:e9:b6:da:d1:f9:0a:67:
                    27:c4:54:7a:16:4e:27:ad:76:63:41:37:3e:4f:25:
                    66:e1:09:66:a4:99:7b:c5:4b:02:9a:91:6c:78:41:
                    57:8b:22:7d:3c:04:40:f1:cf:08:26:00:8f:f3:ed:
                    08:36:d1:6d:59:cb:ce:0a:f9:d5:0a:33:39:c5:d9:
                    f6:e3:0f:a6:6e:3b:35:d6:07:72:9e:18:0e:e8:60:
                    bd:54:4a:3f:bf:3c:c0:ea:8d:d5:ce:5a:a9:52:57:
                    0d:62:4c:d5:4e:bf:47:61:a6:78:9c:bd:6e:3e:41:
                    e2:a0:20:4f:85:02:96:b5:0d:9c:ce:43:52:34:79:
                    2d:f7:e2:33:8c:ea:ac:ef:d4:6a:2b:69:83:5e:0d:
                    1f:dc:c9:20:d1:38:2d:3e:a4:33:2c:58:0c:80:9b:
                    36:5c:02:8c:04:8f:0d:44:4e:75:e7:8b:cb:ce:a6:
                    99:b9:86:12:df:9a:33:b4:ce:7a:e4:18:15:a7:cd:
                    12:35:9b:5a:1c:04:7f:d6:76:b2:16:75:8a:1b:44:
                    97:a7:3e:f4:87:6c:c6:ad:89:e7:39:72:0d:72:c9:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A9:86:55:1D:61:69:DA:9E:AF:37:AC:97:C2:4A:F7:C0:CC:93:C0
            X509v3 Authority Key Identifier:
                keyid:C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:11:5b:c9:cf:c2:53:1a:ed:3d:18:bf:b4:4a:57:04:38:55:
         35:cc:f0:15:7d:08:c5:ca:33:03:92:8b:ad:12:f1:82:dc:fa:
         16:e3:6d:e2:c6:a8:fd:72:3e:22:0a:f0:36:fb:57:21:cc:c3:
         65:34:b4:0c:84:0d:aa:1d:2b:fc:96:ce:03:4d:c4:45:9e:71:
         d8:63:80:da:cd:91:85:9d:25:b8:b1:c0:1e:e6:ed:0e:98:f7:
         5f:9d:50:55:56:14:2b:16:a3:8f:aa:80:04:3f:02:e2:7e:a9:
         af:5e:e6:41:81:05:21:54:7a:93:18:a0:83:10:fa:65:c7:72:
         f3:6d:dd:5d:ab:2f:ce:56:cd:ac:a4:6b:09:5b:70:41:21:4f:
         5b:af:de:29:5d:28:8a:09:77:dd:46:bb:d1:be:d2:28:b1:80:
         f0:f8:f1:1a:13:bf:6d:01:90:07:93:d5:0c:1d:21:95:3a:1c:
         ca:2d:e1:22:fb:2d:4a:f1:b5:2c:a5:48:21:d1:90:2b:88:f7:
         12:f7:58:7c:a2:3e:e1:b2:4c:9b:37:29:2f:40:4b:94:b2:c4:
         8b:80:bd:dc:ba:eb:cd:9b:ee:14:2e:1e:be:c4:78:e1:b2:a2:
         bb:28:02:70:99:c2:3f:b9:db:aa:b5:0e:0d:c0:95:00:2f:d6:
         a7:ff:fd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:02:50 2026 by rpki-client