Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft
File:                     33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft (raw, json)
Hash identifier:          IoU1gdMPrxsQWw8UPmBjMaJN9V0CLX24OddJxvJz7YA=
Subject key identifier:   B2:DD:8A:1A:DB:28:23:0E:06:09:42:4E:C2:FF:FC:79:FC:39:49:D9
Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9
Certificate issuer:       /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9
Certificate serial:       13B94BF0CD100D9CA5CD1F96E58B0EBBAE8318FC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft
Manifest number:          048A
Signing time:             Sat 19 Jul 2025 03:30:39 +0000
Manifest this update:     Sat 19 Jul 2025 03:25:39 +0000
Manifest next update:     Tue 22 Jul 2025 14:03:39 +0000
Files and hashes:         1: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: BkyUAjLFhkYTF0Hnp1FC4HAWxyi30SojTHwp3GdzR9c=)
                          2: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: 3Mmpn/Dag2AKulQ+C8mVDMduU1Rnc8mOjy91rhhCe8M=)
                          3: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: p+rm7vbA5ngIqMZr32PI/RSnvPiqpzUUqSs4LwHOSfI=)
                          4: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl (hash: x6Pp5Iezov634MktjRe64Ew0+EtMdmz0UoW8OF5jNwQ=)
                          5: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: OJRRTWPMmrOaPtCLRrFDVFaSiYmj3l4rR9ClzjJa+24=)
                          6: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: EejqxQaLe95fpqkSYRlHTxb70l60dtmnNQ1/4qfd494=)
                          7: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: CnfRbobaPk9MDY310cd2407p48KXM88AEI8ZWvg/uB0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl
                          rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Jul 2025 14:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b9:4b:f0:cd:10:0d:9c:a5:cd:1f:96:e5:8b:0e:bb:ae:83:18:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9
        Validity
            Not Before: Jul 19 03:25:39 2025 GMT
            Not After : Jul 22 14:03:39 2025 GMT
        Subject: CN=B2DD8A1ADB28230E0609424EC2FFFC79FC3949D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:8a:3c:ab:89:9c:ea:c7:08:70:97:fa:d6:
                    93:f7:38:4f:f1:16:10:f9:d1:ff:97:e0:08:06:2e:
                    36:71:c8:d0:bc:53:44:ea:4d:8d:96:23:5d:cc:51:
                    cc:4f:bb:23:4d:b4:43:14:76:99:88:0d:6c:b7:61:
                    12:8e:c4:75:2c:3b:1a:cc:6c:65:ae:9c:1d:89:00:
                    2b:97:b9:31:1c:8a:d5:47:9c:4e:65:ec:ae:9d:da:
                    79:ef:93:6a:6a:e7:4a:cf:72:72:fa:b7:6e:99:1a:
                    be:28:2a:23:4b:76:93:58:b4:1a:c3:6c:00:e6:97:
                    b8:26:17:d8:8d:28:c1:6a:e6:c6:b5:03:a2:6b:51:
                    57:5d:6c:c1:53:ea:de:82:e8:73:0c:52:52:46:a5:
                    5e:a6:66:fd:ef:97:6b:ab:5a:e0:8d:ee:34:4e:15:
                    8b:2c:80:8c:18:94:98:0e:c0:06:d4:f9:23:76:eb:
                    58:8f:f0:c9:d0:a8:6c:a5:38:d1:d9:3b:ad:c0:e1:
                    fa:b6:1d:0a:34:e5:ef:3e:71:01:1b:89:c6:b1:48:
                    76:bc:1f:18:dc:ae:f6:79:a1:5c:b7:f1:d9:52:fa:
                    79:97:fb:20:4f:71:9a:30:b8:97:37:d4:ef:db:c1:
                    2b:03:76:88:36:05:ea:d4:95:bf:a5:ec:57:7a:2f:
                    33:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DD:8A:1A:DB:28:23:0E:06:09:42:4E:C2:FF:FC:79:FC:39:49:D9
            X509v3 Authority Key Identifier:
                keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:1b:92:fb:7d:d3:e8:6e:f6:b2:38:ed:6c:6d:08:81:d4:8f:
         7e:59:ef:39:f8:64:c8:c9:7c:84:03:89:8b:97:22:7c:52:12:
         54:71:9a:40:46:b3:16:27:23:e0:eb:1e:d0:1e:63:9b:54:3d:
         7a:26:d5:5d:d3:9d:2b:a5:9f:3b:f0:4d:0b:98:27:ee:ff:54:
         46:5c:ae:52:8e:5b:68:81:ba:5e:69:dd:71:a2:a0:13:49:7e:
         b2:39:88:95:5f:35:c0:6b:b5:d8:59:d6:fb:86:d9:60:67:d0:
         3e:a2:88:55:cc:d8:68:44:07:56:8d:57:f2:dc:c8:46:c5:99:
         79:37:cd:bf:ff:e7:a0:9d:bd:11:70:f9:1d:4a:1c:79:b6:55:
         0f:a5:06:7a:81:4f:65:55:ca:77:20:79:29:3b:96:cc:ec:07:
         02:8b:b0:be:fc:89:6b:16:6b:ab:0a:05:57:d9:28:35:00:15:
         85:06:6f:f6:32:8c:55:7b:ad:7c:34:99:73:da:46:69:25:69:
         f0:16:a6:58:7e:60:5b:d8:af:e7:e4:bb:78:92:35:d2:56:35:
         54:41:5e:73:6b:42:bd:38:df:20:47:d6:3d:e9:a4:53:32:bb:
         33:30:08:e5:8e:3e:21:bf:b0:59:94:79:12:05:ef:98:b6:e7:
         bc:2c:02:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:11 2025 by rpki-client