Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
File:                     3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json)
Hash identifier:          ++vFLmvfjDcUk5J3npHB8//c824DBbMZmUPP6Gh/+MA=
Subject key identifier:   3E:36:7D:9B:3D:5C:52:A5:9A:42:12:63:3F:AB:30:CE:BF:81:0E:E2
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Certificate issuer:       /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial:       5613F4AF97D600E38DBB4636793839DB78705534
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
Manifest number:          0230
Signing time:             Tue 09 Sep 2025 10:52:07 +0000
Manifest this update:     Tue 09 Sep 2025 10:47:07 +0000
Manifest next update:     Fri 12 Sep 2025 13:31:07 +0000
Files and hashes:         1: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: 3FJ7wd5kICk78bLmDz55rljzcqFhSsrz9EkZIf7qCPw=)
                          2: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: KM8HCAE941ny+NeclcPdlUg9VIqsSih6MjHoa5IqXb8=)
                          3: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 7h+0gopoSFJ2M48QEyz8CL99eJtVxfcZjzTpUAYVTZo=)
                          4: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sYsKqli8EUEzTvSQXavM3oM1AVTdmnNeXY5Ib9nTkXk=)
                          5: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: Vxu7OgcrZ32tVA4THVShJIrGxnq9jK2ER/olk1k8ato=)
                          6: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: znbfpwqo/RqJTtKokVQJprWVfIE6ZeyWhe8h0U97wlw=)
                          7: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: oP5w04R+DVBIXz7VN32/pUudJby5Bdnn9OzpJHzqMrY=)
                          8: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 318Q6731sMFPRMDMOoStaI6Bz5sS+OT9DxYXEQE+OOU=)
                          9: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: C6l6zdsNHMzfA4VroXv38wYjaYdlZyMXfkyZpHinjgQ=)
                          10: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: naME29BjJNXWcG5xS5OYZKvtjsmmITu0eSf0OkwWWqI=)
                          11: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: /v/t0LVvwP8ItAgvAEV4d3ird2OFydIuyNvk7Hjv9rU=)
                          12: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: QBM9H9rd8+lS4gn1TV/zjjSpwBwL7sSfYx4yVL1I50s=)
                          13: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: FWaIS2C5y+tF+eXrrfhUKvMiaO2hbKHJ6PXu+XjlFjU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
                          rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 13:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:13:f4:af:97:d6:00:e3:8d:bb:46:36:79:38:39:db:78:70:55:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
        Validity
            Not Before: Sep  9 10:47:07 2025 GMT
            Not After : Sep 12 13:31:07 2025 GMT
        Subject: CN=3E367D9B3D5C52A59A4212633FAB30CEBF810EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:01:01:b7:5d:31:54:8a:82:10:15:52:77:ae:
                    03:8d:e7:1f:33:93:8f:65:ac:0f:e9:a8:e1:3b:da:
                    22:84:66:cb:22:50:49:2b:f0:6e:1a:41:5d:d8:1a:
                    eb:da:ec:07:52:9e:13:a1:0b:95:58:e1:d3:bc:f7:
                    db:a7:98:c3:8e:41:7b:4e:d1:0a:5f:c2:ad:76:a1:
                    34:45:78:d6:d6:c1:72:0f:2e:1c:f6:68:e4:76:8b:
                    67:da:03:67:6f:4a:35:df:c2:a7:04:09:84:54:6f:
                    af:35:7c:52:ef:05:79:7e:bd:68:13:a2:36:5c:f8:
                    cc:90:f9:e1:cb:54:dd:37:87:43:5a:3d:75:ca:78:
                    67:a0:8e:45:09:6b:60:e8:24:2a:6c:b6:41:5f:6d:
                    ef:f8:e3:4d:bb:c3:e8:63:db:a0:14:b7:de:d1:a4:
                    09:7e:68:96:d0:42:19:6d:85:a4:28:41:fd:0f:13:
                    fd:e8:d9:79:9a:f7:76:ae:63:4d:53:15:fd:7f:07:
                    b5:87:b2:19:92:3c:5c:b0:1f:09:f9:22:69:bd:4b:
                    eb:a3:c4:e8:60:c2:cd:14:29:b3:c0:bb:c7:c0:e5:
                    de:38:03:9d:4a:44:c9:84:bf:e6:eb:7f:38:f3:49:
                    80:76:ea:58:9c:dc:8e:93:cc:c1:73:96:7a:77:36:
                    75:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:36:7D:9B:3D:5C:52:A5:9A:42:12:63:3F:AB:30:CE:BF:81:0E:E2
            X509v3 Authority Key Identifier:
                keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:97:93:df:2e:e0:09:10:6b:b9:55:21:de:0a:8e:35:fd:f8:
         6e:b8:5f:ab:9e:b1:7f:f2:00:97:26:9f:b8:0a:2b:f5:4e:58:
         6e:87:8b:79:6a:bd:79:80:90:87:0a:7c:de:68:d8:10:bd:c2:
         3c:1c:8e:a5:d9:31:63:a1:bd:cc:09:62:06:5f:12:1b:c2:30:
         de:d0:ca:5e:6a:32:1f:9c:49:57:74:80:3a:c9:54:4f:e6:86:
         2d:fb:8c:4d:c8:d1:4d:1f:13:bd:0a:8d:32:f6:98:a5:e5:90:
         d1:38:dd:78:fd:c1:6e:18:6e:54:9f:e7:73:0c:30:1a:18:1b:
         45:1e:ec:34:a8:a4:cd:c1:18:bc:b5:a8:05:c9:7e:89:2d:e1:
         89:d8:14:5d:45:d1:b2:e6:8e:43:9d:79:a4:0c:aa:12:d0:f5:
         37:f3:5d:46:50:d3:56:af:f6:48:41:ab:05:b5:2e:8f:a7:e2:
         5a:69:de:53:2f:8c:af:ce:11:b1:11:b9:39:90:a2:32:76:17:
         c1:61:0d:a2:3f:13:10:6e:57:08:67:b3:f8:1c:b3:41:78:ed:
         29:d2:13:8e:54:8e:05:ed:e1:4c:11:77:1f:e6:d6:2f:c1:12:
         97:f0:bf:29:42:70:80:8f:ae:0e:2e:a5:f1:a0:f1:b9:39:d3:
         d0:ba:1b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 14:18:18 2025 by rpki-client