Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
File:                     F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft (raw, json)
Hash identifier:          LLjqGmfyYgdwqLVTrjfJMQD+Mm85trpx79NjP5aiGO4=
Subject key identifier:   D8:18:9C:9B:F0:BE:3D:D4:72:D6:65:5C:D4:9F:28:2A:37:DE:CA:24
Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
Certificate issuer:       /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Certificate serial:       78DE8D45ABB76DB4F0F1916D419E6F988BAC2295
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
Manifest number:          0500
Signing time:             Sat 19 Jul 2025 16:31:23 +0000
Manifest this update:     Sat 19 Jul 2025 16:26:23 +0000
Manifest next update:     Tue 22 Jul 2025 22:15:23 +0000
Files and hashes:         1: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: M4ssaOvjHsdJP6LoJpiLBv94HULBEuZfCL5oS3yxuR0=)
                          2: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: l2XgTKrEaZzJg/s+9XNrUPqB/jS99nk9vRMWjSJi3Ck=)
                          3: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: KpZING4byOb+kw62UnCHT9VpB7H105YwJJjgZg9mICg=)
                          4: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: InIenu/YRdZ+r+sG5SCyx4cnFek5Q1mbpz29x6bWyk8=)
                          5: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: zNkUcfseAFGChQlk9FTTSxxP9VLqeS6Xzt5hWG8FeNY=)
                          6: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: zzz4sdR5gzKzpAbEJCRzN6BkviHvm/Eab9wuvzBGW3s=)
                          7: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: u07NQFdDkw9uQJyKvseE8BXy1l4340TGYboFy4isKRg=)
                          8: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: 1A57a+WSkaUEe/nNKsaDACTzujL/BWvYX5TZ+R8VoL8=)
                          9: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: UQwmx7kfaHxkn2EDWo9d59K9BpIkWV4oYs+G0r7Y0tg=)
                          10: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: IGEWY2eHTKaYMtxRXqYJpKskrVH7Tr78Gf7J+C6rKG8=)
                          11: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: /ri40FDmSZx726w/lEZ1lnE+M3llFsHw0OIkUDVqH2Y=)
                          12: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: zlUSo08cC5dU1tahN2pFRIpVflwenezMlRGB/W6FAVg=)
                          13: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: Ju/vO7vCQQsoKWqaI5uCjlvfJIZ0F/Vpc0p/QWILZD4=)
                          14: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: QqkYw4dvuAxz/Z71BLxdsCFvca35TsWBzdDiFc7djzY=)
                          15: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: 0vCmw0QpQ57P9VfD/s3TMogc21/fBpntCbMwY5YhCMw=)
                          16: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: U25XxYHsdDHg45kmjqy0PPmW/5GPYURDN/+SgVMDWdQ=)
                          17: F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl (hash: X49nevAygGpOyHzd8kSe0IuW/ycQVIFt+nivExWuFB4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl
                          rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Jul 2025 22:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:de:8d:45:ab:b7:6d:b4:f0:f1:91:6d:41:9e:6f:98:8b:ac:22:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
        Validity
            Not Before: Jul 19 16:26:23 2025 GMT
            Not After : Jul 22 22:15:23 2025 GMT
        Subject: CN=D8189C9BF0BE3DD472D6655CD49F282A37DECA24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:68:33:b2:fb:0d:1b:43:10:67:4f:24:fa:36:
                    b3:98:74:79:da:46:e1:3f:55:e0:6a:0e:77:3d:16:
                    c3:08:c6:91:05:bc:84:5c:56:45:c5:0b:86:45:51:
                    65:8b:e8:c8:f4:3d:1b:79:7c:48:36:d6:d1:95:49:
                    a8:76:6b:e6:50:17:44:78:50:47:2d:37:d7:70:2e:
                    7b:01:39:2d:a5:1d:87:9d:b7:93:ca:62:d4:9b:5f:
                    fe:e3:2e:61:9c:8a:1b:99:cd:78:a9:08:50:27:e4:
                    12:cf:68:71:18:82:b0:dc:26:3b:12:85:82:74:67:
                    27:66:8a:20:1a:b3:11:d9:06:59:10:c4:cf:52:5c:
                    d6:38:01:44:d9:6b:00:b7:68:fd:7e:38:00:bf:8d:
                    26:eb:93:b9:f8:f8:3c:12:21:82:dd:29:cd:2c:fc:
                    71:6e:4f:7b:82:80:f2:3b:26:b3:3a:37:fb:56:59:
                    e2:66:80:4a:21:5d:6d:c7:9b:09:df:ef:58:b5:eb:
                    ee:88:5f:2a:39:01:9b:db:0f:c9:fa:ed:c2:ed:c4:
                    67:19:14:22:78:a9:8e:3b:b3:ee:a0:4a:f1:bb:a6:
                    1a:4c:2f:16:fc:65:1d:42:a6:86:40:0c:a6:2d:16:
                    a2:c5:74:96:2e:df:af:d9:94:55:4b:a5:e3:f3:34:
                    09:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:18:9C:9B:F0:BE:3D:D4:72:D6:65:5C:D4:9F:28:2A:37:DE:CA:24
            X509v3 Authority Key Identifier:
                keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:21:c3:3a:43:40:f7:47:9a:8b:04:a3:bb:7c:d1:b0:ec:0d:
         b6:4d:63:ec:15:5c:f8:38:bc:60:d4:64:a6:89:c1:42:d8:5f:
         e0:04:8b:a1:de:12:da:57:79:7c:7c:cd:c3:9e:a3:c7:c3:38:
         26:d6:22:be:9b:3c:75:59:a0:c4:32:96:3e:14:b8:07:0c:17:
         14:93:ef:6e:da:11:32:9e:84:20:d6:d0:78:87:4a:69:ae:fc:
         d1:26:dd:8f:40:5a:8f:c4:6c:86:b5:9c:ab:c8:77:3c:a8:8c:
         26:91:87:60:e6:f7:f8:13:ca:ea:24:ff:5b:b9:b0:9b:ad:b3:
         80:26:7e:38:8c:37:24:ad:2a:e6:04:cb:54:df:8c:f8:e6:68:
         6f:33:b6:24:8f:77:0a:91:9f:e1:c4:00:1e:31:8c:96:0f:50:
         89:15:49:86:2b:77:6b:dd:6f:be:50:78:63:29:3b:cb:af:d5:
         35:d9:e7:48:a8:85:85:86:80:4f:cd:63:7e:8b:dc:56:0a:0f:
         1f:a1:16:97:db:fa:74:11:88:1b:cc:d9:01:2e:e2:1c:79:a0:
         68:0c:d7:e8:8d:be:2e:d7:9f:7b:2a:b7:dd:ca:1b:1e:10:2f:
         e4:db:c0:5c:0b:fc:5b:d8:09:ad:60:98:46:33:d1:49:83:d2:
         3a:fc:4a:0a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeN6NRau3bbTw8ZFtQZ5vmIusIpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJB
NzJCNTgzNzAeFw0yNTA3MTkxNjI2MjNaFw0yNTA3MjIyMjE1MjNaMDMxMTAvBgNV
BAMTKEQ4MTg5QzlCRjBCRTNERDQ3MkQ2NjU1Q0Q0OUYyODJBMzdERUNBMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoaDOy+w0bQxBnTyT6NrOYdHna
RuE/VeBqDnc9FsMIxpEFvIRcVkXFC4ZFUWWL6Mj0PRt5fEg21tGVSah2a+ZQF0R4
UEctN9dwLnsBOS2lHYedt5PKYtSbX/7jLmGcihuZzXipCFAn5BLPaHEYgrDcJjsS
hYJ0ZydmiiAasxHZBlkQxM9SXNY4AUTZawC3aP1+OAC/jSbrk7n4+DwSIYLdKc0s
/HFuT3uCgPI7JrM6N/tWWeJmgEohXW3Hmwnf71i16+6IXyo5AZvbD8n67cLtxGcZ
FCJ4qY47s+6gSvG7phpMLxb8ZR1CpoZADKYtFqLFdJYu36/ZlFVLpePzNAm5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2Bicm/C+PdRy1mVc1J8oKjfeyiQwHwYDVR0j
BBgwFoAU86uo88LdiSXdR79+ohNzAqcrWDcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZTY5M2I4OS00NTk3LTQwYjUtOTJiMC1iMjk5ZmE3NjlhZmEvMC9GM0FCQThGM0My
REQ4OTI1REQ0N0JGN0VBMjEzNzMwMkE3MkI1ODM3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJBNzJC
NTgzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGU2OTNiODktNDU5Ny00MGI1LTky
YjAtYjI5OWZhNzY5YWZhLzAvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzcz
MDJBNzJCNTgzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJYhwzpDQPdHmosEo7t80bDsDbZNY+wVXPg4
vGDUZKaJwULYX+AEi6HeEtpXeXx8zcOeo8fDOCbWIr6bPHVZoMQylj4UuAcMFxST
727aETKehCDW0HiHSmmu/NEm3Y9AWo/EbIa1nKvIdzyojCaRh2Dm9/gTyuok/1u5
sJuts4AmfjiMNyStKuYEy1TfjPjmaG8ztiSPdwqRn+HEAB4xjJYPUIkVSYYrd2vd
b75QeGMpO8uv1TXZ50iohYWGgE/NY36L3FYKDx+hFpfb+nQRiBvM2QEu4hx5oGgM
1+iNvi7Xn3sqt93KGx4QL+TbwFwL/FvYCa1gmEYz0UmD0jr8Sgo=
-----END CERTIFICATE-----
Generated at Sun Jul 20 21:48:05 2025 by rpki-client