Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft
File:                     C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft (raw, json)
Hash identifier:          FICMXo6uMxU9Uh8/4jjJTGU/qBbB5dN1F1Oht0m/Sb4=
Subject key identifier:   CE:54:F1:9A:1E:7B:46:54:BC:CC:96:38:FA:20:BD:51:92:EF:E8:EA
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Certificate issuer:       /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial:       7D12B9B70A45667AB26EDB6E28B6305640C2F08C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft
Manifest number:          050D
Signing time:             Sun 20 Jul 2025 14:11:12 +0000
Manifest this update:     Sun 20 Jul 2025 14:06:12 +0000
Manifest next update:     Thu 24 Jul 2025 00:24:12 +0000
Files and hashes:         1: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: xet50Y1T2RaCmjZyVilwT++Qk9zQxszZ374/545MhhM=)
                          2: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: gOJdZEtA6e6fwm7lb/MvZbjgtOf6sLlu0HNuBmiaEZM=)
                          3: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: Q22OsVQGNiQHv7rsWq7HdXb5YFdsKjAZXlHpHoKvOag=)
                          4: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: SKzoUE6GJjGbrRoLBDSg0MJXDhRPXJNlIyQMu/0QWEw=)
                          5: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl (hash: 0YXKaudHCWBjbfVYmnbX3hGhFMevStH7fNeocpMl12E=)
                          6: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: yOFSHNJ7/tBSXur8DRCWTGrdUQ9S5IWN+tn279DD4tU=)
                          7: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: EaI6/Dsx2ZEnLc96pWiD/aogqQZmiIKOu7YhzjemiyQ=)
                          8: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 7667q65z5ALRHOPz7ZlyjDc7iiTkR7i4e2iT+KR7k3I=)
                          9: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: jyHfiZ6i7aZCFxYleJN7o61t2gr/9pVuDKWy33Zgxrk=)
                          10: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: haQraVSry86Exch9h906IOyEPpafpeXC5ih1PxjR4d4=)
                          11: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: 23+gG2DOC+ur5eVWAZvoHWGDnxOhWjXAjjErKhmGrS4=)
                          12: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: 5A8+p1O/f/o7MKvT/iojY154TSW6xBkoOLtIqG2w4iU=)
                          13: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: nnj0KLDw9ngWzorUbdMHyDWYfETgXpzXO3uTEwZi24Q=)
                          14: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: QS/GUZ+NIoj800cmERiNyPU2Mys6n5EswZVGgcYBu4o=)
                          15: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: Ketrz/J8f8AAk0/U1Pdx/6YBxlFbuGP5tM7vrclBTuI=)
                          16: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: mJ+S52vU66RNY0f8EN8g3gvOa1pNNig2fMcG1fH79DY=)
                          17: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: 2g+NXNHiM0B7rPdW5gGiKA7VbkoVsAcew6mjSoTkRN4=)
                          18: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: hd2StT+jTnjUGpfUQ62nAy49x8ecNllIMBX9uxJvBO8=)
                          19: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: bwSFGiowGIWFw0Xqwv4OlEcc83VdK0o2KzJnJCZ2DT0=)
                          20: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: Y3N/pOr0hqk+rgEWsHTxDUxkckXwK8BwQRc3Oa99toQ=)
                          21: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: dsLjT0RvHwdlA2P0hS8Ta/QvI/7GUPU2p577iDafIJk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
                          rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 00:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:12:b9:b7:0a:45:66:7a:b2:6e:db:6e:28:b6:30:56:40:c2:f0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
        Validity
            Not Before: Jul 20 14:06:12 2025 GMT
            Not After : Jul 24 00:24:12 2025 GMT
        Subject: CN=CE54F19A1E7B4654BCCC9638FA20BD5192EFE8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:79:48:43:50:2c:30:e7:05:8e:02:20:41:
                    88:e8:f2:83:87:d6:a4:a9:8e:99:9e:15:8e:f3:d6:
                    0e:ed:b3:88:64:a2:32:c3:67:a7:5d:9b:33:25:e0:
                    74:49:aa:a4:31:f5:83:c8:f4:b2:50:1e:e9:58:63:
                    74:d7:07:e3:f9:52:d2:98:89:77:4e:52:32:3c:cb:
                    bd:9d:05:0d:27:b3:34:cc:f7:9a:1d:64:bf:d3:6e:
                    a1:b0:fc:8e:c4:54:e0:12:d0:0b:8e:81:96:83:e1:
                    e3:d7:e6:4b:0f:02:b3:0a:ae:93:81:91:02:43:35:
                    5d:2c:8f:4f:f1:30:2d:bb:6e:ed:20:14:f2:c2:bf:
                    5e:b8:ea:15:1f:f4:13:1d:0f:c4:5f:39:34:5c:99:
                    46:48:87:e9:ee:7f:4d:76:43:76:ee:cb:f5:96:9c:
                    af:8d:78:34:73:87:89:6b:50:e4:c3:59:bd:4e:ef:
                    ce:ce:b3:2b:1c:c4:e0:16:a4:38:bf:35:20:f1:c6:
                    a5:ca:d1:8e:27:8b:5d:e0:cc:92:70:b3:ab:83:c0:
                    2d:83:07:c8:da:99:2b:4d:7b:b6:01:7a:1a:f1:0a:
                    f3:6e:d1:2f:9a:ab:c9:5e:63:3f:50:3c:ba:cf:47:
                    86:41:07:bf:3c:79:48:2b:af:06:f0:bf:7e:8e:8f:
                    f2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:54:F1:9A:1E:7B:46:54:BC:CC:96:38:FA:20:BD:51:92:EF:E8:EA
            X509v3 Authority Key Identifier:
                keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:88:10:f9:ee:80:c1:16:0e:5e:2c:a9:38:19:da:0d:4f:3c:
         89:27:5f:df:b7:37:f9:51:da:91:72:9a:28:93:66:98:8a:b5:
         de:68:52:5c:39:9a:62:a4:54:68:dc:97:16:12:b5:8f:1b:38:
         06:1b:07:ad:67:9a:eb:6a:0f:34:c5:4c:d7:c2:83:bc:0b:2e:
         38:33:6e:c4:a3:53:a9:58:e0:76:51:ed:27:69:2d:23:96:e5:
         c1:1c:18:79:24:64:1e:95:83:56:2d:cd:6f:0a:61:17:94:49:
         0d:d2:00:d6:3a:b4:cf:64:c5:04:2e:6d:8b:b2:ff:6a:ef:40:
         6b:ba:73:1d:cd:19:c2:25:6d:a9:82:2a:28:7a:8d:9c:18:d8:
         c0:ee:84:1a:c6:9b:d5:38:d5:de:2c:7f:f2:98:ac:f2:74:7d:
         b0:e0:ba:a4:3e:f7:4a:c0:dd:62:4e:7a:b9:26:4a:9e:89:6b:
         b3:b0:e4:54:f7:db:3c:bb:8b:a8:95:8a:c6:37:6c:d7:3b:55:
         2c:7e:de:07:5f:52:0a:b1:da:49:aa:14:9b:6f:15:95:de:af:
         5d:be:81:be:6d:be:a4:72:bf:04:28:9a:c6:1c:21:a2:6c:24:
         65:f3:93:74:7a:b9:d3:85:7e:b5:a1:f4:e3:77:49:1f:67:d0:
         5e:e3:44:f3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfRK5twpFZnqybttuKLYwVkDC8IwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz
MUY4MDJFMTAeFw0yNTA3MjAxNDA2MTJaFw0yNTA3MjQwMDI0MTJaMDMxMTAvBgNV
BAMTKENFNTRGMTlBMUU3QjQ2NTRCQ0NDOTYzOEZBMjBCRDUxOTJFRkU4RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNqXlIQ1AsMOcFjgIgQYjo8oOH
1qSpjpmeFY7z1g7ts4hkojLDZ6ddmzMl4HRJqqQx9YPI9LJQHulYY3TXB+P5UtKY
iXdOUjI8y72dBQ0nszTM95odZL/TbqGw/I7EVOAS0AuOgZaD4ePX5ksPArMKrpOB
kQJDNV0sj0/xMC27bu0gFPLCv1646hUf9BMdD8RfOTRcmUZIh+nuf012Q3buy/WW
nK+NeDRzh4lrUOTDWb1O787OsyscxOAWpDi/NSDxxqXK0Y4ni13gzJJws6uDwC2D
B8jamStNe7YBehrxCvNu0S+aq8leYz9QPLrPR4ZBB788eUgrrwbwv36Oj/KbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUzlTxmh57RlS8zJY4+iC9UZLv6OowHwYDVR0j
BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB
RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4
MDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk0NWI4NmUtMDg5NS00NzU5LWE3
N2MtYTA2Y2UxNGUyNDNjLzAvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVB
MjMzMUY4MDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFCIEPnugMEWDl4sqTgZ2g1PPIknX9+3N/lR
2pFymiiTZpiKtd5oUlw5mmKkVGjclxYStY8bOAYbB61nmutqDzTFTNfCg7wLLjgz
bsSjU6lY4HZR7SdpLSOW5cEcGHkkZB6Vg1YtzW8KYReUSQ3SANY6tM9kxQQubYuy
/2rvQGu6cx3NGcIlbamCKih6jZwY2MDuhBrGm9U41d4sf/KYrPJ0fbDguqQ+90rA
3WJOerkmSp6Ja7Ow5FT32zy7i6iVisY3bNc7VSx+3gdfUgqx2kmqFJtvFZXer12+
gb5tvqRyvwQomsYcIaJsJGXzk3R6udOFfrWh9ON3SR9n0F7jRPM=
-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:24 2025 by rpki-client