Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
File:                     7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft (raw, json)
Hash identifier:          3DZZ6OxwStR1rGiKx+Qb71EStkmVLTdpyH3AMu2AgHg=
Subject key identifier:   B6:86:9D:57:81:1B:F8:FD:01:A8:7A:04:06:0E:A1:B0:90:0D:E6:D0
Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
Certificate issuer:       /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Certificate serial:       72214124EE004E28B9B691B13E8A71049906B67E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
Manifest number:          0508
Signing time:             Sat 19 Jul 2025 05:42:01 +0000
Manifest this update:     Sat 19 Jul 2025 05:37:01 +0000
Manifest next update:     Tue 22 Jul 2025 12:48:01 +0000
Files and hashes:         1: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: H7BZrybLTpX0NJFsDuTjqzH8VF1huH+0BD/mvn2lSto=)
                          2: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: N0fiZGpp7G4AcyGQiECW3/6Q5p0a7A1fAhfbX9FH1ms=)
                          3: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: NEhivRqvBCnBURZf09iLRn6F9NwBbv/MNUQSDs4qTsQ=)
                          4: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: vPo4xg80UOtB6VJUwA4UWFKXU9vTxzV/7Yqjm3eG2dU=)
                          5: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: IDS7wT53F/9d+GGxnBDomzis7H+va5MBv/3bGTQques=)
                          6: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: J/jPlTXp+kWKv5LyWjv+I0N1cAy55yAD17Rj2NwYkPM=)
                          7: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: 56yoy1pZXhES0/QXKkOUvjrn9k9A+/MhvPggVyF266U=)
                          8: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl (hash: oUagq6TcXeSYF9Rg4IJQbQtRAEBgSWH9VJMb3VG57h8=)
                          9: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: 0fYEP8T/Nnelfp7GTy05C/LwRW0usrD9PvaWq6iCxUk=)
                          10: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: qQ/OJJBLuknzR6dOBM+bTowxaxIwEUGdeh8g4k+xMHc=)
                          11: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: BQTtvc745IuKZaE72oqsQIokxS6D/NEUcrmFIac+agM=)
                          12: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: KTTSzhJyEe2+3+LNGtWkObwsWEdVtFCSQXuEdew12yU=)
                          13: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: 7qX9WcxP/RC8tMcJg/P60OwjJ/UboqeJrbX2Ange7f0=)
                          14: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: UkRWHYHFSXJQvTnbIud8PmlndW+kHrowErEkvw8GIIU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
                          rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Jul 2025 12:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:21:41:24:ee:00:4e:28:b9:b6:91:b1:3e:8a:71:04:99:06:b6:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
        Validity
            Not Before: Jul 19 05:37:01 2025 GMT
            Not After : Jul 22 12:48:01 2025 GMT
        Subject: CN=B6869D57811BF8FD01A87A04060EA1B0900DE6D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:80:be:8b:f8:0d:2c:a2:5a:77:a2:fa:fb:
                    60:2e:1b:2e:e0:b5:a4:25:8e:06:57:6d:b6:a3:06:
                    ce:61:4c:f4:b4:ac:5d:fb:78:52:50:88:1d:18:59:
                    79:28:bf:1a:79:20:04:2b:e1:74:9c:f7:ac:10:42:
                    d8:da:46:6e:ad:e8:e5:02:d5:8a:9b:ad:b8:90:a0:
                    72:47:4f:bb:91:6b:c1:26:0f:8b:65:4c:c6:6c:76:
                    4c:74:25:e8:8e:5d:bc:1c:7a:71:19:c8:9a:12:6f:
                    16:c8:ad:c1:05:e9:0b:54:b0:5a:fe:42:19:3e:48:
                    f0:89:88:2c:68:62:81:55:10:83:dd:b3:76:2c:bd:
                    ed:ac:8a:13:52:44:27:16:3b:48:f0:07:1a:96:ed:
                    0c:54:30:bd:9e:4e:60:5f:52:da:e4:05:49:17:02:
                    e0:66:fc:b3:31:c4:8a:6b:87:ef:47:10:3d:d4:7f:
                    96:97:92:3a:39:af:f0:2f:48:a6:dd:76:fb:77:d1:
                    72:ed:ea:0c:fd:a7:3c:9e:ea:5e:ca:48:8a:77:cd:
                    fa:c9:ae:e5:41:17:5b:fa:c0:23:41:7d:0d:b7:6b:
                    27:11:c5:9b:c1:8d:12:d1:e3:bb:12:a7:86:25:ad:
                    97:8e:d2:9f:0c:e4:9a:50:59:89:76:5f:5d:a1:d3:
                    0c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:86:9D:57:81:1B:F8:FD:01:A8:7A:04:06:0E:A1:B0:90:0D:E6:D0
            X509v3 Authority Key Identifier:
                keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c1:56:a8:f1:25:77:34:75:28:05:b7:29:11:83:4c:eb:49:
         4d:f9:92:b8:0c:8b:c9:c5:21:7d:c8:9f:cf:52:34:6b:da:b4:
         32:af:0c:92:40:80:89:c5:4d:23:e0:b1:c7:9f:d4:43:ed:94:
         27:14:2d:fe:9b:e2:19:e5:da:c5:e8:6f:d7:4c:05:97:80:71:
         1b:d4:ae:eb:00:6e:85:51:27:86:3c:a7:7a:69:cc:8d:bb:55:
         c7:b6:07:38:60:c6:d3:c3:9d:f9:f0:17:18:cb:c5:c7:c6:1d:
         77:66:58:53:37:01:52:1c:90:15:35:a4:aa:db:b2:af:4d:74:
         41:f2:44:7b:9c:8a:c7:f3:59:3b:be:55:a5:ea:ae:af:ef:93:
         10:71:66:72:2b:a9:68:64:25:74:d2:e7:bd:63:a1:83:1c:f4:
         63:28:85:09:86:24:d4:e0:c1:96:81:a6:78:3f:0c:40:5a:56:
         38:f1:59:37:5f:0a:da:8d:84:7b:e2:e6:88:44:34:2e:ff:b0:
         f3:bb:b2:4c:c1:1f:2e:93:26:88:37:b5:a7:c2:e5:aa:73:91:
         38:36:97:57:54:14:5c:e5:d9:0f:09:f7:a6:99:1c:c7:c5:09:
         0a:5e:aa:e2:df:56:70:d4:b4:12:36:42:27:71:40:e8:ce:b1:
         52:2e:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:58:17 2025 by rpki-client