Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
File:                     DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft (raw, json)
Hash identifier:          GWZeJTWK0fQ/PHHpaKYPTQBcZSXoPFI6MQahYyNEpo8=
Subject key identifier:   41:97:61:2A:5F:55:0B:15:B5:23:C8:57:CF:F3:0A:3D:36:BA:33:76
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       2B2085DF993413228C193072AA3924E01423E72B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
Manifest number:          01F3
Signing time:             Mon 21 Jul 2025 07:00:55 +0000
Manifest this update:     Mon 21 Jul 2025 06:55:55 +0000
Manifest next update:     Thu 24 Jul 2025 08:27:55 +0000
Files and hashes:         1: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: oHm/b4iyQLSGBhCpt6FnAGvZb8oOHkZH9fWssNMlC38=)
                          2: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: rTgQmdFwVK4QH13LPVhNkKRBGW9YevRVeOcoVmRvwXw=)
                          3: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: Wp9W2Rj7SOYCUcu19j3p/Fdm3AlKEhaeQ0agpMYNbvU=)
                          4: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: 7NwT3lu9JZjfjgapimGfIHaWTUgpUh5i3OuwyUj48VY=)
                          5: 3130332e3131382e3137352e302f32342d3234203d3e20323130353337.roa (hash: H9HoLlwsPZ7vWOyU7iY4WK1IEAYm6ZYFQe1/pX+yL6k=)
                          6: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 9b88BYrc5fW60hCTvccg2BM34mQg6ZvvmRF6BzjVMcc=)
                          7: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: D7vL0dWhHLWGMsR8H6EfhySZTfu+/ovgCxiI8LpMnhg=)
                          8: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: 1GWI9DsalLLnVqal8oinWe9NrHYqZtqJkFvL9lNkK+c=)
                          9: 3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa (hash: 5tTNaFKVIpcsc/okIuKSdd47tmmVdXhx+ntRKQSJMJQ=)
                          10: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl (hash: LxS9fiyiYBZKn5DqRuX1UreUuAP7nbx3VQPD4htYBhA=)
                          11: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: 0f2PA52uub2AIW3HVhP+kRWDT2sjTpqTW3vdzs5HzME=)
                          12: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: ZErCRMzj3m+Fl5KnJq4RrHkwrZjyK1a28QhPXfjqsjA=)
                          13: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: +BXNEKTyQIjcl0qPczbAlblVHqKtw7MqFu+APMhxSxk=)
                          14: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: kR8T9q/RgSSIceyvyByw5FPl6k8a1Y38HMh9CIjccZE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 08:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:20:85:df:99:34:13:22:8c:19:30:72:aa:39:24:e0:14:23:e7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Jul 21 06:55:55 2025 GMT
            Not After : Jul 24 08:27:55 2025 GMT
        Subject: CN=4197612A5F550B15B523C857CFF30A3D36BA3376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:60:da:1d:0f:a5:50:67:de:ee:45:28:12:
                    03:e5:e0:8f:b7:52:de:e2:ac:14:8f:56:25:a4:33:
                    54:f0:bc:00:04:32:d7:62:5e:86:a3:90:31:b0:84:
                    5c:56:ef:88:31:b8:e4:f9:8d:d8:b4:63:ea:e5:b4:
                    33:8c:64:52:e3:eb:73:e5:10:9d:fd:ab:4f:88:77:
                    2e:2b:1b:bc:1c:c5:09:55:eb:d5:c3:89:12:bc:e5:
                    3a:de:c7:5a:f0:d1:7b:ea:cb:fa:30:5d:ea:77:aa:
                    4b:75:23:08:ac:ae:07:d1:f0:37:38:a8:71:f1:ec:
                    dd:50:1c:3c:bc:c9:cd:c5:a1:8a:df:bd:e9:6f:fb:
                    a9:2f:10:82:7e:37:c1:89:e6:f8:3a:0b:5e:dc:17:
                    7d:f9:da:fb:db:64:23:93:46:0a:2f:10:a8:ad:2b:
                    a2:62:13:eb:e5:57:38:fe:4b:b5:cf:b0:c4:bc:63:
                    b0:e9:8a:6b:64:a1:c5:87:2d:55:e9:b7:7c:d3:a9:
                    20:46:15:2e:8e:1b:21:2c:f0:df:3a:e0:69:cc:01:
                    40:ab:e5:42:e3:4d:2b:00:59:f0:57:f2:95:45:d3:
                    49:bb:57:24:1f:4e:d1:e5:13:03:b0:58:ea:fd:35:
                    f3:8a:cc:87:f9:76:01:da:f1:8b:03:32:bf:60:71:
                    50:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:97:61:2A:5F:55:0B:15:B5:23:C8:57:CF:F3:0A:3D:36:BA:33:76
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5d:a1:d0:08:d3:18:57:54:31:d1:b0:9e:e1:1b:8c:cb:fd:
         5d:33:2f:18:c1:99:bf:0a:70:45:e0:2f:02:5b:f7:f8:03:ff:
         c1:57:61:7e:30:08:53:d4:54:0d:2c:35:84:9a:7b:ed:b5:dd:
         f4:93:c1:dc:37:71:7e:5f:2e:da:2c:6d:cb:5f:96:cc:be:06:
         c2:32:66:60:cb:cb:4d:d2:d1:66:fb:90:0c:9b:e1:1c:49:18:
         48:9a:5f:d3:8a:b9:82:fb:7f:b5:f8:78:64:3c:8b:f2:8d:14:
         f4:40:0c:50:7d:73:84:35:e8:70:b4:13:87:39:2a:d9:1a:c9:
         cd:7c:5f:cd:29:4a:d9:d9:a9:73:07:7a:82:f8:6a:08:12:7c:
         16:ae:3b:83:b9:b3:3f:e8:8e:9b:0f:4e:0f:dc:d6:9f:87:91:
         7e:1f:0f:f1:fc:24:44:f1:94:83:17:53:a5:c0:5d:82:bc:cc:
         35:49:25:ad:4a:fe:d4:08:04:9c:21:12:29:61:11:41:db:79:
         e2:23:fa:8c:f5:c2:1d:6e:6c:06:7a:dc:06:0e:0f:e8:eb:9d:
         a7:a9:70:85:ad:d0:48:1b:57:cd:25:41:5f:1e:0e:e3:90:9b:
         69:80:51:ca:d9:9c:60:fb:f2:5a:f3:ae:09:0b:de:36:54:51:
         c9:ff:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 10:32:37 2025 by rpki-client