Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
File:                     DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft (raw, json)
Hash identifier:          sgRnl1hhgSztt0ZH05i26hqIzEjD0ExcJBJX2AjiqLQ=
Subject key identifier:   FA:BC:AD:AF:31:64:7C:DC:C4:1B:E4:E2:CC:92:55:05:97:AD:F9:02
Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B
Certificate issuer:       /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B
Certificate serial:       5EC8B283E89234D2E8C8FEC55F7992EC6A23ED1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
Manifest number:          04F7
Signing time:             Sat 19 Jul 2025 23:21:21 +0000
Manifest this update:     Sat 19 Jul 2025 23:16:21 +0000
Manifest next update:     Wed 23 Jul 2025 04:06:21 +0000
Files and hashes:         1: DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl (hash: j+HQU+lk2gCz9U3hwrKMzsCtbuzy/YHDVTIFetrsQCk=)
                          2: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: Px+0ZRxXqTaYuiAQpr845u2JpmHBGtqVxsdEAa7WjAw=)
                          3: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: VU7yTZJJzE9+CKf+7CWEBUbMLNLkqTfujFALCx1f38Y=)
                          4: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: hmVwMqOMWMCg4u7PLlh1Exia8tg6dmrIe5GDT9aQuPk=)
                          5: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: rYgMn0qf5Si8F9ykekewfrOOH5qLGsXSWGvHlZ0POHo=)
                          6: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: D73qWtixS2k2vo+e7xc07gepRtYm2z1PcaFmujji1Q8=)
                          7: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: 4jp4D5hGaWte1m9qxFKzFTLNIkMefUQAPu+RDi1XoZE=)
                          8: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: rUMnL5o4jfF8Xk23x+nY13Og9gVdfKtim/VgsCTFYWA=)
                          9: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: 8V7ZayO1EWtoGgR7suJnzq42sHcJ3tI9V47XAXCkvzA=)
                          10: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: wjmU/K5zRzNrMxAbA5/SGYFAg8fk9jDDkhO1NhPUnYI=)
                          11: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: +RTivfqLEwyAM8Z9a8tLky4YZfcHjdt6gpcJXVO2krI=)
                          12: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: jn5ELD9d7J3S6Is4OuoIa81jRUPNRS7VH/L2BxODy7U=)
                          13: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: etbWGeSjVYbqYZZMPVvxJ5PNehJHsptjSIChJ05okfk=)
                          14: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: eEzhgEkeswxEJB6cH8f720KKqD00kZq88ScuJtLKf4Q=)
                          15: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: einwJ3TMLG60eX8vOb8BP75bS+iG2kasu0kVBXw/aA0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl
                          rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 04:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c8:b2:83:e8:92:34:d2:e8:c8:fe:c5:5f:79:92:ec:6a:23:ed:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B
        Validity
            Not Before: Jul 19 23:16:21 2025 GMT
            Not After : Jul 23 04:06:21 2025 GMT
        Subject: CN=FABCADAF31647CDCC41BE4E2CC92550597ADF902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8f:2c:13:ab:34:8e:a1:4d:96:cb:46:ee:2e:
                    92:f1:8d:1c:48:c4:e6:2d:be:15:16:20:a2:06:7e:
                    a1:e5:64:18:52:6c:8d:b5:be:a7:87:44:b6:af:5b:
                    27:c0:d2:40:50:17:5a:3d:f0:a5:8f:20:4f:06:2e:
                    3e:93:e6:ac:c6:60:3d:e2:b2:ab:5f:96:29:89:6c:
                    21:7a:75:2a:c8:35:97:75:40:f6:48:e0:14:dc:e7:
                    7b:bb:5d:b7:29:52:f9:2e:fc:14:43:2b:41:fa:3d:
                    4e:03:4c:8f:51:20:1a:b6:17:ec:25:51:6d:0b:ab:
                    5c:81:fa:37:d4:6e:a6:93:a2:9d:b1:60:1d:23:4e:
                    75:3d:03:7f:67:85:77:24:19:d0:8c:85:dc:ac:35:
                    4a:78:8f:e9:ad:0d:25:32:17:19:48:a2:d6:af:00:
                    df:88:89:23:89:0b:e1:d3:c3:7c:64:c6:41:6d:73:
                    c1:e5:10:ca:46:4b:98:9e:f5:a3:55:8b:9a:dc:a0:
                    6c:8a:e3:0e:45:00:7e:12:9c:e0:bf:8c:b8:71:09:
                    9a:f7:89:9e:0d:97:06:58:de:61:1f:b1:e7:c8:45:
                    4f:cc:35:b7:fd:ab:62:f7:51:d9:f2:3e:04:f6:93:
                    46:f0:09:cd:d6:b7:25:97:6e:57:7a:73:32:e8:a2:
                    ca:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BC:AD:AF:31:64:7C:DC:C4:1B:E4:E2:CC:92:55:05:97:AD:F9:02
            X509v3 Authority Key Identifier:
                keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:bb:2c:cd:b4:52:5e:6e:0b:dc:10:ac:52:d6:af:6c:18:c1:
         29:b0:96:83:8c:12:cf:57:a2:c4:e1:3d:aa:6d:3c:4d:45:a7:
         9f:79:96:37:ef:28:55:1c:bb:6e:8c:1c:2f:5a:82:86:05:8f:
         14:d5:43:27:81:81:08:ba:50:6c:85:59:00:b8:b6:94:bf:81:
         20:3e:32:a1:30:9b:13:93:96:27:77:b9:b1:a6:57:5f:cd:07:
         67:2e:51:e0:6f:2d:3f:cf:7e:d7:22:48:d3:94:59:b8:a3:b3:
         07:c7:91:a1:1b:78:7a:99:e0:84:b2:52:8a:3d:bc:bc:5e:a0:
         7c:0b:2b:16:77:9d:d1:5c:33:cb:dc:2d:ec:c1:0c:1e:2e:08:
         ad:43:78:79:b0:9e:ae:34:2b:c6:0d:b8:69:0c:67:02:f9:67:
         45:95:b3:c3:9b:be:c7:89:80:07:48:5c:6e:55:12:18:6b:8c:
         07:1e:06:e5:8c:e7:d7:be:65:16:2b:03:0e:b1:db:6b:2f:38:
         1b:96:56:97:cf:be:dc:58:a2:e5:f9:df:98:eb:42:7b:54:2b:
         1f:4b:26:9e:69:8c:32:2a:8a:fe:73:46:58:b8:2f:ad:62:7a:
         5d:00:ba:0f:b5:ae:fb:44:d9:75:7b:a7:fe:34:5f:d7:23:10:
         24:eb:4f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:23:41 2025 by rpki-client