Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft
File:                     14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft (raw, json)
Hash identifier:          fdAWvR4Up6dVzCp5X3HSgQvd+jq5ymSzt/vtNkaWuZU=
Subject key identifier:   20:4B:E4:6F:56:E1:83:1E:8E:93:AB:3F:62:F4:01:27:56:D2:5D:60
Authority key identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61
Certificate issuer:       /CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61
Certificate serial:       76537AFE287168E45194955F9DBC10B9D49CDA30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft
Manifest number:          015D
Signing time:             Sun 20 Jul 2025 01:41:17 +0000
Manifest this update:     Sun 20 Jul 2025 01:36:17 +0000
Manifest next update:     Wed 23 Jul 2025 06:40:17 +0000
Files and hashes:         1: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: Ra4kBxyKq0eMRR5T+q214TFxoVWgjk/J53dcHzjeFD8=)
                          2: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: u880hi+D7DiVMZTtM0R2zluDGsZisp33kG58HiXq4yE=)
                          3: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl (hash: T1Ukfb035xyzY9ohpN9h8jnIkBMUhpjA+IyOSaPAeCM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl
                          rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 06:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:53:7a:fe:28:71:68:e4:51:94:95:5f:9d:bc:10:b9:d4:9c:da:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61
        Validity
            Not Before: Jul 20 01:36:17 2025 GMT
            Not After : Jul 23 06:40:17 2025 GMT
        Subject: CN=204BE46F56E1831E8E93AB3F62F4012756D25D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d9:7f:e8:68:ff:20:55:2e:6b:1b:93:00:4c:
                    07:bf:76:4b:90:39:97:1d:c5:84:71:29:40:44:28:
                    54:fa:2e:64:08:41:da:97:ea:ea:aa:8a:08:cd:be:
                    70:8f:fd:a5:f5:5f:4a:d2:22:5a:f1:4a:a4:e6:39:
                    f3:35:71:af:b6:9f:a7:fc:77:5e:59:bd:fe:96:40:
                    9d:a8:fd:3b:38:3f:35:96:7b:73:b0:28:1e:a7:f2:
                    9a:58:ef:33:e9:27:8a:7c:fc:a0:6a:11:90:ea:75:
                    fd:e0:c6:bd:6d:23:0a:9b:ea:45:ab:f6:40:e8:39:
                    a5:75:b7:06:1d:55:81:e7:cb:29:75:fe:13:8b:75:
                    fb:d7:60:63:d2:81:90:7d:d7:38:9a:1a:23:27:f0:
                    3c:e7:31:12:33:ad:11:f6:27:f3:7a:a5:51:9d:25:
                    73:11:c0:1c:5e:50:7f:17:dc:36:89:56:08:21:d2:
                    1f:7f:75:3c:70:94:fb:e2:e3:bb:5a:6c:0c:fa:4c:
                    d8:79:cf:2e:9c:b9:12:89:99:05:cc:b1:8c:c8:dd:
                    11:1d:54:1b:1d:e8:fa:d2:d5:34:6a:04:1e:98:45:
                    e5:13:5a:d8:2b:74:ca:b0:41:5a:f2:74:bf:e8:d7:
                    d4:a0:8c:70:83:36:bd:84:10:44:32:05:be:e2:19:
                    93:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4B:E4:6F:56:E1:83:1E:8E:93:AB:3F:62:F4:01:27:56:D2:5D:60
            X509v3 Authority Key Identifier:
                keyid:14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:90:09:3a:e4:71:be:7b:6e:91:ab:9a:b4:c2:ec:d6:89:98:
         9c:e1:88:26:4f:53:cd:7a:1c:fe:4d:a4:f3:4d:26:56:cd:95:
         42:5e:01:c4:93:6b:8e:4f:f9:1e:d9:2b:f4:af:5d:34:f0:a1:
         37:f4:1e:56:c9:9d:30:d1:a6:5c:57:54:42:65:8f:5e:17:c6:
         30:8e:a3:ac:7b:04:ba:7c:8d:52:b6:5b:6f:a9:be:0f:66:d8:
         7d:89:b8:06:33:87:30:be:f7:a3:1b:6e:ad:49:d4:d8:75:20:
         73:66:2a:56:f2:b3:56:8e:27:72:a7:ea:53:51:8d:6c:bf:31:
         bd:ef:44:c0:ff:7a:31:fc:76:8a:06:54:b5:dc:f4:74:05:e5:
         e2:14:4b:ef:9f:a2:88:ab:b2:98:39:83:d7:c5:5d:42:0e:31:
         8d:9e:79:28:c6:d3:95:15:93:4a:00:fc:61:16:31:37:6c:aa:
         63:58:9e:19:1f:30:a6:c7:c7:a0:bc:28:43:36:e0:34:65:b9:
         ca:c3:29:72:0c:27:4c:0c:6e:07:59:b9:be:68:45:c3:0b:89:
         b1:05:39:41:7a:75:3a:a0:d4:16:9c:2c:34:f9:ea:6a:db:3b:
         c8:95:07:3e:e5:7c:66:41:a5:1f:4e:e1:6f:77:f1:c7:ee:b7:
         c8:23:ab:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:44 2025 by rpki-client