Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
File:                     108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft (raw, json)
Hash identifier:          3ykgX8BbeXaNCUjCK3Evz3d5nkHX4DIq5K8c8/V5WEQ=
Subject key identifier:   63:BD:99:3E:F9:69:EF:A5:BB:DD:8A:3F:0E:15:E8:E6:5A:85:29:A4
Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53
Certificate issuer:       /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
Certificate serial:       1442556ED6DC1110B9CE2980480DF385A34DC19E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
Manifest number:          0134
Signing time:             Sun 01 Mar 2026 16:21:47 +0000
Manifest this update:     Sun 01 Mar 2026 16:16:47 +0000
Manifest next update:     Wed 04 Mar 2026 17:53:47 +0000
Files and hashes:         1: 3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (hash: KSUbvXfR6wqgEtV1jcjWsrQSqy5TRuM5IxH97Spd5gE=)
                          2: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl (hash: 4e23Ta4llQXX0VZgNk47iHSH0Y8ry60sF+130aRM3z8=)
                          3: 3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa (hash: 02uGPdQ9hFird7xTsc25uxwhcDH5++RrfPud5wB034E=)
                          4: 3132332e3130382e36352e302f32342d3234203d3e20313333373939.roa (hash: 2MPbE9DHmM30NHKgthoS9sI03vGrnEvS4h+kAcqNSBY=)
                          5: 323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (hash: U1+UJYOPqeG7oUJWUM0ECQEyGoOhn9MsVuuE8ER7syk=)
                          6: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (hash: mb4RdHaLVtluUJXDmdVSpVl3zLc9LDc6xWU2Tugox0c=)
                          7: 3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa (hash: DACxlfdaRrzYV99yR/yeAhjiMh8XR4kIKAf+dkh/dOU=)
                          8: 3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (hash: ZpCaLj3IjbNE+GXo6EylCwD1IX57XlXTChG6yMIUs9k=)
                          9: 3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa (hash: YLUa9f9Ix42SsoAFmSGmhnlKGmYHofqL4ey07MvkUwA=)
                          10: 3130332e34322e3235352e302f32342d3234203d3e20313333373939.roa (hash: wR+IWZMCxrwb5/faol2/GF6hZhc853OeCuHNs3ivUEk=)
                          11: 3130332e34322e3235342e302f32342d3234203d3e20313333373939.roa (hash: dta96fOO5R3KY41745HRH3tf4b61/DKoGwUN3Q11U24=)
                          12: 3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (hash: abJz0HXL4r3WKDjsYu+oZiEGGhSowngdRONlkzkes1A=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl
                          rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 17:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:42:55:6e:d6:dc:11:10:b9:ce:29:80:48:0d:f3:85:a3:4d:c1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
        Validity
            Not Before: Mar  1 16:16:47 2026 GMT
            Not After : Mar  4 17:53:47 2026 GMT
        Subject: CN=63BD993EF969EFA5BBDD8A3F0E15E8E65A8529A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:97:a6:4b:c9:30:cc:ad:f8:e9:cd:db:d6:
                    72:26:65:19:83:b0:bb:77:80:77:6b:59:36:f9:d5:
                    73:e3:56:e9:98:14:d0:f8:67:70:df:f7:14:c3:bf:
                    36:e0:69:2c:e6:63:52:0e:6d:45:63:c7:eb:98:fb:
                    64:2f:1c:9c:15:fd:04:e0:ac:67:77:43:e1:ca:1f:
                    e2:9a:7b:7f:b0:a2:e4:b7:a8:26:c1:ea:ce:12:c7:
                    a3:b4:59:e8:e2:25:8b:b6:41:d1:f7:38:24:4d:41:
                    b3:74:9f:8d:78:be:8e:d6:b6:00:19:73:f2:90:4a:
                    a6:81:3c:dc:08:75:b7:fe:15:db:74:71:e9:97:99:
                    a9:a0:9d:2e:fd:2f:f0:83:a2:9e:60:00:fc:db:34:
                    59:84:62:b0:39:35:ec:95:e5:a7:02:3e:5e:7c:f0:
                    2b:4a:44:7a:3c:bd:7c:7d:f9:dd:0f:d4:63:5d:af:
                    42:0c:6f:85:99:cd:43:16:a8:27:04:48:f8:00:ce:
                    2e:a6:03:58:6f:04:46:79:91:9a:b5:b0:f6:51:f4:
                    98:b4:f1:18:bf:8d:ec:55:43:60:24:9c:27:81:ae:
                    28:01:5a:9b:0e:a6:4e:49:3a:1c:df:0c:ae:dd:a4:
                    01:f5:0e:12:4c:a1:1f:00:94:f2:12:e9:94:2c:12:
                    f8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BD:99:3E:F9:69:EF:A5:BB:DD:8A:3F:0E:15:E8:E6:5A:85:29:A4
            X509v3 Authority Key Identifier:
                keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:44:14:06:64:d5:49:b1:03:3b:ba:38:0d:2f:a6:c1:a8:b2:
         75:3c:d6:c7:75:81:84:c4:6b:9a:6c:17:46:04:ae:0d:6b:91:
         c0:97:e7:69:73:b6:e9:01:ea:1d:23:96:07:e6:e5:08:4b:12:
         00:fd:27:22:7a:90:83:2a:81:cd:e6:92:28:94:9b:56:8b:7b:
         70:16:dd:e9:f3:d6:31:1e:21:de:17:e5:ec:5d:f5:25:17:ca:
         fa:83:1a:30:2c:25:b4:95:24:c5:e9:77:2f:4c:96:3d:db:f8:
         65:e7:c9:e3:55:44:d5:82:0a:f6:24:f4:fb:7d:43:86:42:4e:
         eb:7a:84:bf:eb:c7:c8:df:4e:67:2e:2a:38:23:d7:f8:79:dd:
         c3:a0:39:71:c9:0f:fb:81:d0:9a:78:b6:05:fa:13:73:5e:da:
         09:97:b8:fa:63:d0:23:2b:fe:c9:85:92:fa:7d:28:18:e6:14:
         43:c8:49:80:72:be:79:27:e3:5b:a9:26:56:5a:8f:64:64:70:
         63:fa:6a:c0:f9:db:c5:a3:f4:cc:e1:c3:45:eb:13:9e:00:41:
         17:48:1b:ca:7d:b0:e7:aa:b9:77:5e:bc:d3:51:25:2a:50:52:
         5e:aa:c4:f4:07:41:68:05:d2:72:35:23:e0:f0:7c:5a:9a:2b:
         37:c2:29:f9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFEJVbtbcERC5zimASA3zhaNNwZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD
MTIwMjg1MzAeFw0yNjAzMDExNjE2NDdaFw0yNjAzMDQxNzUzNDdaMDMxMTAvBgNV
BAMTKDYzQkQ5OTNFRjk2OUVGQTVCQkREOEEzRjBFMTVFOEU2NUE4NTI5QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChsJemS8kwzK346c3b1nImZRmD
sLt3gHdrWTb51XPjVumYFND4Z3Df9xTDvzbgaSzmY1IObUVjx+uY+2QvHJwV/QTg
rGd3Q+HKH+Kae3+wouS3qCbB6s4Sx6O0WejiJYu2QdH3OCRNQbN0n414vo7WtgAZ
c/KQSqaBPNwIdbf+Fdt0cemXmamgnS79L/CDop5gAPzbNFmEYrA5NeyV5acCPl58
8CtKRHo8vXx9+d0P1GNdr0IMb4WZzUMWqCcESPgAzi6mA1hvBEZ5kZq1sPZR9Ji0
8Ri/jexVQ2AknCeBrigBWpsOpk5JOhzfDK7dpAH1DhJMoR8AlPIS6ZQsEviFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUY72ZPvlp76W73Yo/DhXo5lqFKaQwHwYDVR0j
BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1
QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw
Mjg1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I2M2Y3NzEtYTk1Zi00YjUzLTg3
YmMtOGJmZjUwNGRhMWY0LzAvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0
REZDMTIwMjg1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGFEFAZk1UmxAzu6OA0vpsGosnU81sd1gYTE
a5psF0YErg1rkcCX52lztukB6h0jlgfm5QhLEgD9JyJ6kIMqgc3mkiiUm1aLe3AW
3enz1jEeId4X5exd9SUXyvqDGjAsJbSVJMXpdy9Mlj3b+GXnyeNVRNWCCvYk9Pt9
Q4ZCTut6hL/rx8jfTmcuKjgj1/h53cOgOXHJD/uB0Jp4tgX6E3Ne2gmXuPpj0CMr
/smFkvp9KBjmFEPISYByvnkn41upJlZaj2RkcGP6asD528Wj9Mzhw0XrE54AQRdI
G8p9sOequXdevNNRJSpQUl6qxPQHQWgF0nI1I+DwfFqaKzfCKfk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:09:06 2026 by rpki-client