Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
File:                     4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json)
Hash identifier:          +xdsabxgvcm+DWy3bnqPDzn9QAEMZkNwzBBFUw+ZtbM=
Subject key identifier:   82:CC:A3:B7:82:6B:F3:09:D6:10:7E:AE:D6:12:F4:CE:71:0B:79:12
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Certificate issuer:       /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial:       7E7BC0E0272630DC248B95617BED58E36C86716A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
Manifest number:          C3
Signing time:             Thu 24 Jul 2025 19:11:28 +0000
Manifest this update:     Thu 24 Jul 2025 19:06:28 +0000
Manifest next update:     Mon 28 Jul 2025 05:36:28 +0000
Files and hashes:         1: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: bZomEerwTckK0uovhCRCPeCKuhMrW+Qy9Lz5ot1+QLM=)
                          2: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: jSQKKM5t1FotHl9IvmmOV1bpO2Bm+Ktc/PrlSfNtDhw=)
                          3: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: CswFvDupWqQkmZpyiNQV19oxsV8YOajNmUapEbDiz6Q=)
                          4: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: Rd+MYgkYtI8Em6b7VkPxEFn2gv60uz4eRZ5jfkklOME=)
                          5: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 2kWw72G7y9+iu7Oj2LdzHrFFqPrgZYlByeJlEDz3xGE=)
                          6: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: FCPjRuILimc1y3AzWysntAW1lv6bPjvpNuCAb/4Y8KY=)
                          7: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: cFUzi273SYArAUsUFdIqNgQFTFMOnTlJq02/dC40bZE=)
                          8: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: mdadZ+r3nk3ljg8TD8Qk3FJTWop4VzOG0q1+8q98qdQ=)
                          9: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: wzrRIRPSPMpZXs/6SqbPwUgiCefzNUlDE+HufEdbYVA=)
                          10: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: DUx1uGcFaMxSBQpP1ITofuirpaclZNzBSNRp/I11LcM=)
                          11: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: 2dvpZD7SkLIO8Bb1a+NTuA+XOzdWGBmc4e1hLBWS+aY=)
                          12: 323430343a393763303a333130303a3a2f34302d3430203d3e20313533303837.roa (hash: GtLJlyIT44yOE5pTxubbE+JVbv879K3iwKIQBgBcJ2I=)
                          13: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: VrqEqcYe4ew7uni6W9u41N7qHk2GgBXWkfjAlNiKflw=)
                          14: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: CoVHqDze9/9Ad7yystdU0IkQDdi+UUE5paHmjRb7ddU=)
                          15: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: RbbbhN7gQjhRmlONdMhkhAU8C3rOa0UopxhZkN4y+0U=)
                          16: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: 6h5ukYFuCno4f7DUxvLhYVLFCjOWP5SiTwkMYTzIF/4=)
                          17: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sjFkPQRbAFB+/y9Sh73guddwprpnyTSYhc+NK3cVMUk=)
                          18: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: /RbGQNrG5f2b5xUZmbLZIUIJCT8zlW48+GUxpa/P1BY=)
                          19: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: IUWcIIvw/5B79/1vlmhpjp2xq/bxBr1gvBDlm1MJkEE=)
                          20: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: xoql0u4cJ/KRzzlhzdPt4uyRXe/QNmDlgTST+s7tLx0=)
                          21: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: CExyw62yhaULfuFNwHgJQzvOaDneumlJpO9PSL24k5c=)
                          22: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: hfVgYmT+s3T/gP2ZWIlWtZU/K6JQ3MvR1bPnXxp9XLc=)
                          23: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: /Nnh6j9dQCYcuoIKmMpFeUVi7V4lhYfyFAMUQ8KcTyY=)
                          24: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: vJHjXSNbN+nrHshiQZVlbnAzNovBDlJVOtnmhWeep78=)
                          25: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 62idZGQxlSWM3llZuSqKAdjwW6hLve0VhfHgcV849wU=)
                          26: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: opmintFf7rKX4t8MJAAA/SPs3kIqRtIjgx+RStmQ20g=)
                          27: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: htvHw1UId6QYt8Zem0GwkkJ79UHzGuY9MeNMUAYecR4=)
                          28: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: Z2kUGl4d2/nWr+hivZqHD1txvHpg/IJVAL0dy1bjHtc=)
                          29: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lc21YQEjyBtBR3cEzA2MpTAYh2Z++8zZog+Taujf5EA=)
                          30: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: Jq3OLhDh+u2H9FeSXCZ5MT8bhWNGXdeSKEM3fkAdHR8=)
                          31: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: 1NH1eG3Zfl97MOtxtfrsqqGCWGbmYZJJ7WvL5sj1ARU=)
                          32: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: f+QA2MdOH3pD5wnFB0dGm2Zrsg4T8gtTfRmGOdNWdhQ=)
                          33: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: NVdbP46U9HcnF9BcVuhppXenoJ+oGsK6bpcGbNkhYrY=)
                          34: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: UH1OeEapN00xpdN52GP23gFWyVB860/o2X8O7dKpC+0=)
                          35: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: Lk2DgYj+QODfg+053uFba0kcIHOb5Vr+/MafHCR41Bo=)
                          36: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: Wdn8WLm/z70TbHCfvi7cPeFpinXRYOP3acHf9F2yoZI=)
                          37: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9hl66Fb3ZZtaq9RTVyzyMYKvn9CeIA27uiDhLsoWI3A=)
                          38: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: BcmLy7eGAXxwcAZfEvgQEqwzVahjl/LS8t/7DNQb3O0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
                          rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 05:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7b:c0:e0:27:26:30:dc:24:8b:95:61:7b:ed:58:e3:6c:86:71:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
        Validity
            Not Before: Jul 24 19:06:28 2025 GMT
            Not After : Jul 28 05:36:28 2025 GMT
        Subject: CN=82CCA3B7826BF309D6107EAED612F4CE710B7912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2c:ae:71:f3:cc:19:4d:74:65:8d:07:51:7d:
                    62:ac:bc:f4:17:c9:fc:3b:22:00:32:d5:eb:20:61:
                    e4:13:b9:49:28:42:1f:e0:2f:3e:47:f0:b0:01:d7:
                    ff:91:7a:dc:10:b3:77:c3:77:fc:db:5a:b2:57:c7:
                    3a:c2:4e:db:68:2b:0e:8d:b4:a7:2b:96:70:2b:31:
                    d7:50:25:a9:0c:d6:6f:a9:5d:35:72:c4:d3:ca:0d:
                    b3:c8:32:e5:01:28:c2:f9:48:ba:29:3d:14:2e:63:
                    80:62:9b:cf:24:f6:ab:45:b4:6a:44:fb:fb:3e:ff:
                    1c:ca:54:7d:71:09:99:5b:0e:05:76:09:e2:57:71:
                    74:4b:88:d4:c4:06:8b:cd:35:6f:bc:d2:4f:45:ef:
                    f1:b7:35:80:42:cb:49:95:cf:1a:58:47:64:42:84:
                    02:2f:20:10:06:9e:f9:f3:cc:d2:e7:55:19:ef:b2:
                    5d:a5:53:de:2c:e8:aa:57:d2:8d:31:c8:20:5b:13:
                    6d:4f:be:fb:91:a3:2f:b8:1d:8e:c9:a6:d0:ed:02:
                    04:6a:27:8b:bc:be:8a:d4:ba:9e:7d:b3:e9:47:f7:
                    6f:ea:df:ad:97:ed:0b:7f:ae:14:8c:37:02:65:86:
                    7d:51:cf:40:a2:9d:5e:09:a4:b9:f7:e0:ba:14:55:
                    7c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CC:A3:B7:82:6B:F3:09:D6:10:7E:AE:D6:12:F4:CE:71:0B:79:12
            X509v3 Authority Key Identifier:
                keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c8:d1:06:48:58:8e:f5:71:c9:ab:bd:e4:40:76:7e:6e:36:
         bf:95:9f:51:d1:67:7d:bc:12:2a:33:22:e0:5f:58:2b:09:58:
         a1:e9:e8:a8:7f:4a:75:e4:80:c1:da:7a:fb:93:f8:b2:a7:ff:
         d8:76:d1:2b:ae:cd:f6:77:55:d8:9e:4b:38:a1:a7:23:b1:1c:
         bc:d7:5b:dd:c8:53:d3:f1:72:17:41:80:8a:1a:f2:21:54:10:
         52:5a:11:70:db:5c:65:e4:ff:92:6c:a5:be:45:c1:a0:25:b5:
         95:60:ca:8d:0c:83:4f:30:7b:ed:9b:c6:8c:3d:1e:98:d9:f9:
         e8:f8:49:f6:79:d6:a7:dc:06:16:68:09:cc:dc:d8:ea:54:4b:
         e2:96:54:14:c8:a1:03:3f:87:41:70:67:06:57:d9:04:66:72:
         3f:de:ec:7e:a2:21:43:39:eb:2c:a9:1b:90:46:73:0e:33:25:
         0c:6c:79:59:6c:ba:f9:78:15:7b:2f:d1:4a:95:ac:1b:a7:37:
         32:41:a0:62:8f:50:f5:be:e2:89:1c:81:e1:3b:40:63:23:c1:
         67:55:01:e3:e8:75:c9:a0:e8:f5:56:bb:47:22:82:63:55:b0:
         6e:1c:8a:69:03:5b:df:11:a3:31:b2:e3:6a:bf:f1:b8:07:61:
         d2:88:ec:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:03:40 2025 by rpki-client