Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
File:                     1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json)
Hash identifier:          gZMTrIstuzS4OIeqk54k1DiQS5SThNuG1R0h++8pr9Y=
Subject key identifier:   D1:BD:FB:F4:49:58:F6:CA:D7:97:FD:C4:D4:C1:0C:44:EC:D4:CE:D5
Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
Certificate issuer:       /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Certificate serial:       43929CB96F9607EBC1358533FC6D1155E85A0CEF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
Manifest number:          0166
Signing time:             Sun 20 Jul 2025 09:51:02 +0000
Manifest this update:     Sun 20 Jul 2025 09:46:02 +0000
Manifest next update:     Wed 23 Jul 2025 20:07:02 +0000
Files and hashes:         1: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: IzPZz6vu3cjWO+ZYwd6eSMpiSKGTjsqFFoCVeTSJVZ8=)
                          2: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: SrvCxxwtOAUSUTutTIMfTF6gsLrsVsYaxkHmFerjnWI=)
                          3: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: VqDDvUOu35p9WF+KpeR5rVDXBEuyr/t255Gs6Jfv+fI=)
                          4: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: V8HVQOfgmh/cc0nhLeaxvvDoxZedeMVRv4rqy3Nfh7U=)
                          5: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: 4k9C18S/gej3vBFzU0qeNrYGkLmZVXuYXMm+WSQ8DFw=)
                          6: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: 4fKehzLVKMt4BtIz5yX0ZNeUtM2OU5RTZbzjb0CfeGg=)
                          7: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: GcXNkBAv1340rwM/Oan5xv5UHgMfOa0RbbyoNs7Mx0I=)
                          8: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: r7mX7DIOfxP1tvfX/0nO3uk5UJScpK1uxXF4s8uBd2k=)
                          9: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: K2sXmSDY1Q0Ib91bp7Ej+rMz+bv5TkPCX1Vm42UKq2g=)
                          10: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: xNJ7kcT79xuTCgJoNY2LlV0p8gctQ3BS6QaupCIi9OQ=)
                          11: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: Pipia0jUKsl0Bb0PnrXMjgVZSeCbzEQGM99k0tRnt6U=)
                          12: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: wmUZdQN9smMnqKDgMvZP3VM5NikSry3YiZ+HF4rDvwk=)
                          13: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: iXeToVoN73o0hgBid7hTY291KAHMRl5genjIGRezvRk=)
                          14: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: kHlmhNS5gQ6WL5MaK2adKxGIlTTXW61wpUfSl5HlAJc=)
                          15: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: Iff17R7Y2PXgGNzQ48JwVBTPT+2Nxu79I9ZwquKjbxE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
                          rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 20:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:92:9c:b9:6f:96:07:eb:c1:35:85:33:fc:6d:11:55:e8:5a:0c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
        Validity
            Not Before: Jul 20 09:46:02 2025 GMT
            Not After : Jul 23 20:07:02 2025 GMT
        Subject: CN=D1BDFBF44958F6CAD797FDC4D4C10C44ECD4CED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:4c:a0:5d:69:89:8b:bd:d4:dd:de:c7:4a:
                    25:70:b6:ee:d5:99:4e:d4:f3:ca:9f:07:cc:df:3b:
                    01:3b:17:88:d6:62:d5:3a:f5:6c:66:8f:a2:59:d4:
                    06:17:c2:c7:54:ae:5f:c2:1c:76:c8:b5:3e:a8:0d:
                    bc:70:28:b1:03:25:e4:af:e7:19:27:7d:89:c8:51:
                    63:e7:0b:b5:10:d1:ef:fb:01:db:ee:b6:21:3a:46:
                    b2:12:a8:b5:30:98:58:22:1d:14:a4:72:1d:94:ec:
                    7b:33:59:9b:54:1c:95:50:ca:9d:a9:73:63:42:a3:
                    2f:a2:fa:46:d0:89:7c:5f:fc:bf:79:4d:3e:be:21:
                    f2:28:03:14:51:c2:3f:de:90:27:f4:ad:34:f7:54:
                    0e:74:4a:ff:4c:5a:9a:0f:3d:dd:02:f8:67:98:ad:
                    68:4e:4c:46:30:dc:3e:8e:5a:05:df:8d:87:13:4e:
                    3d:95:c9:ae:61:c5:00:20:c9:c9:1e:bb:c8:1d:29:
                    c1:8c:8b:11:06:fb:8b:cb:89:8c:eb:e7:d4:e7:3b:
                    e9:af:cd:01:46:ba:e5:52:c6:49:d4:d6:82:81:45:
                    5d:4a:b4:95:61:6f:82:96:21:16:48:57:79:34:2c:
                    68:fc:0f:3b:c0:dd:27:af:3f:c2:a7:41:81:78:f9:
                    33:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BD:FB:F4:49:58:F6:CA:D7:97:FD:C4:D4:C1:0C:44:EC:D4:CE:D5
            X509v3 Authority Key Identifier:
                keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:bb:f6:48:91:90:a0:8d:54:fa:a0:f8:2b:7d:a2:5f:73:cf:
         03:94:f2:3f:a3:b2:23:96:38:83:8c:2b:3c:1d:88:1a:e6:c8:
         9c:de:c6:48:36:32:51:ac:1e:e1:aa:b0:69:33:76:fc:a0:6a:
         cc:1b:2f:62:a9:a3:65:ab:eb:7d:30:f6:ee:ae:76:99:77:94:
         a7:17:fc:20:d5:79:8a:21:66:3f:ec:bc:5b:18:d7:10:40:bf:
         fb:fb:48:b5:28:7d:7a:6c:62:c7:84:1f:4b:17:9b:16:1a:4b:
         2e:e7:8f:02:34:f9:c8:f2:64:e3:c8:07:b7:49:b2:69:89:0e:
         9a:4b:6c:02:f3:f7:c2:b7:c2:a9:75:fc:3c:34:65:b7:94:91:
         bc:04:e8:bd:07:97:f1:98:46:64:c2:e3:27:30:c8:21:ab:3e:
         b1:d8:9f:ad:72:81:93:2f:7f:17:69:39:4b:90:bf:a6:a2:c7:
         0c:ad:f0:b5:4d:83:8c:86:60:ec:3d:af:48:44:30:62:ee:30:
         d7:b5:b7:b6:db:d1:fd:ae:f9:ad:16:dc:3c:e1:8b:71:08:98:
         25:8b:4e:aa:2f:02:94:98:d5:67:6f:ec:94:35:6d:d3:c1:a2:
         30:ec:f0:85:55:db:18:e4:03:57:23:8b:01:c9:46:3b:4c:1a:
         b4:be:57:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:24:21 2025 by rpki-client