Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
File:                     C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft (raw, json)
Hash identifier:          22KsS29VP+csUkleBPBc0g6vZb/axPvquUGEQXqPOso=
Subject key identifier:   4F:FD:62:F8:49:02:E7:DD:D4:4E:FB:E1:F3:05:A1:D8:AB:2B:A9:08
Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
Certificate issuer:       /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Certificate serial:       6C1F096D42BA784A51314A7D134FCC0B9BCCE7CD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
Manifest number:          05B4
Signing time:             Thu 16 Apr 2026 08:12:44 +0000
Manifest this update:     Thu 16 Apr 2026 08:07:44 +0000
Manifest next update:     Sun 19 Apr 2026 18:36:44 +0000
Files and hashes:         1: 3230322e34332e3137362e302f32302d3234203d3e20313331313131.roa (hash: EI/U6V5bg24RVZ09I8vLipweFogO+Ea7cNH372pUyZY=)
                          2: 3130332e32322e3234392e302f32342d3234203d3e20313331313131.roa (hash: aY0anTpEZIat4/VeI01P3kjwTwtzNISJMDgT1crbBNU=)
                          3: 3230322e34332e3137362e302f32322d3234203d3e20313331313131.roa (hash: o4EuiIX65DjYa3ywyHTPaQSCo34pp+K8+jEM2BCf1A4=)
                          4: 3130332e32322e3234382e302f32322d3234203d3e20313331313131.roa (hash: /xCTIh9hwcxKjknnAI3eSpvSHoqSTZNnozfD2XT8CVw=)
                          5: 3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa (hash: 516xDtvKLseki+IBX6h+mKjxbuiKgwqfJB4LmOXicXw=)
                          6: 3130332e32322e3234382e302f32342d3234203d3e20313331313131.roa (hash: UtJjITDA9JHQ6VJXBVisu99jt556rMiuNEZSGObwvAc=)
                          7: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl (hash: zZEzr9bUS/Uwqu8Bevupc/nzma7Zu/k0/aL3MWFTEAI=)
                          8: 32372e35302e31362e302f32302d3234203d3e20313331313131.roa (hash: K0Qyq4TQNm4Gb6O7QApcWBMQFh1hlsrrhE70FrRZJng=)
                          9: 3130332e32322e3235312e302f32342d3234203d3e20313331313131.roa (hash: FQpoIAC9AkHOj7gF3JsxAlTSaEMd9sYKYRZgoHuK7yw=)
                          10: 3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa (hash: twSGwt6Fotgsl0DbfHgg9x8SNLnHsi/QE3YaQYCzzMs=)
                          11: 3230332e3137362e3138302e302f32322d3234203d3e20313331313131.roa (hash: VU0ZIZ2pkWLbL/yZX6A7PXJh4wAgz1Lfo/SmUnfVxjs=)
                          12: 34332e3234332e3134302e302f32322d3234203d3e20313331313131.roa (hash: Ln/zBXifrR3kRN5QO8V+SWT6tpUWR1WnEob5sCVgP4s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
                          rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 18:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1f:09:6d:42:ba:78:4a:51:31:4a:7d:13:4f:cc:0b:9b:cc:e7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
        Validity
            Not Before: Apr 16 08:07:44 2026 GMT
            Not After : Apr 19 18:36:44 2026 GMT
        Subject: CN=4FFD62F84902E7DDD44EFBE1F305A1D8AB2BA908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f6:b7:62:18:c4:44:8f:47:69:4c:a2:b0:24:
                    ca:9e:86:e4:f5:8c:f8:78:25:cf:b2:91:4c:d3:96:
                    98:19:61:06:1b:22:8a:4a:66:8e:b4:b6:41:62:50:
                    e9:6d:34:b6:cd:54:87:ff:f9:6b:67:34:56:72:f1:
                    0a:16:c1:85:24:9f:a1:62:c1:a8:08:36:56:46:54:
                    a7:8d:00:41:e9:f1:a2:7a:f4:d0:73:24:0b:7a:59:
                    7c:bb:1f:77:40:2d:28:7e:31:ff:e4:d6:a8:87:48:
                    2a:6f:a8:09:4d:e2:90:45:28:50:e5:66:cb:f0:17:
                    f4:f6:74:e4:e8:75:ff:a3:cc:e6:38:f2:f5:ab:e3:
                    42:f1:49:f5:cb:93:ec:c7:54:5e:d4:c7:9a:cd:8d:
                    5b:d4:ae:49:77:9d:d5:dd:5f:36:bd:25:95:79:f9:
                    ed:b5:f0:64:b9:12:f6:8b:da:12:c9:80:1a:73:35:
                    4b:4c:30:a6:aa:73:36:1b:a5:7e:da:c4:f3:58:69:
                    00:5a:0c:c9:17:f0:df:4f:a2:ed:ac:10:c0:98:54:
                    7a:e4:3c:2f:fb:ce:5f:83:42:1f:bb:50:9f:55:cc:
                    12:e6:ec:b3:d5:3c:cb:50:aa:71:3d:7d:1f:d1:c2:
                    d3:55:df:12:e6:e0:7d:0d:b4:c5:01:c6:37:83:09:
                    e3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FD:62:F8:49:02:E7:DD:D4:4E:FB:E1:F3:05:A1:D8:AB:2B:A9:08
            X509v3 Authority Key Identifier:
                keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1d:d5:73:cd:76:1f:c8:a8:47:85:eb:ef:fe:4d:47:ef:39:
         21:0d:ce:3f:18:df:4f:47:c1:c8:4e:97:62:86:bd:bc:14:7b:
         4b:8b:f9:45:f2:30:24:e1:7c:8c:b3:f9:0d:8c:46:48:6b:0d:
         3d:97:28:48:51:6a:c0:a4:8d:5a:a3:77:ce:bc:f8:4c:50:ff:
         3e:6a:2b:69:6c:97:c8:a1:e1:cf:24:25:10:d3:e4:7d:09:47:
         42:73:73:07:bd:e3:43:6b:12:66:e1:c5:95:09:49:1b:19:a0:
         b0:38:0e:36:ee:aa:d5:da:d2:3c:67:89:3a:b8:b6:3a:6b:33:
         8f:04:2d:32:f5:23:6b:cd:98:73:c3:75:b5:37:e5:06:81:c1:
         c4:6f:d9:46:ca:83:d9:28:ac:6c:56:e5:88:e8:d1:bb:a8:75:
         ee:d5:2f:87:54:43:fc:4c:fe:f1:1d:c6:a3:da:3b:02:f7:cf:
         1d:3a:3c:68:36:eb:72:0b:6e:be:05:40:c7:49:8a:1b:76:d3:
         08:66:fc:9d:18:df:50:03:86:75:c5:ec:7e:1d:54:28:ac:79:
         31:f9:dd:b9:01:48:3d:ee:0b:f1:27:ec:82:a3:e1:aa:98:f0:
         c6:cc:38:b6:9f:bc:5e:4c:90:cb:e6:23:23:8f:e8:5f:1b:04:
         58:fe:12:27
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbB8JbUK6eEpRMUp9E0/MC5vM580wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4
NzE2REMyRjAeFw0yNjA0MTYwODA3NDRaFw0yNjA0MTkxODM2NDRaMDMxMTAvBgNV
BAMTKDRGRkQ2MkY4NDkwMkU3RERENDRFRkJFMUYzMDVBMUQ4QUIyQkE5MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX9rdiGMREj0dpTKKwJMqehuT1
jPh4Jc+ykUzTlpgZYQYbIopKZo60tkFiUOltNLbNVIf/+WtnNFZy8QoWwYUkn6Fi
wagINlZGVKeNAEHp8aJ69NBzJAt6WXy7H3dALSh+Mf/k1qiHSCpvqAlN4pBFKFDl
ZsvwF/T2dOTodf+jzOY48vWr40LxSfXLk+zHVF7Ux5rNjVvUrkl3ndXdXza9JZV5
+e218GS5EvaL2hLJgBpzNUtMMKaqczYbpX7axPNYaQBaDMkX8N9Pou2sEMCYVHrk
PC/7zl+DQh+7UJ9VzBLm7LPVPMtQqnE9fR/RwtNV3xLm4H0NtMUBxjeDCeOPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUT/1i+EkC593UTvvh8wWh2KsrqQgwHwYDVR0j
BBgwFoAUwa+MmZ6dBtrevDh9eLMFq4cW3C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
OTIwNWU3Yy1hODgxLTQ4NzMtOTE4OC1lNTIxYjZhZjUyOWMvMC9DMUFGOEM5OTlF
OUQwNkRBREVCQzM4N0Q3OEIzMDVBQjg3MTZEQzJGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4NzE2
REMyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTkyMDVlN2MtYTg4MS00ODczLTkx
ODgtZTUyMWI2YWY1MjljLzAvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1
QUI4NzE2REMyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD4d1XPNdh/IqEeF6+/+TUfvOSENzj8Y309H
wchOl2KGvbwUe0uL+UXyMCThfIyz+Q2MRkhrDT2XKEhRasCkjVqjd868+ExQ/z5q
K2lsl8ih4c8kJRDT5H0JR0Jzcwe940NrEmbhxZUJSRsZoLA4DjbuqtXa0jxniTq4
tjprM48ELTL1I2vNmHPDdbU35QaBwcRv2UbKg9korGxW5Yjo0buode7VL4dUQ/xM
/vEdxqPaOwL3zx06PGg263ILbr4FQMdJiht20whm/J0Y31ADhnXF7H4dVCiseTH5
3bkBSD3uC/En7IKj4aqY8MbMOLafvF5MkMvmIyOP6F8bBFj+Eic=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:39:35 2026 by rpki-client