Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
File:                     8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json)
Hash identifier:          KgolnEGrfRE2YiNnDYmUvTODg+Nosjib5U86nFCYEdU=
Subject key identifier:   82:64:F4:5E:9C:26:EC:05:C3:72:43:85:64:3F:63:6C:5D:9C:0F:41
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Certificate issuer:       /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial:       61CF7936B93BD81CAF8AE356546C7CAD6B7D88F0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
Manifest number:          057F
Signing time:             Fri 17 Apr 2026 05:03:28 +0000
Manifest this update:     Fri 17 Apr 2026 04:58:28 +0000
Manifest next update:     Mon 20 Apr 2026 14:49:28 +0000
Files and hashes:         1: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=)
                          2: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=)
                          3: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: 0G3umGSNIafLUyMMJjc+XpTQjFcLRIMU7BoomAPsjew=)
                          4: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: M3nv0mC0g0dVK72c2OJ01BOoKTGk3r0NAIb60MF1lcw=)
                          5: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=)
                          6: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: lzhEeQ6DAkKFZoSDXb/ij7h8jtExSjFLGzcvwIopMPE=)
                          7: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: RS4Z5hPliFofbuZy6siMGSvvq53kTGe3aDopkAMtX7s=)
                          8: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=)
                          9: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: D991UEHbv0mT0xjDcSLCu5iaTm6ib67YwDcjKkL5vPw=)
                          10: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=)
                          11: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=)
                          12: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=)
                          13: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: SDQ6xpzFoeg0lTwEJkVJ2YC5ntC/O8NvcqwJeEYUXmo=)
                          14: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: Iku7tb8SAQIhEvwkUVsI01KnPzpIZ553w7v11/ErUtM=)
                          15: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=)
                          16: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: 2gW3Rfh5X7ipOiYU8QKJderh3wmalaHFB05xG/7xIOU=)
                          17: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=)
                          18: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=)
                          19: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: 8bH62zhwf0kgF3amh047ZVAlbr2i3orRPBn9qkRCMJk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
                          rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 14:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:cf:79:36:b9:3b:d8:1c:af:8a:e3:56:54:6c:7c:ad:6b:7d:88:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
        Validity
            Not Before: Apr 17 04:58:28 2026 GMT
            Not After : Apr 20 14:49:28 2026 GMT
        Subject: CN=8264F45E9C26EC05C3724385643F636C5D9C0F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:1c:49:11:43:9f:c0:dc:98:b8:3a:28:00:
                    70:17:4a:a5:fc:47:ad:1b:43:1b:13:c3:85:90:1b:
                    ea:a3:07:bc:81:d2:ed:dc:37:b0:88:44:64:37:d1:
                    88:d4:e5:8a:87:5d:68:f3:b5:b5:38:77:75:9a:6b:
                    d5:68:59:8d:8a:e7:cc:c0:71:3a:4e:61:a3:01:bf:
                    b9:3b:3f:ce:ae:ee:68:25:2d:46:1f:01:d4:d4:f2:
                    06:29:98:6b:8d:b2:68:d8:32:86:1f:f5:34:c9:ea:
                    e6:8f:f2:8b:74:fb:42:32:d3:89:19:ba:18:c8:48:
                    7f:cf:c5:c1:79:d7:fc:a7:fd:81:c2:15:e7:22:92:
                    be:0b:b1:34:61:ba:36:5c:cf:aa:0c:35:de:05:29:
                    83:47:70:c6:16:a4:a1:a8:c2:7c:3c:da:26:b7:9a:
                    b5:8b:14:64:61:96:f6:d0:55:88:00:02:3e:21:fd:
                    fa:d4:bf:d2:1b:71:93:39:77:b8:9d:60:7b:25:64:
                    e2:47:72:e3:e3:ab:43:f0:56:20:71:1a:e0:9c:d5:
                    a9:90:ba:c8:48:28:b9:c6:f3:e5:3f:97:1e:47:5b:
                    30:fd:e6:3f:59:fb:a5:57:9e:e0:08:24:ea:6f:bf:
                    11:1a:18:30:27:19:d0:70:ea:11:68:f2:1d:78:b1:
                    fc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:64:F4:5E:9C:26:EC:05:C3:72:43:85:64:3F:63:6C:5D:9C:0F:41
            X509v3 Authority Key Identifier:
                keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9c:8b:f6:b4:f7:73:98:95:e6:80:64:e7:24:41:8e:a1:0e:
         20:be:80:24:4f:e2:3d:e7:1c:6f:b2:84:4a:9c:f0:31:bf:fb:
         d4:22:57:46:07:81:71:ef:2b:29:91:f1:c1:6c:a2:ab:20:b7:
         51:0f:46:8d:66:19:63:1f:c3:09:93:84:a2:65:f8:f5:6e:29:
         5d:16:d9:9e:93:d0:63:ca:d3:c0:ec:72:ba:a3:c8:42:80:96:
         f3:17:55:fa:6a:59:1b:6d:17:a2:2f:50:4f:05:fa:95:e8:81:
         f0:70:6d:9a:9e:58:61:6c:e5:8f:e8:48:c1:19:58:ed:d8:22:
         eb:25:b8:5e:2c:76:b2:45:ce:ee:81:49:e4:13:4f:2b:9c:26:
         35:e0:1f:30:a5:32:f4:2c:0b:4c:8a:62:7e:79:64:06:7d:6c:
         3a:51:1d:07:6f:6b:d9:c2:e8:40:81:02:18:2d:b1:1a:70:e9:
         3f:d7:cb:d9:e0:56:da:74:fd:05:c4:f6:a1:d1:ce:c5:53:d8:
         a1:16:81:01:e1:53:94:aa:2e:05:60:b4:89:18:37:17:a2:e5:
         69:0d:a3:82:bc:74:00:63:68:19:9e:94:48:4e:96:ad:cd:c4:
         0b:5f:be:0b:e9:03:83:04:ff:2e:df:e5:94:c0:27:a4:50:5e:
         5a:cf:a0:ec
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYc95Nrk72ByviuNWVGx8rWt9iPAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJD
QUI5NjEwRjAeFw0yNjA0MTcwNDU4MjhaFw0yNjA0MjAxNDQ5MjhaMDMxMTAvBgNV
BAMTKDgyNjRGNDVFOUMyNkVDMDVDMzcyNDM4NTY0M0Y2MzZDNUQ5QzBGNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhBxJEUOfwNyYuDooAHAXSqX8
R60bQxsTw4WQG+qjB7yB0u3cN7CIRGQ30YjU5YqHXWjztbU4d3Waa9VoWY2K58zA
cTpOYaMBv7k7P86u7mglLUYfAdTU8gYpmGuNsmjYMoYf9TTJ6uaP8ot0+0Iy04kZ
uhjISH/PxcF51/yn/YHCFecikr4LsTRhujZcz6oMNd4FKYNHcMYWpKGownw82ia3
mrWLFGRhlvbQVYgAAj4h/frUv9IbcZM5d7idYHslZOJHcuPjq0PwViBxGuCc1amQ
ushIKLnG8+U/lx5HWzD95j9Z+6VXnuAIJOpvvxEaGDAnGdBw6hFo8h14sfynAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgmT0Xpwm7AXDckOFZD9jbF2cD0EwHwYDVR0j
BBgwFoAUiv67UdAMjgaq6oQuDAz/wsq5YQ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NjEyNDMyOS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC84QUZFQkI1MUQw
MEM4RTA2QUFFQTg0MkUwQzBDRkZDMkNBQjk2MTBGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJDQUI5
NjEwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYxMjQzMjktZWMyMC00NDYwLWFj
MzEtOWMzNmNmOTRmM2ZiLzAvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZG
QzJDQUI5NjEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABGci/a093OYleaAZOckQY6hDiC+gCRP4j3n
HG+yhEqc8DG/+9QiV0YHgXHvKymR8cFsoqsgt1EPRo1mGWMfwwmThKJl+PVuKV0W
2Z6T0GPK08DscrqjyEKAlvMXVfpqWRttF6IvUE8F+pXogfBwbZqeWGFs5Y/oSMEZ
WO3YIusluF4sdrJFzu6BSeQTTyucJjXgHzClMvQsC0yKYn55ZAZ9bDpRHQdva9nC
6ECBAhgtsRpw6T/Xy9ngVtp0/QXE9qHRzsVT2KEWgQHhU5SqLgVgtIkYNxei5WkN
o4K8dABjaBmelEhOlq3NxAtfvgvpA4ME/y7f5ZTAJ6RQXlrPoOw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:14 2026 by rpki-client