Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
File:                     C00163880F235714759920507217F2A7D557C953.mft (raw, json)
Hash identifier:          b8Ktm5cPGu3ewiCwDZvLyyQdUnPw3RoWARWukTx6cFw=
Subject key identifier:   AA:8A:EB:B6:43:38:BE:0B:FC:67:E7:40:48:03:BE:FA:E9:58:7A:D9
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       75CF171A26A95E7F7E317DD200D9FB3EB3EE90E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
Manifest number:          0574
Signing time:             Wed 25 Mar 2026 15:41:17 +0000
Manifest this update:     Wed 25 Mar 2026 15:36:17 +0000
Manifest next update:     Sat 28 Mar 2026 18:57:17 +0000
Files and hashes:         1: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: pKw5LGAwZ02j8bp/435WnbI3b3bMVBsuwWMCKuHmspo=)
                          2: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: g2oV0iGk+oSLBEAQ3+fcNmyGfdkZlXFUuvI/IByWsRg=)
                          3: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: fEyWQ5MFyToVUsb1qHQF70b1Re5EIhjysqGNFf3N2uE=)
                          4: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: 2Y6D9qyT24i+mrDmXDYxZ/h+kMGeojU/2MwD0/st0XM=)
                          5: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: RMDQ4JU1W8jQ/y6PzJZSI8HHgybbgbJ49cw97ZP5E8k=)
                          6: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: xHN63AGHVhpLy6i5Ne/Rg1b8TEgYmsmsilFtTygXtok=)
                          7: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: WjUo8uQ6z2o8xHjo7VhYk2FONtSF96fbL4VpKiZUe3M=)
                          8: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: XSZGKE/S6Hn7twCZ3sUL7QvBv8/jTjIsBvikiErVDPQ=)
                          9: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: 9gW/gDrS5M+meNB8DH240JCZZ/+dYKmLblxStXo0uQc=)
                          10: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: g6G0tGc+VbiXH94zgiJaavS68ToTcFl7b92TkAIdvw4=)
                          11: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: XOiKBhMpiojDMkAtgGNcSAtmHT5v9rhfXApeFJZLH2w=)
                          12: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: oCRdMEaQb+0L+jLmpAQiC99Gb3FvgP0DAlKAkjWxSuo=)
                          13: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: oeZmr3dpPOSKqyrPruBZU1vvAe8Vo0KgbyY7tyhEXpI=)
                          14: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: rTOdy2cdmmm5QYorTFShkoD3ZBHt/J9THDepoiG1zQU=)
                          15: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: ExAeQuV2nwMk6MuMAQPtG+claobmvvbve+qtKVWxRzM=)
                          16: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: jv40inOqkP45tTFU+4fmcadEbXbs4EIc7qcUlk8q2LU=)
                          17: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: wJcVXH5kdnO3oVC250cjFRiURy0rH8CsrLKZhYlCnvE=)
                          18: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: NQW7UwpMESN0U2eeb5sCy8+6MskrqZgb0v8mJ0QPgMY=)
                          19: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: 4tkvmHO2brVIZ3whhevsuoDJ/Kb5htbxnedOQ9re2sg=)
                          20: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: oKxubgVSq9KanfdFvoxAtxxPQZTjjUlhGrzvFIeghIM=)
                          21: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: YznKDs1CbxF08N3mJ1JGQ46Fgw+8Zoc4by7UrLF1FjE=)
                          22: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: mISY0erp3ysDPa3O+17vQrQWnmbYh2F2NVUBefRVeig=)
                          23: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: ne4Fd9z4GMtggr+H/mTwmUbV1S7/FJjgjsGd2sQh0+E=)
                          24: C00163880F235714759920507217F2A7D557C953.crl (hash: TKrpUPUraVFTwGjvOrlQIH+FBKerXaMlDTFS6cBlzKs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 18:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:cf:17:1a:26:a9:5e:7f:7e:31:7d:d2:00:d9:fb:3e:b3:ee:90:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Mar 25 15:36:17 2026 GMT
            Not After : Mar 28 18:57:17 2026 GMT
        Subject: CN=AA8AEBB64338BE0BFC67E7404803BEFAE9587AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:62:15:28:94:51:36:37:5e:7b:f9:e1:c2:0f:
                    92:0b:29:65:9e:2b:f2:b0:d7:a8:1d:8b:3c:14:2d:
                    39:4b:92:fe:ec:10:51:e3:55:a4:73:46:0d:d5:b2:
                    45:b7:52:5c:e3:a7:76:65:74:da:90:67:08:29:bc:
                    42:9f:97:e5:90:91:7d:bc:26:1b:37:93:18:24:e1:
                    3c:4e:51:69:2c:7a:ba:66:e9:fa:43:28:82:24:47:
                    18:ef:cd:07:26:d1:1d:62:fe:a9:02:74:bf:d1:b4:
                    56:c4:12:d3:3a:fc:f1:ec:1b:62:41:b8:c3:c8:ca:
                    33:5a:1c:38:3a:37:81:51:1d:22:99:cb:6f:23:c4:
                    6f:63:59:42:01:6b:5f:72:61:f9:7b:57:e1:a9:37:
                    91:8d:cc:99:03:39:42:8f:55:35:b3:5e:81:aa:68:
                    ec:73:0f:2c:2c:84:29:6f:3f:fb:01:7e:80:be:31:
                    10:22:9f:19:e9:93:dd:31:e2:86:f1:46:05:8d:5e:
                    07:fb:3a:19:c8:e4:87:d8:f3:f4:48:f8:db:dc:2f:
                    37:97:9c:9d:27:a2:05:03:a6:e6:e6:55:30:d2:12:
                    a3:4e:f1:5f:ef:2f:24:4e:db:57:64:90:45:fc:34:
                    4e:80:70:89:a3:41:ec:f7:a0:d8:81:bb:c7:63:70:
                    4c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8A:EB:B6:43:38:BE:0B:FC:67:E7:40:48:03:BE:FA:E9:58:7A:D9
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:11:94:42:38:2e:c6:b2:ce:b1:f1:84:97:e0:69:d0:66:65:
         a9:ba:0c:6b:76:ba:d7:c5:75:bd:e3:f9:df:63:73:41:be:08:
         86:99:84:52:f8:bc:82:26:3c:52:24:96:c0:2f:40:97:f1:13:
         38:72:f2:67:f0:df:ae:bc:af:cf:8b:24:7a:ad:a4:93:d3:f3:
         c6:80:25:63:3a:58:65:2c:ed:18:8c:72:4c:a7:c5:3e:0b:b9:
         97:17:09:01:6a:d4:9a:df:e0:a7:ed:9b:e5:88:33:fa:6a:c9:
         f9:99:f5:6c:8e:1b:3e:07:ff:f2:31:d9:98:4d:a8:ed:10:5a:
         31:2b:be:66:3d:bf:7c:18:ec:be:08:74:9a:2f:d4:41:f7:1a:
         f2:07:dd:41:3a:89:3a:25:41:df:8b:fa:39:41:49:08:23:d0:
         bf:5a:96:cb:95:ae:24:78:86:b3:98:82:6c:83:b9:3b:42:c4:
         d5:37:72:36:77:ff:4c:24:ba:4d:aa:1a:cb:a7:58:59:9b:6f:
         0c:be:a1:8b:84:bf:75:83:56:31:ec:70:91:aa:e0:a5:4b:9b:
         f6:ef:60:c1:ba:d6:85:04:70:fd:cc:2e:03:72:01:f6:dc:ff:
         f7:42:de:65:0c:58:f5:6b:75:5e:fd:e5:cd:cc:56:aa:2b:e3:
         95:f3:d5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:31:06 2026 by rpki-client