Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
File:                     882209E37356E0512FBE4E81B00E4F2481865087.mft (raw, json)
Hash identifier:          2B4OBOowdn5PHCyojALymlLUYur1olF+A0F5zKZEASM=
Subject key identifier:   77:DE:31:7F:40:0A:E3:3A:C7:02:A2:71:92:5B:59:B5:B8:76:CE:A3
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       035EA94CF9A5B043B78BC625D8ABD90E5EA814D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
Manifest number:          04EE
Signing time:             Mon 21 Jul 2025 07:22:00 +0000
Manifest this update:     Mon 21 Jul 2025 07:17:00 +0000
Manifest next update:     Thu 24 Jul 2025 17:06:00 +0000
Files and hashes:         1: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: sH9AL8idt6oa1DBw1y1K2NRJOkrnep4hXxdB09oly/A=)
                          2: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: yQorJw+u2n8BFPvZbej71Ji8nM/16g2mSwkEj1PF54g=)
                          3: 882209E37356E0512FBE4E81B00E4F2481865087.crl (hash: g5H8SB1PQLPRY5NSn2otarRD4xY8YyQ5qguip8ePz/A=)
                          4: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: sxL8WI3UrWSTsLdgL4krtb4YzuPS2/H7rwpNl9kG2s8=)
                          5: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: njg/qVMnSFnXNm23LFJOAC9Brxk9FM9096rC9yQ0CXk=)
                          6: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: 4exgwdcQ1exTycgJCK/gqBNOkO+g3t+MeUPzY4BXBs4=)
                          7: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: 4YSDNpw3vRi1ZpYELRMW9RHjucU5y6DLjYnJw7lk5Lw=)
                          8: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: MdJ8RxR8ZYDVXBT9P8fF751Cc4xL7JgxekzcB9xdKx0=)
                          9: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: TUhhdvGp1LOiLtnysRzIGChLZFMNnT5PF4OEU6rQz1g=)
                          10: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: UtJFn8cjB9oRRuew5QEOrcUcIRIAJ+KfKoJMwxwZf1I=)
                          11: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: GuM7P7x/u39aCvmJkxVuMlpYCmbP89xnoCs5WogcWI4=)
                          12: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: 5In45d5yPgAgu4EKrWednA3s/tNDYrqkLBEAtmGlKjI=)
                          13: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: ILfqmoxfXPHlh8GmZbUT7jZa6GPfE6TlAFjcXTufWHY=)
                          14: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: RohtMVPp7ZjWT76AR25hywvAjC+yVkxy154FLnUsdBk=)
                          15: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: upfq/Ll023pCAPQGTeGs2hbSXasfCV07dRWvMTFoCJY=)
                          16: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: ae/dG+5qLBYT7KzQliS37oy8tODqNSMPLH4vHatbgLA=)
                          17: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: GNr97+CgZOUFbCIDGfnRBjjUL8CMyp0MB4VIgO96YwM=)
                          18: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: s/GWk0rnx1fQe+9N5/NiE2vZ64ixoUOqYZCvVVS5fa4=)
                          19: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: fWpUZJchVDwudRJxgK1oYcEU6iSSZ9RgPdltpwuInA8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 17:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5e:a9:4c:f9:a5:b0:43:b7:8b:c6:25:d8:ab:d9:0e:5e:a8:14:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: Jul 21 07:17:00 2025 GMT
            Not After : Jul 24 17:06:00 2025 GMT
        Subject: CN=77DE317F400AE33AC702A271925B59B5B876CEA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:52:40:1d:03:f1:aa:a2:6c:9f:2b:8b:90:a6:
                    52:3c:cc:23:9a:cd:1a:44:b2:2a:be:fe:49:e7:1f:
                    45:0b:72:12:af:76:d0:41:01:d0:d2:38:33:0d:7d:
                    45:f0:a4:af:97:3e:c9:f4:2d:04:f7:da:a5:50:3f:
                    8a:43:80:83:be:d0:d8:08:7f:dc:84:5e:da:ea:42:
                    d8:6b:fd:0a:57:ef:68:42:46:27:48:98:67:c1:18:
                    b5:9c:63:aa:e5:47:31:31:e6:db:c2:f1:a2:66:91:
                    f0:99:2e:12:c4:4f:7a:5b:c8:cd:65:e4:f1:98:0e:
                    ca:76:a8:88:b9:81:96:93:e4:39:63:b6:14:78:d9:
                    fb:ac:8f:ad:6e:36:01:98:5b:98:8a:f1:ec:c3:2a:
                    11:df:ed:92:3d:61:4e:9b:cc:74:f8:bd:5a:c5:2b:
                    5f:47:99:63:0c:6d:26:7b:d8:82:56:1c:0c:ab:d8:
                    8e:7b:59:a5:8d:97:37:62:8c:45:01:57:ea:21:cd:
                    3b:7d:6e:0a:0a:9c:23:95:8a:00:88:54:10:f2:71:
                    f4:b5:88:45:11:45:f6:28:3e:90:50:0f:ef:20:e5:
                    ee:22:83:af:31:d7:35:1f:86:de:a6:0e:04:d5:5c:
                    c9:de:fe:95:82:83:08:3e:7b:3b:72:5f:0f:f3:2a:
                    2a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DE:31:7F:40:0A:E3:3A:C7:02:A2:71:92:5B:59:B5:B8:76:CE:A3
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:03:7c:24:91:78:08:9a:39:27:6a:2c:e2:00:a0:77:85:34:
         26:a4:b3:c3:bd:48:87:a7:aa:d1:c6:92:60:0f:25:39:95:e2:
         30:63:e7:06:c1:46:e2:32:5b:d8:2b:5e:97:0a:c8:89:fc:0d:
         5a:9b:7c:c8:cf:1d:54:f4:fb:62:01:8e:d8:04:6c:61:ba:93:
         47:78:05:fd:f6:bc:f5:34:d9:ba:e8:c2:9b:ff:12:1d:c1:b0:
         0f:38:6a:9c:fb:3b:b6:8d:81:ba:a5:7f:6b:67:c5:86:a8:db:
         cc:f9:ba:7e:e8:9c:27:e8:72:5c:ee:5d:1b:fb:73:a9:52:65:
         2a:4e:db:0c:e4:35:c5:a5:9a:42:20:b2:18:d2:41:01:07:3b:
         75:02:58:95:2c:1d:ae:fb:ca:b3:3f:29:1f:5f:0f:ee:05:fe:
         b6:ba:18:78:96:e3:e2:9d:de:8b:2e:46:e7:31:a2:59:17:c1:
         74:d2:41:9f:a2:64:5e:25:e8:c2:2a:07:dd:53:4d:85:52:ab:
         b4:5f:c0:76:61:5c:32:ca:8b:26:12:89:4c:5c:4d:68:77:37:
         8d:e3:4e:39:c0:74:aa:d5:1b:46:a4:fd:a8:c0:4e:df:cc:d5:
         82:d8:e8:41:bd:85:22:4b:9b:c3:12:80:ae:b8:fe:68:ca:41:
         dc:86:9f:32
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUA16pTPmlsEO3i8Yl2KvZDl6oFNYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4
MTg2NTA4NzAeFw0yNTA3MjEwNzE3MDBaFw0yNTA3MjQxNzA2MDBaMDMxMTAvBgNV
BAMTKDc3REUzMTdGNDAwQUUzM0FDNzAyQTI3MTkyNUI1OUI1Qjg3NkNFQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjUkAdA/GqomyfK4uQplI8zCOa
zRpEsiq+/knnH0ULchKvdtBBAdDSODMNfUXwpK+XPsn0LQT32qVQP4pDgIO+0NgI
f9yEXtrqQthr/QpX72hCRidImGfBGLWcY6rlRzEx5tvC8aJmkfCZLhLET3pbyM1l
5PGYDsp2qIi5gZaT5DljthR42fusj61uNgGYW5iK8ezDKhHf7ZI9YU6bzHT4vVrF
K19HmWMMbSZ72IJWHAyr2I57WaWNlzdijEUBV+ohzTt9bgoKnCOVigCIVBDycfS1
iEURRfYoPpBQD+8g5e4ig68x1zUfht6mDgTVXMne/pWCgwg+eztyXw/zKipnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUd94xf0AK4zrHAqJxkltZtbh2zqMwHwYDVR0j
BBgwFoAUiCIJ43NW4FEvvk6BsA5PJIGGUIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MDc0NzFhMy1lZTUzLTQ5OWMtOWYyZC1jZjE2YjFlNGEzNTMvMC84ODIyMDlFMzcz
NTZFMDUxMkZCRTRFODFCMDBFNEYyNDgxODY1MDg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4MTg2
NTA4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA3NDcxYTMtZWU1My00OTljLTlm
MmQtY2YxNmIxZTRhMzUzLzAvODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRG
MjQ4MTg2NTA4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHYDfCSReAiaOSdqLOIAoHeFNCaks8O9SIen
qtHGkmAPJTmV4jBj5wbBRuIyW9grXpcKyIn8DVqbfMjPHVT0+2IBjtgEbGG6k0d4
Bf32vPU02browpv/Eh3BsA84apz7O7aNgbqlf2tnxYao28z5un7onCfoclzuXRv7
c6lSZSpO2wzkNcWlmkIgshjSQQEHO3UCWJUsHa77yrM/KR9fD+4F/ra6GHiW4+Kd
3osuRucxolkXwXTSQZ+iZF4l6MIqB91TTYVSq7RfwHZhXDLKiyYSiUxcTWh3N43j
TjnAdKrVG0ak/ajATt/M1YLY6EG9hSJLm8MSgK64/mjKQdyGnzI=
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:11:41 2025 by rpki-client