Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
File:                     F490341241E1B1C7D170AB872CA39A68309B3F3B.mft (raw, json)
Hash identifier:          N/5p3lk33gVFes29A0PITA2/31qaEcgvN7ZLUkE05/Y=
Subject key identifier:   5D:97:B5:57:56:59:96:23:20:35:2C:F7:43:A5:BD:3B:FD:57:65:74
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       04FF45D493FBB968AC19D29599D1DDE1F7A6EB46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
Manifest number:          0510
Signing time:             Mon 21 Jul 2025 04:01:09 +0000
Manifest this update:     Mon 21 Jul 2025 03:56:09 +0000
Manifest next update:     Thu 24 Jul 2025 13:23:09 +0000
Files and hashes:         1: 3138322e3235352e362e302f32342d3234203d3e203436303439.roa (hash: QRYn8WtwsQRs+x1TkdeVU1UH0/rjpzX3BZt6CYg28oE=)
                          2: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (hash: RKttGS5PwJEjpYkkwnYXSXMh2rGPID7tZySIx4z8fXc=)
                          3: 3138322e3235352e302e302f32342d3234203d3e203436303439.roa (hash: CAyWkxyi9LMtsrHYjfAG2boS5jHeuAANIsKyYBMp0r8=)
                          4: 323030313a6466303a62353a3a2f34382d3438203d3e203436303439.roa (hash: 2VAQFfeqQhEyAnMrmaTI9sSR0U2G484A8xe93rrxtaE=)
                          5: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (hash: 760KemyA/8CG6teBonQBDvPWQiZb2MFgnxH7YjBubLE=)
                          6: F490341241E1B1C7D170AB872CA39A68309B3F3B.crl (hash: /qM6PGtzM37r9EwTWxIUWXH+qTd++vSyB6f2oqd2UC8=)
                          7: 3138322e3235352e322e302f32342d3234203d3e203436303439.roa (hash: s6t8B9Yb32gbmphUa2yAhVP1WuavRJY2Ru8LFunH5f8=)
                          8: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (hash: q1fJNMSMrTdPYX6ezkyT1Xn0IDgEntngG/ryVwe3mo8=)
                          9: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (hash: I1A638CYsM8J+ynZCPmsBPN7YoHXf4XqHlMcOkLKF2I=)
                          10: 3138322e3235352e332e302f32342d3234203d3e203436303439.roa (hash: 916QQrsogPaFL20AzlqFBpH82vUOjVu3r9uBPeIXCrE=)
                          11: 3138322e3235352e372e302f32342d3234203d3e203436303439.roa (hash: ZOn1duEgq0Mggi6JeNyv0wxbJd/1uQH8PSmUAhWuNpM=)
                          12: 3138322e3235352e342e302f32322d3232203d3e203436303439.roa (hash: WTHU/5ITLWOOuxdsynAF/KxIVTWen6H2gEJyk6lWAdc=)
                          13: 3138322e3235352e312e302f32342d3234203d3e203436303439.roa (hash: /whKyexdqjSOrcGqLso5j6gTdy//noyVQBpRBCINN/I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 13:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ff:45:d4:93:fb:b9:68:ac:19:d2:95:99:d1:dd:e1:f7:a6:eb:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Jul 21 03:56:09 2025 GMT
            Not After : Jul 24 13:23:09 2025 GMT
        Subject: CN=5D97B5575659962320352CF743A5BD3BFD576574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5a:9f:a6:9c:da:e1:f7:4e:79:74:97:40:eb:
                    84:42:9b:61:e5:a9:16:c1:32:b7:c3:f6:25:fc:ec:
                    b1:ac:65:a5:61:2b:df:98:44:c6:72:20:ba:ac:c3:
                    e7:e3:43:c0:c5:6c:a3:36:a9:15:b2:cf:94:3f:6f:
                    48:01:a4:43:d4:34:f8:86:ff:36:c9:df:e5:0c:fd:
                    95:96:2f:93:33:00:2b:17:15:fa:5a:7e:ef:81:82:
                    8b:19:fe:24:f6:a0:56:06:79:79:0f:19:f5:31:28:
                    2a:ce:0e:d3:fb:8a:37:ff:bf:83:5a:45:f2:e7:e1:
                    10:f3:c4:e3:3e:31:ff:5f:b1:97:0a:fd:ce:6c:7e:
                    8c:08:6b:0c:43:d5:2a:82:2f:b4:aa:75:f3:2a:67:
                    00:ae:ff:0c:29:28:56:9d:18:2e:42:2e:33:96:93:
                    bf:5d:05:44:0f:bf:f7:cb:a0:a8:5e:05:47:94:7b:
                    96:c6:1f:73:5e:50:4a:8a:7d:fc:67:d3:4e:6d:3d:
                    c0:93:21:93:f4:d9:cb:13:5d:80:ad:84:8e:9c:63:
                    f3:38:2b:97:3d:86:62:61:d6:c3:d3:ad:f5:ce:26:
                    56:10:13:a1:86:e7:e5:11:a1:d5:c4:97:e4:bb:7d:
                    a3:7e:8c:84:3b:f2:d0:b5:8b:43:d3:02:24:3b:1f:
                    74:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:97:B5:57:56:59:96:23:20:35:2C:F7:43:A5:BD:3B:FD:57:65:74
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:0b:7c:6d:d8:8d:18:b6:d7:21:10:dc:f3:4f:65:54:80:c2:
         75:15:fb:db:ec:96:67:b2:33:bd:4c:6d:7a:f5:c2:c6:1e:80:
         04:45:57:91:8b:bd:8e:e0:48:b3:71:ff:6c:b7:e2:53:63:c2:
         b1:18:54:df:e7:ef:34:63:5a:f9:3a:54:f0:ab:60:9b:82:8a:
         4f:c7:bf:2a:d2:02:0e:36:99:6b:80:9f:2e:af:2b:16:6d:80:
         f2:8b:81:70:be:34:70:43:92:2f:88:23:b2:1c:dc:e8:ff:bc:
         8b:a8:c1:54:f2:c9:fd:c7:97:0e:40:32:0f:f8:26:15:03:d6:
         bc:4a:df:7e:92:1f:45:27:ab:0c:11:b0:c1:8b:62:48:d1:66:
         35:e7:31:b5:57:a6:8d:d8:b1:9e:47:cd:1e:60:1d:0e:1d:a7:
         bd:4b:c7:3a:f8:cc:09:5e:24:fc:09:8c:5b:36:8f:9f:70:78:
         53:48:40:05:2f:ea:39:85:2d:6d:d0:0e:65:bb:02:67:ea:d1:
         e5:4e:50:03:fa:4d:fa:f9:12:d8:c9:4b:43:bf:c3:c7:46:32:
         48:7e:b3:12:2f:ff:f0:77:ef:e0:9c:90:d6:47:78:70:b2:40:
         42:8b:70:02:bc:0f:fd:08:83:1e:24:a8:24:bb:87:c8:3a:5f:
         2f:fd:5d:3c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBP9F1JP7uWisGdKVmdHd4fem60YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgz
MDlCM0YzQjAeFw0yNTA3MjEwMzU2MDlaFw0yNTA3MjQxMzIzMDlaMDMxMTAvBgNV
BAMTKDVEOTdCNTU3NTY1OTk2MjMyMDM1MkNGNzQzQTVCRDNCRkQ1NzY1NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYWp+mnNrh9055dJdA64RCm2Hl
qRbBMrfD9iX87LGsZaVhK9+YRMZyILqsw+fjQ8DFbKM2qRWyz5Q/b0gBpEPUNPiG
/zbJ3+UM/ZWWL5MzACsXFfpafu+BgosZ/iT2oFYGeXkPGfUxKCrODtP7ijf/v4Na
RfLn4RDzxOM+Mf9fsZcK/c5sfowIawxD1SqCL7SqdfMqZwCu/wwpKFadGC5CLjOW
k79dBUQPv/fLoKheBUeUe5bGH3NeUEqKffxn005tPcCTIZP02csTXYCthI6cY/M4
K5c9hmJh1sPTrfXOJlYQE6GG5+URodXEl+S7faN+jIQ78tC1i0PTAiQ7H3SbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUXZe1V1ZZliMgNSz3Q6W9O/1XZXQwHwYDVR0j
BBgwFoAU9JA0EkHhscfRcKuHLKOaaDCbPzswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZTg2YjA5Mi01MjdkLTQ4OGYtYTlmNy0yNDc5N2Q5Nzc0Y2IvMC9GNDkwMzQxMjQx
RTFCMUM3RDE3MEFCODcyQ0EzOUE2ODMwOUIzRjNCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgzMDlC
M0YzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4NmIwOTItNTI3ZC00ODhmLWE5
ZjctMjQ3OTdkOTc3NGNiLzAvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlB
NjgzMDlCM0YzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI4LfG3YjRi21yEQ3PNPZVSAwnUV+9vslmey
M71MbXr1wsYegARFV5GLvY7gSLNx/2y34lNjwrEYVN/n7zRjWvk6VPCrYJuCik/H
vyrSAg42mWuAny6vKxZtgPKLgXC+NHBDki+II7Ic3Oj/vIuowVTyyf3Hlw5AMg/4
JhUD1rxK336SH0UnqwwRsMGLYkjRZjXnMbVXpo3YsZ5HzR5gHQ4dp71Lxzr4zAle
JPwJjFs2j59weFNIQAUv6jmFLW3QDmW7Amfq0eVOUAP6Tfr5EtjJS0O/w8dGMkh+
sxIv//B37+CckNZHeHCyQEKLcAK8D/0Igx4kqCS7h8g6Xy/9XTw=
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:36:22 2025 by rpki-client