Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
File:                     4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json)
Hash identifier:          faxkgShQEIX8ZtKPiqOveq16BpX3deKx+xFiYEhEY80=
Subject key identifier:   DB:73:38:91:46:47:F7:96:5C:86:F4:F2:17:B5:CE:43:8B:74:B7:43
Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2
Certificate issuer:       /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2
Certificate serial:       732E66ACDDF4C1F04E3FBFA08FCB60E603800551
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
Manifest number:          04F2
Signing time:             Mon 21 Jul 2025 21:11:10 +0000
Manifest this update:     Mon 21 Jul 2025 21:06:10 +0000
Manifest next update:     Fri 25 Jul 2025 06:41:10 +0000
Files and hashes:         1: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: h6RVxpLnAMaDIfRa4gc3qjSTKqM6GqzTQIycSjUOXA8=)
                          2: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: eQZoCYySfrme2Im+1y5Iyqujwi9/r4i6uQdCSAyL6DM=)
                          3: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: mMt8TohptJaTB3iEAIHl/vZT9ocBsY0iZQRajhpLuKo=)
                          4: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: PuA0O7on+Tv+yi4m5sFC8JVnpsZv77062xaCNSQ10PY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl
                          rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 06:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2e:66:ac:dd:f4:c1:f0:4e:3f:bf:a0:8f:cb:60:e6:03:80:05:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2
        Validity
            Not Before: Jul 21 21:06:10 2025 GMT
            Not After : Jul 25 06:41:10 2025 GMT
        Subject: CN=DB7338914647F7965C86F4F217B5CE438B74B743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8b:af:c7:9e:b6:c4:24:f4:2e:8c:0d:93:2c:
                    3e:8c:8a:8a:54:a7:da:49:4b:dd:40:35:a5:18:92:
                    aa:67:bb:ed:ee:8e:f9:62:73:38:e9:6c:d8:eb:23:
                    b2:09:84:a2:25:fd:99:50:17:c1:67:71:92:30:96:
                    78:68:1a:ca:79:80:9b:9c:49:59:ad:2f:c7:c1:c3:
                    90:4e:a0:3a:5b:44:56:5e:b1:ce:73:fa:b2:6e:19:
                    2c:0c:98:5f:52:56:5d:75:df:15:a2:22:7d:bd:2d:
                    1a:fd:fc:07:ba:87:fa:94:4d:76:09:bb:0e:82:75:
                    c0:5c:3f:ed:5b:b8:71:06:cd:a5:10:5c:b7:6c:07:
                    b8:e6:f3:3f:a3:ea:13:c1:77:38:82:9c:87:2e:78:
                    19:3b:35:6f:1e:f5:c1:ce:97:ac:3e:d9:57:60:ad:
                    da:89:a1:2d:e1:bf:08:6e:fe:15:2b:14:f0:39:6f:
                    90:b7:39:54:5e:b7:0b:80:70:a5:ed:07:b1:4d:d9:
                    c4:d5:6f:fd:60:3f:b9:7e:51:fe:02:1b:f3:82:17:
                    a8:e8:db:32:b0:2e:69:4d:f0:54:0b:6b:ac:d3:c3:
                    52:03:ad:17:81:91:8e:4d:95:ba:30:e7:99:f4:54:
                    17:b5:dd:ac:91:f2:15:56:40:ba:f8:2e:15:79:9a:
                    a9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:73:38:91:46:47:F7:96:5C:86:F4:F2:17:B5:CE:43:8B:74:B7:43
            X509v3 Authority Key Identifier:
                keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:6e:7a:cf:b2:9f:96:f4:c8:5d:2a:d9:42:32:22:07:69:2b:
         57:c3:c4:54:d6:10:d5:b5:d1:a1:ef:a5:ab:91:7b:c2:e9:b6:
         8c:cd:4c:11:ef:a9:68:f8:58:a4:30:d2:81:65:a6:ee:58:83:
         b0:bb:95:ac:98:7c:69:8e:78:b4:72:56:74:ab:8d:b5:1c:99:
         88:63:6c:05:d7:bd:fe:12:1a:76:14:cc:54:70:0a:a1:ac:cf:
         57:72:63:7a:b2:57:70:b4:a5:cd:e6:47:77:36:2d:78:7c:c6:
         bf:1d:1d:87:2d:77:9d:e1:9c:2f:1e:59:2b:5b:dc:7c:90:29:
         f5:a2:ad:93:a2:a0:67:1f:1c:d8:b6:88:f8:bc:9f:80:66:51:
         92:b4:da:d0:1c:d5:93:5d:d0:21:6a:0a:96:2d:a6:65:ea:ae:
         0e:39:9f:f5:e4:43:c2:5a:ec:22:25:e8:07:9d:92:60:0c:09:
         10:73:38:44:a4:0f:e6:1f:bb:23:4c:d6:b4:d3:b7:e2:5d:94:
         54:54:78:44:2b:8a:58:39:5f:fb:82:32:ca:c9:39:23:1e:84:
         2f:07:03:20:70:58:c8:25:6e:88:ce:91:45:1f:7a:07:ba:e0:
         83:a7:a1:9d:c7:12:91:5d:46:02:45:5d:25:cc:d2:14:46:12:
         c0:00:d5:d2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcy5mrN30wfBOP7+gj8tg5gOABVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE
MERDMTdGMjAeFw0yNTA3MjEyMTA2MTBaFw0yNTA3MjUwNjQxMTBaMDMxMTAvBgNV
BAMTKERCNzMzODkxNDY0N0Y3OTY1Qzg2RjRGMjE3QjVDRTQzOEI3NEI3NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgi6/HnrbEJPQujA2TLD6MiopU
p9pJS91ANaUYkqpnu+3ujvliczjpbNjrI7IJhKIl/ZlQF8FncZIwlnhoGsp5gJuc
SVmtL8fBw5BOoDpbRFZesc5z+rJuGSwMmF9SVl113xWiIn29LRr9/Ae6h/qUTXYJ
uw6CdcBcP+1buHEGzaUQXLdsB7jm8z+j6hPBdziCnIcueBk7NW8e9cHOl6w+2Vdg
rdqJoS3hvwhu/hUrFPA5b5C3OVRetwuAcKXtB7FN2cTVb/1gP7l+Uf4CG/OCF6jo
2zKwLmlN8FQLa6zTw1IDrReBkY5Nlbow55n0VBe13ayR8hVWQLr4LhV5mqlHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU23M4kUZH95ZchvTyF7XOQ4t0t0MwHwYDVR0j
BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz
QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD
MTdGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0
YjgtNTIyNWM0NWI5NmExLzAvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBF
MUREMERDMTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABBues+yn5b0yF0q2UIyIgdpK1fDxFTWENW1
0aHvpauRe8LptozNTBHvqWj4WKQw0oFlpu5Yg7C7layYfGmOeLRyVnSrjbUcmYhj
bAXXvf4SGnYUzFRwCqGsz1dyY3qyV3C0pc3mR3c2LXh8xr8dHYctd53hnC8eWStb
3HyQKfWirZOioGcfHNi2iPi8n4BmUZK02tAc1ZNd0CFqCpYtpmXqrg45n/XkQ8Ja
7CIl6AedkmAMCRBzOESkD+YfuyNM1rTTt+JdlFRUeEQrilg5X/uCMsrJOSMehC8H
AyBwWMglbojOkUUfege64IOnoZ3HEpFdRgJFXSXM0hRGEsAA1dI=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:02:30 2025 by rpki-client