Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft
File:                     491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json)
Hash identifier:          4/u/gWl2SLlGPB+nPImukxlSthwj1FXPCslY/d6LlSs=
Subject key identifier:   5A:16:B7:E5:E2:97:62:39:60:C0:99:DB:7D:A7:74:39:31:09:E0:C5
Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95
Certificate issuer:       /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95
Certificate serial:       61C73885F449C06BBF86E13809C2684C54AFFC69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft
Manifest number:          01CD
Signing time:             Mon 21 Jul 2025 05:11:01 +0000
Manifest this update:     Mon 21 Jul 2025 05:06:01 +0000
Manifest next update:     Thu 24 Jul 2025 10:32:01 +0000
Files and hashes:         1: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: R8Z+hXBnnWiJJKdYZqlOoXUCZ71qI50sWMocZ6icaII=)
                          2: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: rvVfeVhsLZ7fWwhIJc3Pd2GqdWdss3UfF7UYtrrPnKo=)
                          3: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: uAd0JDcy4hpWuoEBSRUvaHCaFXVpe2sxWabbA6bZmhw=)
                          4: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: FeqaP2txuOgRBx2G96zuc78OrFRr2szEz0GSYPgv878=)
                          5: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: NOw/NEm3PMCbXTGqxWPDqyT8dJkjuZuy6Yh+EG0lwcQ=)
                          6: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: /AD55gQuIXqmhT7jl8XXbRiu7aeneAmR5bk7jupkCNk=)
                          7: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: APvRAxFS/BciWNG05hryQjcSm8DABLzRNy+ilZSBuW8=)
                          8: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: ZsnGzZ9mCd6zsqXraMsdnZOfwkBV6Kr66okw24Q55EU=)
                          9: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: 1P2ogrnijw2MvpVLks2hrGbS/RxvIv2H3EW9osb1JfQ=)
                          10: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: MUfRn9lbrp81WMx09UFWCA0kG2/2E+bxpD3Uyi4FCjU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl
                          rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 10:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c7:38:85:f4:49:c0:6b:bf:86:e1:38:09:c2:68:4c:54:af:fc:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95
        Validity
            Not Before: Jul 21 05:06:01 2025 GMT
            Not After : Jul 24 10:32:01 2025 GMT
        Subject: CN=5A16B7E5E297623960C099DB7DA774393109E0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:64:08:eb:2e:f7:01:bd:f4:4f:7d:be:a5:7a:
                    2e:55:20:d4:96:7d:12:70:98:d1:c4:00:b3:30:05:
                    7d:bb:47:6b:24:00:9c:c5:00:f7:c3:1a:20:47:41:
                    fb:88:67:fc:56:45:50:11:b1:c5:76:e4:43:68:e7:
                    27:e7:0a:89:b8:4c:c6:aa:b6:da:82:7b:be:61:4f:
                    6a:df:1c:ac:41:87:f9:98:81:7e:b4:ac:cd:cd:47:
                    46:a9:0b:a0:5d:99:11:d9:42:86:41:25:ef:9f:f8:
                    4a:8c:0f:85:19:7f:2e:be:a5:bc:ea:6c:b9:aa:12:
                    ec:ff:28:e3:bb:e5:be:1a:f7:c9:3c:e9:22:07:f9:
                    13:cd:51:61:96:7b:c3:7f:e7:b2:7b:fb:f5:f2:02:
                    e7:5d:5e:6e:11:02:62:ec:2b:2d:fe:99:da:fb:26:
                    e6:64:bd:e0:6d:48:5e:bf:58:f7:73:6f:66:3f:f7:
                    c0:e8:84:cb:6b:80:ee:c1:60:bd:20:5d:3a:0e:7f:
                    73:c3:cc:63:33:f1:ba:da:b5:ed:6c:2a:d9:e3:b7:
                    5e:1f:d1:19:85:3b:b0:0d:d8:3e:69:16:1c:b4:53:
                    df:ed:21:62:06:d6:ba:96:46:e0:64:c0:dd:82:52:
                    de:5d:d2:59:67:c9:b0:d6:cf:60:cf:82:85:5f:5f:
                    51:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:16:B7:E5:E2:97:62:39:60:C0:99:DB:7D:A7:74:39:31:09:E0:C5
            X509v3 Authority Key Identifier:
                keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:1f:ee:dd:b3:f0:6f:ee:09:ea:c4:24:4a:82:8a:ce:fe:9c:
         61:7e:d9:27:75:6e:f4:2d:2d:2f:d3:1c:34:08:65:c4:2f:9f:
         b7:e7:59:f4:97:33:c8:69:ef:c6:ad:5f:3d:33:ba:c3:1f:71:
         82:c4:70:cf:ca:58:de:f9:47:f0:6b:ae:8f:85:da:23:41:d6:
         aa:24:b9:98:d9:cd:ec:72:8a:8b:6e:ec:a6:b1:c5:e1:60:f1:
         df:a9:19:6f:08:c9:1b:31:e4:1b:23:58:fe:35:8e:fb:75:f4:
         75:9f:37:34:31:4b:b2:35:95:5a:74:73:3c:0f:bd:dc:20:94:
         cc:e5:e8:b4:02:0f:75:00:08:cb:d3:24:a8:83:e1:5e:11:ad:
         d6:2b:83:1b:fe:7d:e8:97:21:71:1e:d8:35:95:e0:53:ba:a4:
         f0:6f:8a:ad:c0:49:b0:29:aa:09:90:38:cd:95:89:1f:94:96:
         c3:af:64:5d:af:f9:9d:1b:b3:37:42:15:f6:bb:c2:cf:87:06:
         c2:ad:28:ce:ce:21:be:a6:af:1c:e3:64:84:74:35:87:09:06:
         07:99:ae:63:d0:b8:80:7b:6b:6f:43:7b:f3:d4:e1:2b:28:aa:
         95:fb:55:fe:34:c3:15:0f:c1:f0:52:0d:a7:f6:d7:7d:53:d5:
         2f:b6:ff:ab
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYcc4hfRJwGu/huE4CcJoTFSv/GkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1
QTlEMkY5NTAeFw0yNTA3MjEwNTA2MDFaFw0yNTA3MjQxMDMyMDFaMDMxMTAvBgNV
BAMTKDVBMTZCN0U1RTI5NzYyMzk2MEMwOTlEQjdEQTc3NDM5MzEwOUUwQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZAjrLvcBvfRPfb6lei5VINSW
fRJwmNHEALMwBX27R2skAJzFAPfDGiBHQfuIZ/xWRVARscV25ENo5yfnCom4TMaq
ttqCe75hT2rfHKxBh/mYgX60rM3NR0apC6BdmRHZQoZBJe+f+EqMD4UZfy6+pbzq
bLmqEuz/KOO75b4a98k86SIH+RPNUWGWe8N/57J7+/XyAuddXm4RAmLsKy3+mdr7
JuZkveBtSF6/WPdzb2Y/98DohMtrgO7BYL0gXToOf3PDzGMz8brate1sKtnjt14f
0RmFO7AN2D5pFhy0U9/tIWIG1rqWRuBkwN2CUt5d0llnybDWz2DPgoVfX1FDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWha35eKXYjlgwJnbfad0OTEJ4MUwHwYDVR0j
BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0
MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE
MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy
NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1
RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALkf7t2z8G/uCerEJEqCis7+nGF+2Sd1bvQt
LS/THDQIZcQvn7fnWfSXM8hp78atXz0zusMfcYLEcM/KWN75R/Brro+F2iNB1qok
uZjZzexyiotu7KaxxeFg8d+pGW8IyRsx5BsjWP41jvt19HWfNzQxS7I1lVp0czwP
vdwglMzl6LQCD3UACMvTJKiD4V4RrdYrgxv+feiXIXEe2DWV4FO6pPBviq3ASbAp
qgmQOM2ViR+UlsOvZF2v+Z0bszdCFfa7ws+HBsKtKM7OIb6mrxzjZIR0NYcJBgeZ
rmPQuIB7a29De/PU4SsoqpX7Vf40wxUPwfBSDaf2131T1S+2/6s=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:24:35 2025 by rpki-client