Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
File:                     F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft (raw, json)
Hash identifier:          j943AFUEyXGpQHO3Ie06oEpAYTEJgTqMK4q9LR/rUT4=
Subject key identifier:   BF:EB:36:EC:F0:FD:B9:6B:EC:FB:38:11:75:CB:FE:DB:63:58:00:3B
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Certificate issuer:       /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial:       6CE798A4E8185DBBFD924A3CF3505B0FF3DB303C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
Manifest number:          0329
Signing time:             Thu 05 Jun 2025 13:31:54 +0000
Manifest this update:     Thu 05 Jun 2025 13:26:54 +0000
Manifest next update:     Sun 08 Jun 2025 22:14:54 +0000
Files and hashes:         1: 3230322e39312e33302e302f32342d3234203d3e203234353238.roa (hash: SRVdqccofthtkv2uwfSLIsY2tVzjR9tDeypT6l5PKBc=)
                          2: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (hash: nSNHUbZiqo6P3F9SIZ9EN5nCLPpwycyYrfB+M+PV3zw=)
                          3: 3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (hash: WLK6N6lYU6j7qmPlWLYHBoNW0CsjIHOLp3K/3Jfw78k=)
                          4: 3230322e39312e32392e302f32342d3234203d3e203234353238.roa (hash: p6w84x+sTkId9KJBAsf0out+ASQwEBO6MAkMqXPQJmY=)
                          5: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (hash: FgWk4lEb+N8VyrkhQkA7AsDgO4pzlnxAR+so0eMn0MM=)
                          6: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl (hash: ctdWtG7xSVNCR8a4HzeuxMGcsCYS1jC8DaP//uUFYiU=)
                          7: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (hash: KiKi/4BGJg0K48DdjCfOcOBa77JCOo4OxuIg38BvrXI=)
                          8: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (hash: nikRTC901Bllan4GreFOs5fithEDsAsxTQDrjRSiako=)
                          9: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (hash: sxphp4GIGCV7hhFuUuJXQKH7CdkIoeuJ+Uc7gPS1Oeo=)
                          10: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (hash: 3mPJMmSU87HxOCz1kx2GnX89IU0Xnf2eTb3lccTca1k=)
                          11: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (hash: 6Gn2L5Gc0xaArWW6fS4YuSQAyW4Nw2vh1NIUwUVsqyA=)
                          12: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (hash: f+5HOc/sgnjP7t42vcbumcmwD5c7eyke5qlw/e0UPsk=)
                          13: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (hash: aOzMI9PHIaU1+JYfqj3PgTWOSMZrS1G3wjVf+KJcQuA=)
                          14: 3230322e39312e33312e302f32342d3234203d3e203234353238.roa (hash: PYlzhe+IAch9XO1on1CijnQRACSSXKfMv/Z8ZKEBHq8=)
                          15: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (hash: tGztSZAQJ35/hLuECvtTcpELlM1IpNOZ8zjyOffPPVE=)
                          16: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (hash: 8CMqMpoCs6b6HNia3ifuD/WpzvcJj1kVCsO8zPSQ7wc=)
                          17: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (hash: od2C/ltQ6m1xjAT8szqDpHM3qB6Kr8NBlMw+dYe1JvU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
                          rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 21:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e7:98:a4:e8:18:5d:bb:fd:92:4a:3c:f3:50:5b:0f:f3:db:30:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
        Validity
            Not Before: Jun  5 13:26:54 2025 GMT
            Not After : Jun  8 22:14:54 2025 GMT
        Subject: CN=BFEB36ECF0FDB96BECFB381175CBFEDB6358003B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:58:58:37:31:01:4e:a5:f2:e6:b3:fb:c8:
                    3f:82:3c:81:47:b5:bb:cf:4f:66:40:90:c8:ac:67:
                    6f:f8:5e:70:b6:95:b1:23:cd:aa:91:72:41:af:15:
                    79:d7:5d:57:63:46:aa:56:38:3b:4e:5e:ae:0f:b7:
                    de:3d:e3:e6:88:c1:76:18:29:18:b0:13:6f:e1:be:
                    fb:24:c5:37:97:61:87:25:00:f3:9f:1c:05:da:c4:
                    11:7d:f2:b9:c5:e9:46:68:c8:d0:7a:7d:9d:f2:70:
                    73:56:c8:0a:49:a3:f5:12:0d:cb:7d:90:87:85:3e:
                    85:5c:7f:f1:6f:34:b3:32:98:36:0b:2d:8c:9a:be:
                    52:e8:f3:f2:15:94:90:42:de:23:1f:7c:40:27:7b:
                    ac:d4:7e:ac:b0:c7:44:cf:3f:b4:5c:0a:b7:12:c1:
                    9b:57:35:bc:e6:20:58:6c:00:17:27:17:9a:ff:a5:
                    c7:a1:f1:43:a8:e6:4a:d6:5e:6d:e8:3d:98:bf:f7:
                    0d:59:1b:fa:74:d5:cd:c5:39:87:15:c3:e9:e8:9e:
                    f6:9e:20:44:04:cc:82:04:34:ac:ec:72:94:0f:fe:
                    91:f3:fc:04:09:e3:4c:45:3b:3f:16:dd:ad:7c:68:
                    a9:17:a6:d7:0d:e9:d1:cd:44:08:65:a1:5c:9b:7f:
                    a5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EB:36:EC:F0:FD:B9:6B:EC:FB:38:11:75:CB:FE:DB:63:58:00:3B
            X509v3 Authority Key Identifier:
                keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b8:fa:b4:96:99:8e:fa:88:49:04:d7:9a:67:53:56:03:ea:
         c2:48:56:7c:12:97:26:99:c4:33:06:12:12:02:9c:1d:75:76:
         cc:3a:57:80:e1:4c:82:67:5a:55:a4:13:d3:c1:9e:27:b9:52:
         00:7d:0e:35:bc:a5:9e:c4:61:92:d2:3f:ce:a6:65:be:27:74:
         f4:99:ec:b4:68:3e:c0:7e:77:5b:dd:b8:1e:24:b0:f1:13:13:
         8b:8c:1c:f7:16:6d:1c:76:90:4c:57:c9:ae:ad:a7:a5:ab:04:
         d2:ec:7e:48:39:d8:83:2a:c3:64:48:26:fd:e1:73:2a:72:b4:
         cc:86:b5:2c:3a:e9:f7:8b:6d:e0:05:56:bd:e0:e0:55:c9:35:
         ef:04:00:63:90:52:c8:81:61:0a:82:c1:d0:53:47:2c:6c:ab:
         0d:49:c1:a5:2f:b9:62:86:f8:41:ba:f0:aa:24:0a:bc:fa:b3:
         44:7e:66:68:14:ce:06:7a:ee:3a:9e:ac:85:09:80:16:2e:2c:
         31:e7:31:2d:80:1e:97:a1:a8:e4:43:08:de:6b:30:3b:f6:77:
         cf:ec:6a:03:95:24:ab:d6:cc:ff:5b:d4:bb:38:73:54:22:ac:
         db:17:2d:f2:cc:15:78:8f:8d:77:29:52:2c:4f:43:fb:80:28:
         b9:76:12:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:37:56 2025 by rpki-client