Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
File:                     1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json)
Hash identifier:          2b23C128CkiCXBXP6yeH5g7upftIgkDPP6HHFqPXyME=
Subject key identifier:   7D:98:B2:1D:E9:D1:85:C1:93:21:A9:36:B1:E2:06:8C:3C:2A:E4:A3
Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
Certificate issuer:       /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Certificate serial:       5B2F4909E0A560922B23934377A26D99E613A366
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
Manifest number:          0150
Signing time:             Tue 03 Jun 2025 22:12:22 +0000
Manifest this update:     Tue 03 Jun 2025 22:07:22 +0000
Manifest next update:     Sat 07 Jun 2025 01:49:22 +0000
Files and hashes:         1: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: K2sXmSDY1Q0Ib91bp7Ej+rMz+bv5TkPCX1Vm42UKq2g=)
                          2: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: Pipia0jUKsl0Bb0PnrXMjgVZSeCbzEQGM99k0tRnt6U=)
                          3: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: kHlmhNS5gQ6WL5MaK2adKxGIlTTXW61wpUfSl5HlAJc=)
                          4: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: BbLwPxFe+tWzZ8sOAXoZbHTuvfXUw6/yE4h7IQcYxzA=)
                          5: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: GcXNkBAv1340rwM/Oan5xv5UHgMfOa0RbbyoNs7Mx0I=)
                          6: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: Iff17R7Y2PXgGNzQ48JwVBTPT+2Nxu79I9ZwquKjbxE=)
                          7: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: BgrpAYav/pUESxArt2NS1teCYs0lWmtbdh6n4DVdjLM=)
                          8: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: fcQPwUouCVaeNmPsgU50oUU5piCrvcz7X4WUkw36Gi0=)
                          9: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: oPH6SRc4ePF0KDk10x9EndlW7jaJtT/ySrdPWq8fb1w=)
                          10: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: wop0enhk31jLHWhccpcZJr0EKUzHvqhNyLW2a5pNj2w=)
                          11: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: bOBZGkzqysQJJCz7648wZEJREONFUo+QtRyxjh2BRFw=)
                          12: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: VqDDvUOu35p9WF+KpeR5rVDXBEuyr/t255Gs6Jfv+fI=)
                          13: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: sSdx6bfz/Cb6HZkpzLLwduFVNFn1g0FyFXb3VTTUPws=)
                          14: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: znSniW+lPXCPGxomzmN2hrx17CR9++zAKICSSEuO9Vw=)
                          15: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: Z7MZGS10toSXvLmV5iBfghuNSI8n4mTpT95+VkC6QfE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
                          rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 01:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2f:49:09:e0:a5:60:92:2b:23:93:43:77:a2:6d:99:e6:13:a3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
        Validity
            Not Before: Jun  3 22:07:22 2025 GMT
            Not After : Jun  7 01:49:22 2025 GMT
        Subject: CN=7D98B21DE9D185C19321A936B1E2068C3C2AE4A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:85:60:82:1e:ad:35:5d:05:f4:cd:3a:68:e3:
                    92:5b:67:84:d7:ba:15:82:b7:1e:8c:21:e7:02:5c:
                    11:55:4a:89:8c:71:54:fd:b3:15:2e:6e:61:e3:26:
                    b8:c4:9a:c2:d5:a2:bf:6c:ec:dc:5e:80:98:1f:43:
                    d8:de:1b:67:58:1c:1f:a2:56:e2:7c:e4:57:f6:d0:
                    47:ef:54:83:bf:01:4f:f7:61:39:df:7b:f9:81:ff:
                    3b:29:78:4c:ba:8d:0c:15:3f:7f:93:e7:31:65:33:
                    cf:5a:a0:70:f7:09:af:df:52:9d:55:99:e2:97:f6:
                    35:9f:de:15:25:fe:c5:bf:42:fb:60:ee:17:4c:53:
                    b9:ea:27:14:a4:c4:5b:77:b5:44:2c:c1:0b:3d:50:
                    fb:56:16:13:7d:64:20:85:80:cd:81:47:e0:22:98:
                    ba:44:ec:45:3b:ec:18:c5:b7:df:99:2d:fd:ac:35:
                    ed:20:61:04:2a:c6:db:6f:58:54:58:8a:ca:cc:be:
                    2b:3f:89:91:69:f9:64:60:c7:7d:45:39:50:5c:72:
                    d3:c9:65:43:d9:63:9b:37:c3:f0:52:2f:45:96:a8:
                    08:b3:4e:04:8b:00:8b:b8:e2:5a:fe:9b:91:d1:32:
                    35:83:87:b8:71:0b:c9:fc:b1:a8:f7:78:11:50:60:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:98:B2:1D:E9:D1:85:C1:93:21:A9:36:B1:E2:06:8C:3C:2A:E4:A3
            X509v3 Authority Key Identifier:
                keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:5d:03:c2:56:8a:b8:52:35:76:19:f1:ce:2d:b6:40:23:93:
         e5:f4:03:8b:4a:08:a6:b4:a6:12:b0:a7:a0:8a:86:5b:dc:4b:
         c4:4c:c4:a0:e8:c9:79:29:4f:e2:2e:c6:a1:67:ed:72:d0:24:
         e9:23:4b:03:4c:43:95:3c:72:20:e8:d6:81:9f:a9:8d:71:ac:
         eb:b0:2f:06:f1:4c:ad:99:6f:f9:13:d1:b7:bb:d5:b3:ac:42:
         99:cf:d2:48:0c:62:22:b7:1e:f3:e4:ae:df:0e:ac:61:ec:42:
         5d:9b:2e:ed:c7:43:e1:ea:e9:d7:83:0d:0d:9b:75:d4:92:be:
         9c:07:5d:dc:a9:f5:0c:f5:88:f6:57:27:44:3f:83:60:70:79:
         2f:ba:95:76:b9:ae:f1:f8:83:7b:8a:e0:1b:f0:b2:34:5f:8a:
         23:a3:ad:12:24:0f:7c:07:d6:47:7a:42:72:9d:2d:2f:50:2d:
         b4:22:61:0b:aa:02:3b:ce:78:0d:65:ce:1e:6e:6c:09:1f:51:
         a5:77:98:c1:90:9b:1f:a3:8b:91:b7:61:55:36:50:dd:a9:10:
         8c:ab:24:90:87:39:67:94:86:e1:24:b1:5b:d0:54:ad:89:38:
         4c:da:d3:4c:33:ba:ce:3f:ec:8b:53:0a:8d:7e:cb:70:b8:b3:
         ca:89:7f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:27:29 2025 by rpki-client