Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
File:                     00EE953FD699788668C724460F4D8D420238194F.mft (raw, json)
Hash identifier:          t5WK+1wWBXn8iyBGyF/IktgeOjYEboDBGKHzasE5Bcs=
Subject key identifier:   4F:4D:FF:B0:CC:44:03:70:39:27:C1:9E:56:8B:09:86:59:3E:F1:BC
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Certificate issuer:       /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial:       66237BBE2DE3E0F73AF378ECCB1DDC37BBB4B397
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
Manifest number:          0202
Signing time:             Thu 04 Sep 2025 18:30:37 +0000
Manifest this update:     Thu 04 Sep 2025 18:25:37 +0000
Manifest next update:     Mon 08 Sep 2025 03:03:37 +0000
Files and hashes:         1: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: FgOjY7TNj+vVOTY+T0f+/7XZ2PEhUJFN/481ZR8iBC4=)
                          2: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: jtfCyTfV0URchGl+wzEZEXq1ZK6wyh3Rdim0gK9JxbY=)
                          3: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: +0IYJt+ldEx6hRx5/LkWzdAnyMowfs90g5flb4WhwNI=)
                          4: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: /6F+dCYfhj8nILz7NzSN2rSqER4M9P3bFQ45j14GuDI=)
                          5: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: bvNupIpWmDhaL8rFDaTnVFDhI5fuAg0k+27/VGkzYJs=)
                          6: 00EE953FD699788668C724460F4D8D420238194F.crl (hash: LsOCbIG5pXhdat1MF66eBTIE1faAJyAknFlWu5umv3M=)
                          7: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: V10gFKQc+WgMolRvJOryKxPX23lt9/y0uKRD456elbI=)
                          8: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: oOdkzUMhWiV8RYKVpP+DjzstiVGxbGTPIWzG22cdnjM=)
                          9: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: SFv+wuFNNUXZIPzGgJ8H4FmCqsXvXTtUEEjtGiij04Q=)
                          10: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: sAwAc9IZ0DLVOhouh4zmTpqaxK9YADxytwY1+gNq8u0=)
                          11: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: rkVkBOM1gxwGdr/crh5svI3UEvA+KgJo/zG78neJc4s=)
                          12: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: sSIdllnvg4M1DGs8YGmNKZNiURvN96H1MMo+ucCRqd8=)
                          13: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: P5LJ10k2BHWyFCmNYnH84ZTaEVA9KJ8Poi0f/ODMh70=)
                          14: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: YWPfLwfnjAzwyRdQ8HMatujMpctNGsrqPWB+mJd3o7c=)
                          15: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: ebM/F6KIH60LQhN77naN07o0NG2yDX1tXydmaED/mYQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
                          rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:23:7b:be:2d:e3:e0:f7:3a:f3:78:ec:cb:1d:dc:37:bb:b4:b3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
        Validity
            Not Before: Sep  4 18:25:37 2025 GMT
            Not After : Sep  8 03:03:37 2025 GMT
        Subject: CN=4F4DFFB0CC4403703927C19E568B0986593EF1BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:66:2c:69:55:db:6b:c3:ff:6a:87:43:f3:e0:
                    b5:21:fd:4b:81:de:71:2e:23:4b:d5:9d:3e:14:d8:
                    ff:d0:cf:b8:e0:61:fb:20:26:2d:bd:91:b2:62:fd:
                    f9:5c:a4:10:34:78:e4:0f:3b:bf:d7:9d:c3:b8:22:
                    ee:9e:c2:a2:60:fe:ad:50:22:66:11:a6:de:c6:34:
                    9f:7c:08:81:69:94:50:83:84:65:8a:20:37:f1:e5:
                    02:0c:81:98:87:bb:1a:20:6a:3a:cb:41:7d:55:63:
                    ff:64:94:92:e1:02:b7:54:39:3c:76:11:4c:f5:1a:
                    e4:d6:9c:c7:6f:1b:08:65:bb:17:d3:76:92:ed:25:
                    7e:9f:34:c2:26:75:ea:d5:53:3a:36:b8:9b:ee:25:
                    e3:4a:ea:a5:5e:1f:b6:dd:bc:02:6e:a7:aa:75:60:
                    fc:6a:f6:52:1d:d6:f1:80:bc:77:c1:9b:ea:43:b6:
                    b1:81:98:23:69:6d:70:97:81:e5:04:2e:51:4c:31:
                    31:e0:96:e5:d9:9b:43:42:7a:f9:a0:c4:9f:d8:7c:
                    3c:11:e8:9c:b9:d3:d1:68:d8:e4:cb:bf:79:04:12:
                    c2:4a:09:45:91:97:6c:83:34:f8:34:10:d0:d3:da:
                    65:36:a3:92:c9:bf:12:32:c7:0f:2b:7b:c5:d1:fb:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4D:FF:B0:CC:44:03:70:39:27:C1:9E:56:8B:09:86:59:3E:F1:BC
            X509v3 Authority Key Identifier:
                keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:bd:b8:88:18:54:d1:1b:99:a8:56:e3:b9:01:7c:e8:07:98:
         70:ce:af:e1:04:42:82:13:33:24:01:0c:7f:0e:4d:ff:83:f4:
         1d:11:24:53:52:ac:3f:70:bb:a1:48:c6:98:86:59:a2:c8:98:
         14:0d:86:3e:84:ea:00:d5:60:c7:2f:e9:15:c3:98:53:d5:1d:
         2f:7e:02:c1:38:fe:fc:01:4a:92:59:79:29:4b:65:70:f9:8f:
         2b:13:29:2b:08:4b:45:fe:2d:45:b1:1c:94:10:b8:cc:31:0b:
         dd:d7:f4:ba:d2:2d:12:ac:35:7f:fa:40:bc:f7:26:cc:c9:fa:
         2c:c4:93:0d:ec:23:90:1b:79:a3:27:a7:15:43:33:7d:04:6b:
         23:e0:c4:b5:f9:67:91:da:ef:cc:e8:64:0b:42:ae:92:60:16:
         95:1e:3f:fd:45:e7:25:11:00:d5:d1:e1:77:28:b6:7d:96:1e:
         89:e9:74:6a:d1:e9:c6:d4:72:fb:da:e8:7e:ee:08:40:73:ec:
         40:91:2b:18:4f:87:92:0c:d7:5c:33:a0:d7:af:f9:0e:10:29:
         48:74:b9:85:83:e8:3d:75:53:77:a4:b9:2e:1d:08:00:02:39:
         ff:27:d8:07:17:4a:82:c8:4c:3d:8b:2e:e4:ee:e1:fc:a0:12:
         24:39:af:86
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZiN7vi3j4Pc683jsyx3cN7u0s5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIw
MjM4MTk0RjAeFw0yNTA5MDQxODI1MzdaFw0yNTA5MDgwMzAzMzdaMDMxMTAvBgNV
BAMTKDRGNERGRkIwQ0M0NDAzNzAzOTI3QzE5RTU2OEIwOTg2NTkzRUYxQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOZixpVdtrw/9qh0Pz4LUh/UuB
3nEuI0vVnT4U2P/Qz7jgYfsgJi29kbJi/flcpBA0eOQPO7/XncO4Iu6ewqJg/q1Q
ImYRpt7GNJ98CIFplFCDhGWKIDfx5QIMgZiHuxogajrLQX1VY/9klJLhArdUOTx2
EUz1GuTWnMdvGwhluxfTdpLtJX6fNMImderVUzo2uJvuJeNK6qVeH7bdvAJup6p1
YPxq9lId1vGAvHfBm+pDtrGBmCNpbXCXgeUELlFMMTHgluXZm0NCevmgxJ/YfDwR
6Jy509Fo2OTLv3kEEsJKCUWRl2yDNPg0ENDT2mU2o5LJvxIyxw8re8XR+ysxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUT03/sMxEA3A5J8GeVosJhlk+8bwwHwYDVR0j
BBgwFoAUAO6VP9aZeIZoxyRGD02NQgI4GU8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ODUzZjIyOC0zN2YyLTQ3ZDktYjlmZS00NzZiYWRlMTMzOTMvMC8wMEVFOTUzRkQ2
OTk3ODg2NjhDNzI0NDYwRjREOEQ0MjAyMzgxOTRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIwMjM4
MTk0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg1M2YyMjgtMzdmMi00N2Q5LWI5
ZmUtNDc2YmFkZTEzMzkzLzAvMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhE
NDIwMjM4MTk0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALO9uIgYVNEbmahW47kBfOgHmHDOr+EEQoIT
MyQBDH8OTf+D9B0RJFNSrD9wu6FIxpiGWaLImBQNhj6E6gDVYMcv6RXDmFPVHS9+
AsE4/vwBSpJZeSlLZXD5jysTKSsIS0X+LUWxHJQQuMwxC93X9LrSLRKsNX/6QLz3
JszJ+izEkw3sI5AbeaMnpxVDM30EayPgxLX5Z5Ha78zoZAtCrpJgFpUeP/1F5yUR
ANXR4Xcotn2WHonpdGrR6cbUcvva6H7uCEBz7ECRKxhPh5IM11wzoNev+Q4QKUh0
uYWD6D11U3ekuS4dCAACOf8n2AcXSoLITD2LLuTu4fygEiQ5r4Y=
-----END CERTIFICATE-----
Generated at Fri Sep 5 10:13:43 2025 by rpki-client