Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
File:                     2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json)
Hash identifier:          rXydUlH89OZaF9E+G4pK+AJdKp3Yo5zmau2zQRVYX7I=
Subject key identifier:   3D:07:CF:D0:A7:DA:52:BF:64:A5:81:79:08:3A:D7:9F:9B:CF:76:09
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       5AE8510DEA015FFC05D8332D6A67FF0E007B9BA1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
Manifest number:          04D8
Signing time:             Wed 04 Jun 2025 09:41:49 +0000
Manifest this update:     Wed 04 Jun 2025 09:36:49 +0000
Manifest next update:     Sat 07 Jun 2025 15:15:49 +0000
Files and hashes:         1: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: Pm3ejHe0iKXyhk2uLd7JZnNwWHWfKfQSqqt4OykxpQA=)
                          2: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: qU/iCVYcrH5NwRFFUnpTANC1C4dNa/LYJXSxq8pN8yQ=)
                          3: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: SpSJ2mlMQ8WdpZZy+WtaRGJCKRn7SkirsoH4mwvq2iA=)
                          4: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: 9DRtavO7TXPRRO9r4nJOU2l6z0jZDLCjiuHMpKPIfJU=)
                          5: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: MNsCflRoTlLLKOy1y3qU2xpl0KIGEKY8wK60n9pU+7g=)
                          6: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: 3hpRgS72xqbHw/rzHvrZvr06sNkUSk2YClN/PS2G8VY=)
                          7: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: Rjbhv9edaboHxu8zehTXAVaGiJWP5SEtMWZfSRiWBmE=)
                          8: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: sTkMNKXQHwGJCIGPBjMVfmb030wQu4FTAnEhwXDkkhA=)
                          9: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: ktBqyZQvnsVWZJg0o8QMMym54n+sUY8BtLk1pA6WS3M=)
                          10: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: n45x0ceW1UBsz2vlM2j5WsEMgFyl1jzLn5eTJNqt6xQ=)
                          11: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: akxHC8MKM3EFjHhlpdlYP+/pk7TEX/1Nsq+20Bs3aRk=)
                          12: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: GOw6BJn4XT5wEmOGVeX/6A1aWsswmeb6q3J3zFZr2JM=)
                          13: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: M1sZzZsXerpK67gBWx+pwUlEiAdZNEC8sdxke6ageOg=)
                          14: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: nbkYpz+Buhh+XcMqkAbLahjlkTuDcneq98AvbJE0oqQ=)
                          15: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: 7CnLEJTxSmV5XmK1oL/nqrOB4/valIkxzWgpmSqfSL0=)
                          16: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: b1d2IpMrPiIjBD6MTNOx5pdXixsLXZonVO5D5NGCeqQ=)
                          17: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: l7IvhWfbT+lx2dajFWFQHmgoo+JryhgkVz+DjITDf5w=)
                          18: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: O4758ltnaCnZlk7IYIR3KUuRIpNS2S4KZ7yVd+rr0y0=)
                          19: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: oOJaEiRPwPQflN2dss15Y4scB4IK0srdXT4sQ+7Afow=)
                          20: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: t73bJSev/MnTBxda4w51EgtY3s6q8wQKW/7viVMLk2M=)
                          21: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: bu8PQupPQERGQ/wzLVVe3ZYhIOmwELfx937WvLW0lzc=)
                          22: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: Ge6toEI3GzH1rudvQNuKe4sTOqkKcImFzmaL0fB9K2A=)
                          23: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: afV3DuPWJs229SMBfZ6L1zzWwdYeqEIzLl+zAnPOPc8=)
                          24: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: impujDOUoN2BKQyTyiVBUJjqkOdpqC1eOXOcnJD1Ge8=)
                          25: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: euoMpvL4eG72VF7oEqlEoSVWhRjwaeq3y0huB9mjd6w=)
                          26: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: DnA9pVTlc5t5JUQmGO4bpvoQrAWbOAtoPuSdy5Z19iI=)
                          27: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: vVu41fldo66s3GTiO3p70Y9WjrS6PJn4ErhvMTYrL+0=)
                          28: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: 2I4LUvDndEY+56Z45Zke7IZg+TWoP7vGoCnv2WeX4qA=)
                          29: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: iEwos51aWtJInprKu1evUCiZY2FYY6kr/E794RVuLRw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 15:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e8:51:0d:ea:01:5f:fc:05:d8:33:2d:6a:67:ff:0e:00:7b:9b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jun  4 09:36:49 2025 GMT
            Not After : Jun  7 15:15:49 2025 GMT
        Subject: CN=3D07CFD0A7DA52BF64A58179083AD79F9BCF7609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:3a:9e:88:92:88:eb:3d:98:58:13:71:e0:
                    d1:31:47:84:34:28:ed:ef:88:03:e8:ee:d6:00:00:
                    f3:07:15:4c:2c:4f:c6:c5:34:28:3c:f0:34:3d:d0:
                    98:cc:74:84:e9:31:d2:88:95:29:a8:c9:53:c9:c8:
                    bf:ac:e8:91:e4:a9:2a:5d:42:13:d2:27:9f:75:c4:
                    62:9d:81:d5:3c:3b:1c:90:28:98:c1:e4:3d:04:46:
                    85:5c:2d:6b:d4:5b:5a:34:4f:18:3e:0e:03:2c:45:
                    2b:26:69:c3:98:dc:e1:c1:ce:a8:bc:eb:3e:2e:47:
                    96:47:75:29:9f:4e:e9:7b:9f:18:01:2d:d0:26:0d:
                    76:f7:2e:60:28:61:09:67:a0:cf:48:92:66:06:03:
                    b0:6b:a2:0b:b0:06:61:d3:0a:ac:5a:67:f3:2f:20:
                    c1:e2:74:46:76:36:c0:3a:d2:24:e7:ce:c0:54:cc:
                    65:bc:92:f4:b8:99:24:bb:35:ac:71:3d:20:8c:e6:
                    a5:92:39:09:24:72:be:b4:ba:8a:3d:3e:98:de:49:
                    80:b7:43:30:e5:63:a1:4c:6b:58:a2:4c:3f:71:20:
                    b6:5e:ff:98:20:aa:6a:55:53:90:ed:d3:dc:89:69:
                    62:47:54:a3:00:52:f1:05:1e:d3:a0:0d:1c:a1:c3:
                    15:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:07:CF:D0:A7:DA:52:BF:64:A5:81:79:08:3A:D7:9F:9B:CF:76:09
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:82:b3:a1:06:cb:f4:e7:9b:09:c2:2f:d5:c9:95:9e:92:78:
         b0:c6:ab:9c:61:c4:f4:cb:37:75:6a:e3:85:6f:c8:d1:e9:29:
         7d:22:0e:00:a0:c3:11:c7:15:2b:5c:57:f8:0b:12:18:23:23:
         ab:47:d9:60:f2:ee:ac:80:3e:a4:2c:ff:d8:89:57:d9:52:33:
         c8:c2:55:8b:82:eb:18:8c:c5:fa:3f:b0:ec:cf:3d:fc:28:96:
         e6:1c:9d:fe:98:eb:f7:3e:03:d0:6f:6e:3d:42:7b:a8:a9:eb:
         f5:6c:49:51:72:b0:e0:04:ed:58:91:1a:e0:4c:e5:84:ac:7e:
         a5:31:e7:ca:8c:05:d3:cb:3b:4a:36:5a:14:40:8d:a4:a3:07:
         f3:7c:8b:1e:ba:8d:08:ce:85:24:cd:f0:13:93:b9:80:08:ec:
         c7:3c:74:ac:4b:e4:49:7f:87:20:1d:97:ed:38:ce:8d:65:5c:
         be:fa:fe:65:02:0a:9a:06:2a:32:db:46:0c:fa:cd:83:76:86:
         d4:fe:1b:1d:a5:3a:2d:91:42:e5:57:46:07:5c:d5:10:7f:3b:
         11:09:28:d5:ba:dc:65:eb:61:d1:25:d2:b8:4d:bd:83:42:28:
         fb:88:c1:f4:fd:f6:fc:a9:7f:db:ae:e7:0a:b6:54:5f:08:7c:
         d9:b3:bb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:34:38 2025 by rpki-client