Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
File:                     DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft (raw, json)
Hash identifier:          Y62hPOHwa9aKXt+SQAHou2sJBoYYsMa6WumgA6G1lso=
Subject key identifier:   2B:03:47:61:87:CD:35:11:97:98:E8:C9:55:1B:CB:1D:BE:5B:9F:76
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       3126B4BDEEE4DC2FD83058585926F5840DC4C3B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
Manifest number:          0207
Signing time:             Thu 04 Sep 2025 00:50:54 +0000
Manifest this update:     Thu 04 Sep 2025 00:45:54 +0000
Manifest next update:     Sun 07 Sep 2025 08:16:54 +0000
Files and hashes:         1: 3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa (hash: 5tTNaFKVIpcsc/okIuKSdd47tmmVdXhx+ntRKQSJMJQ=)
                          2: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: 1GWI9DsalLLnVqal8oinWe9NrHYqZtqJkFvL9lNkK+c=)
                          3: 3130332e3131382e3137352e302f32342d3234203d3e20323130353337.roa (hash: H9HoLlwsPZ7vWOyU7iY4WK1IEAYm6ZYFQe1/pX+yL6k=)
                          4: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: +BXNEKTyQIjcl0qPczbAlblVHqKtw7MqFu+APMhxSxk=)
                          5: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl (hash: MpRUreLs6pyK5nsm0ZdiNsu3Pqpk/qQoevJUuy5kzBE=)
                          6: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: oHm/b4iyQLSGBhCpt6FnAGvZb8oOHkZH9fWssNMlC38=)
                          7: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: 0f2PA52uub2AIW3HVhP+kRWDT2sjTpqTW3vdzs5HzME=)
                          8: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: rTgQmdFwVK4QH13LPVhNkKRBGW9YevRVeOcoVmRvwXw=)
                          9: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: kR8T9q/RgSSIceyvyByw5FPl6k8a1Y38HMh9CIjccZE=)
                          10: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: D7vL0dWhHLWGMsR8H6EfhySZTfu+/ovgCxiI8LpMnhg=)
                          11: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 9b88BYrc5fW60hCTvccg2BM34mQg6ZvvmRF6BzjVMcc=)
                          12: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: Wp9W2Rj7SOYCUcu19j3p/Fdm3AlKEhaeQ0agpMYNbvU=)
                          13: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: ZErCRMzj3m+Fl5KnJq4RrHkwrZjyK1a28QhPXfjqsjA=)
                          14: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: 7NwT3lu9JZjfjgapimGfIHaWTUgpUh5i3OuwyUj48VY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Sep 2025 08:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:26:b4:bd:ee:e4:dc:2f:d8:30:58:58:59:26:f5:84:0d:c4:c3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Sep  4 00:45:54 2025 GMT
            Not After : Sep  7 08:16:54 2025 GMT
        Subject: CN=2B03476187CD35119798E8C9551BCB1DBE5B9F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:18:fd:a1:fb:3c:13:77:0e:1b:5d:30:4e:
                    09:76:aa:12:0c:08:85:b2:01:38:82:ff:01:27:bc:
                    a0:56:54:d2:3a:7b:91:65:c9:8b:f9:31:c9:77:6d:
                    4e:24:e3:9d:33:af:1d:90:6b:4a:2c:7b:6f:6a:3e:
                    97:61:66:9e:64:34:b0:1d:f3:a9:a5:7c:a7:43:89:
                    95:fb:06:2f:a2:f2:35:e0:59:c7:30:2e:cd:17:01:
                    cc:83:98:1d:5e:30:a9:fa:57:b5:21:fe:de:dd:ed:
                    10:7d:2e:71:06:0c:ed:b0:b8:f9:66:54:1e:f9:c8:
                    53:75:a0:5c:f4:bb:2a:b7:25:3a:a8:95:10:43:22:
                    fd:3d:71:7e:8f:96:8d:9b:a6:29:6a:04:47:11:b7:
                    57:6c:35:d5:50:bc:b3:70:f2:45:bf:c8:a5:5d:13:
                    79:74:1c:18:4c:e7:73:93:cb:72:a9:fb:4b:d3:12:
                    98:d1:c9:cd:62:b5:b9:e1:e3:01:0d:3c:1e:9a:86:
                    c3:8d:ca:1a:1d:dd:dd:c8:6b:6d:b6:6d:66:9d:1d:
                    84:c3:b7:1a:fe:71:ad:aa:d1:8b:f5:30:c1:33:a7:
                    1c:b9:2c:82:10:4e:0f:fd:84:62:73:cc:11:c3:37:
                    43:c9:5d:61:84:de:4c:7e:4f:c9:42:e6:eb:42:e8:
                    86:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:03:47:61:87:CD:35:11:97:98:E8:C9:55:1B:CB:1D:BE:5B:9F:76
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:88:ba:2f:b2:e3:a1:f2:8f:fb:02:1f:7f:8d:06:b6:38:0f:
         31:ab:af:9f:f0:85:8c:6e:82:6e:58:dc:ba:a9:b7:fc:a1:08:
         bb:25:96:01:c7:c4:d0:72:49:c5:82:10:75:a7:cd:33:12:6a:
         36:e8:6a:7a:de:07:ca:d0:57:74:99:ef:17:df:0d:b5:e1:50:
         51:00:79:0d:8a:b9:e2:34:f4:e1:84:94:25:d2:77:76:3d:97:
         a8:c9:2e:52:3b:39:d6:0d:2e:75:e0:d4:30:1b:48:c7:12:84:
         fd:33:79:28:5e:ea:3f:d1:5c:81:08:a5:f0:2f:a5:3a:39:d9:
         b5:fc:12:e4:b4:e1:7f:72:fb:c6:16:22:a8:54:cd:b2:34:38:
         d9:cb:75:df:ec:35:0d:02:a1:08:d9:c5:4b:fa:a4:46:eb:e5:
         0a:7f:70:5a:2e:5c:73:94:e5:9b:1c:a3:86:f9:b4:8f:63:92:
         a7:93:ab:a2:a0:b0:6e:61:71:76:c6:88:67:95:6a:e1:40:16:
         9e:a2:f9:55:e9:d0:92:39:30:b9:dc:29:c9:53:ce:da:18:ed:
         df:0d:4c:13:a0:e9:34:08:55:41:6b:34:d7:5c:cc:cc:1b:47:
         3b:86:99:6c:e5:4f:b5:e4:cf:ad:d9:40:7d:e8:a2:96:4e:27:
         d9:83:4f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:40:43 2025 by rpki-client