Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
File:                     4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json)
Hash identifier:          9ocm0e9TAv1FH1m6KoJTJG9nhDDv5ULMKvCtn+Sxlfg=
Subject key identifier:   3E:51:82:9D:37:4B:77:40:5C:1E:34:FC:08:0C:94:65:DB:BF:42:05
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Certificate issuer:       /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial:       0F42550BBD04DFC976DDC7C98383E634A9BE9E6B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
Manifest number:          E9
Signing time:             Sat 18 Oct 2025 08:41:25 +0000
Manifest this update:     Sat 18 Oct 2025 08:36:25 +0000
Manifest next update:     Tue 21 Oct 2025 18:11:25 +0000
Files and hashes:         1: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sjFkPQRbAFB+/y9Sh73guddwprpnyTSYhc+NK3cVMUk=)
                          2: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 62idZGQxlSWM3llZuSqKAdjwW6hLve0VhfHgcV849wU=)
                          3: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: NVdbP46U9HcnF9BcVuhppXenoJ+oGsK6bpcGbNkhYrY=)
                          4: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: f+QA2MdOH3pD5wnFB0dGm2Zrsg4T8gtTfRmGOdNWdhQ=)
                          5: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: xoql0u4cJ/KRzzlhzdPt4uyRXe/QNmDlgTST+s7tLx0=)
                          6: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: rCGI4mEnbOwb9AZxDQOBqCboWEM7Opw46GzG/Scz4q4=)
                          7: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: /Nnh6j9dQCYcuoIKmMpFeUVi7V4lhYfyFAMUQ8KcTyY=)
                          8: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: CswFvDupWqQkmZpyiNQV19oxsV8YOajNmUapEbDiz6Q=)
                          9: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: Wdn8WLm/z70TbHCfvi7cPeFpinXRYOP3acHf9F2yoZI=)
                          10: 323430343a393763303a333130303a3a2f34302d3430203d3e20313533303837.roa (hash: GtLJlyIT44yOE5pTxubbE+JVbv879K3iwKIQBgBcJ2I=)
                          11: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: cFUzi273SYArAUsUFdIqNgQFTFMOnTlJq02/dC40bZE=)
                          12: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: CoVHqDze9/9Ad7yystdU0IkQDdi+UUE5paHmjRb7ddU=)
                          13: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: /RbGQNrG5f2b5xUZmbLZIUIJCT8zlW48+GUxpa/P1BY=)
                          14: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: IUWcIIvw/5B79/1vlmhpjp2xq/bxBr1gvBDlm1MJkEE=)
                          15: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: vJHjXSNbN+nrHshiQZVlbnAzNovBDlJVOtnmhWeep78=)
                          16: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: RbbbhN7gQjhRmlONdMhkhAU8C3rOa0UopxhZkN4y+0U=)
                          17: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: BcmLy7eGAXxwcAZfEvgQEqwzVahjl/LS8t/7DNQb3O0=)
                          18: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: CExyw62yhaULfuFNwHgJQzvOaDneumlJpO9PSL24k5c=)
                          19: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: jSQKKM5t1FotHl9IvmmOV1bpO2Bm+Ktc/PrlSfNtDhw=)
                          20: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: UH1OeEapN00xpdN52GP23gFWyVB860/o2X8O7dKpC+0=)
                          21: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: mdadZ+r3nk3ljg8TD8Qk3FJTWop4VzOG0q1+8q98qdQ=)
                          22: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: opmintFf7rKX4t8MJAAA/SPs3kIqRtIjgx+RStmQ20g=)
                          23: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: bZomEerwTckK0uovhCRCPeCKuhMrW+Qy9Lz5ot1+QLM=)
                          24: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 2kWw72G7y9+iu7Oj2LdzHrFFqPrgZYlByeJlEDz3xGE=)
                          25: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: FCPjRuILimc1y3AzWysntAW1lv6bPjvpNuCAb/4Y8KY=)
                          26: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: VrqEqcYe4ew7uni6W9u41N7qHk2GgBXWkfjAlNiKflw=)
                          27: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: 2dvpZD7SkLIO8Bb1a+NTuA+XOzdWGBmc4e1hLBWS+aY=)
                          28: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: 1NH1eG3Zfl97MOtxtfrsqqGCWGbmYZJJ7WvL5sj1ARU=)
                          29: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: hfVgYmT+s3T/gP2ZWIlWtZU/K6JQ3MvR1bPnXxp9XLc=)
                          30: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: Rd+MYgkYtI8Em6b7VkPxEFn2gv60uz4eRZ5jfkklOME=)
                          31: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: Z2kUGl4d2/nWr+hivZqHD1txvHpg/IJVAL0dy1bjHtc=)
                          32: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: htvHw1UId6QYt8Zem0GwkkJ79UHzGuY9MeNMUAYecR4=)
                          33: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: DUx1uGcFaMxSBQpP1ITofuirpaclZNzBSNRp/I11LcM=)
                          34: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: 6h5ukYFuCno4f7DUxvLhYVLFCjOWP5SiTwkMYTzIF/4=)
                          35: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: Lk2DgYj+QODfg+053uFba0kcIHOb5Vr+/MafHCR41Bo=)
                          36: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9hl66Fb3ZZtaq9RTVyzyMYKvn9CeIA27uiDhLsoWI3A=)
                          37: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: wzrRIRPSPMpZXs/6SqbPwUgiCefzNUlDE+HufEdbYVA=)
                          38: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lc21YQEjyBtBR3cEzA2MpTAYh2Z++8zZog+Taujf5EA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
                          rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 18:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:42:55:0b:bd:04:df:c9:76:dd:c7:c9:83:83:e6:34:a9:be:9e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
        Validity
            Not Before: Oct 18 08:36:25 2025 GMT
            Not After : Oct 21 18:11:25 2025 GMT
        Subject: CN=3E51829D374B77405C1E34FC080C9465DBBF4205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:80:70:69:a1:56:06:7a:d2:6b:2f:e0:52:49:
                    27:44:ee:0e:64:f8:72:a8:9e:ee:64:30:96:c6:99:
                    52:b2:60:de:a2:2d:7f:c2:4b:4d:0a:c0:7e:bf:e7:
                    eb:6e:42:90:cf:64:c2:02:ed:a4:fc:e6:26:43:22:
                    a3:4f:0b:a1:74:be:f6:d4:a1:58:69:01:fb:9a:72:
                    65:14:08:13:88:14:1e:45:14:46:d5:71:ac:f9:1a:
                    65:c2:5e:74:57:9e:da:d0:ce:b5:90:80:8b:56:82:
                    61:ce:1c:32:f1:e8:1f:0d:d6:e8:fe:17:68:c7:67:
                    2e:9b:15:4e:a4:53:93:91:80:98:71:e0:f8:cc:c6:
                    fb:c2:03:7a:d8:0c:41:62:1d:4a:03:63:8e:99:0f:
                    61:da:ff:e3:35:4e:ff:5a:fc:0b:a3:b7:33:28:fc:
                    6e:7b:10:66:ae:20:17:b3:7f:3f:54:52:ec:ac:bd:
                    e2:69:e3:6c:a9:76:ee:43:90:29:55:bb:e1:85:76:
                    28:57:b0:93:19:3f:5f:f9:39:17:3e:79:32:e5:8c:
                    be:e8:c1:b2:ce:12:53:25:a8:e9:52:4a:35:a8:75:
                    25:c5:8d:b6:31:f3:ad:89:6c:8d:a0:f9:bc:3b:4e:
                    58:88:2b:38:d6:48:1f:2f:0a:19:96:c9:e7:4f:4a:
                    aa:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:51:82:9D:37:4B:77:40:5C:1E:34:FC:08:0C:94:65:DB:BF:42:05
            X509v3 Authority Key Identifier:
                keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ec:24:3f:d7:7e:4f:03:e3:e7:8a:11:55:2c:6f:6b:15:c3:
         56:47:e8:01:c1:2b:cb:bb:b4:32:73:7b:b6:27:bc:11:92:a9:
         fe:9c:01:89:34:3b:58:21:54:6a:b3:a2:77:e0:68:92:bd:66:
         3e:86:ea:28:e6:38:54:50:60:4c:a4:88:7a:c7:e8:02:28:f1:
         5a:66:05:01:42:f9:06:bd:3b:91:38:b4:d7:2e:48:87:6c:67:
         ea:e9:0e:54:2e:a4:c2:8c:97:20:32:34:81:9c:b2:d4:36:3c:
         31:33:99:67:55:39:be:4c:71:93:45:0c:b5:5e:fc:6c:34:89:
         51:df:59:ff:1b:b8:cc:fe:9d:b4:fa:02:90:0d:24:64:c2:1a:
         90:9f:c7:3f:85:d1:05:c0:00:0c:ff:ec:73:f0:94:0c:68:e3:
         40:39:23:37:54:10:cd:93:3f:07:14:b6:2a:1a:d4:25:f8:34:
         c2:4d:6f:36:1f:23:88:91:b1:fc:81:68:22:02:dd:ca:c9:d0:
         7f:99:62:c7:ce:0f:11:76:57:3b:33:96:93:c1:24:ce:fe:b0:
         8f:99:85:64:ff:39:c6:6b:ad:c2:84:86:92:1e:d5:d3:f5:51:
         4e:3f:ec:37:57:1d:08:e0:9a:64:a3:eb:73:0a:f3:ec:af:02:
         6c:fd:8b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:43 2025 by rpki-client