Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
File:                     B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft (raw, json)
Hash identifier:          JoerUQkipbnqVnbgs5+nsk+V/47Rn5CJNyNrtK6i70g=
Subject key identifier:   36:7F:46:5D:D9:2C:42:54:1F:B4:B3:F7:45:14:A1:95:52:FF:F4:4D
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       3024A52B2C0755B7E7D24606B512AD1BE2109F5A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
Manifest number:          04AC
Signing time:             Tue 03 Jun 2025 18:53:07 +0000
Manifest this update:     Tue 03 Jun 2025 18:48:07 +0000
Manifest next update:     Fri 06 Jun 2025 20:30:07 +0000
Files and hashes:         1: 3230322e31302e33362e302f32342d3234203d3e203538343837.roa (hash: efs981ogro8h93ghsSqXa4HVYpXNDK+HWci+XUB1i1s=)
                          2: 3230322e31302e34362e302f32332d3234203d3e203538343837.roa (hash: cIiVH55gZhKhd09SRv36IxJOQWAEZ8Rp7D3EJnyu0U8=)
                          3: B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl (hash: n0G9059Q5z8Q91X+HEICFJm0DqtGobEFl6DYL8WxDlM=)
                          4: 3230322e31302e33392e302f32342d3234203d3e203538343837.roa (hash: gDkskVvw7MvfzXAkNJQhKr4mNe9WkDi5pRYjDti0U54=)
                          5: 3230322e31302e33382e302f32332d3233203d3e203538343837.roa (hash: QPLTqMl2k8GDfaLn1HVTOtXELs6osZwBMiSvIHtsFL8=)
                          6: 3230322e31302e34342e302f32332d3233203d3e203538343837.roa (hash: AOs0+RY4Y31s73wRP1Vy1UwZxz7AgTJ0z0r1p3VykqY=)
                          7: 3230322e31302e34322e302f32332d3233203d3e203538343837.roa (hash: G6aGpW+GX/2AEtcToBRQOMbcRoVxB07Zl/GCfKmQbno=)
                          8: 3130332e3235332e3231342e302f32342d3234203d3e203538343837.roa (hash: zZakuOmqTaPYvlnDGqieXdb5+PUOtUVcUy3BMfF3gIo=)
                          9: 3230322e31302e34362e302f32342d3234203d3e203538343837.roa (hash: Dk232DynCkmrZBXmUPs/XaQ3rhJnt/TRi48HRxBA1w8=)
                          10: 3230322e31302e33362e302f32332d3233203d3e203538343837.roa (hash: laV47cYc2Y+YU5ngUHDLm0eIPkxpjWT8ScmhZj5qM0I=)
                          11: 3230322e31302e34332e302f32342d3234203d3e203538343837.roa (hash: IPymeFIY4vvBiI4EHDBGEvCTCNOLIzPbdabJg4HBCFk=)
                          12: 3230322e31302e33342e302f32332d3233203d3e203538343837.roa (hash: hurkyeazXrOEmUWCJ42qCT3bjAG0s//7GloH0oAN8wE=)
                          13: 3230322e31302e34302e302f32332d3233203d3e203538343837.roa (hash: KRNsmf6Crvwx9TUrNXsXyW3TnUFJBor63ScxTykY0Ys=)
                          14: 3130332e3235332e3231322e302f32342d3234203d3e203538343837.roa (hash: LfLeLwmqbwIkdEDU9U48eQJPk8ImKB/XqlPEOEL8JqE=)
                          15: 3230322e31302e34322e302f32342d3234203d3e203538343837.roa (hash: WdjaanpjvJkV7F66b1RsY5nlVdX7/6/1Vce41UTVhQk=)
                          16: 3230322e31302e33382e302f32342d3234203d3e203538343837.roa (hash: i2cfHNp7ELXHkG32amjDVO13rtFH9PXQxmlERj1fotw=)
                          17: 3230322e31302e34352e302f32342d3234203d3e203538343837.roa (hash: hnTOURzzaJFePxETwo6KOPuWh1c2mWrXiDyNegk+2Rk=)
                          18: 3230322e31302e33372e302f32342d3234203d3e203538343837.roa (hash: Gd+XobvX/fy/Mh2XkDqNxhWNk3QnX1w7MS4RWmVMXCk=)
                          19: 3130332e3235332e3231352e302f32342d3234203d3e203538343837.roa (hash: uw2rUyDAuur+H0kWMyfo+StxjquIulxfj16YL5BSCig=)
                          20: 323030313a6466313a373830303a3a2f34382d3438203d3e203538343837.roa (hash: QoCbDV1iEX5pO+bibNTu+PL6YjhwlVtwchcxFD62gLg=)
                          21: 3230322e31302e34312e302f32342d3234203d3e203538343837.roa (hash: XDX9+SvZbYtzcNBqIUpGuVyJOYI0R883wJ6tAP6KXYE=)
                          22: 3230322e31302e33352e302f32342d3234203d3e203538343837.roa (hash: vmk5hunDESN8vOvL6W88fmk4goDHn/1O8OmmUKbXwCI=)
                          23: 3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa (hash: VMNDp3Q2brC3XAq98nR7SUn0JBQnPNYJkRtff0QZOr8=)
                          24: 3230322e31302e34372e302f32342d3234203d3e203538343837.roa (hash: u58aVcSaGI4G1j8KcCBgXQjLG6jts8lqMjNzR3uAE1k=)
                          25: 3130332e3235332e3231332e302f32342d3234203d3e203538343837.roa (hash: nXd+T08BzwUBsTCm772rTt3T7OGX+ISh5lyg0yjVkpU=)
                          26: 3230322e31302e33342e302f32342d3234203d3e203538343837.roa (hash: 2wiLBKpeDsUZcWKGP0ZGy0ZfZGGfaiwLub24AoxujkE=)
                          27: 3130332e3235332e3231342e302f32332d3233203d3e203538343837.roa (hash: OPDRtC0YANq9aPbjw+CR97g9TL7AgzyFDEfEg4LIzko=)
                          28: 3130332e3235332e3231322e302f32332d3233203d3e203538343837.roa (hash: Q/vj8e8aAkRGeQkUCDDQE56ayYlvn1SjQG2hHxKRj0A=)
                          29: 3230322e31302e34302e302f32342d3234203d3e203538343837.roa (hash: +dYOck0/e3uRLuDueS6QvOeH0VjscDt7f1hJdpKhdVo=)
                          30: 3230322e31302e34342e302f32342d3234203d3e203538343837.roa (hash: 9/w5ckdQgwQDW73FdKzObo7UiCVTcJeMlBHUt5JeTjI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 20:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:24:a5:2b:2c:07:55:b7:e7:d2:46:06:b5:12:ad:1b:e2:10:9f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Jun  3 18:48:07 2025 GMT
            Not After : Jun  6 20:30:07 2025 GMT
        Subject: CN=367F465DD92C42541FB4B3F74514A19552FFF44D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:71:18:6d:5b:3a:53:8d:a0:1f:71:be:6b:68:
                    a7:40:d1:de:69:02:66:83:6b:c8:58:93:75:58:3d:
                    ef:21:90:2d:b1:e5:5e:d5:a2:1f:89:45:5b:c4:cc:
                    5c:6e:99:f4:0c:f7:df:ed:f4:ae:f3:dc:aa:93:ef:
                    42:25:6c:49:a8:4b:af:73:d7:68:78:dd:9d:bc:0d:
                    24:6e:27:38:a8:cc:95:20:a9:e9:5b:d5:cf:35:7b:
                    cc:0d:24:63:43:16:30:7b:c9:f0:b0:55:19:cb:a4:
                    a7:1b:10:8f:b3:8f:5c:6d:45:13:22:c3:24:e7:0f:
                    d5:e2:33:c0:c3:ce:0d:1f:72:30:2a:af:70:02:12:
                    ab:7e:51:35:fc:0a:f0:e9:b8:7e:80:9d:d5:c1:e4:
                    6c:be:b1:c1:11:ce:88:bc:fd:46:34:69:39:f7:7d:
                    d1:cb:db:f4:f2:03:4d:5d:2a:a8:86:22:e0:c8:42:
                    91:2f:21:89:ff:60:c1:de:c5:44:c3:7e:0c:ba:e5:
                    69:ee:f4:2c:97:c2:c9:f5:35:13:74:54:6e:d1:0a:
                    00:c6:05:18:dd:bd:a8:a0:80:13:5f:ee:99:9c:3d:
                    4e:60:2f:e9:0f:ad:b3:31:96:e1:af:41:3a:e5:ef:
                    3b:d0:11:2e:d4:22:24:20:98:bc:85:28:39:35:ee:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7F:46:5D:D9:2C:42:54:1F:B4:B3:F7:45:14:A1:95:52:FF:F4:4D
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7f:49:b4:f5:78:30:92:11:e7:22:94:00:d7:f9:c9:4c:6d:
         c0:bd:62:f8:20:7d:18:bf:51:80:3f:e0:3b:73:68:19:00:8a:
         c1:16:5a:3c:9d:0e:19:8d:bf:8a:ee:81:ef:3e:3e:42:df:ac:
         c1:8e:f5:27:04:20:3f:a6:23:50:bb:38:8b:94:82:ca:a5:72:
         e8:7b:8d:67:16:56:a5:08:46:82:48:7c:2e:e5:57:64:14:6c:
         e1:07:fd:c1:77:25:44:f6:0c:ae:3f:2f:b7:ae:16:f7:44:47:
         d3:49:8c:53:1e:2d:5c:17:32:88:c6:e8:9c:20:0b:b0:7f:45:
         58:df:d6:e5:77:73:2b:60:c7:5a:a5:ab:a2:56:79:08:90:e7:
         95:39:07:fe:30:27:90:f5:f7:59:ca:91:32:a1:7b:a1:95:5c:
         a3:ec:6a:41:25:b1:b0:5d:cc:3f:f7:2c:ac:a9:19:dc:98:05:
         c9:b1:46:46:45:af:ed:50:6d:6d:0b:c0:1b:40:20:a4:c3:0e:
         eb:5a:b9:fe:0c:3b:cd:ff:84:04:0b:8b:e2:62:dd:53:17:93:
         82:56:07:de:fa:0f:e5:7d:0a:43:8e:eb:81:96:8a:92:dd:04:
         04:12:88:f0:3e:95:c4:06:60:5d:9d:5d:bc:4f:69:23:b8:9c:
         74:d7:12:80
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMCSlKywHVbfn0kYGtRKtG+IQn1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5
MkFBQkU2RTAeFw0yNTA2MDMxODQ4MDdaFw0yNTA2MDYyMDMwMDdaMDMxMTAvBgNV
BAMTKDM2N0Y0NjVERDkyQzQyNTQxRkI0QjNGNzQ1MTRBMTk1NTJGRkY0NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcRhtWzpTjaAfcb5raKdA0d5p
AmaDa8hYk3VYPe8hkC2x5V7Voh+JRVvEzFxumfQM99/t9K7z3KqT70IlbEmoS69z
12h43Z28DSRuJziozJUgqelb1c81e8wNJGNDFjB7yfCwVRnLpKcbEI+zj1xtRRMi
wyTnD9XiM8DDzg0fcjAqr3ACEqt+UTX8CvDpuH6AndXB5Gy+scERzoi8/UY0aTn3
fdHL2/TyA01dKqiGIuDIQpEvIYn/YMHexUTDfgy65Wnu9CyXwsn1NRN0VG7RCgDG
BRjdvaiggBNf7pmcPU5gL+kPrbMxluGvQTrl7zvQES7UIiQgmLyFKDk17vCxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNn9GXdksQlQftLP3RRShlVL/9E0wHwYDVR0j
BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx
NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB
QkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ4ZjA2MGYtZTRiMy00YTRlLTk3
ZmQtZjYxYWIxN2RlZWVkLzAvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdB
MTA5MkFBQkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABR/SbT1eDCSEecilADX+clMbcC9YvggfRi/
UYA/4DtzaBkAisEWWjydDhmNv4ruge8+PkLfrMGO9ScEID+mI1C7OIuUgsqlcuh7
jWcWVqUIRoJIfC7lV2QUbOEH/cF3JUT2DK4/L7euFvdER9NJjFMeLVwXMojG6Jwg
C7B/RVjf1uV3cytgx1qlq6JWeQiQ55U5B/4wJ5D191nKkTKhe6GVXKPsakElsbBd
zD/3LKypGdyYBcmxRkZFr+1QbW0LwBtAIKTDDutauf4MO83/hAQLi+Ji3VMXk4JW
B976D+V9CkOO64GWipLdBAQSiPA+lcQGYF2dXbxPaSO4nHTXEoA=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:38:01 2025 by rpki-client