Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
File:                     012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft (raw, json)
Hash identifier:          sCNWu+4BdKxPdK6xGOIOH4Paid54xOpj0vKw0DnRvao=
Subject key identifier:   7C:1D:B8:AF:6A:3B:14:EF:79:75:13:E9:D6:06:63:54:60:25:63:DD
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       4AE5BEB0DC6A8BBB7EAB63777EA206E88771ED8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
Manifest number:          0561
Signing time:             Tue 17 Mar 2026 20:52:32 +0000
Manifest this update:     Tue 17 Mar 2026 20:47:32 +0000
Manifest next update:     Sat 21 Mar 2026 02:48:32 +0000
Files and hashes:         1: 3230322e39332e3133352e302f32342d3234203d3e2034333832.roa (hash: ri1oMn8me80QpVGUqBtvPXHCGV+V3jM8xkbu4T3ytno=)
                          2: 3230322e39332e3133302e302f32342d3234203d3e2034333832.roa (hash: mk2uuBuKIDHj7rkFbCdRe6jSuAPJ/hDxuUfm/exdaSw=)
                          3: 012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl (hash: 2A+GXT2A70ArmGGNUXhftH098FRZ02nS7coOhBPlZYk=)
                          4: 3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (hash: /w7eKmK7IgjbUT0N0MS/xY50UMcyTaRIoyZfbv+wX+Q=)
                          5: 3230322e39332e3133392e302f32342d3234203d3e2034333832.roa (hash: 2xWfiK5wGmMcUrPcXTeK+FMi4oIrH3FKfxMpAgGIdSQ=)
                          6: 3230322e39332e3133312e302f32342d3234203d3e2034333832.roa (hash: w9IXrLEpnOTvHIWW3gOa5yz7gU/R3agEoOz9SkOzTf8=)
                          7: 3230322e39332e3133322e302f32342d3234203d3e2034333832.roa (hash: HZhJmMH/Ke4cPS3cjwshrQlxCqO5LSReCzOgD2oJQGE=)
                          8: 3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa (hash: qkkJ54NZ40Um3ciYsl/FGUnS4rYZSGlzZD4dWlUI5hM=)
                          9: 323430333a623930303a3a2f33322d3332203d3e2034333832.roa (hash: JWHfZ6w+iObuBrwQGbo/6Xd2nLZuo2KPm5ntS1O1mZA=)
                          10: 3230322e39332e3134332e302f32342d3234203d3e2034333832.roa (hash: HxTVM3BaA8ke4XmmAmeOxfSVVSVRh0EkdWqpyqwPT1U=)
                          11: 3230322e39332e3134322e302f32342d3234203d3e2034333832.roa (hash: /rqrLGb+IkPW8rjy02EXXMaWAA6ibmhWcBGw6CAxGjc=)
                          12: 3230322e39332e3133372e302f32342d3234203d3e2034333832.roa (hash: bc52vQ8UC2G4/y1ll8Fk+/X4/gPss4cwSVJImtHITIQ=)
                          13: 3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa (hash: iVB5CfMmFrw/1sxkrTtiTl8LrYbLbK8j8toSYOpEOdI=)
                          14: 3230322e39332e3133362e302f32342d3234203d3e2034333832.roa (hash: uZGMmLO+ihx1HauuMCEhDeKUaoZ9Cej3WyjpZuP5mxw=)
                          15: 3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (hash: AxG3Av6Lr1ooWeZ52jFBXjksOOp131HOnOlkyHCdSIY=)
                          16: 3230322e39332e3133342e302f32342d3234203d3e2034333832.roa (hash: XNOVEI3YN45FFKxPdBMlhL4tIvoqWKr9UzQJy69423A=)
                          17: 323430333a623930303a313531663a3a2f34382d3438203d3e2034333832.roa (hash: Mn12cCWWwqenSncttGnq31sIu/+Hnb5sVeUQv3iCWNw=)
                          18: 3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa (hash: sFm39yL/wE3VY7beJqFDG9gTkKfaNeEukDIdxaa9zRE=)
                          19: 3230322e39332e3133382e302f32342d3234203d3e2034333832.roa (hash: 9VqDU3d2jTW23JJ05scMXpgKwNdRFXtjy3WCszDduNE=)
                          20: 323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa (hash: yvbmRN5GX0Kxoc+90gun4y0Zq8jLX00f2pb/Z/G8CGA=)
                          21: 3230322e39332e3132382e302f32342d3234203d3e2034333832.roa (hash: Kcq6RiACas78b8uWIYiFOtGS3r3yMXUnaWfx7z/cdEU=)
                          22: 3230322e39332e3133332e302f32342d3234203d3e2034333832.roa (hash: vkTDe9buXDOgB6kWHFGcwJdVcp2flSZI09Z4kQqjciU=)
                          23: 3230322e39332e3132392e302f32342d3234203d3e2034333832.roa (hash: 0aNy0ETuqhbORaoBLuDRgIvkLNekuqgE5MuIzbIuHu4=)
                          24: 3230322e39332e3134312e302f32342d3234203d3e2034333832.roa (hash: bBONzBtnp5cZgKGGF/WSDLhv6iSsnxnb46nVEQMcaEk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 02:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e5:be:b0:dc:6a:8b:bb:7e:ab:63:77:7e:a2:06:e8:87:71:ed:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Mar 17 20:47:32 2026 GMT
            Not After : Mar 21 02:48:32 2026 GMT
        Subject: CN=7C1DB8AF6A3B14EF797513E9D6066354602563DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:cd:e4:70:69:13:18:ae:07:ad:40:c6:77:
                    4e:16:3a:c2:ed:c0:90:b7:97:0b:d2:57:24:1d:95:
                    be:f7:d5:eb:00:9a:36:d2:8a:0a:0a:88:a5:63:db:
                    aa:11:53:0b:66:1e:d3:e6:b2:36:6c:f9:d4:2f:b1:
                    ea:32:54:d7:23:c6:29:45:39:94:49:2b:85:aa:0f:
                    25:02:1f:39:7c:66:c1:a2:e8:9a:36:24:0c:00:ca:
                    48:81:ab:d0:7e:49:da:21:98:b0:f4:f8:04:23:28:
                    82:88:2f:7e:60:d8:8d:88:f5:22:2f:50:52:06:c2:
                    10:be:cc:b3:f2:89:c6:c4:81:3c:24:ef:34:84:33:
                    d5:64:63:30:8f:a3:88:c7:a3:b5:c7:08:0a:87:b8:
                    24:1f:25:5d:f2:12:f0:56:3a:93:1e:6e:72:bb:2d:
                    d8:a2:bc:49:87:b5:c9:34:bc:31:38:30:8f:66:c5:
                    ac:f7:bf:24:48:e9:b2:eb:ef:b0:95:1c:bc:8f:41:
                    20:5e:7a:03:87:28:0f:36:dc:2e:31:84:bb:6e:50:
                    bf:69:e5:f7:7e:c3:0b:c2:29:a4:39:26:ae:d9:67:
                    80:43:f9:3d:98:22:4d:5d:7a:af:80:3d:50:cb:26:
                    1f:9e:42:ef:78:e8:02:e4:56:70:87:bd:1b:a5:88:
                    ee:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1D:B8:AF:6A:3B:14:EF:79:75:13:E9:D6:06:63:54:60:25:63:DD
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b0:fd:07:dc:fb:14:52:2c:22:9f:cd:96:7f:7e:04:0e:23:
         82:27:c6:2a:e9:e2:f2:1a:4e:2a:a3:0f:52:19:0e:27:87:69:
         75:a1:7c:12:cc:ad:85:c0:b0:f2:42:ca:16:7a:e4:3b:c9:db:
         ea:c8:25:58:9b:9e:3e:6d:ff:71:ac:0e:c3:79:95:c2:28:fd:
         e3:98:f8:6e:0d:11:ba:8a:6d:4c:5c:7c:d6:cf:62:d7:40:a4:
         85:76:3d:c8:a6:55:ce:60:98:c9:26:57:a3:11:03:f2:0f:bd:
         47:8e:94:1e:04:93:c2:c7:f0:32:f3:44:de:d3:1b:79:41:dc:
         e5:f3:b9:8d:cb:40:18:82:4a:eb:3d:a8:39:8c:fb:2d:f7:c9:
         9f:cc:69:91:c1:68:0c:e5:c3:bb:a0:32:41:5c:84:c3:1b:b7:
         be:7b:15:2a:7c:ee:8a:ae:75:43:dc:fe:ba:f7:67:68:9e:45:
         55:a4:94:80:ca:d4:2e:54:71:c0:62:9e:d8:69:b8:7f:4a:85:
         ef:0a:a9:4c:e7:98:07:fd:7a:a7:43:da:c1:10:23:38:00:f0:
         f9:a0:8e:96:1d:d4:9f:a1:6c:4f:e5:0c:25:91:34:dd:42:21:
         8d:d7:8d:28:41:97:9e:c5:d8:7d:87:1f:bf:ca:e4:46:9e:01:
         27:93:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 11:33:12 2026 by rpki-client