Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
File:                     4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json)
Hash identifier:          5XUBLjN8oCXIEufKSJ/uC0fiTD5a+xglAQfq+3vDI7Q=
Subject key identifier:   80:1C:03:AF:C4:A6:A9:D6:31:4C:CD:FA:51:E2:A6:D0:3C:BA:5B:29
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Certificate issuer:       /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial:       7E31C4C2B0AE7500E17F88283FA1F96235755B99
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
Manifest number:          AD
Signing time:             Sat 07 Jun 2025 20:11:32 +0000
Manifest this update:     Sat 07 Jun 2025 20:06:32 +0000
Manifest next update:     Wed 11 Jun 2025 07:21:32 +0000
Files and hashes:         1: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: CExyw62yhaULfuFNwHgJQzvOaDneumlJpO9PSL24k5c=)
                          2: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: IUWcIIvw/5B79/1vlmhpjp2xq/bxBr1gvBDlm1MJkEE=)
                          3: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: FCPjRuILimc1y3AzWysntAW1lv6bPjvpNuCAb/4Y8KY=)
                          4: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: Rd+MYgkYtI8Em6b7VkPxEFn2gv60uz4eRZ5jfkklOME=)
                          5: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: balnJcNONLw8SBYvt7tVe9VLlUUBAlIKjs8CUCdy5n0=)
                          6: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: /RbGQNrG5f2b5xUZmbLZIUIJCT8zlW48+GUxpa/P1BY=)
                          7: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: T8cBlOmjcetrSbtW+daV9YtXlBHJ/TgUuSP0ZRu08us=)
                          8: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: CswFvDupWqQkmZpyiNQV19oxsV8YOajNmUapEbDiz6Q=)
                          9: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: jSQKKM5t1FotHl9IvmmOV1bpO2Bm+Ktc/PrlSfNtDhw=)
                          10: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: cFUzi273SYArAUsUFdIqNgQFTFMOnTlJq02/dC40bZE=)
                          11: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sw0SlIxt+FA7pZy4rkUInlCn0uAcgR4nYJ5Re3N9oxc=)
                          12: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: Wdn8WLm/z70TbHCfvi7cPeFpinXRYOP3acHf9F2yoZI=)
                          13: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: mdadZ+r3nk3ljg8TD8Qk3FJTWop4VzOG0q1+8q98qdQ=)
                          14: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: Lk2DgYj+QODfg+053uFba0kcIHOb5Vr+/MafHCR41Bo=)
                          15: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: vJHjXSNbN+nrHshiQZVlbnAzNovBDlJVOtnmhWeep78=)
                          16: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 62idZGQxlSWM3llZuSqKAdjwW6hLve0VhfHgcV849wU=)
                          17: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: amybII68a8VE28x622WWbP3X6DorgNErjKJn51v04hU=)
                          18: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: VrqEqcYe4ew7uni6W9u41N7qHk2GgBXWkfjAlNiKflw=)
                          19: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: bZomEerwTckK0uovhCRCPeCKuhMrW+Qy9Lz5ot1+QLM=)
                          20: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: opmintFf7rKX4t8MJAAA/SPs3kIqRtIjgx+RStmQ20g=)
                          21: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: 12eKUXGhIz6FHVGhhjWlfvlhTiivVo5sPJpz1GDHaMw=)
                          22: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: BcmLy7eGAXxwcAZfEvgQEqwzVahjl/LS8t/7DNQb3O0=)
                          23: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: +efjUKkfN7wyOn1gEZ4iK+HOgdi5kSwgmzRJxOnk92c=)
                          24: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: Z2kUGl4d2/nWr+hivZqHD1txvHpg/IJVAL0dy1bjHtc=)
                          25: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9hl66Fb3ZZtaq9RTVyzyMYKvn9CeIA27uiDhLsoWI3A=)
                          26: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: f+QA2MdOH3pD5wnFB0dGm2Zrsg4T8gtTfRmGOdNWdhQ=)
                          27: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: 2kDQhnA+vvLjJdMc6GtVMUrJH/z6ujyC7pjoKnhNZ2U=)
                          28: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: v0m70RT7TsMBD2CfWXOxviOzxM9VbD9adOYfqtuzcmg=)
                          29: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: /Nnh6j9dQCYcuoIKmMpFeUVi7V4lhYfyFAMUQ8KcTyY=)
                          30: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: NVdbP46U9HcnF9BcVuhppXenoJ+oGsK6bpcGbNkhYrY=)
                          31: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: 2dvpZD7SkLIO8Bb1a+NTuA+XOzdWGBmc4e1hLBWS+aY=)
                          32: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: PWcu8n1GQVYIbIpIIeTmS8WPhGjRtUMxtKVHKNkmcLA=)
                          33: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: hfVgYmT+s3T/gP2ZWIlWtZU/K6JQ3MvR1bPnXxp9XLc=)
                          34: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lc21YQEjyBtBR3cEzA2MpTAYh2Z++8zZog+Taujf5EA=)
                          35: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: htvHw1UId6QYt8Zem0GwkkJ79UHzGuY9MeNMUAYecR4=)
                          36: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: DUx1uGcFaMxSBQpP1ITofuirpaclZNzBSNRp/I11LcM=)
                          37: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 2kWw72G7y9+iu7Oj2LdzHrFFqPrgZYlByeJlEDz3xGE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
                          rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:31:c4:c2:b0:ae:75:00:e1:7f:88:28:3f:a1:f9:62:35:75:5b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
        Validity
            Not Before: Jun  7 20:06:32 2025 GMT
            Not After : Jun 11 07:21:32 2025 GMT
        Subject: CN=801C03AFC4A6A9D6314CCDFA51E2A6D03CBA5B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:9a:78:4f:00:8e:93:cf:aa:e5:da:f8:f3:
                    e5:c6:2c:23:b4:02:36:50:a9:8c:65:41:a5:48:c1:
                    8d:4c:63:dd:f5:62:40:f5:5c:d7:79:36:f0:bf:5d:
                    9d:83:6a:14:2f:81:cb:37:f6:67:32:ba:40:4b:9b:
                    91:69:20:40:3a:be:7d:39:80:31:fb:f6:e9:52:cc:
                    51:22:d9:b7:e0:b3:8a:be:6e:7a:86:77:4a:ce:1b:
                    ef:82:04:21:6b:bd:b4:0a:71:68:07:40:69:b5:cb:
                    1e:c2:2a:5d:ce:42:8c:5a:ca:85:2e:27:aa:90:5b:
                    55:d3:82:a9:47:2e:47:ea:76:2a:f3:8d:b8:f8:4a:
                    8c:0a:83:7d:e6:c2:5b:be:8d:79:8a:38:32:f5:56:
                    ec:f2:bf:7d:d9:1e:41:de:7c:ef:3a:97:6f:98:17:
                    dc:b4:b1:ea:a3:5a:e6:6b:79:06:b5:9a:51:2e:dd:
                    47:41:8b:d1:63:68:8b:15:67:4a:48:4f:d8:03:1f:
                    ad:9e:bf:57:cb:c4:74:fb:05:69:9c:3e:58:3e:ac:
                    27:e3:df:e1:47:8d:70:8b:c8:08:1f:da:9a:ac:ce:
                    b2:9a:00:5c:4e:64:41:28:64:31:e1:33:55:75:4d:
                    a1:23:23:8f:7c:83:ec:54:2e:17:64:d3:d8:67:b3:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1C:03:AF:C4:A6:A9:D6:31:4C:CD:FA:51:E2:A6:D0:3C:BA:5B:29
            X509v3 Authority Key Identifier:
                keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d7:31:cc:7e:d7:96:0b:ca:e3:fe:18:88:ba:fd:63:f3:78:
         c6:13:28:5e:45:90:db:32:9d:75:c3:96:8d:be:ca:fa:ab:21:
         ad:75:c4:0a:9b:22:7f:31:e0:39:64:ac:74:e5:79:0e:f6:aa:
         5c:57:60:46:6d:21:68:54:d5:d3:a9:6c:cd:e4:6c:c6:68:60:
         03:ac:83:b2:24:3c:03:1b:de:24:cf:af:24:92:0e:9a:3b:f7:
         38:06:0b:72:fa:4a:63:47:f6:6b:c1:01:b8:7d:7e:5e:04:90:
         76:0b:0e:9e:21:a5:9f:c1:21:3d:7d:66:75:19:08:36:43:3f:
         ad:df:d8:56:e4:78:cc:aa:e4:1c:48:92:90:58:11:f9:f8:09:
         34:38:74:20:74:9a:6c:f4:7e:3d:2d:48:57:3f:8b:b5:57:6a:
         54:76:d5:62:48:d2:d1:24:55:9b:f7:97:dd:c5:53:0c:95:d2:
         2b:28:1f:25:e6:30:f1:17:ed:3e:38:be:93:4c:c5:0b:6e:d2:
         d1:a0:6f:e8:6a:af:00:a4:84:5c:36:f7:2d:1e:ec:69:a4:4d:
         e3:b4:e7:1b:f8:e8:d0:89:9f:e2:c5:29:b3:7f:89:b2:a5:df:
         0c:19:a9:6b:1d:8c:e6:05:cc:9d:90:52:57:64:c4:7a:5a:8d:
         b8:50:e3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:21:25 2025 by rpki-client