Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
File:                     4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json)
Hash identifier:          t54pg3gf87Ty0nMjAN2qtBCPwP0V1PvnvYkMFFNNvtc=
Subject key identifier:   3A:23:0F:51:A2:44:E7:0E:F0:E9:02:99:D0:3F:8A:9A:23:38:12:61
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Certificate issuer:       /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial:       60CC3EAEC45FF8FFD2FDAE4AC5E0E37C284A54E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
Manifest number:          0126
Signing time:             Sun 01 Mar 2026 01:21:36 +0000
Manifest this update:     Sun 01 Mar 2026 01:16:36 +0000
Manifest next update:     Wed 04 Mar 2026 13:20:36 +0000
Files and hashes:         1: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: 6M8Pqc3cx4r9Johealtry1Gw+jVdKKETBKeugC/gwSo=)
                          2: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: CoVHqDze9/9Ad7yystdU0IkQDdi+UUE5paHmjRb7ddU=)
                          3: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: xiP480ZV+GHJ2/4depZViI+46Z/6Gy8Oy9ISHx8BOoQ=)
                          4: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: BVieKtpjSLtSo/dKiDHRcHA8rEhJMn29aKZFmH29jqw=)
                          5: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: xoql0u4cJ/KRzzlhzdPt4uyRXe/QNmDlgTST+s7tLx0=)
                          6: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: N6mGANoBckRU2bg5hxStsxuo2HX2wdIPxHilFclib3s=)
                          7: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: ASP8j+vBPIfNxGlKZjOVhw8wDXvVplT0wShhkxku/nY=)
                          8: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: RbbbhN7gQjhRmlONdMhkhAU8C3rOa0UopxhZkN4y+0U=)
                          9: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: 1NH1eG3Zfl97MOtxtfrsqqGCWGbmYZJJ7WvL5sj1ARU=)
                          10: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: jwvNujssv5IpW6wUm1bDQwCkCbwLEP4pJ6+PadQVpUw=)
                          11: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: 8BghnefMyUfpQWuZ7yB+zaBc31qeLaaDPm1YLasmkKU=)
                          12: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lNdW3pOZi8eT+J9dyaHX5GGSIEb0ecFMMO3Pho99eNg=)
                          13: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sjFkPQRbAFB+/y9Sh73guddwprpnyTSYhc+NK3cVMUk=)
                          14: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: UH1OeEapN00xpdN52GP23gFWyVB860/o2X8O7dKpC+0=)
                          15: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: x6IB55et7Umm41gvuMH6aPtv2IqrtCDIYQnCW4yZ0Jc=)
                          16: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: wtGa4g73t3mkeuxwfJNw0nrWS6hzNcTp0PysGI1hEyo=)
                          17: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 5B2JZlTjn+LkK2wM5nDYDuRQs9xZXGxH5pBH421APJg=)
                          18: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: 4uXivfruDrV6vIQDaw3CdwZggXYUI8C5CzvO1Aezvw8=)
                          19: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: OViwO9PklTzUH02BjuZLXgkeh74Fe3vDWeCkgzs68vI=)
                          20: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: 3REo8lPESzPESEgFYfKabImyxXr3e1MH5zR+5WqeqWA=)
                          21: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: m4Qjt6x6f7mHe4i/Iubt+ryvfk1k2wGsuQa/3iUQfPg=)
                          22: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9sSxWhK1ekW9sX4kW8H5um/xDsKQzfqceGtwbeCUELE=)
                          23: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: 1dnmFHd006EgNAU0CfiYv2D2zl5Z/COrmj868VsyDLU=)
                          24: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: ajp2RV8pB0t7xjb6AMg24tD94YiYauZ1iojKxpZ1J3o=)
                          25: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: hFSaz/g1QnbG2lr8TgOJJdh8bcxNOKHTZPQyaXMiTuo=)
                          26: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: mn8CNzPntuzIh9ykEoLvol7d+gOHgPTC5fCQWZQ5dbs=)
                          27: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: EApvDBvKIpb3TW1OvFKqCBw8otauBBFdv2Yvyf2DIxU=)
                          28: 323430343a393763303a333130303a3a2f34302d3430203d3e20313533303837.roa (hash: GtLJlyIT44yOE5pTxubbE+JVbv879K3iwKIQBgBcJ2I=)
                          29: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: wzrRIRPSPMpZXs/6SqbPwUgiCefzNUlDE+HufEdbYVA=)
                          30: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: 6h5ukYFuCno4f7DUxvLhYVLFCjOWP5SiTwkMYTzIF/4=)
                          31: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: gMiVXZLJ/9DguVi8cY3O9jgAHLxkekctq4KTVNjceI0=)
                          32: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: vK7js0VcvkoTEio6OPE0bIxYoKi2WhD/AFizRZR03iE=)
                          33: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: jqvg3e8AqoLRJ/K75B/MsSSeNm5CmK8WuhFVMvH1GPY=)
                          34: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: /2j20KxiHUqPzb25Ob8Vnswz982vobPobznvUU3v3l0=)
                          35: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: odQ4TQODv/Nxx9TjvaaJpyigmRoWi0QI8IwNfXz5bHo=)
                          36: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: QP61IhleORRzGf5/ZoBkFFGoF5n6EhGqldep0K1H6sA=)
                          37: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: faTcPr5R7d5SON6aopxvVZHUN4/VFaOooXiyhEzUbUA=)
                          38: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: SOe6CNGwh7AV/ME3NGZRGYorNCiEvzdLsEvnR8QiyAQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
                          rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 13:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:cc:3e:ae:c4:5f:f8:ff:d2:fd:ae:4a:c5:e0:e3:7c:28:4a:54:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
        Validity
            Not Before: Mar  1 01:16:36 2026 GMT
            Not After : Mar  4 13:20:36 2026 GMT
        Subject: CN=3A230F51A244E70EF0E90299D03F8A9A23381261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:12:84:ba:a4:55:c0:9c:8d:ca:19:3d:81:
                    43:95:4c:fc:d7:8e:8d:68:6c:46:65:48:db:7c:6c:
                    8c:1e:54:35:4e:80:f5:66:63:28:f6:f0:ed:59:3d:
                    44:aa:5a:46:44:31:62:c9:38:83:75:ee:55:7a:5b:
                    2b:93:ca:23:ae:41:9e:50:ef:0a:aa:fe:70:3e:a4:
                    50:bc:13:d6:bc:f8:55:b4:99:9c:42:58:5f:00:9c:
                    1e:33:b2:b9:a3:4e:40:6c:c3:da:6e:85:17:9d:3b:
                    e5:f3:e7:13:8b:98:f9:1f:bb:24:d8:b1:5b:d7:73:
                    e1:ee:7a:8e:94:a2:1e:45:1e:a8:70:9b:b1:1e:bf:
                    c3:e9:51:53:5d:72:d8:4f:b5:e9:72:93:f5:07:3f:
                    d4:d0:06:d4:21:f2:08:2e:cc:2e:e8:f8:4c:85:5b:
                    9f:da:7e:14:1a:18:61:ea:60:18:dd:42:27:7d:8d:
                    0e:66:bf:6f:01:0a:f1:da:3c:31:ea:33:e7:16:15:
                    21:9e:f7:90:07:79:8a:27:75:c4:d3:12:9e:72:37:
                    f3:cd:5d:c3:f2:f8:40:39:9a:42:c2:88:65:13:76:
                    3f:fa:97:66:ba:90:dc:b3:22:2c:5b:65:2a:5e:e9:
                    ef:15:b0:02:f7:d1:fa:51:94:c6:fd:0f:87:1b:23:
                    7a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:23:0F:51:A2:44:E7:0E:F0:E9:02:99:D0:3F:8A:9A:23:38:12:61
            X509v3 Authority Key Identifier:
                keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:2c:60:1e:ed:4a:33:d7:6f:de:7b:30:0d:1d:ed:15:47:71:
         b9:d9:f3:e3:51:23:dd:ea:b7:0a:6a:11:d9:4f:c8:da:12:3f:
         09:55:5c:b0:fc:f3:65:5c:03:97:f0:d0:49:67:e6:6f:de:df:
         09:2c:2e:de:95:73:6a:02:df:e0:59:c7:84:89:2e:df:63:2f:
         ef:98:5f:b8:2f:0d:4d:62:6c:4b:2b:33:01:87:08:23:54:0d:
         89:b0:00:e8:3b:5d:c5:5c:5c:8e:cd:8f:72:69:fb:30:77:12:
         69:14:c6:6d:36:92:dc:f9:a4:d4:2f:75:21:a7:e4:8b:23:f9:
         f9:07:17:1d:26:ab:d3:cb:07:82:4a:90:75:ea:88:19:f5:d1:
         91:ef:34:db:30:ad:d2:ab:a7:4c:90:72:96:23:d6:2b:ae:a1:
         9b:bb:56:ba:2e:28:67:15:ec:b3:23:a2:86:5a:6c:44:76:9e:
         b6:2e:58:d0:97:47:94:d9:d1:e3:02:4d:29:a7:94:22:76:4d:
         a3:da:c1:51:4f:11:77:5e:0d:1b:fd:29:9e:e9:01:0d:17:f8:
         f3:f8:8e:f1:d3:50:43:aa:f8:af:38:8f:95:80:a7:43:32:77:
         ce:16:b5:0e:37:28:97:3b:2f:a6:76:2f:ed:5f:ec:f0:b6:84:
         08:e6:7a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:54 2026 by rpki-client