Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
File:                     DA8766A90851AE44D76B8563D83586F0164FE5CF.mft (raw, json)
Hash identifier:          PZKvLHu1qEnT27GhU+/GiKSWylKPTDLuaw1Z8rfj7Hs=
Subject key identifier:   53:DB:B9:13:3F:D0:67:85:47:5C:C7:66:2A:E4:FA:BE:30:E0:2D:73
Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
Certificate issuer:       /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Certificate serial:       49C03BCB28B1FC2B37BB671DAD756517207FBF55
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
Manifest number:          05A8
Signing time:             Wed 25 Mar 2026 18:31:02 +0000
Manifest this update:     Wed 25 Mar 2026 18:26:02 +0000
Manifest next update:     Sat 28 Mar 2026 18:50:02 +0000
Files and hashes:         1: 323430353a616163303a3130303a3a2f34382d3438203d3e20313339393439.roa (hash: OZL2E/cxafeD3j68dR4Goq3KpVcZ8ZFBeGKFytnaELo=)
                          2: 323430353a616163303a35353a3a2f34382d3438203d3e20313339393439.roa (hash: Fu/GJrPMicOmcLHNCHZNamnXKhWCoKqvbQcTWVQ5GbY=)
                          3: DA8766A90851AE44D76B8563D83586F0164FE5CF.crl (hash: 39f20N+Veu9Hsy6Z/N8w9DGbetk1JXv7FSpIvRriLAc=)
                          4: 323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa (hash: JI0w6pTieSf2WTseZM5bkzS6iivykHspYYViWrkRs3w=)
                          5: 323430353a616163303a3232323a3a2f34382d3438203d3e20313339393439.roa (hash: /O39yU5iWDJ4j/7yQMSM8pDCjBsXajbdVPe1INNnNO4=)
                          6: 3130332e3134372e35332e302f32342d3234203d3e20313339393730.roa (hash: lCO4dBzU8QlNehADwjvKlKyAnMc64cSgqE/nhYWymAE=)
                          7: 323430353a616163303a373a3a2f34382d3438203d3e20313339393439.roa (hash: mNE/kUBhUoa2u8S+0EWxgymuwplio5kM7Ohy0mpBSbs=)
                          8: 323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa (hash: VQoU1wEGqGabAe8YyCH/Xm7KlM9a3C94oAnpQ3yzvdI=)
                          9: 323430353a616163303a3330303a3a2f34302d3430203d3e20313339393439.roa (hash: bYXM74sXxiJWzewfSI9qT/dPU7n/G/dFFxlAUpaSSGA=)
                          10: 323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa (hash: FQVIk9jt3lLQ8YprtF47oT5gCDZq+nm/xI1WPiBr2rk=)
                          11: 323430353a616163303a35363a3a2f34382d3438203d3e20313339393439.roa (hash: zA39l6F8HFaRRRSuYemmQtHuYJgf8rUYmDEkAERNETk=)
                          12: 323430353a616163303a383a3a2f34382d3438203d3e20313339393439.roa (hash: kh7rJnX1MwqzHWcpJT5wfG/RsAXKa+L1iXSOAdgUPv8=)
                          13: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393730.roa (hash: 4llT7hZB15Pi+P6opWsDeTzdqlEW5rvghBdJ0Bbu86c=)
                          14: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa (hash: d7fQp7v1dd0d0sRt9Y1SVc3ZbxWzeZ9EkR2OMV44yl8=)
                          15: 323430353a616163303a3530303a3a2f34382d3438203d3e20313339393439.roa (hash: rPi35F8PvvKHwsT9xbH5vOghPHmWhiGoUJPmzISRw/g=)
                          16: 3130332e3134372e35322e302f32342d3234203d3e20313339393439.roa (hash: OOtD+Srj/TGQywXi6LwWOihraZAwBF5SEd1jbonASQU=)
                          17: 323430353a616163303a31343a3a2f34382d3438203d3e20313339393439.roa (hash: g6hCZvDTLVDFyT2ub2AfNloqpP0Pv9QGIOi/mlCmzQM=)
                          18: 323430353a616163303a3232323a3a2f34382d3438203d3e20313339393730.roa (hash: /qXePrhFwCSAITrsmjF9O+fZz00IlJM5sj2Sp0A2INA=)
                          19: 323430353a616163303a31323a3a2f34382d3438203d3e20313339393439.roa (hash: c+bUYxOSnstCwP11s+mgcbltV6e+WD6tQZ1mZnvFXQM=)
                          20: 323430353a616163303a35323a3a2f34382d3438203d3e20313339393439.roa (hash: K5rN2dEqu3kaZAIrXi9HWKyKXHot8xpfvFHNgqyUB3Y=)
                          21: 323430353a616163303a35333a3a2f34382d3438203d3e20313339393439.roa (hash: FXJHNsxSBOMPnA8vdwVqgLQk48uGK9FiBs0y6bniYV8=)
                          22: 3130332e3134372e35332e302f32342d3234203d3e20313339393439.roa (hash: 9z7ZVj2rWK+5i6jgJ+YpLAQXRn/4DgMsF9g2sSGbA0k=)
                          23: 323430353a616163303a3430303a3a2f34302d3430203d3e20313339393439.roa (hash: a8iO9XKyrx/7I+Oqk1y5Kkr+vsH7bAdu5KpclfnTwaY=)
                          24: 323430353a616163303a31303a3a2f34382d3438203d3e20313339393439.roa (hash: Qf6XfOwVaRRxifNv15cwdcqeDwqSHN5o2lH9f1JPbtc=)
                          25: 323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa (hash: I2eiOUdkxERRPdxE29u08vFZEYyI2QBSXyGl2v2XsAU=)
                          26: 323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa (hash: IkcqCeYGQb80Q1AOJnsq13AQ5bpaYjmxKy7ulkw8B5Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl
                          rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 18:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c0:3b:cb:28:b1:fc:2b:37:bb:67:1d:ad:75:65:17:20:7f:bf:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
        Validity
            Not Before: Mar 25 18:26:02 2026 GMT
            Not After : Mar 28 18:50:02 2026 GMT
        Subject: CN=53DBB9133FD06785475CC7662AE4FABE30E02D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:91:27:c4:70:30:20:4b:f3:b3:90:85:5f:
                    0e:af:d3:33:72:ca:84:fe:bc:45:56:e7:33:5f:0f:
                    a3:7d:12:f3:aa:2c:5e:7d:fa:fa:10:3c:ae:93:e6:
                    87:35:90:37:20:59:53:fa:e1:56:88:7f:44:be:0c:
                    2f:7f:56:ca:ab:10:e9:fb:ad:d0:ae:a6:b6:39:60:
                    60:94:14:02:7a:bb:f1:72:51:2b:0f:28:87:8e:1e:
                    b3:ce:89:d4:3c:8f:81:ad:fc:22:d5:15:2e:3e:d4:
                    a8:e1:65:dd:71:06:0f:72:59:00:6f:2b:4a:45:5b:
                    cc:7b:92:1c:b4:f5:6c:20:d3:09:d4:a2:57:0b:43:
                    d4:0f:6a:6b:77:d6:fa:ec:94:ee:25:f8:bd:c1:ed:
                    ef:f3:eb:50:bb:99:ae:58:cb:94:9a:d3:09:a2:ec:
                    ba:fe:9f:c1:3a:c6:93:19:95:84:7e:45:5d:22:7f:
                    3a:af:f0:8d:a4:ce:08:51:f6:07:07:3c:f8:4b:66:
                    db:be:19:c1:86:96:46:13:70:3b:45:88:45:44:99:
                    eb:2b:f1:6d:6f:67:1c:2e:9b:95:1d:f9:03:55:9f:
                    86:b2:d9:ef:f7:26:0b:53:63:12:38:67:f6:fd:66:
                    11:43:eb:46:7a:39:a6:21:79:f7:0d:41:38:20:dc:
                    84:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DB:B9:13:3F:D0:67:85:47:5C:C7:66:2A:E4:FA:BE:30:E0:2D:73
            X509v3 Authority Key Identifier:
                keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:84:9c:8e:da:ac:df:1a:72:91:b5:5b:e2:fe:b5:ba:09:e5:
         4b:27:05:4a:19:40:76:71:d2:47:b5:5b:8e:0c:64:d5:8e:41:
         b7:9c:aa:8d:85:7d:21:e0:c7:cc:46:e9:fe:2d:20:05:11:c4:
         79:a6:9c:45:a4:0a:66:91:77:17:4c:43:10:19:7f:a8:1f:c0:
         43:d5:10:e8:bb:ef:42:e7:2e:35:ad:b2:c0:4f:fb:04:15:3b:
         3f:f3:b3:88:84:2a:d9:51:92:5c:9e:65:d4:52:e9:9b:26:8e:
         4f:3f:45:1d:0a:bb:3d:32:1d:98:84:7b:a3:78:a0:c8:7c:47:
         35:90:88:95:ef:dc:2b:ac:ab:f2:79:7c:bd:dd:45:89:1e:d9:
         99:1d:b4:9f:0e:8b:4b:bb:89:47:97:8e:29:7e:70:ca:2d:28:
         f5:10:d1:f0:d3:89:cd:4b:a4:74:07:e2:e0:20:43:f9:f6:61:
         9f:db:55:d8:16:6c:7c:fa:a5:8d:a5:b5:1d:38:e6:28:b9:21:
         8e:a2:ca:9b:0d:a7:45:df:d4:54:70:1d:73:1c:7d:11:10:e8:
         6a:03:f6:d5:44:9e:84:02:6a:a7:d4:8d:49:a5:94:c7:98:36:
         f9:d5:5b:19:e7:36:ff:bb:8b:45:96:24:0f:47:6f:91:af:d1:
         71:44:42:89
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUScA7yyix/Cs3u2cdrXVlFyB/v1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAx
NjRGRTVDRjAeFw0yNjAzMjUxODI2MDJaFw0yNjAzMjgxODUwMDJaMDMxMTAvBgNV
BAMTKDUzREJCOTEzM0ZEMDY3ODU0NzVDQzc2NjJBRTRGQUJFMzBFMDJENzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9QZEnxHAwIEvzs5CFXw6v0zNy
yoT+vEVW5zNfD6N9EvOqLF59+voQPK6T5oc1kDcgWVP64VaIf0S+DC9/VsqrEOn7
rdCuprY5YGCUFAJ6u/FyUSsPKIeOHrPOidQ8j4Gt/CLVFS4+1KjhZd1xBg9yWQBv
K0pFW8x7khy09Wwg0wnUolcLQ9QPamt31vrslO4l+L3B7e/z61C7ma5Yy5Sa0wmi
7Lr+n8E6xpMZlYR+RV0ifzqv8I2kzghR9gcHPPhLZtu+GcGGlkYTcDtFiEVEmesr
8W1vZxwum5Ud+QNVn4ay2e/3JgtTYxI4Z/b9ZhFD60Z6OaYhefcNQTgg3IQ3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUU9u5Ez/QZ4VHXMdmKuT6vjDgLXMwHwYDVR0j
BBgwFoAU2odmqQhRrkTXa4Vj2DWG8BZP5c8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC9EQTg3NjZBOTA4
NTFBRTQ0RDc2Qjg1NjNEODM1ODZGMDE2NEZFNUNGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAxNjRG
RTVDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RlZGMwMzMtY2Q0ZC00NjIwLTkz
NzItZTZlMDM5ZmMwNmI5LzAvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2
RjAxNjRGRTVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFWEnI7arN8acpG1W+L+tboJ5UsnBUoZQHZx
0ke1W44MZNWOQbecqo2FfSHgx8xG6f4tIAURxHmmnEWkCmaRdxdMQxAZf6gfwEPV
EOi770LnLjWtssBP+wQVOz/zs4iEKtlRklyeZdRS6Zsmjk8/RR0Kuz0yHZiEe6N4
oMh8RzWQiJXv3Cusq/J5fL3dRYke2ZkdtJ8Oi0u7iUeXjil+cMotKPUQ0fDTic1L
pHQH4uAgQ/n2YZ/bVdgWbHz6pY2ltR045ii5IY6iypsNp0Xf1FRwHXMcfREQ6GoD
9tVEnoQCaqfUjUmllMeYNvnVWxnnNv+7i0WWJA9Hb5Gv0XFEQok=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:15 2026 by rpki-client