Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
File:                     29A4AE587F980E73A344FD1ED55C47566E609511.mft (raw, json)
Hash identifier:          Byhwn/HqcFLYAmuJM5HDt2tJ2ytTFTtfovMSXBJFZY0=
Subject key identifier:   40:E1:8C:E1:4F:ED:AA:04:C7:03:7D:C3:58:E4:CB:DC:95:69:5E:2C
Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
Certificate issuer:       /CN=29A4AE587F980E73A344FD1ED55C47566E609511
Certificate serial:       1E77A29DD1265FFCA85B9C2B7C45AAAD5675F4A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
Manifest number:          01CC
Signing time:             Fri 05 Sep 2025 19:40:55 +0000
Manifest this update:     Fri 05 Sep 2025 19:35:55 +0000
Manifest next update:     Tue 09 Sep 2025 01:15:55 +0000
Files and hashes:         1: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: 2/Cw3A1dSRg+Ts21fc2NwcUb6gMHV9LcM0XWFRm53vo=)
                          2: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: NxNlrKrZTlmWmVaaoGudLY4lFXk9X6JplSyhuLDh9i0=)
                          3: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: lltuIPEk+BVWdUULpXiLbJeUz6Fla9jWTH/D4vTGGig=)
                          4: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: p88SKszqxgKJl2zFe9Ix9VzOkkPPIGnrGQlceJpq1Is=)
                          5: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: R8tKT5t+qGKeLH+mvJmhZYmQ+JVJFCVIeC0OR+NlWGo=)
                          6: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: pskMfYPfJQyJpqkNm3oh9E3JvBHhwECedewtWAR2iFU=)
                          7: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: Q4L5Bzc5PAgnS3en5iCGkdfsYZiseb5S267daUQcEZ0=)
                          8: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: 9rMYsccqlUlU/MG43HYhUrMN+tfhHpYZ3vOxhHvtNFA=)
                          9: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: GSwWK5SKTFAU7AOJ/9DuPKdDxhcqh8eUZIsdCou3WA4=)
                          10: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: P6ntY2yEhntkcQoC2QezxV/SxChW1e9QIusqd+CGFLo=)
                          11: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: RB7D/SJUrlL2iPypVkULBTpibH96XBcLleeWSsiOxLI=)
                          12: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: 91eiJyGAtCZEdj+H4LaJ35hkFRrcG4XIG2UpAPMXkVQ=)
                          13: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: VvCiNNZNkR+jOL82aTEAoMNVNijK6DWUneBhRdG1bTg=)
                          14: 29A4AE587F980E73A344FD1ED55C47566E609511.crl (hash: Imrv5Azr4hQ7ioblutPFO5U1XkvGYm7BifN/NJ+UJDE=)
                          15: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: i6EDiTdMclRBYpvIVrK48fCJh2o5PNaEH/CBRrGOXIU=)
                          16: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: TkM70rMf+ZfBRNei/e49W4wEHFGWueoMkkciY1FDq5I=)
                          17: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: dG8//08WgWJdVwfWHOamSCBCgAVZtc+xat2iGit/ozU=)
                          18: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: 7ZU6XQSzatgJu+l+DGXob1hGuSGT5xqJ7YTseOv5Aj8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
                          rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 01:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:77:a2:9d:d1:26:5f:fc:a8:5b:9c:2b:7c:45:aa:ad:56:75:f4:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511
        Validity
            Not Before: Sep  5 19:35:55 2025 GMT
            Not After : Sep  9 01:15:55 2025 GMT
        Subject: CN=40E18CE14FEDAA04C7037DC358E4CBDC95695E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:4d:7d:77:fa:e7:2b:37:98:58:d4:2a:f5:
                    c9:8d:50:91:f1:91:69:80:3d:01:f8:62:46:be:1f:
                    e4:9c:8e:4a:ba:fb:39:b9:ee:89:76:6d:44:dd:2a:
                    77:10:5d:69:f8:84:da:05:2e:05:d1:1b:65:59:37:
                    57:c3:75:94:fb:d8:16:1d:b2:14:d0:d4:68:49:a4:
                    18:bf:88:39:6a:c0:27:9d:33:f4:a6:8c:93:32:c6:
                    7a:c4:c9:e6:46:92:1e:ea:69:80:1e:03:b7:af:17:
                    cf:50:c1:bd:fb:fe:31:36:11:0c:6f:4e:6f:b5:16:
                    db:49:19:d5:29:21:3b:04:2f:fd:4d:b8:d7:c5:bb:
                    cc:20:be:48:49:55:4e:56:53:be:33:85:62:e5:ba:
                    7a:f9:d1:03:2f:74:9f:f4:ba:fd:68:b6:34:78:d2:
                    6a:d1:f3:02:98:f6:5e:af:01:eb:21:c2:20:10:dc:
                    85:30:f9:07:24:50:6d:99:ea:ff:7b:bd:60:b9:87:
                    14:5b:2d:ce:0b:f9:63:03:59:df:ef:96:a4:a6:b4:
                    af:67:79:ee:f1:0d:df:20:80:83:f7:21:b5:19:62:
                    87:c2:7a:a0:8c:46:b0:11:7d:0e:a9:13:6d:1a:6d:
                    c1:0e:36:ec:1e:6f:14:e6:1a:81:f4:d4:57:01:d2:
                    0c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E1:8C:E1:4F:ED:AA:04:C7:03:7D:C3:58:E4:CB:DC:95:69:5E:2C
            X509v3 Authority Key Identifier:
                keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:54:4c:21:10:09:60:6f:69:7e:1e:d2:91:b6:55:fa:7c:aa:
         a1:24:9a:5e:10:2a:62:78:40:74:2b:61:b3:64:ae:70:7b:95:
         66:c5:c0:7b:bc:33:4a:0f:b1:ce:29:c0:ba:41:f9:65:ce:16:
         77:5f:41:06:89:32:b4:f0:0d:c5:8d:00:19:34:0f:ac:94:86:
         b2:b9:46:a6:f5:2e:6f:b8:06:58:c6:58:b0:9a:81:11:f1:04:
         27:44:35:44:44:94:8f:99:50:7d:9c:ce:8c:81:46:59:41:c3:
         1d:16:46:27:92:e4:23:fa:f3:37:99:a6:6a:5c:17:e4:9d:bc:
         f9:1f:07:4a:dd:b9:da:16:3c:69:5f:de:e8:47:e4:4d:9b:ea:
         00:3f:97:4e:e2:e9:93:2d:b8:49:c2:40:06:5d:1e:24:ca:83:
         78:f6:89:a2:7d:82:cc:4b:97:02:41:5c:d4:6d:5e:b8:12:3c:
         81:b8:0b:e2:f0:5c:0b:7a:61:f7:a8:ef:ca:c0:34:b7:f2:b4:
         f2:4d:5d:31:9f:30:6c:ca:03:66:c7:10:a3:0d:a2:68:3b:76:
         86:79:48:37:bb:21:82:f0:58:39:f0:bb:cb:59:92:a5:77:94:
         ae:e1:2e:76:2f:12:5b:96:ab:28:13:03:af:37:e4:65:20:6b:
         ed:b6:29:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:00:44 2025 by rpki-client