Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
File:                     252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft (raw, json)
Hash identifier:          d+pphSZrWVsj90R0hGrXuO3SzrCUhakB/Evl9TorJFc=
Subject key identifier:   18:29:71:75:C3:D9:FC:B1:84:6B:81:35:58:67:59:F7:2C:FE:92:CC
Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
Certificate issuer:       /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Certificate serial:       6ABB7F6EDCFABA82EB591C6BDE0255934CDDFE23
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 17:27:18 +0000
Manifest this update:     Tue 12 May 2026 17:22:18 +0000
Manifest next update:     Wed 13 May 2026 18:23:18 +0000
Files and hashes:         1: 3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa (hash: +gv7mshFwG91guPNffeDqFP8VhtlPTdkF38Mrqjvafw=)
                          2: 3230322e39332e3133302e302f32342d3234203d3e2034333832.roa (hash: MQr9cSgps4LHbGDJz9c4lbY3OsWW8+f0/YtOH610fL8=)
                          3: 3230322e39332e3133332e302f32342d3234203d3e2034333832.roa (hash: oJFtmwsSoFHyiQKa+hhNclMhUfKj2vrKOCFlonKmBY8=)
                          4: 3230322e39332e3134332e302f32342d3234203d3e2034333832.roa (hash: bSG6QHsujRPX+Uc294mdpRp76mW3JciOY0a15lJ+VVw=)
                          5: 3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa (hash: qX0vHaktqrz7m71UxdI7W17RvwKo2V0MxJaJkQs2PQQ=)
                          6: 3230322e39332e3133312e302f32342d3234203d3e2034333832.roa (hash: TMqEA7J0ys9Jdhs2856BZEmIfYAozAOdr0iBxVxAx0g=)
                          7: 323430333a623930303a3a2f33322d3332203d3e2034333832.roa (hash: Y7pYu6uoU6Wtor/glKejJAeG037qTauUcrlHaByRYu8=)
                          8: 3230322e39332e3133362e302f32342d3234203d3e2034333832.roa (hash: YPUqXiKd2hAz2pX0+rgtSnv5w4BDn1Ero1nRv8u6wqI=)
                          9: 323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa (hash: xHTM4Dl9Q5HuRM0LLQTU8e9mpsnqdL1Szb5p9XaOS1U=)
                          10: 3230322e39332e3132392e302f32342d3234203d3e2034333832.roa (hash: DkW9L5+PRdqINtmxFS5yNgiVWSBo+5OuUsw7BGLvYSk=)
                          11: 3230322e39332e3133382e302f32342d3234203d3e2034333832.roa (hash: bDJ0M8WfLVWpZjcMwek+H+ZptXQ/czkZxGTFLt1V65s=)
                          12: 3230322e39332e3133352e302f32342d3234203d3e2034333832.roa (hash: DCPg6Ceyq9c+k2hdqM6DEY3nNAcqnqv/oWZOgjUDo90=)
                          13: 3230322e39332e3132382e302f32342d3234203d3e2034333832.roa (hash: JR5H0hn3DWJHrXV20lfY1slEZAl4SEHjqDKtqBHNcqI=)
                          14: 3230322e39332e3134312e302f32342d3234203d3e2034333832.roa (hash: WBBveR8OOQyEDRNcy74ITNE5Qj9H1E1tJp48zRmuwlY=)
                          15: 323430333a623930303a313531663a3a2f34382d3438203d3e2034333832.roa (hash: gAp0kb05Si/jPjD4eeDDJSuwWKLzwojxc9RQ2S/bgmM=)
                          16: 3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa (hash: bBy/kH9ORj5HD9m2tQaWWAzIRLY2ViIAnPDxIlu81f0=)
                          17: 3230322e39332e3134322e302f32342d3234203d3e2034333832.roa (hash: 1GOi0KPMqFlJFa1xPEu/J6WGo/8YFfXReaWdo3rhMrk=)
                          18: 3230322e39332e3133372e302f32342d3234203d3e2034333832.roa (hash: yX0AHZ6vh/yAq73HA0k0VP+xBtvvK38tr+ZxhA31lsU=)
                          19: 252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl (hash: gFP8snxTV4rdZvv1FX412CIxPeyU+hHBjtYeg7oqUjs=)
                          20: 3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (hash: mha8gB43Q52dsFp/n7sRBfxP/9miPkjrCifPwwjXt6U=)
                          21: 3230322e39332e3133322e302f32342d3234203d3e2034333832.roa (hash: yogqlIBUcGwqvPyK5arWetAJIbHveLQtDXqk1GIkHHk=)
                          22: 3230322e39332e3133342e302f32342d3234203d3e2034333832.roa (hash: T4u7/Nxiv77dyzQ5TjQIDrnfM70wI1Uq+rGxmxLYoAE=)
                          23: 3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (hash: +ksoHoQYPmnvJLnhpxWFWjlrA5368fIleRTPmBuQhGA=)
                          24: 3230322e39332e3133392e302f32342d3234203d3e2034333832.roa (hash: rmV7MY4FaBL6o6ZE4wLzlBfjsWL4ecrBXmGTlIU19+k=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
                          rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bb:7f:6e:dc:fa:ba:82:eb:59:1c:6b:de:02:55:93:4c:dd:fe:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
        Validity
            Not Before: May 12 17:22:18 2026 GMT
            Not After : May 13 18:23:18 2026 GMT
        Subject: CN=18297175C3D9FCB1846B8135586759F72CFE92CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:29:92:3d:e9:79:32:fb:9f:4a:3f:fc:35:80:
                    e1:42:8a:43:ff:a2:d4:00:64:e9:09:aa:a9:3e:48:
                    a0:b6:63:17:4a:21:64:0f:4b:94:d5:a5:ea:03:d8:
                    37:a8:22:b3:91:6f:1f:bc:04:b2:40:fc:77:c0:50:
                    ef:34:d1:7b:13:b5:f4:17:40:0f:7d:8e:e0:19:51:
                    fc:67:4e:ba:27:c3:76:84:50:6d:f0:9e:f4:b7:92:
                    e2:cd:25:2f:8d:34:a9:f7:60:b8:16:8b:23:01:1c:
                    65:cb:4a:cf:17:04:45:40:26:51:4f:59:fb:16:4b:
                    25:68:4b:9f:87:6c:70:b4:3b:c6:cd:2a:d4:e1:c7:
                    e1:5b:a1:01:92:10:b6:42:e8:d0:ab:b4:6f:c4:95:
                    60:9d:cf:b5:4e:eb:5e:a6:75:08:06:96:08:c8:4c:
                    1c:bc:23:d6:88:5d:07:6b:52:bc:17:de:2e:81:c1:
                    e8:e6:2c:ae:69:ef:61:9c:ce:6d:95:b2:a3:2f:9c:
                    d5:9b:12:16:97:e2:fe:ca:9f:45:70:a7:f1:81:35:
                    e5:6c:c3:82:bf:3f:0c:24:cb:fd:b6:fb:dc:8b:25:
                    9b:15:45:87:06:67:82:c7:07:2c:ac:4f:84:fc:1e:
                    46:89:67:47:3e:95:b3:55:60:e2:6a:dc:13:d0:6e:
                    88:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:29:71:75:C3:D9:FC:B1:84:6B:81:35:58:67:59:F7:2C:FE:92:CC
            X509v3 Authority Key Identifier:
                keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:24:09:05:8e:79:09:ce:1b:d1:b5:c9:9c:e8:f4:e0:e7:c7:
         69:94:93:60:c7:64:bf:d1:65:85:90:30:f6:63:90:d5:e5:fc:
         a0:b4:1e:81:b7:d6:e2:88:39:d6:2f:0e:cb:0b:33:c5:13:19:
         04:d2:6c:88:1e:84:fa:8b:9b:6f:c0:d1:c9:40:bc:47:05:ee:
         0c:21:49:ef:88:27:d7:dc:56:86:bc:b4:60:31:df:b2:f5:71:
         9d:0f:61:58:70:48:5a:4d:ee:bf:2b:11:2b:b5:88:f4:a0:59:
         a8:49:65:72:82:d9:72:e2:df:bd:be:64:4a:50:f4:32:01:17:
         df:6a:11:3e:80:b9:c0:b0:7e:38:cd:3b:7f:06:94:09:58:c1:
         da:01:9e:b1:54:5f:6e:4f:58:41:64:89:b3:32:7c:53:25:46:
         65:7b:50:c5:2f:fb:f7:4e:73:ce:ca:cf:90:87:c7:45:ad:6e:
         9b:0e:ba:4d:96:be:a3:a8:8a:90:8b:a2:8f:26:62:a0:fe:e4:
         af:18:5a:62:30:9b:39:0d:f7:dd:1b:84:09:1f:43:6b:5e:90:
         da:e0:3b:71:2c:c6:e4:cd:5a:e5:87:84:b7:31:54:1d:ff:39:
         24:69:4d:4c:a8:ac:da:8e:58:98:c0:8a:a2:3a:03:1a:86:ec:
         95:f3:7f:00
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUart/btz6uoLrWRxr3gJVk0zd/iMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjUyODM3Q0ExNDRCM0VFN0RCMjQzRUJDQjBDMTBGODE4
QTRFRTQwNDAeFw0yNjA1MTIxNzIyMThaFw0yNjA1MTMxODIzMThaMDMxMTAvBgNV
BAMTKDE4Mjk3MTc1QzNEOUZDQjE4NDZCODEzNTU4Njc1OUY3MkNGRTkyQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKZI96Xky+59KP/w1gOFCikP/
otQAZOkJqqk+SKC2YxdKIWQPS5TVpeoD2DeoIrORbx+8BLJA/HfAUO800XsTtfQX
QA99juAZUfxnTronw3aEUG3wnvS3kuLNJS+NNKn3YLgWiyMBHGXLSs8XBEVAJlFP
WfsWSyVoS5+HbHC0O8bNKtThx+FboQGSELZC6NCrtG/ElWCdz7VO616mdQgGlgjI
TBy8I9aIXQdrUrwX3i6BwejmLK5p72Gczm2VsqMvnNWbEhaX4v7Kn0Vwp/GBNeVs
w4K/Pwwky/22+9yLJZsVRYcGZ4LHByysT4T8HkaJZ0c+lbNVYOJq3BPQbogtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGClxdcPZ/LGEa4E1WGdZ9yz+kswwHwYDVR0j
BBgwFoAUJSg3yhRLPufbJD68sMEPgYpO5AQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTg2YjM4ODktNjk2Ni00NWVmLTkwNzMtYWQxNDAxMWFjM2IyLzAvMjUyODM3Q0Ex
NDRCM0VFN0RCMjQzRUJDQjBDMTBGODE4QTRFRTQwNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yNTI4MzdDQTE0NEIzRUU3REIyNDNFQkNCMEMxMEY4MThBNEVF
NDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTg2YjM4ODktNjk2Ni00NWVmLTkw
NzMtYWQxNDAxMWFjM2IyLzAvMjUyODM3Q0ExNDRCM0VFN0RCMjQzRUJDQjBDMTBG
ODE4QTRFRTQwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIckCQWOeQnOG9G1yZzo9ODnx2mUk2DHZL/R
ZYWQMPZjkNXl/KC0HoG31uKIOdYvDssLM8UTGQTSbIgehPqLm2/A0clAvEcF7gwh
Se+IJ9fcVoa8tGAx37L1cZ0PYVhwSFpN7r8rESu1iPSgWahJZXKC2XLi372+ZEpQ
9DIBF99qET6AucCwfjjNO38GlAlYwdoBnrFUX25PWEFkibMyfFMlRmV7UMUv+/dO
c87Kz5CHx0WtbpsOuk2WvqOoipCLoo8mYqD+5K8YWmIwmzkN990bhAkfQ2tekNrg
O3EsxuTNWuWHhLcxVB3/OSRpTUyorNqOWJjAiqI6AxqG7JXzfwA=
-----END CERTIFICATE-----
Generated at Wed May 13 03:52:45 2026 by rpki-client