Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
File:                     8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json)
Hash identifier:          HdwIzKHO9HkxNHSVIWe2VbPU6vOtFdDRTXa3LIkQYwA=
Subject key identifier:   F5:49:9E:07:BF:DB:A0:C6:F1:7A:CF:6D:83:52:69:1D:17:2C:96:B2
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Certificate issuer:       /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial:       24FC8DCB7660FBED9D65113BC09DD5A372794B06
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
Manifest number:          0575
Signing time:             Wed 25 Mar 2026 07:21:56 +0000
Manifest this update:     Wed 25 Mar 2026 07:16:56 +0000
Manifest next update:     Sat 28 Mar 2026 13:27:56 +0000
Files and hashes:         1: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: RS4Z5hPliFofbuZy6siMGSvvq53kTGe3aDopkAMtX7s=)
                          2: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: 9AKkzBnAl66JE2ycipty6mzgoKryyH4R6/z8lx+5lcs=)
                          3: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: 8bH62zhwf0kgF3amh047ZVAlbr2i3orRPBn9qkRCMJk=)
                          4: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: 0G3umGSNIafLUyMMJjc+XpTQjFcLRIMU7BoomAPsjew=)
                          5: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=)
                          6: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=)
                          7: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: M3nv0mC0g0dVK72c2OJ01BOoKTGk3r0NAIb60MF1lcw=)
                          8: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=)
                          9: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=)
                          10: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: D991UEHbv0mT0xjDcSLCu5iaTm6ib67YwDcjKkL5vPw=)
                          11: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=)
                          12: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=)
                          13: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=)
                          14: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: lzhEeQ6DAkKFZoSDXb/ij7h8jtExSjFLGzcvwIopMPE=)
                          15: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: Iku7tb8SAQIhEvwkUVsI01KnPzpIZ553w7v11/ErUtM=)
                          16: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=)
                          17: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=)
                          18: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=)
                          19: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: SDQ6xpzFoeg0lTwEJkVJ2YC5ntC/O8NvcqwJeEYUXmo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
                          rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 13:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:fc:8d:cb:76:60:fb:ed:9d:65:11:3b:c0:9d:d5:a3:72:79:4b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
        Validity
            Not Before: Mar 25 07:16:56 2026 GMT
            Not After : Mar 28 13:27:56 2026 GMT
        Subject: CN=F5499E07BFDBA0C6F17ACF6D8352691D172C96B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ec:ae:12:aa:5e:1c:05:ff:88:36:42:a5:05:
                    2b:e1:44:ac:d3:f2:93:08:14:99:38:24:f0:8e:7a:
                    8e:28:0a:5a:e0:27:68:46:8b:8c:da:fb:5a:0f:bc:
                    c3:fa:3c:26:e3:b8:05:d1:75:50:75:68:5c:89:15:
                    6f:76:bb:ff:67:74:73:07:ee:17:4a:aa:ac:18:1b:
                    54:60:3b:5a:87:3e:22:b5:64:24:53:e4:d5:a2:e8:
                    2e:44:e8:e0:0a:34:15:3a:30:eb:27:c0:24:bb:92:
                    d0:1b:0e:c3:3b:e2:88:ff:f7:80:b7:d9:09:f8:df:
                    ed:15:30:1c:57:5e:59:33:ff:50:8f:44:70:f2:50:
                    c3:44:55:e0:92:b0:b3:3c:61:a1:f1:ad:82:45:73:
                    13:cd:98:d4:ff:84:f7:e7:02:cb:2a:01:56:76:cc:
                    f9:ec:95:83:99:a6:c9:16:d3:ca:56:ba:4d:2f:27:
                    51:60:fa:63:92:dc:39:25:0c:21:50:25:6c:e4:4b:
                    45:bf:3e:07:35:90:1d:f8:09:26:47:2d:0c:86:a3:
                    10:99:8f:4d:92:9d:e3:dc:e4:f2:58:81:6d:2d:d7:
                    97:53:07:b4:0c:ee:7f:2a:5a:52:e4:e1:b8:63:ea:
                    9f:9f:97:27:62:52:9d:ee:38:e1:96:89:bc:08:a8:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:49:9E:07:BF:DB:A0:C6:F1:7A:CF:6D:83:52:69:1D:17:2C:96:B2
            X509v3 Authority Key Identifier:
                keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:6b:66:c4:0d:c8:a5:e3:e8:d3:99:f5:7f:e7:dc:aa:b4:8b:
         a1:bf:34:2f:5b:5e:6c:d2:36:01:f7:a4:f4:5c:84:ec:9a:0f:
         6f:63:c5:69:6e:8c:74:2b:bf:2a:6c:b9:85:a1:26:72:93:5f:
         d7:38:36:84:f1:38:ce:af:aa:a3:ad:34:95:44:e8:c6:77:31:
         fe:8a:09:71:40:d9:3b:4e:ec:34:51:cb:67:87:1c:38:af:4e:
         7b:b4:65:3a:5c:2e:95:28:ef:6d:7b:38:fb:d1:08:60:d3:73:
         ed:f0:53:b2:9a:02:16:54:b0:1a:c1:a5:0b:55:8c:63:64:5d:
         72:f3:54:68:ee:de:37:3b:2c:e9:a2:27:3b:d0:09:f8:d4:6c:
         f1:ad:20:af:7b:5f:01:d2:b2:b8:19:2b:3c:7b:aa:8d:98:3c:
         85:5d:62:52:bc:5d:1a:35:d7:ff:6a:b0:27:d6:53:a4:58:ed:
         22:17:04:15:40:80:6c:9d:e6:30:85:e0:b6:96:70:c7:1a:c0:
         bb:68:7e:8b:76:60:a4:bd:89:50:1e:d9:ee:4d:e0:9d:5e:1d:
         af:f7:c8:55:66:5e:b9:da:1a:f4:0a:34:20:2b:9f:86:d9:e9:
         ed:af:37:59:0d:e1:3f:e9:ef:72:ca:c9:ac:33:4e:f8:f8:75:
         68:3e:5b:a4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJPyNy3Zg++2dZRE7wJ3Vo3J5SwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJD
QUI5NjEwRjAeFw0yNjAzMjUwNzE2NTZaFw0yNjAzMjgxMzI3NTZaMDMxMTAvBgNV
BAMTKEY1NDk5RTA3QkZEQkEwQzZGMTdBQ0Y2RDgzNTI2OTFEMTcyQzk2QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7K4Sql4cBf+INkKlBSvhRKzT
8pMIFJk4JPCOeo4oClrgJ2hGi4za+1oPvMP6PCbjuAXRdVB1aFyJFW92u/9ndHMH
7hdKqqwYG1RgO1qHPiK1ZCRT5NWi6C5E6OAKNBU6MOsnwCS7ktAbDsM74oj/94C3
2Qn43+0VMBxXXlkz/1CPRHDyUMNEVeCSsLM8YaHxrYJFcxPNmNT/hPfnAssqAVZ2
zPnslYOZpskW08pWuk0vJ1Fg+mOS3DklDCFQJWzkS0W/Pgc1kB34CSZHLQyGoxCZ
j02SnePc5PJYgW0t15dTB7QM7n8qWlLk4bhj6p+flydiUp3uOOGWibwIqPVzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9UmeB7/boMbxes9tg1JpHRcslrIwHwYDVR0j
BBgwFoAUiv67UdAMjgaq6oQuDAz/wsq5YQ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NjEyNDMyOS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC84QUZFQkI1MUQw
MEM4RTA2QUFFQTg0MkUwQzBDRkZDMkNBQjk2MTBGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJDQUI5
NjEwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYxMjQzMjktZWMyMC00NDYwLWFj
MzEtOWMzNmNmOTRmM2ZiLzAvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZG
QzJDQUI5NjEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKRrZsQNyKXj6NOZ9X/n3Kq0i6G/NC9bXmzS
NgH3pPRchOyaD29jxWlujHQrvypsuYWhJnKTX9c4NoTxOM6vqqOtNJVE6MZ3Mf6K
CXFA2TtO7DRRy2eHHDivTnu0ZTpcLpUo7217OPvRCGDTc+3wU7KaAhZUsBrBpQtV
jGNkXXLzVGju3jc7LOmiJzvQCfjUbPGtIK97XwHSsrgZKzx7qo2YPIVdYlK8XRo1
1/9qsCfWU6RY7SIXBBVAgGyd5jCF4LaWcMcawLtofot2YKS9iVAe2e5N4J1eHa/3
yFVmXrnaGvQKNCArn4bZ6e2vN1kN4T/p73LKyawzTvj4dWg+W6Q=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:10:25 2026 by rpki-client