Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
File:                     981E5677AC602950ABE1A442C2779E7CB0C108A9.mft (raw, json)
Hash identifier:          NtN7aAa661HYNEcdsLBnhNK/zIMfjH1i4dtTDYFmDc0=
Subject key identifier:   1E:CF:4C:BF:D2:83:4C:E2:A1:96:A2:8F:DC:FE:97:94:4B:BC:44:61
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Certificate issuer:       /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial:       221C92C73EAE74A73601542DDA604F89AA882B5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
Manifest number:          05D3
Signing time:             Thu 26 Mar 2026 07:21:32 +0000
Manifest this update:     Thu 26 Mar 2026 07:16:32 +0000
Manifest next update:     Sun 29 Mar 2026 09:17:32 +0000
Files and hashes:         1: 3131302e34342e3137312e302f32342d3234203d3e20333935373933.roa (hash: CzsB1i2n8blmvNya3o9w8kwH8dKsWQzSUJDKNEk5v+Y=)
                          2: 323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (hash: tmM3oKcQYom0eZ0XNJS+YU7h43ssUwLiYaqon6dfaUY=)
                          3: 3230332e38342e3133392e302f32342d3234203d3e20313338383433.roa (hash: wu8diV5jdWuux9C39Tvhu1GJ88vcA6Du/7ncHsnVM8k=)
                          4: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (hash: Wij0WNmFzkS7ii03UOjMpVj1DHEK+SaLjmorAVH1mZI=)
                          5: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (hash: DzgPlEX76YPqKshtrhPz/EVID2lXXaNvCCo/tHgJE8c=)
                          6: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (hash: njKwh9fBki9cQ9S37NNLRAGEY/gEGO5YoV7LWFXK6D8=)
                          7: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (hash: aaVQCjxDcTZfVP0GXV6UmhAVx/WHjfyhQPMjY9CDL1Y=)
                          8: 3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (hash: u/hRr1E7iAZVxPG4K+GYy4e7bkPpI7qrdTq8mm4/3Ao=)
                          9: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (hash: zp9YwqJpaJqPSfkIdca9i4u3v/DatX4/IMoUS9bihyA=)
                          10: 3230332e38342e3133362e302f32342d3234203d3e20333935373933.roa (hash: RFhrg4bv5ZNSWmuLud5F/oLaU4cTEMAfMqrRIOATFAw=)
                          11: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (hash: k8TYiHXc6vZmoqXaKgcDXCYwJI5QRLDArVJpzQsFi0s=)
                          12: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (hash: vmMOC54VRYyQ6zaPWhSxLckPPT+mw9crTtfHlgZPBE8=)
                          13: 3230332e38342e3134302e302f32342d3234203d3e20313338303737.roa (hash: 7UyyeOfOAAWwvi60EPh0vF8B3qR4laDvRoyaINvRTM4=)
                          14: 3131302e34342e3136382e302f32342d3234203d3e203234323036.roa (hash: H0HlMimCqXAso/aispJtA9+9Apf+w3psosa64aEPhuo=)
                          15: 981E5677AC602950ABE1A442C2779E7CB0C108A9.crl (hash: ARJCIoiZItCFi9DVgJuUch41VeAoqwbJhQl7FNnv8TU=)
                          16: 3230332e38342e3133372e302f32342d3234203d3e20323134313433.roa (hash: gGq3gtPXXpT8qmppXJpdYMGRNCe8MtmuCS9LRZ9VUgI=)
                          17: 323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (hash: 1MMaA/JALdwU46Gmn5cadR8bFFMn6pjjD2wa0Pe9Aag=)
                          18: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (hash: yCnISErH8Sna1COh5a/JsnVWUa2WsXkM6lcVpwgWaI8=)
                          19: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (hash: XBonl+MDq5JKpWntnVm6TMfayZbg8tQu2RWN6XgAyJw=)
                          20: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (hash: 9MSiXUftqD7YwgoDDhRkUOlJfbnaxlrR0kRkqPsHDsM=)
                          21: 3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (hash: L7B4TlCu6+XGwvVIhFVxD06j+oz/txAbz7A9RLeSSuk=)
                          22: 3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (hash: 8Z6QdZAm6ipP1goiFZjslQYb9XOb/wZyuYYrPlulaFM=)
                          23: 323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (hash: yk2Beo121KKGPqhGrImYDU3EMLdITUqRzn7ocJjo60c=)
                          24: 3230332e38342e3134332e302f32342d3234203d3e20323133363037.roa (hash: SU/DxOnFopjxkv8c6HfEkmadSFV8VExLgA9VBa2HuUc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
                          rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 09:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1c:92:c7:3e:ae:74:a7:36:01:54:2d:da:60:4f:89:aa:88:2b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
        Validity
            Not Before: Mar 26 07:16:32 2026 GMT
            Not After : Mar 29 09:17:32 2026 GMT
        Subject: CN=1ECF4CBFD2834CE2A196A28FDCFE97944BBC4461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:10:8c:44:b3:d8:c9:e6:5d:c7:d1:6f:1e:
                    97:c7:34:5f:a8:a8:6e:1a:07:af:ea:85:b1:b3:bb:
                    e9:2f:e4:c1:12:ac:3e:2e:38:d7:1b:2f:74:37:d8:
                    e5:63:29:5c:1c:ed:8b:e9:a9:ca:bf:80:06:a1:c5:
                    d2:0e:03:9d:a4:87:d7:68:3d:51:3e:c8:39:73:8a:
                    2b:fb:25:8c:a4:c5:8b:33:5b:39:7c:2f:12:61:7f:
                    69:65:f9:98:df:e6:18:0f:23:9c:98:1f:f5:2d:58:
                    b1:4e:5e:99:18:ea:48:73:ed:76:f0:e2:63:c6:19:
                    7b:6e:a2:b5:64:26:68:78:53:1c:8b:dc:1e:37:f6:
                    b3:b3:0c:c4:c3:d0:14:3c:c3:2e:17:14:ee:3d:d3:
                    2b:20:7d:98:9b:dd:58:eb:c5:31:19:04:cf:d1:36:
                    d2:ac:97:c6:c3:86:98:20:79:73:5a:0a:2f:cd:b5:
                    99:01:fe:0c:d7:73:b5:ce:65:5c:b6:2d:5e:eb:32:
                    98:cd:35:87:05:d4:53:c8:3b:ac:70:d1:4e:2e:88:
                    61:fa:0d:dc:a7:68:30:bb:3e:fc:cb:67:5f:35:98:
                    25:6f:aa:3e:fb:0e:8b:db:97:3d:12:39:09:63:ca:
                    b2:66:79:2a:92:58:a0:47:ac:5d:e1:ba:98:38:0b:
                    6b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CF:4C:BF:D2:83:4C:E2:A1:96:A2:8F:DC:FE:97:94:4B:BC:44:61
            X509v3 Authority Key Identifier:
                keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e1:f1:37:4a:2a:30:ed:f1:e4:9d:65:4b:68:87:b3:92:16:
         82:cd:b8:8b:06:47:60:44:28:35:38:18:a3:82:bb:b6:a3:ce:
         a3:d0:16:d8:85:ae:ba:89:29:15:94:c7:f4:72:02:dd:89:a6:
         18:fd:95:26:a0:5f:5e:c6:e1:e4:b2:80:2e:ad:26:d5:f4:f7:
         3b:7f:55:ee:6d:25:0f:09:80:e2:8d:1f:90:7a:4d:c1:fa:1b:
         9d:a6:cb:2b:94:cc:6c:97:66:71:12:b2:9e:16:2c:bc:a7:a9:
         e3:69:93:28:65:91:e8:bc:7e:b7:5e:1e:80:71:68:86:3a:c3:
         18:13:3e:53:57:c3:73:81:7d:5c:4c:15:6b:b0:06:9d:63:2e:
         cc:26:09:55:d4:7c:24:04:40:42:52:4e:bb:d8:84:87:bb:9f:
         4a:b9:d8:0e:f8:cd:a0:8e:ee:54:6e:3f:b4:62:c3:ce:5d:e2:
         03:b4:85:dc:7f:94:17:e3:c6:2a:bc:78:5a:ee:a3:4f:de:b9:
         4a:45:12:fc:cb:7a:ef:f6:1c:4b:d2:01:43:be:7d:cf:93:20:
         57:72:3c:f3:bc:bc:e8:01:e0:23:9f:82:d6:bd:47:c4:e1:9a:
         8d:b5:c6:93:88:0f:60:f0:d4:13:db:78:0b:6c:b8:bb:f0:f9:
         64:61:08:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:44 2026 by rpki-client