Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft
File:                     34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json)
Hash identifier:          r659IFJgnwVBLxKKUsgmMNTxMrEtIqwjcuybeZRca0c=
Subject key identifier:   4B:01:30:D2:30:E4:68:35:C5:8C:0E:95:41:BF:25:6D:AC:E0:10:ED
Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94
Certificate issuer:       /CN=34D90463B7D23555C6F77AA2464E508E3F913994
Certificate serial:       5739EAF1D27823FD096AF5355392262DA8CFE6FA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft
Manifest number:          025E
Signing time:             Sun 20 Jul 2025 20:31:58 +0000
Manifest this update:     Sun 20 Jul 2025 20:26:58 +0000
Manifest next update:     Thu 24 Jul 2025 03:55:58 +0000
Files and hashes:         1: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: 5kFi2Zjm0HSxKxfG0nxq+nY/Xj+QjtSf1kqVqzgY+8E=)
                          2: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: PZIrn68c7HzGNawgo2e7WzGGqiqziuC8jJRMxDr/804=)
                          3: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: GdVfCQn6dQGq1F9ipshJ09p9fq9k0WWYuyFocuMsy5E=)
                          4: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: s3aYQ8LQ0b3amJyDD6i2ZYI2B6oFeKkC+XfwFx/HBQY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl
                          rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 03:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:39:ea:f1:d2:78:23:fd:09:6a:f5:35:53:92:26:2d:a8:cf:e6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994
        Validity
            Not Before: Jul 20 20:26:58 2025 GMT
            Not After : Jul 24 03:55:58 2025 GMT
        Subject: CN=4B0130D230E46835C58C0E9541BF256DACE010ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:d8:2d:a5:84:94:0e:fd:af:88:e1:13:e4:
                    e0:a3:ed:4c:1d:dc:ab:7e:73:ab:24:7a:1a:c9:42:
                    32:e7:ad:44:6a:3d:d5:6f:7f:cf:fb:0e:0a:4e:f1:
                    a2:ad:f8:c3:b8:97:eb:8b:5c:51:7b:cf:29:2b:91:
                    73:d7:c1:80:ba:26:d3:ad:12:b4:5b:16:68:ed:86:
                    74:d2:01:ef:ea:b9:a2:cc:89:52:1c:34:13:5a:ff:
                    c2:42:77:20:1c:5b:58:9d:a2:f3:de:cc:59:79:5c:
                    e9:0a:df:f5:03:8b:e6:51:17:4b:5a:8c:f3:e0:b1:
                    26:47:53:df:2e:fe:a2:a5:2b:a9:69:d9:75:df:3f:
                    fc:4f:99:92:8f:b7:eb:fc:0c:22:c2:8b:d4:6b:29:
                    8a:57:cc:a5:41:d4:23:d1:79:9b:5d:cf:ce:bf:0b:
                    10:fb:71:1a:ab:8a:e2:d6:43:ff:39:61:66:f1:ca:
                    0b:87:06:13:13:1b:97:e8:32:17:c8:bb:68:f0:8d:
                    59:c9:c3:38:71:e8:6f:0a:ad:d1:6b:a9:e3:fc:a9:
                    70:b9:bc:51:f0:b7:ec:5c:6d:25:87:a1:c1:d0:f9:
                    bd:13:22:d0:99:ad:67:eb:63:bc:8a:2d:ef:c8:4e:
                    65:47:df:41:53:4c:a9:c5:4a:12:8d:a4:b1:34:2d:
                    2c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:01:30:D2:30:E4:68:35:C5:8C:0E:95:41:BF:25:6D:AC:E0:10:ED
            X509v3 Authority Key Identifier:
                keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f0:15:2b:7f:94:b2:c1:cf:9f:29:0c:ac:9f:b0:9f:f3:72:
         05:c4:f2:7f:d5:e9:a9:2b:8f:64:7c:b0:8e:59:d0:d0:1a:15:
         24:c4:bd:d8:b1:22:56:3e:3f:25:14:88:c5:1b:6c:14:ac:bc:
         b1:3c:bc:4b:7c:f3:34:cb:4d:29:a6:7c:d1:fa:72:90:a3:09:
         2e:7a:94:fa:65:a6:34:56:06:6b:1e:1e:0b:d4:e4:53:b2:83:
         a2:15:e7:4d:7e:f6:27:e0:85:2a:20:d8:d7:0b:a5:d3:1b:b7:
         a2:2d:fd:30:5a:12:a2:93:2f:6d:35:55:9a:b1:00:16:93:a5:
         3b:45:2a:e2:1c:62:01:e1:19:b2:74:61:01:23:0b:eb:cd:94:
         80:07:e9:58:47:b5:ef:3a:71:83:67:3f:76:31:0f:ac:96:10:
         04:35:e4:8c:fb:9b:22:aa:a4:bc:ec:72:7c:26:01:b4:1f:6f:
         68:f2:12:fc:36:e6:d4:c0:47:6e:01:0c:64:22:07:16:7a:d4:
         89:c5:b9:fc:58:60:81:62:23:f5:95:45:71:11:a7:8a:66:44:
         d8:38:f2:47:e1:a8:b5:ea:e9:34:25:f9:6f:d2:d8:b8:fc:f2:
         18:95:13:f7:05:c7:7f:89:e1:cf:46:18:f6:70:96:e7:3e:a3:
         35:c4:8c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:24:27 2025 by rpki-client