Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
File:                     DA8766A90851AE44D76B8563D83586F0164FE5CF.mft (raw, json)
Hash identifier:          bizkI+u1nzZJr8hV64I0y/1In9qEhnclM79R9NjdijQ=
Subject key identifier:   CE:90:A6:56:EF:14:8F:D2:DD:A4:1E:EB:2A:DE:0A:F2:38:47:69:63
Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
Certificate issuer:       /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Certificate serial:       771D616B0DB863774BA44DED87B45DD0A383D56D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
Manifest number:          051D
Signing time:             Wed 04 Jun 2025 11:10:55 +0000
Manifest this update:     Wed 04 Jun 2025 11:05:55 +0000
Manifest next update:     Sat 07 Jun 2025 22:12:55 +0000
Files and hashes:         1: 3130332e3134372e35332e302f32342d3234203d3e20313339393730.roa (hash: lCO4dBzU8QlNehADwjvKlKyAnMc64cSgqE/nhYWymAE=)
                          2: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393730.roa (hash: Zwf6XUbRXYFjehHU1h9I5ryNBsEeHpo1RBUo7mecalo=)
                          3: 323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa (hash: jrNfGDSlGXEzxHOxg40yCG6SbX9z3FB3tiVldhoUUtI=)
                          4: 323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa (hash: JI0w6pTieSf2WTseZM5bkzS6iivykHspYYViWrkRs3w=)
                          5: 323430353a616163303a35333a3a2f34382d3438203d3e20313339393439.roa (hash: FXJHNsxSBOMPnA8vdwVqgLQk48uGK9FiBs0y6bniYV8=)
                          6: 323430353a616163303a3430303a3a2f34302d3430203d3e20313339393439.roa (hash: EdYd7IGuHyCu/cThwtshNLf7zxuRmElBhySIxR+qG6g=)
                          7: 323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa (hash: beL+gm/Z0HEOJLWebvTWM02eae65ZxzPPiShihmuKhI=)
                          8: 323430353a616163303a35353a3a2f34382d3438203d3e20313339393439.roa (hash: yuxuROpR3UsRLPoFKCRswWmsub5LhfKgUbndSMMOdp4=)
                          9: 323430353a616163303a3130303a3a2f34382d3438203d3e20313339393439.roa (hash: r5ISPP8o2HPfHpTYeKJqTMHFk0FOHbid87VW1uUq8a8=)
                          10: 323430353a616163303a3232323a3a2f34382d3438203d3e20313339393730.roa (hash: P1ezuvcXd/dXHbJpsEnb4/Rkjy/xfn0EypTeR0QwgvA=)
                          11: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa (hash: lumVBGk+aw/9tORzynY/aiVJHvV2Bg6D5FpFWGyG99o=)
                          12: 323430353a616163303a383a3a2f34382d3438203d3e20313339393439.roa (hash: LWmX8VJBo79sp16mdPKaXRXV6xMs7AWHG724RPLxSoc=)
                          13: 323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa (hash: EfXQgH3skqgBZ59mU79eQZFqw5azW9WiU2e3l6sHPMc=)
                          14: 323430353a616163303a35323a3a2f34382d3438203d3e20313339393439.roa (hash: K5rN2dEqu3kaZAIrXi9HWKyKXHot8xpfvFHNgqyUB3Y=)
                          15: 323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa (hash: nb6/1YfyqjRx4TuFEXv2tzZ5jZKzUUCvYx7+kjEQjDA=)
                          16: 3130332e3134372e35322e302f32342d3234203d3e20313339393439.roa (hash: OOtD+Srj/TGQywXi6LwWOihraZAwBF5SEd1jbonASQU=)
                          17: 323430353a616163303a3530303a3a2f34382d3438203d3e20313339393439.roa (hash: rPi35F8PvvKHwsT9xbH5vOghPHmWhiGoUJPmzISRw/g=)
                          18: 323430353a616163303a3330303a3a2f34302d3430203d3e20313339393439.roa (hash: jm88+kjM4koBWvlRIo+d33M24ZrmzpDt3fol94UYN2k=)
                          19: 323430353a616163303a31343a3a2f34382d3438203d3e20313339393439.roa (hash: 5aUwKjxhW5F1xv+nDNzcsevQVN2X64RWQosSOI3P/lc=)
                          20: 323430353a616163303a31303a3a2f34382d3438203d3e20313339393439.roa (hash: +fUGCq/gnGGfXjgZH+TqncbWTqimwElr7d59iQeb3O0=)
                          21: 323430353a616163303a35363a3a2f34382d3438203d3e20313339393439.roa (hash: geflI9/4w7m7+iCOsFZdzYH8ahMptfHVtvGDBvvL4ns=)
                          22: 3130332e3134372e35332e302f32342d3234203d3e20313339393439.roa (hash: 9z7ZVj2rWK+5i6jgJ+YpLAQXRn/4DgMsF9g2sSGbA0k=)
                          23: 323430353a616163303a373a3a2f34382d3438203d3e20313339393439.roa (hash: KQZo+3HIHnlbyCCPEj10WYBSIOntfHXQo1x4ll1wXeQ=)
                          24: 323430353a616163303a31323a3a2f34382d3438203d3e20313339393439.roa (hash: 9kHtQIH8YzD0HWbTI7ApFkcBevmm7B3ZG7jYr4s08fM=)
                          25: DA8766A90851AE44D76B8563D83586F0164FE5CF.crl (hash: tJ61ClCyoOmwbpClygm348AFO1Xwybqsv08/LoY/4+A=)
                          26: 323430353a616163303a3232323a3a2f34382d3438203d3e20313339393439.roa (hash: qXIjeeExO/XufyXjG1sxIkLEm2m4bEVPVgjG+QC+xR0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl
                          rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 22:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1d:61:6b:0d:b8:63:77:4b:a4:4d:ed:87:b4:5d:d0:a3:83:d5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
        Validity
            Not Before: Jun  4 11:05:55 2025 GMT
            Not After : Jun  7 22:12:55 2025 GMT
        Subject: CN=CE90A656EF148FD2DDA41EEB2ADE0AF238476963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:ca:95:fd:cb:25:ca:50:7d:b0:72:b3:ec:
                    08:b3:eb:9c:b7:25:4a:ec:87:d1:27:86:32:3e:1a:
                    17:6e:43:1f:49:cb:db:b7:c3:0b:ec:89:7f:14:85:
                    b8:d2:2f:40:22:b5:52:70:41:0e:fc:a5:1d:7f:8a:
                    38:83:f3:af:2a:30:5a:e4:c5:10:6b:1c:87:4c:7f:
                    88:0e:78:0e:b0:4b:7c:5a:4e:09:c0:f6:f6:6e:a4:
                    99:70:a2:9e:fa:f0:12:36:e7:9b:25:73:20:1e:26:
                    bd:09:fe:24:73:ce:91:9c:27:98:4b:4b:08:19:65:
                    05:c3:fb:5a:d4:f8:43:9f:6d:22:5d:fb:69:7b:e7:
                    ea:10:1e:92:4b:22:df:5c:f1:ff:c7:8c:4b:d6:20:
                    57:3f:1c:e7:33:ef:de:89:32:c6:4c:b8:fc:3a:9f:
                    f3:64:40:29:cf:cb:49:92:97:be:e2:3e:d9:9d:5a:
                    b1:cc:d4:e0:25:fc:c8:15:29:e5:2f:1c:9b:6d:4a:
                    ca:15:c4:ab:4a:d3:e7:30:87:6b:c5:f8:e5:7b:38:
                    5d:f7:db:ef:34:06:11:05:d9:c9:41:3b:5b:ed:bb:
                    30:df:a6:5b:47:07:fa:f8:79:27:59:67:cc:92:f4:
                    94:e1:00:c1:31:93:37:a6:1b:ea:42:1c:4b:d0:7c:
                    29:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:90:A6:56:EF:14:8F:D2:DD:A4:1E:EB:2A:DE:0A:F2:38:47:69:63
            X509v3 Authority Key Identifier:
                keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e0:24:3a:45:c6:76:cb:78:00:0e:0b:c3:22:df:fd:b2:7d:
         e9:ef:dc:5b:d5:5d:53:26:c7:c4:a2:1b:c1:a9:d2:ab:6f:ed:
         6e:4f:86:da:4d:61:9a:5d:b0:2c:97:ea:66:1f:a7:88:58:51:
         db:f4:ec:98:91:45:48:04:78:9b:30:ec:1e:69:28:6b:b4:7c:
         0c:f8:58:45:03:e2:63:fd:d4:dc:a5:e9:58:32:44:16:9b:aa:
         ff:f3:2e:ed:2c:e5:4d:ff:46:00:ff:d3:65:9d:26:76:d5:fd:
         7f:87:b4:a2:d0:72:f8:52:dc:45:ec:3a:10:6d:5c:0f:3c:eb:
         33:be:4b:8d:fd:bf:22:ef:02:fe:24:5e:75:ea:31:6a:2f:85:
         99:92:06:db:69:7d:58:6c:81:2e:bd:fb:03:ee:0c:37:0f:a2:
         70:11:ec:5c:a4:33:7e:ea:b8:84:39:5a:54:be:16:d1:43:4d:
         45:7d:3c:75:a2:a1:d1:c6:a0:9c:90:c3:e2:14:4b:d6:bf:67:
         c8:65:b7:e3:23:a6:35:41:ef:0e:79:ef:99:ba:5c:6d:46:87:
         4b:71:84:61:32:9d:4d:1e:01:0a:fe:31:ed:c0:a6:e5:23:29:
         cf:ee:6a:a2:32:4a:36:d0:1b:d3:30:29:94:34:de:d6:74:88:
         c3:c8:02:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:32:52 2025 by rpki-client