Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
File:                     C00163880F235714759920507217F2A7D557C953.mft (raw, json)
Hash identifier:          sxzO9CDEGSvnIYRyEWwNC0oSa6zxMavMx/x7F4y3K04=
Subject key identifier:   0C:01:57:B8:75:30:C5:58:79:97:F0:D2:89:EA:13:DD:2A:3A:8C:5D
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       6F99E278FC2B047F8CEFB68966D7578A376B7821
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
Manifest number:          0580
Signing time:             Tue 21 Apr 2026 18:41:17 +0000
Manifest this update:     Tue 21 Apr 2026 18:36:17 +0000
Manifest next update:     Fri 24 Apr 2026 20:51:17 +0000
Files and hashes:         1: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: rTOdy2cdmmm5QYorTFShkoD3ZBHt/J9THDepoiG1zQU=)
                          2: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: xHN63AGHVhpLy6i5Ne/Rg1b8TEgYmsmsilFtTygXtok=)
                          3: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: 4tkvmHO2brVIZ3whhevsuoDJ/Kb5htbxnedOQ9re2sg=)
                          4: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: RMDQ4JU1W8jQ/y6PzJZSI8HHgybbgbJ49cw97ZP5E8k=)
                          5: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: XOiKBhMpiojDMkAtgGNcSAtmHT5v9rhfXApeFJZLH2w=)
                          6: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: ne4Fd9z4GMtggr+H/mTwmUbV1S7/FJjgjsGd2sQh0+E=)
                          7: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: YznKDs1CbxF08N3mJ1JGQ46Fgw+8Zoc4by7UrLF1FjE=)
                          8: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: mISY0erp3ysDPa3O+17vQrQWnmbYh2F2NVUBefRVeig=)
                          9: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: ExAeQuV2nwMk6MuMAQPtG+claobmvvbve+qtKVWxRzM=)
                          10: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: wJcVXH5kdnO3oVC250cjFRiURy0rH8CsrLKZhYlCnvE=)
                          11: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: XSZGKE/S6Hn7twCZ3sUL7QvBv8/jTjIsBvikiErVDPQ=)
                          12: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: jv40inOqkP45tTFU+4fmcadEbXbs4EIc7qcUlk8q2LU=)
                          13: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: oCRdMEaQb+0L+jLmpAQiC99Gb3FvgP0DAlKAkjWxSuo=)
                          14: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: fEyWQ5MFyToVUsb1qHQF70b1Re5EIhjysqGNFf3N2uE=)
                          15: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: oKxubgVSq9KanfdFvoxAtxxPQZTjjUlhGrzvFIeghIM=)
                          16: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: 2Y6D9qyT24i+mrDmXDYxZ/h+kMGeojU/2MwD0/st0XM=)
                          17: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: 9gW/gDrS5M+meNB8DH240JCZZ/+dYKmLblxStXo0uQc=)
                          18: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: 0J5ucT5NI4lq8HW3RGVHyZ7Tsg2Zig5W6v9hNkKQsfQ=)
                          19: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: NQW7UwpMESN0U2eeb5sCy8+6MskrqZgb0v8mJ0QPgMY=)
                          20: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: oeZmr3dpPOSKqyrPruBZU1vvAe8Vo0KgbyY7tyhEXpI=)
                          21: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: WjUo8uQ6z2o8xHjo7VhYk2FONtSF96fbL4VpKiZUe3M=)
                          22: C00163880F235714759920507217F2A7D557C953.crl (hash: UaXqaqpyD5HX0vuj9Q1+Y4ZQIj5bPRwMoavJMNf/pTU=)
                          23: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: g2oV0iGk+oSLBEAQ3+fcNmyGfdkZlXFUuvI/IByWsRg=)
                          24: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: pKw5LGAwZ02j8bp/435WnbI3b3bMVBsuwWMCKuHmspo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 20:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:99:e2:78:fc:2b:04:7f:8c:ef:b6:89:66:d7:57:8a:37:6b:78:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Apr 21 18:36:17 2026 GMT
            Not After : Apr 24 20:51:17 2026 GMT
        Subject: CN=0C0157B87530C5587997F0D289EA13DD2A3A8C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:53:00:32:b7:d1:b3:18:fd:95:87:87:38:
                    b2:a2:97:cc:b4:37:36:93:1a:ab:21:07:df:ed:4d:
                    15:c8:55:e7:cb:cc:55:67:63:97:2c:8b:1f:b5:ac:
                    f1:f3:60:12:93:e0:66:45:8b:f5:d1:cc:fa:04:d6:
                    a7:28:e4:f9:9b:02:b0:ec:2e:36:fa:08:40:e7:b7:
                    49:35:27:a4:d0:d8:c1:3f:20:7c:19:c5:20:24:81:
                    6a:60:a6:7b:da:a4:29:4b:c0:b5:c3:8a:7c:0c:ea:
                    e9:c5:87:b2:64:44:52:3f:ca:c4:ed:d9:11:c7:f6:
                    67:ec:32:fc:08:4c:fc:8b:4b:af:5f:a1:95:0a:8d:
                    37:e0:10:29:8c:e9:22:4d:94:f5:d7:fa:3c:d1:96:
                    16:7e:3a:b3:f9:92:d9:0a:dc:d3:4c:7a:78:e6:a5:
                    b8:a4:d2:c8:bf:08:56:7e:3b:f5:6e:96:22:45:04:
                    ea:59:68:4b:f8:5c:b1:73:83:89:35:94:40:97:9b:
                    8d:49:77:a9:99:8f:a6:6d:95:86:c1:e2:ed:10:d1:
                    28:ab:61:26:28:a2:40:07:7c:a7:cc:d6:6e:98:18:
                    c3:bb:4c:8f:71:42:83:c5:6e:c8:4f:d4:e2:ce:de:
                    2b:19:d2:cc:48:ae:90:a2:da:af:a8:c3:7c:d6:23:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:01:57:B8:75:30:C5:58:79:97:F0:D2:89:EA:13:DD:2A:3A:8C:5D
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:48:f5:cf:2b:6a:b0:0f:12:50:09:30:fe:ee:0a:92:4b:6c:
         23:f2:55:89:2c:7f:62:cb:d7:8f:ff:5c:75:3b:56:a9:ba:ed:
         37:54:aa:12:81:9c:2c:d5:4f:df:28:d2:05:c5:10:f6:6c:50:
         19:78:41:92:04:2f:25:e5:71:47:05:46:7e:8c:fe:08:32:7c:
         61:80:d8:b8:8f:48:6a:5d:f6:47:c9:9a:58:2a:81:5c:33:d7:
         a9:c8:99:00:06:5c:11:36:70:53:60:33:1e:6e:b3:04:64:c5:
         a5:77:5b:5c:74:f7:0c:7b:ba:3f:18:5e:d6:59:0a:86:5f:2f:
         1e:19:2a:2d:75:71:38:db:6e:f1:bf:7d:1e:e2:e0:31:0e:d8:
         d5:72:5e:ae:0e:4d:ef:29:93:38:2c:42:b8:b8:4b:2c:50:d7:
         f7:70:a4:88:03:84:f0:65:02:97:40:77:3c:00:18:1f:88:14:
         56:61:06:7d:6b:3b:a5:19:d4:ae:d7:96:c7:04:44:40:5f:bf:
         cd:8d:a3:77:cb:5d:e4:94:78:74:06:ad:15:0c:d0:e7:4a:59:
         cf:de:ba:ba:c7:91:96:1a:f0:b8:c4:14:0f:56:40:95:cb:95:
         08:84:5c:07:bd:24:5b:4a:ce:20:9e:60:0c:22:fc:9b:fc:e8:
         1f:d5:fa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:01:51 2026 by rpki-client