Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
File:                     4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json)
Hash identifier:          xVTBi4LmSrnjvTSUCnGh2sILmvWvkkUheLUhWKapYeE=
Subject key identifier:   1A:47:50:72:60:D7:76:CA:D9:D5:A7:25:70:D9:14:FD:75:4A:CD:29
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Certificate issuer:       /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial:       7ADC89B617A2DB76660C6506CB24E9AC0925DBFA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
Manifest number:          A0
Signing time:             Sat 10 May 2025 05:31:23 +0000
Manifest this update:     Sat 10 May 2025 05:26:23 +0000
Manifest next update:     Tue 13 May 2025 13:05:23 +0000
Files and hashes:         1: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 2kWw72G7y9+iu7Oj2LdzHrFFqPrgZYlByeJlEDz3xGE=)
                          2: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: amybII68a8VE28x622WWbP3X6DorgNErjKJn51v04hU=)
                          3: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: CswFvDupWqQkmZpyiNQV19oxsV8YOajNmUapEbDiz6Q=)
                          4: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: T8cBlOmjcetrSbtW+daV9YtXlBHJ/TgUuSP0ZRu08us=)
                          5: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: BcmLy7eGAXxwcAZfEvgQEqwzVahjl/LS8t/7DNQb3O0=)
                          6: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: jSQKKM5t1FotHl9IvmmOV1bpO2Bm+Ktc/PrlSfNtDhw=)
                          7: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: vJHjXSNbN+nrHshiQZVlbnAzNovBDlJVOtnmhWeep78=)
                          8: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: 4mFNftDpfk5iOOR13jmxwzsoAwFxk+6Hh42YIPgGMwM=)
                          9: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: FCPjRuILimc1y3AzWysntAW1lv6bPjvpNuCAb/4Y8KY=)
                          10: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: NVdbP46U9HcnF9BcVuhppXenoJ+oGsK6bpcGbNkhYrY=)
                          11: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: 2dvpZD7SkLIO8Bb1a+NTuA+XOzdWGBmc4e1hLBWS+aY=)
                          12: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: Z2kUGl4d2/nWr+hivZqHD1txvHpg/IJVAL0dy1bjHtc=)
                          13: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lc21YQEjyBtBR3cEzA2MpTAYh2Z++8zZog+Taujf5EA=)
                          14: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: IUWcIIvw/5B79/1vlmhpjp2xq/bxBr1gvBDlm1MJkEE=)
                          15: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: opmintFf7rKX4t8MJAAA/SPs3kIqRtIjgx+RStmQ20g=)
                          16: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: Wdn8WLm/z70TbHCfvi7cPeFpinXRYOP3acHf9F2yoZI=)
                          17: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 62idZGQxlSWM3llZuSqKAdjwW6hLve0VhfHgcV849wU=)
                          18: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: balnJcNONLw8SBYvt7tVe9VLlUUBAlIKjs8CUCdy5n0=)
                          19: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: Rd+MYgkYtI8Em6b7VkPxEFn2gv60uz4eRZ5jfkklOME=)
                          20: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: /RbGQNrG5f2b5xUZmbLZIUIJCT8zlW48+GUxpa/P1BY=)
                          21: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9hl66Fb3ZZtaq9RTVyzyMYKvn9CeIA27uiDhLsoWI3A=)
                          22: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: cFUzi273SYArAUsUFdIqNgQFTFMOnTlJq02/dC40bZE=)
                          23: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: +efjUKkfN7wyOn1gEZ4iK+HOgdi5kSwgmzRJxOnk92c=)
                          24: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: VrqEqcYe4ew7uni6W9u41N7qHk2GgBXWkfjAlNiKflw=)
                          25: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: PWcu8n1GQVYIbIpIIeTmS8WPhGjRtUMxtKVHKNkmcLA=)
                          26: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: /Nnh6j9dQCYcuoIKmMpFeUVi7V4lhYfyFAMUQ8KcTyY=)
                          27: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: f+QA2MdOH3pD5wnFB0dGm2Zrsg4T8gtTfRmGOdNWdhQ=)
                          28: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sw0SlIxt+FA7pZy4rkUInlCn0uAcgR4nYJ5Re3N9oxc=)
                          29: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: CExyw62yhaULfuFNwHgJQzvOaDneumlJpO9PSL24k5c=)
                          30: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: bZomEerwTckK0uovhCRCPeCKuhMrW+Qy9Lz5ot1+QLM=)
                          31: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: mdadZ+r3nk3ljg8TD8Qk3FJTWop4VzOG0q1+8q98qdQ=)
                          32: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: Lk2DgYj+QODfg+053uFba0kcIHOb5Vr+/MafHCR41Bo=)
                          33: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: 12eKUXGhIz6FHVGhhjWlfvlhTiivVo5sPJpz1GDHaMw=)
                          34: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: DUx1uGcFaMxSBQpP1ITofuirpaclZNzBSNRp/I11LcM=)
                          35: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: htvHw1UId6QYt8Zem0GwkkJ79UHzGuY9MeNMUAYecR4=)
                          36: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: hfVgYmT+s3T/gP2ZWIlWtZU/K6JQ3MvR1bPnXxp9XLc=)
                          37: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: v0m70RT7TsMBD2CfWXOxviOzxM9VbD9adOYfqtuzcmg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
                          rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 13:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:dc:89:b6:17:a2:db:76:66:0c:65:06:cb:24:e9:ac:09:25:db:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
        Validity
            Not Before: May 10 05:26:23 2025 GMT
            Not After : May 13 13:05:23 2025 GMT
        Subject: CN=1A47507260D776CAD9D5A72570D914FD754ACD29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d2:d7:93:60:b5:c1:56:88:7b:e8:dd:a8:d6:
                    b8:15:0e:d0:e8:90:25:d4:04:9d:cf:7d:d1:4c:49:
                    c2:b0:93:95:57:b8:9a:ee:d4:ba:88:bc:c3:2d:91:
                    48:02:f1:df:a5:aa:21:b6:d3:4b:a7:ed:67:4c:6c:
                    d3:9c:67:3b:21:de:0e:8e:57:f2:4a:31:96:c3:2c:
                    85:cb:56:24:4c:e9:42:e9:4d:da:88:53:91:d6:23:
                    df:22:ed:1c:26:59:7d:c8:20:0a:bd:97:d0:57:80:
                    fc:f8:0c:19:12:41:f9:cb:87:78:eb:1c:51:55:f1:
                    88:0b:0e:62:fb:82:0f:74:60:fb:81:51:b8:54:3d:
                    cf:77:ff:31:a8:c8:21:75:6f:2a:f9:60:de:2f:87:
                    cb:d5:a6:f0:08:cc:a1:2c:f4:ea:c9:0b:92:c7:26:
                    e1:ae:28:26:9d:12:d4:05:11:63:42:5d:f5:5b:66:
                    3d:61:b5:53:79:0e:ba:47:d8:d1:aa:2d:7f:6a:7d:
                    d7:06:7c:83:98:e1:ca:93:31:47:8d:08:ab:8c:20:
                    90:2f:8f:e7:e3:5e:95:8d:36:4d:6b:bd:e0:25:1a:
                    0f:3d:94:03:9f:32:18:76:17:ee:87:ff:f9:29:33:
                    2a:5c:79:74:8a:8f:85:7e:f0:2c:e2:21:d5:f7:ed:
                    97:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:47:50:72:60:D7:76:CA:D9:D5:A7:25:70:D9:14:FD:75:4A:CD:29
            X509v3 Authority Key Identifier:
                keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:5a:ef:23:c0:e5:a5:03:4e:9b:06:cc:a4:3d:70:53:8f:ae:
         10:8a:ac:6a:91:16:be:c6:d3:d1:ed:0f:f4:8b:06:5d:6e:fd:
         9d:47:f5:d2:d5:95:8c:dc:c9:6d:44:1f:55:43:7f:b1:a4:4f:
         50:86:a2:68:12:3d:3b:20:05:68:c5:4e:a2:63:c1:b3:10:60:
         da:05:15:41:7e:86:93:28:82:3f:4f:3a:6c:63:6b:33:4b:1a:
         86:ae:9a:84:6b:de:1b:80:a7:8a:ee:7f:25:e9:ca:41:5a:dc:
         76:bd:71:ef:61:8e:18:96:b4:c5:54:f6:2a:bc:24:df:3f:19:
         13:14:50:20:ec:f9:e0:0a:d2:19:64:8a:92:fe:dd:d9:93:4b:
         e1:e8:a8:07:d6:d0:a9:e1:df:11:3a:12:9c:89:4c:da:d4:9d:
         6f:14:c3:40:79:4e:b7:b5:e2:01:92:c9:1b:b7:b2:6d:28:d1:
         73:69:b5:c6:3c:e3:17:75:8c:0b:ee:60:26:69:b0:a2:4c:56:
         36:08:4a:f1:93:c1:46:bb:b3:5e:0b:78:82:0e:c0:b1:d5:45:
         8d:40:02:63:12:5c:7f:5a:86:64:51:a3:a1:9e:4b:38:60:85:
         d7:8e:4d:f5:a0:ce:a4:82:40:c1:51:b6:a5:26:ab:32:e7:7f:
         9a:c5:8f:92
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUetyJthei23ZmDGUGyyTprAkl2/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4
QzFENTE1ODAeFw0yNTA1MTAwNTI2MjNaFw0yNTA1MTMxMzA1MjNaMDMxMTAvBgNV
BAMTKDFBNDc1MDcyNjBENzc2Q0FEOUQ1QTcyNTcwRDkxNEZENzU0QUNEMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW0teTYLXBVoh76N2o1rgVDtDo
kCXUBJ3PfdFMScKwk5VXuJru1LqIvMMtkUgC8d+lqiG200un7WdMbNOcZzsh3g6O
V/JKMZbDLIXLViRM6ULpTdqIU5HWI98i7RwmWX3IIAq9l9BXgPz4DBkSQfnLh3jr
HFFV8YgLDmL7gg90YPuBUbhUPc93/zGoyCF1byr5YN4vh8vVpvAIzKEs9OrJC5LH
JuGuKCadEtQFEWNCXfVbZj1htVN5DrpH2NGqLX9qfdcGfIOY4cqTMUeNCKuMIJAv
j+fjXpWNNk1rveAlGg89lAOfMhh2F+6H//kpMypceXSKj4V+8CziIdX37ZepAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGkdQcmDXdsrZ1aclcNkU/XVKzSkwHwYDVR0j
BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy
MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE
NTE1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm
OTYtNjNkMzcyMDMxMWRlLzEvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NC
MDQ4QzFENTE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIha7yPA5aUDTpsGzKQ9cFOPrhCKrGqRFr7G
09HtD/SLBl1u/Z1H9dLVlYzcyW1EH1VDf7GkT1CGomgSPTsgBWjFTqJjwbMQYNoF
FUF+hpMogj9POmxjazNLGoaumoRr3huAp4rufyXpykFa3Ha9ce9hjhiWtMVU9iq8
JN8/GRMUUCDs+eAK0hlkipL+3dmTS+HoqAfW0Knh3xE6EpyJTNrUnW8Uw0B5Tre1
4gGSyRu3sm0o0XNptcY84xd1jAvuYCZpsKJMVjYISvGTwUa7s14LeIIOwLHVRY1A
AmMSXH9ahmRRo6GeSzhghdeOTfWgzqSCQMFRtqUmqzLnf5rFj5I=
-----END CERTIFICATE-----
Generated at Sun May 11 03:53:00 2025 by rpki-client