Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
File:                     0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft (raw, json)
Hash identifier:          uQouY7SIzFLVV9Jr0gaEh6E3fuJtGmOSfy/W60h1ibE=
Subject key identifier:   17:2C:2F:BD:CF:82:A4:B8:4C:4E:1A:DE:E1:78:7A:CC:5D:50:DB:68
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Certificate issuer:       /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial:       7944F5415ED3DFFBC1E11EADB4967B5AC0755404
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
Manifest number:          023A
Signing time:             Fri 05 Sep 2025 08:01:21 +0000
Manifest this update:     Fri 05 Sep 2025 07:56:21 +0000
Manifest next update:     Mon 08 Sep 2025 14:53:21 +0000
Files and hashes:         1: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: TdPV1Ae9NsfX/q2I6yHzDhMS8SBCOPuv6qM2EykOC0U=)
                          2: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: I9GyAIe3s6r5o1IVue8LyW9A/cEmB+1nHgZeZ+VKm1g=)
                          3: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: FJlkjy7Zh6RrMJcyoFN5uq7ubbcgdbOVveGSZgScDgQ=)
                          4: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: vwui1qpHSvDVofVRy/Tt5fu+EupEaZj/9/a37EvMSjI=)
                          5: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: jBGgrMGnibBJ35+neDfX4MwBNDGqqmS27hN6Fi2jltI=)
                          6: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: uU+RiPAP5rA80po/0W6dMPifTVUm5kY6ALP/Ca/ACi0=)
                          7: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: KZ/MfJDGlUF+5FRxy7S8cNkPyicIqb4wdkx7H0nRfJc=)
                          8: 0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl (hash: oUiFUm+hdvuq0pGnxN1BVq0dACfp8WbI3fVdVFNmpDA=)
                          9: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: NRTKisssuBxZObjpfMlPvnnfb3JZpeBG9KHtEvhVsJY=)
                          10: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: 2VTD3WI/p1+3+37bAKEOPoRJrNamvZNDqASz/hNbToE=)
                          11: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: k78QygJvZC5uoGv2K0v+mQ5YwQ0X8MznZdn5hmtLPD8=)
                          12: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: X36QLgVhGJ49HLtt76O3IZYZ5R6XiQpbmzY9UR5vonE=)
                          13: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: DRnLhFvj0XZm0VXEZ42TGDJPOpd0ZTUBf7MwJZ8bqOE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
                          rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 14:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:44:f5:41:5e:d3:df:fb:c1:e1:1e:ad:b4:96:7b:5a:c0:75:54:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
        Validity
            Not Before: Sep  5 07:56:21 2025 GMT
            Not After : Sep  8 14:53:21 2025 GMT
        Subject: CN=172C2FBDCF82A4B84C4E1ADEE1787ACC5D50DB68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9f:49:2f:1b:6d:87:08:fd:d4:4e:cf:c8:42:
                    e6:c2:5b:ca:51:aa:7a:21:86:7e:cb:6f:a2:e6:0e:
                    99:ff:93:11:bc:69:cf:3a:a3:0e:ca:5f:88:67:a9:
                    d1:02:a3:33:d9:f7:77:13:b0:e5:7e:d8:8f:d8:e0:
                    80:c2:05:e2:0c:e8:a4:ac:20:36:c9:26:00:75:62:
                    f3:72:5c:b2:b4:1d:ed:7f:e4:a0:05:ac:a8:e5:36:
                    41:fd:5f:97:01:4f:91:a2:0a:15:1b:50:74:8c:50:
                    08:3f:f7:27:67:3a:47:d9:88:73:ad:cb:9a:e7:e8:
                    57:b4:52:e8:66:bc:cf:35:8c:0e:f1:ed:5b:d9:3b:
                    e5:17:2c:1c:ae:31:5e:d4:bc:9a:05:5e:18:7d:6d:
                    bb:fd:93:ce:47:61:40:2e:45:28:1e:16:46:d2:80:
                    70:ed:b5:00:ce:d9:cb:92:ea:2d:34:d2:21:45:03:
                    3c:b4:a5:09:82:d3:13:6f:de:1f:3f:1c:8b:c7:89:
                    cf:2e:b3:1b:84:67:e8:18:51:06:26:d0:e4:ad:2e:
                    cf:76:42:d4:36:61:1d:51:be:f3:85:2e:70:3c:48:
                    df:98:05:75:74:bc:2c:d4:79:ce:c9:e0:8d:6b:0e:
                    c3:aa:58:40:69:69:20:f4:7c:ca:08:df:1a:61:91:
                    b4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2C:2F:BD:CF:82:A4:B8:4C:4E:1A:DE:E1:78:7A:CC:5D:50:DB:68
            X509v3 Authority Key Identifier:
                keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:be:50:3b:c7:10:d1:35:94:65:ff:87:76:fa:2b:5d:af:79:
         42:4c:78:e5:06:92:f0:c2:a4:91:da:7f:6c:96:4b:d0:da:bd:
         c7:ee:3a:62:12:e8:a3:88:c3:d6:c2:84:a3:3d:cd:15:2c:6d:
         9c:10:7e:e4:07:ef:fe:50:df:03:8d:16:20:1c:bc:34:79:48:
         ce:6c:7d:8b:fb:fd:e2:ba:d4:23:32:45:70:04:91:1e:cb:3e:
         f7:75:34:17:c2:09:3f:af:42:59:b5:b9:47:31:b2:df:b5:50:
         05:5a:2d:b0:fe:46:f9:ea:da:d6:e7:56:29:b7:e6:c1:55:fd:
         c5:18:c2:b8:cd:fd:94:40:7e:70:0e:1b:c2:13:dc:b1:04:bd:
         08:7d:6d:48:52:23:cd:01:67:de:91:d4:68:60:6b:a4:50:5a:
         7f:17:e1:e4:0a:0d:82:4b:ed:af:f7:80:7b:6a:aa:12:85:07:
         ad:45:1a:40:9c:77:85:f3:b8:3c:76:94:a1:e7:f2:b4:e5:4f:
         c8:85:97:89:66:75:3e:49:a8:93:69:53:a7:6b:c5:79:d8:0d:
         53:b8:6f:06:1e:1b:80:d4:ec:16:b0:bc:cb:7c:67:0e:78:aa:
         dc:99:23:bd:3b:62:c7:1b:42:5d:73:de:24:93:29:e6:9e:c5:
         40:80:cb:f9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeUT1QV7T3/vB4R6ttJZ7WsB1VAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJBOUE1
NjlGODM2RjAeFw0yNTA5MDUwNzU2MjFaFw0yNTA5MDgxNDUzMjFaMDMxMTAvBgNV
BAMTKDE3MkMyRkJEQ0Y4MkE0Qjg0QzRFMUFERUUxNzg3QUNDNUQ1MERCNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRn0kvG22HCP3UTs/IQubCW8pR
qnohhn7Lb6LmDpn/kxG8ac86ow7KX4hnqdECozPZ93cTsOV+2I/Y4IDCBeIM6KSs
IDbJJgB1YvNyXLK0He1/5KAFrKjlNkH9X5cBT5GiChUbUHSMUAg/9ydnOkfZiHOt
y5rn6Fe0UuhmvM81jA7x7VvZO+UXLByuMV7UvJoFXhh9bbv9k85HYUAuRSgeFkbS
gHDttQDO2cuS6i000iFFAzy0pQmC0xNv3h8/HIvHic8usxuEZ+gYUQYm0OStLs92
QtQ2YR1RvvOFLnA8SN+YBXV0vCzUec7J4I1rDsOqWEBpaSD0fMoI3xphkbSrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFywvvc+CpLhMThre4Xh6zF1Q22gwHwYDVR0j
BBgwFoAUDOannVPYKfKlViNnbo0qmlafg28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YTk5MDEyNS02MDlhLTQ4YzgtYWM4Ni0xYzNiYzMxNWJhZDYvMC8wQ0U2QTc5RDUz
RDgyOUYyQTU1NjIzNjc2RThEMkE5QTU2OUY4MzZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJBOUE1NjlG
ODM2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE5OTAxMjUtNjA5YS00OGM4LWFj
ODYtMWMzYmMzMTViYWQ2LzAvMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJB
OUE1NjlGODM2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKG+UDvHENE1lGX/h3b6K12veUJMeOUGkvDC
pJHaf2yWS9DavcfuOmIS6KOIw9bChKM9zRUsbZwQfuQH7/5Q3wONFiAcvDR5SM5s
fYv7/eK61CMyRXAEkR7LPvd1NBfCCT+vQlm1uUcxst+1UAVaLbD+Rvnq2tbnVim3
5sFV/cUYwrjN/ZRAfnAOG8IT3LEEvQh9bUhSI80BZ96R1Ghga6RQWn8X4eQKDYJL
7a/3gHtqqhKFB61FGkCcd4XzuDx2lKHn8rTlT8iFl4lmdT5JqJNpU6drxXnYDVO4
bwYeG4DU7BawvMt8Zw54qtyZI707YscbQl1z3iSTKeaexUCAy/k=
-----END CERTIFICATE-----
Generated at Fri Sep 5 10:39:36 2025 by rpki-client