Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
File:                     9A52B6405ED406A7B17C4478D516DF3E37282980.mft (raw, json)
Hash identifier:          3hQuHvHPW25F5teF3mYdHH+YtYyKR7Id7lMVZ0PEZ9g=
Subject key identifier:   6D:01:25:E2:1D:50:75:85:09:FA:3B:25:09:16:A5:CA:3B:6A:65:7F
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Certificate issuer:       /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial:       7614578D5DF01EBDC956A853CD940167C2C6C9F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
Manifest number:          02A5
Signing time:             Sat 06 Sep 2025 14:20:59 +0000
Manifest this update:     Sat 06 Sep 2025 14:15:59 +0000
Manifest next update:     Tue 09 Sep 2025 22:56:59 +0000
Files and hashes:         1: 9A52B6405ED406A7B17C4478D516DF3E37282980.crl (hash: 6Sh3/ViS7ReAtZ1++w8OvoYl7pRgxfmfWlL3uXgorvY=)
                          2: 323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa (hash: BASa57B0aeCvQjUkpH58uhcpVnA7zhpchwSCS5nsYmM=)
                          3: 323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa (hash: 6i3UMACzodtWNujjB7HjZ1wIY9Wkv8kYqdabcGyF3UA=)
                          4: 323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa (hash: kEXHj9pv5MWefZu6lpGXP15sPBFvi6JY6eKJO5xEqB4=)
                          5: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (hash: 9D15ranZ4YwNSLaXFD5FAq+pNZxj9EjBiBFXk+HdqAc=)
                          6: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (hash: Cwh07TkFHSVxFptsS9+W0W6emaGKqX4GCK/GVTdPowA=)
                          7: 323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa (hash: UbfbQp2UJcWdUXOg3yUdX64d8tTRpxRLmsAiq/gQPtk=)
                          8: 323430303a343661303a33313a3a2f34382d3438203d3e20313437313337.roa (hash: 9MFeAvNjxRA9vbUf2UgXcthdxQ5XENOLt4Ao9GHoHp4=)
                          9: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (hash: ZlLb/8ABoTMshaPAOuB5oc8hOwpCTBM9+ckE++m8QHc=)
                          10: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (hash: omGcwmDsT8BYpBScz5Bq8p8wjIAMhQE4SKahvN0WhGg=)
                          11: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (hash: s3Xjjbohn1CufgneBaEZY/bwLMOk5+UIxmZaor+mssg=)
                          12: 3130332e3137372e382e302f32332d3233203d3e20313437313337.roa (hash: uHzq3FI/OUse3guEAZ2X3n26c+18IEz5AqEGOSkyu60=)
                          13: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (hash: 5FcZQWvOh6pLwsoaD4YTIG17OJilGjN+93omVyyFOZM=)
                          14: 323430303a343661303a33343a3a2f34382d3438203d3e20313437313337.roa (hash: WrWbmsZZrPD4tCYkM+PlD88T9/eqy1PkC98c/wYNVkI=)
                          15: 323430303a343661303a31333a3a2f34382d3438203d3e20313437313337.roa (hash: INC+aAdBEWi58gMud2WYkmc5AYB/cZKH3D/b7vcKvsA=)
                          16: 323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa (hash: OgrUIPRU4hlKsLPwGuGpe/ivo5VWBIS7QYpm7Sxho2I=)
                          17: 323430303a343661303a32323a3a2f34382d3438203d3e20313437313337.roa (hash: KAxv+bcTcqGpScOTMbFMveWIpWOPxpJEwT7ajRyz6mM=)
                          18: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (hash: LHnVdcZ5/YfYWNz9EwzLlVaYYhGPyvyomANm7mqWzO0=)
                          19: 323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa (hash: xUscykaPjchZwH98C+3nSOKZLZaGqcecZKinfhX00i4=)
                          20: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (hash: pifjJjTcE6PeDdv2QBGHsCyyOypnfnj2TzyiuJpYoi0=)
                          21: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (hash: ShZcfvOuL7hhFcin6d6C9YZIwo2zOBT3B5csjg2tV64=)
                          22: 323430303a343661303a31303a3a2f34382d3438203d3e20313437313337.roa (hash: h0oH/3iLu1unRW/jZRg6pYTlxoghvh0aIr1dQ6X1C3o=)
                          23: 323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa (hash: UeQqi6ZVFgPrGYMster+xne64h585Ow3H0IaK3UC2WM=)
                          24: 323430303a343661303a33353a3a2f34382d3438203d3e20313437313337.roa (hash: Y3XYf27QnurhdV1CW67C5UxWbak1ZDu532ZjKsBxVtw=)
                          25: 323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa (hash: iK23Ih7KgC4OjnO9UHJglzhRasd3vRLpYeuOhNGE5hk=)
                          26: 3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (hash: kbuURMx081wdwMkjcRHHCXRBMB09bh+YCCGTym9STe8=)
                          27: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (hash: r39b6mOH1IwysZ4h0sWe8of8Eqz81JxpSEnLBmKsOQg=)
                          28: 323430303a343661303a31373a3a2f34382d3438203d3e20313437313337.roa (hash: MQTEtT0TR1f+0V0bndDRXrcOI9gxT90XmU11iLCfrjk=)
                          29: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (hash: EvUm4cJBa4C1BImp9thQZ8BX3+SY4YqvKOUkSPQljL0=)
                          30: 323430303a343661303a323a3a2f34382d3438203d3e20313437313337.roa (hash: 23/idCqUx8EPa7QGFdtUC3If9YW7mCjrP46bOrSKS5Q=)
                          31: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (hash: +gPgp8QYiU/daLpgrvM/5BELV5q0+mYrJuLKheezSV0=)
                          32: 323430303a343661303a363a3a2f34382d3438203d3e20313437313337.roa (hash: 0k545OOwyj9NvbehxX+QV0g5xQmQQnbTNP95f97h71M=)
                          33: 323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa (hash: eELtUE44s8kWXW53efaOQB87hQvYKnu+4QWMOO/ldiE=)
                          34: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (hash: z2k28a+6ZI3VAF075Ex5TSmy7XYBAGjTmBdcFap9YJg=)
                          35: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (hash: kS9+afwSiaTp9TelPiQ0ILiNOqNp/k8Ib68mizaidfE=)
                          36: 323430303a343661303a32393a3a2f34382d3438203d3e20313437313337.roa (hash: IEucjhXv8bAa5eR/7We292E0AjQSxt/nxsHzEY0hsao=)
                          37: 323430303a343661303a313a3a2f34382d3438203d3e20313437313337.roa (hash: a4kar+hZC31dN5bmEcyjGudCJwDbez0xQdLphlBrsp8=)
                          38: 323430303a343661303a333a3a2f34382d3438203d3e20313437313337.roa (hash: YdSsGr4BjFrFET1Pgec0CyVOY3w0mCvZYunx96T/HRk=)
                          39: 323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa (hash: bH0QRBT1yTn/wCvKxau4plk6nMYBKS98USNjhSr5VTI=)
                          40: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (hash: /fMbrSKhQJ8LJwxoq43vmw9q1iP6KJa0WtA6bwl4KhM=)
                          41: 323430303a343661303a3a2f34382d3438203d3e20313437313337.roa (hash: uA6xDa7IvgkDp22R6G6BTJTUnQ6z5ZPc+c5h8RXJlMc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
                          rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 22:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:14:57:8d:5d:f0:1e:bd:c9:56:a8:53:cd:94:01:67:c2:c6:c9:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
        Validity
            Not Before: Sep  6 14:15:59 2025 GMT
            Not After : Sep  9 22:56:59 2025 GMT
        Subject: CN=6D0125E21D50758509FA3B250916A5CA3B6A657F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:e9:66:86:6e:7b:f7:eb:4d:7b:d6:4e:e7:
                    0e:9c:f5:e3:21:ed:43:29:1f:c1:42:87:3c:0b:b1:
                    1c:9d:a7:b6:cc:ef:d2:a4:65:6e:69:00:26:3d:7b:
                    59:94:7d:99:b6:7e:76:78:83:40:72:7a:53:20:02:
                    76:5e:e8:d1:fc:b1:34:aa:ac:05:4b:97:da:e7:1d:
                    40:3c:7b:64:4f:6d:5a:82:08:f6:81:d0:f6:65:d8:
                    45:0f:12:7f:c5:ff:05:c7:41:9d:75:b4:22:46:a9:
                    fc:75:37:f3:23:99:e2:e9:65:78:69:ac:78:7c:c8:
                    15:bd:61:3f:76:ee:77:96:b9:59:3b:45:ee:b5:04:
                    91:da:ec:18:fb:c2:98:af:13:d1:d4:9d:a8:f9:f3:
                    06:f2:cd:04:d3:70:06:c8:97:e0:13:bd:64:73:53:
                    13:0c:69:5f:c4:b7:15:09:22:8a:f0:88:c4:bc:61:
                    b1:db:94:20:05:9b:61:6f:76:29:eb:87:a8:57:6b:
                    a9:98:30:d2:f1:10:6b:24:1f:45:bf:fc:5f:b8:8e:
                    df:40:07:c9:8e:fd:ad:60:ee:b1:a4:17:de:d9:c4:
                    19:3a:60:1c:b3:9b:c0:98:b7:6a:fe:cd:80:d6:d5:
                    91:b2:69:eb:24:05:e3:6d:af:e6:cc:0e:c5:cc:01:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:01:25:E2:1D:50:75:85:09:FA:3B:25:09:16:A5:CA:3B:6A:65:7F
            X509v3 Authority Key Identifier:
                keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:33:f7:7e:50:3b:6b:40:2f:d0:dc:56:f3:2b:02:4a:b6:5b:
         1f:fe:b8:2e:b4:c4:14:b9:da:e2:15:f7:01:f9:e8:f8:72:fc:
         ae:fc:0f:b7:e7:14:e3:ba:74:1c:ff:d2:47:1d:a9:e9:f1:53:
         30:b7:d1:47:c3:b2:70:b2:59:61:d9:93:c8:4a:be:27:22:86:
         46:e4:f7:b4:f5:2f:7d:c6:0c:53:9b:00:33:50:77:f1:1a:b7:
         80:19:d0:9d:de:36:d9:f7:b8:16:d4:00:20:fc:01:1c:0c:9a:
         2a:c6:bf:4f:f9:21:7d:f5:c8:9c:c9:59:0b:59:c8:c0:aa:c3:
         c3:f4:d8:4a:fe:4e:ad:61:76:d8:aa:67:f0:95:77:1b:d9:4f:
         77:cd:33:b8:ce:04:f0:43:ad:b4:d5:fe:76:95:d6:1a:f6:2e:
         23:c9:29:c0:70:95:58:61:67:1c:c3:ea:3d:b2:6e:8d:ae:08:
         aa:65:e5:b3:a0:d7:83:c0:e3:32:46:33:fd:83:3d:ea:bd:9b:
         fd:a3:20:67:5e:5e:cd:8e:88:2a:61:c8:6c:29:60:8e:8b:40:
         36:b9:ec:e2:e6:a6:c3:77:0a:4a:68:8c:03:10:f0:92:61:a5:
         c4:5e:54:55:90:4c:b5:3d:d2:ff:3d:fa:3d:04:48:4f:5f:d8:
         8a:9d:f8:6d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdhRXjV3wHr3JVqhTzZQBZ8LGyfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz
NzI4Mjk4MDAeFw0yNTA5MDYxNDE1NTlaFw0yNTA5MDkyMjU2NTlaMDMxMTAvBgNV
BAMTKDZEMDEyNUUyMUQ1MDc1ODUwOUZBM0IyNTA5MTZBNUNBM0I2QTY1N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC02elmhm579+tNe9ZO5w6c9eMh
7UMpH8FChzwLsRydp7bM79KkZW5pACY9e1mUfZm2fnZ4g0ByelMgAnZe6NH8sTSq
rAVLl9rnHUA8e2RPbVqCCPaB0PZl2EUPEn/F/wXHQZ11tCJGqfx1N/MjmeLpZXhp
rHh8yBW9YT927neWuVk7Re61BJHa7Bj7wpivE9HUnaj58wbyzQTTcAbIl+ATvWRz
UxMMaV/EtxUJIorwiMS8YbHblCAFm2Fvdinrh6hXa6mYMNLxEGskH0W//F+4jt9A
B8mO/a1g7rGkF97ZxBk6YByzm8CYt2r+zYDW1ZGyaeskBeNtr+bMDsXMAW9tAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbQEl4h1QdYUJ+jslCRalyjtqZX8wHwYDVR0j
BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF
RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4
Mjk4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E2NjVjMzItNmRhZi00NzJiLWJj
ZTYtMzE3ZDVkNmM3ODllLzAvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRG
M0UzNzI4Mjk4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB4z935QO2tAL9DcVvMrAkq2Wx/+uC60xBS5
2uIV9wH56Phy/K78D7fnFOO6dBz/0kcdqenxUzC30UfDsnCyWWHZk8hKvicihkbk
97T1L33GDFObADNQd/Eat4AZ0J3eNtn3uBbUACD8ARwMmirGv0/5IX31yJzJWQtZ
yMCqw8P02Er+Tq1hdtiqZ/CVdxvZT3fNM7jOBPBDrbTV/naV1hr2LiPJKcBwlVhh
ZxzD6j2ybo2uCKpl5bOg14PA4zJGM/2DPeq9m/2jIGdeXs2OiCphyGwpYI6LQDa5
7OLmpsN3CkpojAMQ8JJhpcReVFWQTLU90v89+j0ESE9f2Iqd+G0=
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:02:14 2025 by rpki-client