Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
File:                     4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json)
Hash identifier:          0qGlMEgA2bUNnYtwRjwoHEteAONt2Oq/1SSXtwyvJUg=
Subject key identifier:   08:37:6C:F7:33:C5:AD:1D:40:22:2E:68:0D:27:C4:CE:8E:C4:22:E3
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Certificate issuer:       /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial:       6E250F7CE775A1A6056A8C656420F53ABF998C57
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
Manifest number:          0128
Signing time:             Thu 05 Mar 2026 23:01:34 +0000
Manifest this update:     Thu 05 Mar 2026 22:56:34 +0000
Manifest next update:     Mon 09 Mar 2026 09:16:34 +0000
Files and hashes:         1: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: wtGa4g73t3mkeuxwfJNw0nrWS6hzNcTp0PysGI1hEyo=)
                          2: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: ASP8j+vBPIfNxGlKZjOVhw8wDXvVplT0wShhkxku/nY=)
                          3: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: hFSaz/g1QnbG2lr8TgOJJdh8bcxNOKHTZPQyaXMiTuo=)
                          4: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: 6M8Pqc3cx4r9Johealtry1Gw+jVdKKETBKeugC/gwSo=)
                          5: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: BVieKtpjSLtSo/dKiDHRcHA8rEhJMn29aKZFmH29jqw=)
                          6: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: 6h5ukYFuCno4f7DUxvLhYVLFCjOWP5SiTwkMYTzIF/4=)
                          7: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: UH1OeEapN00xpdN52GP23gFWyVB860/o2X8O7dKpC+0=)
                          8: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: N6mGANoBckRU2bg5hxStsxuo2HX2wdIPxHilFclib3s=)
                          9: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: m4Qjt6x6f7mHe4i/Iubt+ryvfk1k2wGsuQa/3iUQfPg=)
                          10: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: wzrRIRPSPMpZXs/6SqbPwUgiCefzNUlDE+HufEdbYVA=)
                          11: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: CoVHqDze9/9Ad7yystdU0IkQDdi+UUE5paHmjRb7ddU=)
                          12: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: ajp2RV8pB0t7xjb6AMg24tD94YiYauZ1iojKxpZ1J3o=)
                          13: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: xiP480ZV+GHJ2/4depZViI+46Z/6Gy8Oy9ISHx8BOoQ=)
                          14: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: jqvg3e8AqoLRJ/K75B/MsSSeNm5CmK8WuhFVMvH1GPY=)
                          15: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: mn8CNzPntuzIh9ykEoLvol7d+gOHgPTC5fCQWZQ5dbs=)
                          16: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: odQ4TQODv/Nxx9TjvaaJpyigmRoWi0QI8IwNfXz5bHo=)
                          17: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: faTcPr5R7d5SON6aopxvVZHUN4/VFaOooXiyhEzUbUA=)
                          18: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: 4uXivfruDrV6vIQDaw3CdwZggXYUI8C5CzvO1Aezvw8=)
                          19: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: SOe6CNGwh7AV/ME3NGZRGYorNCiEvzdLsEvnR8QiyAQ=)
                          20: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: 1NH1eG3Zfl97MOtxtfrsqqGCWGbmYZJJ7WvL5sj1ARU=)
                          21: 323430343a393763303a333130303a3a2f34302d3430203d3e20313533303837.roa (hash: GtLJlyIT44yOE5pTxubbE+JVbv879K3iwKIQBgBcJ2I=)
                          22: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: UPA6jjJwZ7HmNHbF1cVpJH8i656fxgZgqyNHodlP/aI=)
                          23: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9sSxWhK1ekW9sX4kW8H5um/xDsKQzfqceGtwbeCUELE=)
                          24: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: vK7js0VcvkoTEio6OPE0bIxYoKi2WhD/AFizRZR03iE=)
                          25: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: x6IB55et7Umm41gvuMH6aPtv2IqrtCDIYQnCW4yZ0Jc=)
                          26: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: jwvNujssv5IpW6wUm1bDQwCkCbwLEP4pJ6+PadQVpUw=)
                          27: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: /2j20KxiHUqPzb25Ob8Vnswz982vobPobznvUU3v3l0=)
                          28: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: RbbbhN7gQjhRmlONdMhkhAU8C3rOa0UopxhZkN4y+0U=)
                          29: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: OViwO9PklTzUH02BjuZLXgkeh74Fe3vDWeCkgzs68vI=)
                          30: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: 3REo8lPESzPESEgFYfKabImyxXr3e1MH5zR+5WqeqWA=)
                          31: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: EApvDBvKIpb3TW1OvFKqCBw8otauBBFdv2Yvyf2DIxU=)
                          32: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lNdW3pOZi8eT+J9dyaHX5GGSIEb0ecFMMO3Pho99eNg=)
                          33: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: gMiVXZLJ/9DguVi8cY3O9jgAHLxkekctq4KTVNjceI0=)
                          34: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sjFkPQRbAFB+/y9Sh73guddwprpnyTSYhc+NK3cVMUk=)
                          35: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: QP61IhleORRzGf5/ZoBkFFGoF5n6EhGqldep0K1H6sA=)
                          36: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 5B2JZlTjn+LkK2wM5nDYDuRQs9xZXGxH5pBH421APJg=)
                          37: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: xoql0u4cJ/KRzzlhzdPt4uyRXe/QNmDlgTST+s7tLx0=)
                          38: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: 8BghnefMyUfpQWuZ7yB+zaBc31qeLaaDPm1YLasmkKU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
                          rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:25:0f:7c:e7:75:a1:a6:05:6a:8c:65:64:20:f5:3a:bf:99:8c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
        Validity
            Not Before: Mar  5 22:56:34 2026 GMT
            Not After : Mar  9 09:16:34 2026 GMT
        Subject: CN=08376CF733C5AD1D40222E680D27C4CE8EC422E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:ee:6c:bb:f0:8f:d3:2c:b9:2c:22:0e:8f:
                    d2:c8:96:ee:d9:d4:d5:6f:a6:31:2a:3f:d4:7a:3c:
                    76:d5:dc:b0:55:8e:92:b5:61:1e:15:2c:7f:78:c2:
                    d0:f4:de:bc:ad:a2:5c:b5:2a:d6:bf:99:7f:ff:16:
                    fb:b5:a8:24:a1:83:5b:b5:1d:db:28:5e:80:31:ba:
                    90:56:be:c3:08:81:ad:81:09:43:59:cf:fa:76:f8:
                    3a:bc:cd:3e:3b:c1:ab:75:19:09:eb:eb:45:ec:ab:
                    66:c0:58:6a:51:67:53:0c:12:97:26:d6:49:44:10:
                    65:b0:1e:33:f2:f5:f9:3b:28:89:14:3c:71:0d:37:
                    02:92:0f:79:90:e8:39:90:8c:b1:0e:f3:26:31:40:
                    71:42:71:9a:f5:03:3b:6b:13:11:84:50:44:09:59:
                    c5:07:0f:d2:d7:d3:db:97:96:d3:d3:c2:ca:dd:47:
                    b6:27:45:09:fa:12:b2:37:b0:ac:6b:9d:cd:c0:69:
                    b1:76:c7:9e:21:b6:00:c7:41:51:fb:79:2a:c2:5e:
                    8d:6f:9f:20:4a:b9:8b:75:2b:62:4f:b9:0b:24:b0:
                    c1:89:7f:96:38:bc:58:c1:0b:67:93:b2:73:00:9e:
                    45:42:1f:6b:e4:75:04:ab:93:e0:cd:33:54:2d:75:
                    bf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:37:6C:F7:33:C5:AD:1D:40:22:2E:68:0D:27:C4:CE:8E:C4:22:E3
            X509v3 Authority Key Identifier:
                keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:05:0e:5a:c4:42:a8:8d:c4:01:f9:b0:cd:c8:b8:17:82:67:
         2f:7c:0f:de:0e:bc:45:4e:ff:da:43:76:9e:fd:fe:55:e5:c2:
         59:bc:4c:61:09:b7:26:65:07:87:2a:78:60:2b:07:b6:a6:6d:
         33:81:db:07:08:7a:89:2e:0e:4e:5b:c1:60:6d:b0:bd:df:bd:
         f7:20:00:f8:85:04:86:46:fa:28:93:d6:78:52:45:37:62:6e:
         d3:db:e1:36:e6:c8:dd:89:6e:1e:64:fd:cb:c2:9c:e6:ad:db:
         45:32:ca:5e:04:e5:75:ed:89:3c:87:c6:f7:32:b2:0a:cc:37:
         03:9a:74:45:ab:4f:f4:85:a3:9d:f0:80:91:58:b5:9b:bf:c0:
         25:fa:ee:58:7b:cd:21:69:fb:5d:dc:a9:ee:b2:d0:ea:ad:7d:
         22:f1:df:7c:de:fc:0e:c9:d6:db:3e:e6:c4:f5:f4:c7:01:3d:
         d4:a0:7c:de:7e:04:78:41:a6:c3:09:78:8a:ac:07:14:e1:5a:
         9e:da:ae:92:23:45:5d:c4:62:d3:1a:b3:bf:cc:fe:8e:9a:eb:
         77:c8:c5:e3:05:26:9d:c2:09:08:43:f2:60:a1:58:9d:80:77:
         58:8c:30:42:89:49:23:0b:b4:11:cc:4f:a2:57:8b:3d:33:d5:
         44:d2:a4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 02:10:27 2026 by rpki-client