Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
File:                     C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft (raw, json)
Hash identifier:          MZkKXNZt76/Fuq0q5XAVI5nN/e2hVUKOAkqVEQ1cJFw=
Subject key identifier:   E2:47:F6:00:28:72:CE:6F:2C:DA:08:87:F1:10:A0:1D:66:6D:55:73
Authority key identifier: C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB
Certificate issuer:       /CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
Certificate serial:       4F9828BEBEC5FF96CA953970B8B5C536AC7F243B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
Manifest number:          0500
Signing time:             Sun 20 Jul 2025 06:02:11 +0000
Manifest this update:     Sun 20 Jul 2025 05:57:11 +0000
Manifest next update:     Wed 23 Jul 2025 17:09:11 +0000
Files and hashes:         1: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: N1MXVORdbt5FpdZaRMnKXk8HUDVu1M5FZBwZhaokx8M=)
                          2: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: YQVR8UOeiYmY2kyG9i2CqFsAi/62Mch9mbYUm4aJz9o=)
                          3: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: 8RrRORobg42yyo6LFcje0JxeCKUFuSga1jy/CkFuTm4=)
                          4: C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl (hash: z+0qNfqDiZdCs1Q56rGAg+9YdnB4ZFSJ4QC0iBRuyJ0=)
                          5: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: b8zDNPy2xqVlrDOAlQUUDIWMMOfRTaQ0mid2lPIB3KA=)
                          6: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: LnfQWSkhBeT+G4FyLtKt+mDAFcmNfarKzOkWL9aGALQ=)
                          7: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: mSUh/L4o3WxZWaFk4Syf4IAQb9zhHbALhTc1/MotUbk=)
                          8: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: EGI9o7CM4WRok9jPW02rkd7C68LQY6lwOHLdbhuimwI=)
                          9: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: PZwOUUZx2EQHdYrYeYouuZVw5NeiiX9go4HwzvpQyZo=)
                          10: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: 5rg1EeqRUgeSLgMy7lGVLTMSo/SW/vkwy5TwRaBl/j8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl
                          rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:98:28:be:be:c5:ff:96:ca:95:39:70:b8:b5:c5:36:ac:7f:24:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
        Validity
            Not Before: Jul 20 05:57:11 2025 GMT
            Not After : Jul 23 17:09:11 2025 GMT
        Subject: CN=E247F6002872CE6F2CDA0887F110A01D666D5573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:9c:36:b9:66:e5:5a:2e:f4:91:cd:d8:db:
                    41:1c:7c:cf:b5:5d:f7:d5:3f:5d:81:99:ed:4e:3d:
                    46:b8:e8:c0:cc:9b:49:84:00:3e:10:d5:96:91:67:
                    ae:70:6a:c0:20:7a:68:c9:bb:86:99:64:2b:34:d2:
                    9a:d7:2c:79:89:3e:5c:95:55:5f:28:e8:37:04:82:
                    31:b9:c0:56:a6:2c:b6:02:46:ca:ae:56:0f:29:95:
                    52:75:2b:44:b0:28:90:7a:f8:c4:58:6c:dd:51:21:
                    26:0c:7c:fc:80:3c:6a:ff:18:94:37:31:47:52:29:
                    44:1e:ca:c7:0e:37:47:6f:a3:31:2d:77:fc:7c:ab:
                    5a:88:8a:89:ac:33:61:42:79:04:71:1d:76:9b:76:
                    bd:37:26:13:90:53:8b:b0:e5:aa:87:d5:04:c9:27:
                    42:ce:3d:ed:c4:b7:a4:2c:78:f2:08:cd:5a:31:25:
                    ac:33:6f:b0:4c:e8:c3:00:90:6b:f9:e9:61:8d:ee:
                    65:d8:6c:c8:53:4c:6f:7f:83:74:59:40:5a:38:9b:
                    10:5e:62:53:85:14:84:e7:89:24:f4:fc:18:54:7e:
                    bf:89:f2:19:80:96:0d:31:fa:17:71:16:09:b1:65:
                    72:25:64:64:d6:c1:87:6e:cc:58:38:18:fc:02:65:
                    b1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:47:F6:00:28:72:CE:6F:2C:DA:08:87:F1:10:A0:1D:66:6D:55:73
            X509v3 Authority Key Identifier:
                keyid:C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:54:92:c0:f4:cb:a5:18:f7:89:6f:a1:7e:c7:7c:04:80:e4:
         a8:96:ff:3b:ac:0d:4a:87:cb:a5:28:ac:98:bc:1e:35:18:4c:
         74:28:e0:2d:d5:0c:7f:0d:98:14:0a:dc:7e:fc:46:9d:8c:3d:
         44:69:d1:f4:2d:33:a2:f1:ed:da:aa:01:55:54:d1:53:92:84:
         48:27:04:ec:a1:6a:28:3e:5d:51:98:fb:a3:82:3a:8d:3b:89:
         3f:2e:ef:50:74:b2:a9:42:07:b1:d7:1b:f8:6a:23:1b:f6:ed:
         20:0c:08:87:bc:28:03:db:47:f8:89:ba:85:4d:a3:4f:62:27:
         11:4a:04:f7:d8:3a:88:d6:fb:20:56:02:d5:a7:a2:fc:21:27:
         e8:c0:f6:bd:0e:50:29:d0:76:d5:15:68:be:84:d0:fb:be:55:
         0b:f9:ea:3a:95:cb:e2:70:d3:d4:49:1a:3a:de:e1:ef:9e:36:
         69:fe:09:41:32:d3:85:0e:66:74:9a:f6:c7:79:e4:de:03:4f:
         78:e6:c0:a9:42:3d:b5:c2:0f:ea:7c:83:31:1e:29:6d:39:d4:
         52:5a:24:19:aa:76:75:31:ff:7f:72:c8:6d:16:87:fb:91:4a:
         73:74:8a:07:c2:f6:f0:61:bf:c4:da:fc:d2:e4:a9:66:55:be:
         df:22:55:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:24:21 2025 by rpki-client