Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
File:                     2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft (raw, json)
Hash identifier:          TW2NNaNyrgZYT/zyMubr3diuZdfeS9CK2xndBB6kxZc=
Subject key identifier:   5D:E0:6F:6F:81:44:A7:C5:AB:26:71:4A:82:B4:AE:D3:D4:5A:AC:C6
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Certificate issuer:       /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial:       0FBD7934E35875E5584BC29A3C7499927BFA78EB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
Manifest number:          32
Signing time:             Thu 05 Mar 2026 11:52:31 +0000
Manifest this update:     Thu 05 Mar 2026 11:47:31 +0000
Manifest next update:     Sun 08 Mar 2026 22:50:31 +0000
Files and hashes:         1: 3135372e38352e3231312e302f32342d3234203d3e20313339393934.roa (hash: JqdOGYBPvLrCBXO4ixUiBnEK5jA64JvcsWEfLgRkKvs=)
                          2: 3135372e38352e3139372e302f32342d3234203d3e20313339393934.roa (hash: 6+g3imB+eHfRhzSR9gW7ZpkaEhVwSzA1W8HoDvKHSeI=)
                          3: 3135372e38352e3231302e302f32342d3234203d3e20313339393934.roa (hash: 4RrZyrtYl0/TzFkzL5joH6DE+UbN40H36/1ByWbo5dY=)
                          4: 3135372e38352e3230372e302f32342d3234203d3e20313339393934.roa (hash: 4KKjhMIe91G+a6neiFRcO44kLZOptvWX510XN+PTeyQ=)
                          5: 3135372e38352e3231382e302f32342d3234203d3e20313339393934.roa (hash: JxNUwXomc2PJWhbNmfjfM/+4dWebsLp22rxFUnq2rVE=)
                          6: 3135372e38352e3231322e302f32342d3234203d3e20313339393934.roa (hash: o5QFNroTfR8vlfsQq1I5A5R9aNMvpQaRACO8I+AaU5c=)
                          7: 3135372e38352e3232302e302f32342d3234203d3e20313339393934.roa (hash: yK3XLDzOi+3m97HSvjAuRym3VylO4T3Tk34vYu8HFO0=)
                          8: 3135372e38352e3230392e302f32342d3234203d3e20313339393934.roa (hash: a5X2+ok8mE8xIf3a1VXtJJWHKpTDOaC8E6A5dn4gMkI=)
                          9: 3135372e38352e3231392e302f32342d3234203d3e20313339393934.roa (hash: f6iL9tEJkQO1bs46Ao4OKswxppdslT/68Bc+VzoJ1s4=)
                          10: 3135372e38352e3232312e302f32342d3234203d3e20313339393934.roa (hash: b+FAAT7iaq5DKHJcCl3/hr6S30G0F0UGhSvK5RqcPJA=)
                          11: 3135372e38352e3139382e302f32342d3234203d3e20313339393934.roa (hash: Twzik8Cr8Z6GaxaxOvOAZBrEeZoz8eVQdZRr/dR1PG8=)
                          12: 3135372e38352e3230362e302f32342d3234203d3e20313339393934.roa (hash: iiwS82zB9GxKCjKKyiKUK9GjzAqb1QNfmgk+53pJJDQ=)
                          13: 3135372e38352e3231332e302f32342d3234203d3e20313339393934.roa (hash: SN9jtmwRx4rq3d9zDrgwZg575vEhTqfD0x01M8MKZ3I=)
                          14: 2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl (hash: JcJ6dOIqDOvS2EU0hHrV5USuh9BatrzgOWcB+/MWZXY=)
                          15: 3135372e38352e3230382e302f32342d3234203d3e20313339393934.roa (hash: 8hC+akllTPtDtyoAEK0uLN3M/kVK/RND27v1DAQHUIA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
                          rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bd:79:34:e3:58:75:e5:58:4b:c2:9a:3c:74:99:92:7b:fa:78:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
        Validity
            Not Before: Mar  5 11:47:31 2026 GMT
            Not After : Mar  8 22:50:31 2026 GMT
        Subject: CN=5DE06F6F8144A7C5AB26714A82B4AED3D45AACC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:7f:9b:dd:78:a5:2e:8d:45:f2:07:33:5a:
                    05:54:72:ea:ae:47:df:75:98:21:8f:bb:ec:f4:ee:
                    c0:28:26:ec:ee:65:11:3d:ea:22:5b:fb:1a:bf:6f:
                    c9:9b:30:dd:82:d9:74:e8:c1:50:26:67:64:11:04:
                    4f:88:94:2e:08:e1:c3:e2:c9:80:61:35:a6:4b:e9:
                    e5:48:00:c5:fd:37:7e:82:90:54:12:c0:21:42:32:
                    f3:a4:8c:02:9e:44:f5:77:55:e2:f3:a6:5a:98:6b:
                    1b:c3:93:c0:cb:4a:22:54:2d:8e:7c:e8:38:4b:25:
                    9c:09:99:08:e5:25:f7:61:88:8e:fd:61:7f:8d:c9:
                    aa:99:c3:0c:98:35:7d:f0:11:69:9c:cb:5c:63:1c:
                    6f:b2:79:60:97:ae:83:18:86:b5:93:f7:70:29:28:
                    96:0c:c6:67:44:c8:92:e0:a1:02:e8:a7:23:aa:b3:
                    54:76:89:3e:a5:ba:42:e4:df:31:64:2d:1b:47:e0:
                    9a:41:a6:5d:30:46:4e:9d:cb:5a:19:47:b9:ed:b3:
                    89:d9:a9:32:6d:4b:ef:0c:30:0e:a5:8d:e7:81:80:
                    4e:50:c7:30:57:f6:c6:86:bd:55:1e:ed:8d:42:af:
                    a8:d3:57:54:4b:56:2d:49:7b:fe:b7:fb:a7:bc:a1:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E0:6F:6F:81:44:A7:C5:AB:26:71:4A:82:B4:AE:D3:D4:5A:AC:C6
            X509v3 Authority Key Identifier:
                keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ad:8c:b2:ac:12:32:4f:5c:bb:69:83:9c:aa:32:4a:d2:8e:
         54:6c:1d:04:af:57:05:eb:25:11:fd:65:38:6f:3d:3b:f2:9b:
         4b:98:cc:14:a2:fc:65:68:fe:7e:89:1a:a6:20:1f:5f:91:4d:
         4a:7c:d0:a0:94:e6:e3:67:d7:3d:09:c4:f6:5a:90:87:ff:a1:
         0b:d5:3a:06:df:fa:bb:bb:99:d3:a1:80:f1:9a:38:76:74:eb:
         af:58:8a:f3:ff:89:af:ca:3c:d5:50:0f:6d:10:d5:43:a1:dc:
         1d:69:85:b2:0a:76:f6:3a:ff:48:f2:cd:a0:b2:6f:20:35:54:
         31:48:7e:67:56:23:bb:72:7b:15:a8:c0:e7:5a:11:b4:8a:e3:
         d7:d9:69:46:69:e9:3e:44:d7:20:a1:f6:c7:e4:43:d4:dd:79:
         48:2d:07:0c:ab:94:b4:59:d2:50:94:87:03:86:52:82:18:93:
         89:7f:67:9e:ab:ef:5f:56:70:e2:4a:3f:f3:a9:48:67:d2:e4:
         4d:a7:1b:91:70:55:76:75:07:7f:6a:71:4d:27:15:bb:65:2e:
         9a:08:5f:cf:17:5f:c9:15:c8:7e:cb:39:9c:fd:c1:90:b1:a4:
         b9:c3:d4:97:17:fd:94:d6:34:ef:6d:06:06:7d:a9:00:32:46:
         af:dc:9a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:51:06 2026 by rpki-client