Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
File:                     639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json)
Hash identifier:          +T59a5LGZ5Zymajauu0DdtsXuuJI5jSGSrbzy+hiAPs=
Subject key identifier:   64:D8:42:FD:89:B2:6A:33:C3:FE:36:2F:93:7B:C6:2C:80:6F:A2:74
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       2FE3E8BC51EED767A86319031D2A190552AC5719
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
Manifest number:          0D33
Signing time:             Sun 20 Jul 2025 21:01:47 +0000
Manifest this update:     Sun 20 Jul 2025 20:56:47 +0000
Manifest next update:     Wed 23 Jul 2025 22:28:47 +0000
Files and hashes:         1: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: JPYapDBTyTePbdwtE88+heXxGhufXE50JBbJ2fq7FKo=)
                          2: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: qLkIroWnbqSVivBGqvgi5oF8E8eNhXgrJocCdlawdNk=)
                          3: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=)
                          4: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: mgdd33inbho0w/YafQxmlb4mn2645LWgbd4GjzvqC5g=)
                          5: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M=)
                          6: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4gtV8ZXJhBLgP6alnZmazQL9Du+oKvqI/MvatS0Bbyw=)
                          7: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: kkZ5080z9oUs+jW8iHX1Tzr1MG5R0/keiimPL4Y7DMk=)
                          8: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: u5dDjhuBvBzcqNjKEeW7vizdTx58v6wY4rfkMiHiI5I=)
                          9: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg=)
                          10: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: 0AzZnlQLCCzpiwYH8VB91hQfBqmdrJ+ok40Qb8sCeko=)
                          11: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: /8HKOKl3PxMMPopAmXJsDfZHfFoo7wkQ81V5TqWB1uE=)
                          12: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw=)
                          13: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: R2fYP06PHf8y3hcqIr5mlUmzD6LRxMCBxyD/ZffPNsM=)
                          14: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: esxHqUt3Xq6PKKXsfFgfUEYi1fJUgVnC6F8M6sDPUJM=)
                          15: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: XZ4OJKWgYbKu4ak8HWaN9bEJfkYQKh79GGoEWm0kS2Q=)
                          16: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: QsDPs2mlZqyMZXfjf6Zh+NWMXGWy1j4R+YaYRxdbecQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
                          rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 22:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e3:e8:bc:51:ee:d7:67:a8:63:19:03:1d:2a:19:05:52:ac:57:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Jul 20 20:56:47 2025 GMT
            Not After : Jul 23 22:28:47 2025 GMT
        Subject: CN=64D842FD89B26A33C3FE362F937BC62C806FA274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:c1:50:74:e9:bf:9a:c6:9a:5e:cf:fa:d6:
                    22:47:94:d3:64:97:5e:72:8e:75:8d:9e:09:78:30:
                    cf:14:94:dd:7d:e3:8e:0a:66:53:ca:3a:24:3b:f8:
                    a3:da:09:c5:a3:00:f2:d5:47:3f:ce:12:a9:84:d5:
                    4b:77:26:4c:4d:c2:ff:a6:a6:d9:b5:b8:2f:87:e0:
                    16:29:4b:68:e0:08:ee:9a:86:67:8b:21:81:20:d0:
                    98:bc:93:81:69:f9:a4:1a:3d:31:71:08:2f:19:77:
                    30:8a:e1:6d:c0:40:c5:31:ee:06:ad:22:e2:26:8b:
                    2c:86:67:df:cf:ca:a8:43:28:ec:bb:60:38:91:7e:
                    7f:7a:2b:7f:09:85:50:d0:47:bb:80:2b:4f:c2:bb:
                    13:1b:ac:de:cf:6d:78:13:2c:26:aa:42:c4:d2:75:
                    67:b0:4f:c9:3a:95:56:b6:1e:4e:97:ba:be:51:6c:
                    77:a9:f0:25:7f:b6:b1:31:82:51:31:10:ee:11:62:
                    60:bb:92:e9:45:ba:6d:09:18:ed:68:03:f0:0c:d8:
                    44:d1:56:9f:76:d1:20:b4:e9:cc:ee:65:c0:88:2b:
                    89:da:9c:ed:b3:32:bb:f7:78:35:8d:9c:f3:0b:75:
                    69:5d:73:7e:85:9d:52:c4:8d:1c:89:90:96:b1:d3:
                    3d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D8:42:FD:89:B2:6A:33:C3:FE:36:2F:93:7B:C6:2C:80:6F:A2:74
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:96:ea:11:40:92:d9:5a:6e:be:04:47:7e:4c:c7:67:40:62:
         44:db:24:c6:87:a5:55:67:df:2a:85:c9:58:56:6e:fe:7b:59:
         f7:85:dd:eb:0b:31:f2:12:5e:0a:e1:ca:06:a8:f5:43:72:5a:
         01:34:b4:f9:2b:41:88:c6:4c:54:d6:6f:a0:09:94:69:df:30:
         09:1f:23:63:40:03:68:76:b3:50:e5:3a:fa:c5:41:13:98:51:
         3a:6f:94:ee:ad:26:1d:f4:f2:e2:0f:19:96:e3:56:db:dd:2e:
         1a:20:15:ec:de:06:51:54:80:b2:3e:93:45:b9:4f:70:36:3d:
         8e:05:83:79:bb:b7:69:70:ca:2e:e1:17:30:ad:9c:75:96:8a:
         6e:05:6f:b1:1d:e1:16:a8:0b:b2:5b:1d:86:3e:f9:60:f1:df:
         c0:9d:05:9e:46:4f:d9:81:4f:46:ef:3b:08:7b:1d:8a:c9:2c:
         bf:0b:b9:54:ae:9d:cc:55:fc:aa:b1:92:60:66:8c:44:8a:c0:
         58:ac:6c:56:ad:d9:b9:de:fc:ce:1f:36:09:be:a8:a8:b0:c4:
         b1:d5:43:38:8b:1c:55:1d:42:c9:1b:cd:ad:dc:62:e9:4e:12:
         1d:0e:9b:e2:b2:2a:74:34:fb:45:f1:cd:50:49:f4:84:88:f2:
         d0:eb:f1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:26:04 2025 by rpki-client