Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
File:                     4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json)
Hash identifier:          NHadllgg5e4Dv7POan7kDmb6P9AOAKIUrWtLnl87VtA=
Subject key identifier:   60:3C:11:EB:07:4B:02:A5:39:03:05:26:6D:BA:74:87:0C:7E:54:1E
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Certificate issuer:       /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial:       234B8A0DD3CBC443B65B8524FA9D51A801BC6687
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
Manifest number:          F1
Signing time:             Wed 05 Nov 2025 16:11:25 +0000
Manifest this update:     Wed 05 Nov 2025 16:06:25 +0000
Manifest next update:     Sun 09 Nov 2025 03:37:25 +0000
Files and hashes:         1: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: mdadZ+r3nk3ljg8TD8Qk3FJTWop4VzOG0q1+8q98qdQ=)
                          2: 323430343a393763303a333130303a3a2f34302d3430203d3e20313533303837.roa (hash: GtLJlyIT44yOE5pTxubbE+JVbv879K3iwKIQBgBcJ2I=)
                          3: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: Wdn8WLm/z70TbHCfvi7cPeFpinXRYOP3acHf9F2yoZI=)
                          4: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: Lk2DgYj+QODfg+053uFba0kcIHOb5Vr+/MafHCR41Bo=)
                          5: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: 6h5ukYFuCno4f7DUxvLhYVLFCjOWP5SiTwkMYTzIF/4=)
                          6: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: 1NH1eG3Zfl97MOtxtfrsqqGCWGbmYZJJ7WvL5sj1ARU=)
                          7: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: IUWcIIvw/5B79/1vlmhpjp2xq/bxBr1gvBDlm1MJkEE=)
                          8: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: vJHjXSNbN+nrHshiQZVlbnAzNovBDlJVOtnmhWeep78=)
                          9: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 2kWw72G7y9+iu7Oj2LdzHrFFqPrgZYlByeJlEDz3xGE=)
                          10: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: 2dvpZD7SkLIO8Bb1a+NTuA+XOzdWGBmc4e1hLBWS+aY=)
                          11: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: bZomEerwTckK0uovhCRCPeCKuhMrW+Qy9Lz5ot1+QLM=)
                          12: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sjFkPQRbAFB+/y9Sh73guddwprpnyTSYhc+NK3cVMUk=)
                          13: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: j6Ah4zCV5Z9s5XBj4EfeLS0R7DSkO07nEqeB2Klb76g=)
                          14: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: DUx1uGcFaMxSBQpP1ITofuirpaclZNzBSNRp/I11LcM=)
                          15: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: Z2kUGl4d2/nWr+hivZqHD1txvHpg/IJVAL0dy1bjHtc=)
                          16: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: VrqEqcYe4ew7uni6W9u41N7qHk2GgBXWkfjAlNiKflw=)
                          17: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: /RbGQNrG5f2b5xUZmbLZIUIJCT8zlW48+GUxpa/P1BY=)
                          18: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: xoql0u4cJ/KRzzlhzdPt4uyRXe/QNmDlgTST+s7tLx0=)
                          19: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 62idZGQxlSWM3llZuSqKAdjwW6hLve0VhfHgcV849wU=)
                          20: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: Rd+MYgkYtI8Em6b7VkPxEFn2gv60uz4eRZ5jfkklOME=)
                          21: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: cFUzi273SYArAUsUFdIqNgQFTFMOnTlJq02/dC40bZE=)
                          22: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: BcmLy7eGAXxwcAZfEvgQEqwzVahjl/LS8t/7DNQb3O0=)
                          23: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: RbbbhN7gQjhRmlONdMhkhAU8C3rOa0UopxhZkN4y+0U=)
                          24: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: opmintFf7rKX4t8MJAAA/SPs3kIqRtIjgx+RStmQ20g=)
                          25: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: htvHw1UId6QYt8Zem0GwkkJ79UHzGuY9MeNMUAYecR4=)
                          26: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: NVdbP46U9HcnF9BcVuhppXenoJ+oGsK6bpcGbNkhYrY=)
                          27: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: hfVgYmT+s3T/gP2ZWIlWtZU/K6JQ3MvR1bPnXxp9XLc=)
                          28: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: jSQKKM5t1FotHl9IvmmOV1bpO2Bm+Ktc/PrlSfNtDhw=)
                          29: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lc21YQEjyBtBR3cEzA2MpTAYh2Z++8zZog+Taujf5EA=)
                          30: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: CExyw62yhaULfuFNwHgJQzvOaDneumlJpO9PSL24k5c=)
                          31: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: wzrRIRPSPMpZXs/6SqbPwUgiCefzNUlDE+HufEdbYVA=)
                          32: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: UH1OeEapN00xpdN52GP23gFWyVB860/o2X8O7dKpC+0=)
                          33: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: /Nnh6j9dQCYcuoIKmMpFeUVi7V4lhYfyFAMUQ8KcTyY=)
                          34: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: CswFvDupWqQkmZpyiNQV19oxsV8YOajNmUapEbDiz6Q=)
                          35: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: FCPjRuILimc1y3AzWysntAW1lv6bPjvpNuCAb/4Y8KY=)
                          36: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9hl66Fb3ZZtaq9RTVyzyMYKvn9CeIA27uiDhLsoWI3A=)
                          37: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: f+QA2MdOH3pD5wnFB0dGm2Zrsg4T8gtTfRmGOdNWdhQ=)
                          38: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: CoVHqDze9/9Ad7yystdU0IkQDdi+UUE5paHmjRb7ddU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
                          rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 03:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4b:8a:0d:d3:cb:c4:43:b6:5b:85:24:fa:9d:51:a8:01:bc:66:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
        Validity
            Not Before: Nov  5 16:06:25 2025 GMT
            Not After : Nov  9 03:37:25 2025 GMT
        Subject: CN=603C11EB074B02A5390305266DBA74870C7E541E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:c0:08:e8:60:4f:34:2b:f3:e1:9a:05:2e:
                    52:d3:c3:f1:33:81:4a:05:cc:0b:cc:0e:25:bf:71:
                    29:f3:ba:60:ce:6d:67:1a:cc:ec:ca:77:3c:ff:b4:
                    17:cd:bf:91:eb:6b:e0:26:52:41:9a:8a:6a:34:ec:
                    78:8a:d4:74:be:5f:65:b3:89:4c:f1:b5:e3:12:64:
                    99:cf:1d:ed:a6:ab:a5:d3:da:51:76:ca:15:6f:eb:
                    f4:0e:cd:a1:cc:e9:c2:30:0a:97:c4:78:30:e1:87:
                    ac:c8:d9:cc:3a:c8:ee:dd:d9:d0:c2:4c:63:b7:e3:
                    ac:29:38:f7:fa:d7:fe:88:b7:85:7e:bb:88:ef:87:
                    23:8f:79:13:50:0c:55:0b:e0:17:2f:07:05:fe:57:
                    b1:e6:46:02:8c:2a:18:2c:5e:e3:33:87:91:3c:4c:
                    d4:f2:f4:12:07:d0:c3:3a:11:bd:04:86:15:44:bb:
                    81:8b:6d:e1:52:a2:28:58:52:3d:82:67:48:68:32:
                    bf:f2:8d:3a:0d:c8:cf:dd:77:b2:5f:a2:00:20:01:
                    c3:c8:66:58:9f:e4:30:ca:4f:b9:d0:88:6c:c9:c8:
                    07:bf:ef:72:35:c2:14:a9:8e:45:b3:a1:44:20:dd:
                    65:bb:10:6b:2b:3b:b6:2e:7b:83:e3:0f:2c:7a:34:
                    c6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3C:11:EB:07:4B:02:A5:39:03:05:26:6D:BA:74:87:0C:7E:54:1E
            X509v3 Authority Key Identifier:
                keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:69:c3:7d:eb:09:34:31:17:2f:20:41:10:26:02:19:4e:dc:
         a6:e7:2a:08:99:6b:70:69:9c:79:6a:44:c2:82:5a:33:39:70:
         f2:8b:29:9c:97:ea:2f:44:b0:6d:3b:15:0a:6a:08:fa:e8:7b:
         7d:da:7c:3d:29:b8:d7:3c:30:44:0f:54:13:19:89:de:f8:99:
         45:ff:bf:a0:49:e5:08:49:31:63:29:a9:6b:44:2e:ae:7d:a2:
         21:25:fe:85:59:94:e0:b5:4c:91:9a:29:e7:3a:b2:92:68:8e:
         bf:48:8c:2b:3a:3e:da:6b:62:c5:f6:c9:1e:69:cd:f5:13:ac:
         37:2f:22:1e:c1:69:93:9f:43:81:3b:92:9c:25:69:67:3a:ea:
         64:39:19:8c:e3:65:ba:ef:e1:aa:13:f4:08:9e:cd:c0:d0:15:
         09:86:64:f3:31:ad:61:fd:b2:ad:fd:a2:18:31:ae:7c:93:cf:
         33:55:37:56:46:84:46:72:a2:61:e4:db:57:a4:1e:64:37:21:
         96:75:f7:91:03:6e:bb:88:d3:42:36:3f:2c:e9:43:e3:38:03:
         da:ad:71:57:85:42:13:10:57:1d:ef:36:d0:b2:08:40:91:0d:
         d8:46:4a:b5:99:0f:a7:15:a8:1b:1f:6a:71:2c:c9:d3:46:12:
         c4:6b:1f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:51:42 2025 by rpki-client