Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
File:                     DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft (raw, json)
Hash identifier:          2nMod648w+bxQuoLZTnRkPCLSGjArBbzkIOVX3QM0C4=
Subject key identifier:   2A:8A:DD:C1:42:DC:B5:33:99:2E:1D:63:B7:2D:60:D1:FF:DF:15:55
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       52C74B726BB15DFE4BCBAFDEB0EA8733CF63DE48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
Manifest number:          01DE
Signing time:             Wed 04 Jun 2025 08:10:54 +0000
Manifest this update:     Wed 04 Jun 2025 08:05:54 +0000
Manifest next update:     Sat 07 Jun 2025 11:59:54 +0000
Files and hashes:         1: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: ZErCRMzj3m+Fl5KnJq4RrHkwrZjyK1a28QhPXfjqsjA=)
                          2: 3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa (hash: 5tTNaFKVIpcsc/okIuKSdd47tmmVdXhx+ntRKQSJMJQ=)
                          3: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: rTgQmdFwVK4QH13LPVhNkKRBGW9YevRVeOcoVmRvwXw=)
                          4: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: 7NwT3lu9JZjfjgapimGfIHaWTUgpUh5i3OuwyUj48VY=)
                          5: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl (hash: 00lMagSocPXgpNZuicrNhIw+LBZmM0C/S9vUbQs5kTI=)
                          6: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: 0f2PA52uub2AIW3HVhP+kRWDT2sjTpqTW3vdzs5HzME=)
                          7: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: oHm/b4iyQLSGBhCpt6FnAGvZb8oOHkZH9fWssNMlC38=)
                          8: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: +BXNEKTyQIjcl0qPczbAlblVHqKtw7MqFu+APMhxSxk=)
                          9: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: Wp9W2Rj7SOYCUcu19j3p/Fdm3AlKEhaeQ0agpMYNbvU=)
                          10: 3130332e3131382e3137352e302f32342d3234203d3e20323130353337.roa (hash: H9HoLlwsPZ7vWOyU7iY4WK1IEAYm6ZYFQe1/pX+yL6k=)
                          11: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: kR8T9q/RgSSIceyvyByw5FPl6k8a1Y38HMh9CIjccZE=)
                          12: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 9b88BYrc5fW60hCTvccg2BM34mQg6ZvvmRF6BzjVMcc=)
                          13: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: D7vL0dWhHLWGMsR8H6EfhySZTfu+/ovgCxiI8LpMnhg=)
                          14: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: 1GWI9DsalLLnVqal8oinWe9NrHYqZtqJkFvL9lNkK+c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 11:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c7:4b:72:6b:b1:5d:fe:4b:cb:af:de:b0:ea:87:33:cf:63:de:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Jun  4 08:05:54 2025 GMT
            Not After : Jun  7 11:59:54 2025 GMT
        Subject: CN=2A8ADDC142DCB533992E1D63B72D60D1FFDF1555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b0:75:ee:31:8a:b1:b2:92:21:ff:e7:fc:76:
                    d1:25:59:cc:e3:97:3f:9f:93:7c:6f:a9:da:2d:de:
                    e4:54:81:33:ab:db:7e:8f:01:1a:b4:ca:06:16:80:
                    b2:4b:e1:46:80:9f:e7:af:85:c4:1e:c0:ac:db:d6:
                    96:83:08:bd:56:8d:13:1a:0c:a6:59:65:8f:c7:91:
                    ff:f3:68:eb:2c:45:6e:c8:3a:30:ec:ce:4c:05:d8:
                    eb:4d:1b:c3:1a:12:94:ae:ce:1a:af:84:44:7e:0c:
                    75:b8:f0:d3:19:fb:27:dd:bc:e9:15:d1:83:10:fe:
                    9e:0e:b8:82:46:54:f6:77:cd:0f:72:0e:fd:31:47:
                    a3:19:7e:ed:0c:6e:c7:fd:8e:7c:c1:a8:c8:8e:57:
                    e9:69:ea:61:7e:3d:0d:55:95:db:cd:77:56:7b:f8:
                    3f:a6:85:bd:4a:d4:01:a4:0e:b7:bb:54:c4:50:22:
                    14:7a:ec:0b:a3:01:69:39:e4:c2:49:0c:7b:83:20:
                    bf:c6:b1:06:5c:a5:3b:c6:d9:1e:18:3b:87:75:d5:
                    2c:b1:db:07:32:02:f1:34:67:b8:e3:b2:90:69:8a:
                    65:d6:e7:a8:7d:bb:da:e1:e4:6e:57:89:95:da:0c:
                    27:b7:27:f3:5b:f7:1c:df:6d:dc:9e:be:33:04:bf:
                    00:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8A:DD:C1:42:DC:B5:33:99:2E:1D:63:B7:2D:60:D1:FF:DF:15:55
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:6e:5d:ae:94:7f:ef:a6:4c:af:58:36:f9:33:0f:b7:06:7e:
         22:32:37:5d:c9:ad:21:6d:20:a9:b7:aa:ec:7b:f2:44:09:87:
         fa:41:d1:09:48:53:de:d9:0d:b6:22:24:20:17:85:24:0b:8a:
         62:51:55:2d:65:52:d4:ce:bc:69:c5:9c:bd:f4:4b:75:5e:62:
         da:0a:2c:7b:48:3c:37:64:e3:b6:42:c9:57:62:c9:26:b9:30:
         2b:05:87:80:6c:b2:1d:98:9d:1b:8f:e5:c7:e9:55:d0:53:2f:
         f5:f8:73:49:d8:9d:c7:64:8b:73:8a:cb:9c:21:d8:d7:fb:7c:
         18:cd:b5:8a:6e:4a:da:d2:0c:36:54:45:50:cd:59:d0:f2:38:
         d4:8d:f1:ab:fa:0b:8b:8b:68:2c:8a:f1:96:48:db:3f:fb:0b:
         02:e7:98:98:d7:7d:fe:21:71:57:77:f1:35:64:27:a8:b5:ca:
         83:d7:7b:5a:ed:fb:e9:47:6b:3e:10:ea:5f:20:7f:43:49:d5:
         27:8e:9c:73:16:46:02:f5:94:a4:bc:0f:72:ba:22:28:97:81:
         ae:e8:33:88:02:c8:a2:e6:93:70:fa:91:a5:ad:eb:3a:0f:98:
         c5:87:df:e4:e0:cc:f5:6f:6e:f9:a1:f0:3a:8e:66:4e:35:d5:
         5c:d1:d9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:12:14 2025 by rpki-client