Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
File:                     BE7F813F3C6CA289A9CDAC5630975B7627458103.mft (raw, json)
Hash identifier:          Tw0C/P4+Ee8OfBW84GNgVM8kbnAjYf+cHDlLMzmu5zU=
Subject key identifier:   F4:24:07:82:7D:F2:6A:FC:90:61:3F:63:A9:77:DD:1A:B6:87:AE:AC
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       6711D3AC46F9D09EEF38B54864C75BA8BDAB1412
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
Manifest number:          02E7
Signing time:             Tue 24 Mar 2026 11:52:01 +0000
Manifest this update:     Tue 24 Mar 2026 11:47:01 +0000
Manifest next update:     Fri 27 Mar 2026 21:55:01 +0000
Files and hashes:         1: 34332e3233302e3135322e302f32322d3234203d3e203435373235.roa (hash: +4n6/TF4aeSEpR29DkcOnbNK9Y34aOX1PIvKhjQ5Hno=)
                          2: BE7F813F3C6CA289A9CDAC5630975B7627458103.crl (hash: srjfv0yinFYtuNwkOqGjvK+GoirjUGZYaqnNhu0K0QE=)
                          3: 323430323a3738303a3a2f34382d3438203d3e203435373235.roa (hash: PRH29ny13nHsjeQMR0cN2HRWDvKReJ45zJz39Xn7QNM=)
                          4: 3138302e3231312e39342e302f32332d3233203d3e203435373235.roa (hash: fGxoKniAEBM76VKMJUo00rgXTRmiICzBUwxTJepbQTc=)
                          5: 3130332e3234352e3133362e302f32322d3232203d3e203435373235.roa (hash: C+HBXW4aP/jjAvOzAVNV699XcHbQGZO5MrB9N3xY3xk=)
                          6: 3138302e3231312e38382e302f32312d3234203d3e203435373235.roa (hash: 6cpCf7GhdQEpx30p91qB9UYsON8gtbAQPKe5llQv0bs=)
                          7: 34332e3233302e3135322e302f32332d3233203d3e203435373235.roa (hash: Q0cwk7c8b88StdARBfqAwIrSHp+9taytEZ+btig4Fuw=)
                          8: 3230322e3135302e3137302e302f32332d3233203d3e203435373235.roa (hash: i2j5dGLqguTNRyVVnTnQvwJftdD5JJkqTrPIfWKddps=)
                          9: 3230322e3135302e3136362e302f32332d3233203d3e203435373235.roa (hash: GcUYgwocvmQOauxtSSTYpFvHbVUKeMU0WCnL34YeijA=)
                          10: 323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa (hash: c/KXUpCOJbQP0nA61zGA+EIdd/Oe1mSfHUKFexjH0ec=)
                          11: 3138302e3231312e39302e302f32332d3233203d3e203435373235.roa (hash: hUDOtpk5sU33YBwXelqB+Q6pSbGdI6HJT8kjYPqYyvs=)
                          12: 3230322e3135302e3136342e302f32332d3233203d3e203435373235.roa (hash: rpUPYGkkbcLqQ1OuUy+nw93Zp9RI9ayasb1ZrV3T7qE=)
                          13: 3138302e3231312e38382e302f32332d3233203d3e203435373235.roa (hash: oChMsN5j/5oPIrh3RrzlSsxyq4+7vnx0MXBMJBGCZK8=)
                          14: 3230322e3135302e3137322e302f32332d3233203d3e203435373235.roa (hash: NUoTKVgONpfgNdNs/2nx1oY/g/wDuojqAAaMJX8jNpA=)
                          15: 3230322e3135302e3137352e302f32342d3234203d3e20323037353731.roa (hash: fxq+INOzYywTpHUeb4pxKeVy8ePaMLmGli2Hhv5MQO4=)
                          16: 3130332e3234352e3133362e302f32322d3234203d3e203435373235.roa (hash: BI62UO3dEBMuV7GGUm78ylThtADmbOZbryA9/QTeswk=)
                          17: 34332e3233302e3135342e302f32332d3233203d3e203435373235.roa (hash: z/k7bxc++/5O49ybkACdC/Y755XN4WAvFL9ktOZUkgA=)
                          18: 3230322e3135302e3137342e302f32332d3233203d3e203435373235.roa (hash: 7oDZvGotX6LYDxE1W9+sTlNhZ2q2SbjrDuJf0m3mvzQ=)
                          19: 3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa (hash: ZRIxMt8MlUnmvBav6vsFADyDhMYDwFi86bRWc5c9oNA=)
                          20: 323430323a3738303a343a3a2f34382d3438203d3e203435373235.roa (hash: 7RYpboN17UqNJ6ftXIb7G7NF8lTIu/BEppA52Tn56ec=)
                          21: 323430323a3738303a3a2f33322d3438203d3e203435373235.roa (hash: SwCqoJ1gynDTYCb0jXBHuGiNgc7su+9DcZSr6Tdi8I4=)
                          22: 3138302e3231312e39322e302f32332d3233203d3e203435373235.roa (hash: MyP4+gmqEMvATd1am80ukKw6KXcbOWLTuRR9iOrCz38=)
                          23: 3130332e3234352e3133362e302f32332d3233203d3e203435373235.roa (hash: 6iEJRI47+CQrEWAmKlYgIdduJ/PtHECXutKmG+DtTPQ=)
                          24: 3230322e3135302e3136322e302f32332d3233203d3e203435373235.roa (hash: 1sN43PDozSsWzuL3/NohJYg7shaUrgMKtdJkFgcxeUs=)
                          25: 3138302e3231312e38382e302f32312d3231203d3e203435373235.roa (hash: YlcTORm9rnlcpVDr1T1eGBYnMWXnhbJok3s3uYdeDPQ=)
                          26: 34332e3233302e3135322e302f32322d3232203d3e203435373235.roa (hash: Qh2wNfBNRO07qhUrAwaySh37383d1knyF+rQE1kkvDs=)
                          27: 3230322e3135302e3136302e302f32302d3230203d3e203435373235.roa (hash: AYYvX1SMmvEUSV/SlEcF1R0YQ2WDD6uub8Ptl6bq5fc=)
                          28: 3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa (hash: buuz3h7IUSUE3vmqxkV+mh5MrWZbR7xAWRgxwVNkyjA=)
                          29: 3230322e3135302e3136302e302f32302d3234203d3e203435373235.roa (hash: bcb47SdtlV0+rUuQrP25krobOWV4dOeRjxtP0NJ6Hg0=)
                          30: 3130332e3234352e3133382e302f32332d3233203d3e203435373235.roa (hash: jPxrDkpEehUiNhQgS/x9kvyzOcfaYH6gxdwrOHOnSCs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
                          rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 21:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:11:d3:ac:46:f9:d0:9e:ef:38:b5:48:64:c7:5b:a8:bd:ab:14:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Mar 24 11:47:01 2026 GMT
            Not After : Mar 27 21:55:01 2026 GMT
        Subject: CN=F42407827DF26AFC90613F63A977DD1AB687AEAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:bb:19:b1:04:6a:14:02:6a:46:f8:ce:e9:
                    0c:54:df:9a:e6:72:8a:e5:c1:00:7a:52:79:26:82:
                    fe:a1:de:55:5e:ee:9a:ad:07:b5:a4:7e:b0:32:5a:
                    98:14:9f:c3:48:60:d7:25:4d:39:58:f3:94:91:d6:
                    a8:3a:84:d9:6d:6f:8d:92:a6:39:e8:9c:6c:f0:04:
                    cf:10:29:ad:15:54:2e:7b:e1:09:c0:ee:5b:fd:00:
                    10:4d:7c:6e:43:9d:6d:5c:06:06:9b:f0:d5:2d:d3:
                    c0:db:4c:a0:07:17:00:94:5b:83:44:20:03:01:39:
                    a5:29:54:0b:19:75:78:14:ba:01:0b:8c:84:c5:e7:
                    33:8a:e3:7b:8e:bd:c5:3d:38:67:c3:0b:1c:59:aa:
                    46:03:d7:d8:f0:a4:ea:6e:83:f3:98:cb:36:6d:f5:
                    bd:ef:28:46:9c:9d:68:5a:7c:06:d2:b4:0d:3d:2f:
                    28:8e:65:72:55:e7:57:43:cd:df:62:43:f4:5c:88:
                    da:f7:04:61:1e:b9:23:49:e5:27:f1:82:d4:7e:cd:
                    1b:7f:27:bb:6c:8e:4d:18:c0:c7:30:bf:b3:f5:2f:
                    f1:65:67:1a:15:e9:10:37:b5:bd:41:15:60:9b:ef:
                    ff:db:f2:e0:61:27:5d:20:05:8c:b0:31:12:a9:1e:
                    e0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:24:07:82:7D:F2:6A:FC:90:61:3F:63:A9:77:DD:1A:B6:87:AE:AC
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d1:b0:73:4b:29:9c:f6:5c:0b:b6:d2:f3:1d:e3:13:de:9a:
         14:df:57:8d:6c:1e:d5:55:1e:cd:bc:af:0a:e9:85:18:68:b1:
         67:07:44:82:18:5a:f5:81:3c:2d:1a:a3:9a:f3:b9:71:ef:34:
         6b:fa:0f:b2:d7:ab:ca:12:c8:bc:21:d3:f3:9c:6a:0a:ed:4b:
         28:21:2c:98:84:e3:43:95:4d:cd:d6:b3:0b:d2:38:e0:f1:f6:
         98:a7:4a:ff:9f:80:9b:5c:33:3d:9f:83:80:69:5e:d7:69:06:
         fe:32:51:31:3b:70:2b:4f:8b:e0:df:bd:c1:61:2e:bc:ff:a0:
         ec:f7:39:58:71:61:ac:fd:0c:1d:f8:d7:56:dd:33:4f:f0:84:
         a2:ba:e5:1c:60:df:8c:d7:77:a0:8d:29:f2:7a:c3:61:80:99:
         cf:22:6a:36:f0:6b:5f:8c:2d:f8:ca:c9:3a:46:20:2c:98:06:
         5b:c8:65:4b:ce:47:54:79:5a:46:f4:f4:06:36:71:01:f8:aa:
         11:2b:82:0c:64:99:26:1f:be:42:5a:4e:f0:ea:3b:d6:04:0c:
         89:d5:9b:1e:f4:2b:10:54:79:9d:be:f5:c4:e9:06:64:e4:a2:
         3f:3a:9e:73:3d:cd:ad:2c:fa:c3:98:98:87:88:c8:31:8c:d8:
         6d:81:8a:2c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZxHTrEb50J7vOLVIZMdbqL2rFBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy
NzQ1ODEwMzAeFw0yNjAzMjQxMTQ3MDFaFw0yNjAzMjcyMTU1MDFaMDMxMTAvBgNV
BAMTKEY0MjQwNzgyN0RGMjZBRkM5MDYxM0Y2M0E5NzdERDFBQjY4N0FFQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjrsZsQRqFAJqRvjO6QxU35rm
corlwQB6Unkmgv6h3lVe7pqtB7WkfrAyWpgUn8NIYNclTTlY85SR1qg6hNltb42S
pjnonGzwBM8QKa0VVC574QnA7lv9ABBNfG5DnW1cBgab8NUt08DbTKAHFwCUW4NE
IAMBOaUpVAsZdXgUugELjITF5zOK43uOvcU9OGfDCxxZqkYD19jwpOpug/OYyzZt
9b3vKEacnWhafAbStA09LyiOZXJV51dDzd9iQ/RciNr3BGEeuSNJ5SfxgtR+zRt/
J7tsjk0YwMcwv7P1L/FlZxoV6RA3tb1BFWCb7//b8uBhJ10gBYywMRKpHuDtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9CQHgn3yavyQYT9jqXfdGraHrqwwHwYDVR0j
BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND
NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1
ODEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ0MjE2ZDgtNzBjZS00OTA4LWE3
MmItZWMyNzNmNDNiYmMyLzAvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVC
NzYyNzQ1ODEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGfRsHNLKZz2XAu20vMd4xPemhTfV41sHtVV
Hs28rwrphRhosWcHRIIYWvWBPC0ao5rzuXHvNGv6D7LXq8oSyLwh0/OcagrtSygh
LJiE40OVTc3WswvSOODx9pinSv+fgJtcMz2fg4BpXtdpBv4yUTE7cCtPi+DfvcFh
Lrz/oOz3OVhxYaz9DB3411bdM0/whKK65Rxg34zXd6CNKfJ6w2GAmc8iajbwa1+M
LfjKyTpGICyYBlvIZUvOR1R5Wkb09AY2cQH4qhErggxkmSYfvkJaTvDqO9YEDInV
mx70KxBUeZ2+9cTpBmTkoj86nnM9za0s+sOYmIeIyDGM2G2Biiw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:29:54 2026 by rpki-client