Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
File:                     2042008AEC80152F373D2A04DFD3893EE2F92166.mft (raw, json)
Hash identifier:          wNv2hCsoclJy9bOqClhOY7MUQcbB7QNPolWd16quHHg=
Subject key identifier:   83:2C:F1:52:68:96:6F:17:C5:46:BF:D8:8E:8A:27:9F:92:ED:5E:D3
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Certificate issuer:       /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial:       16158909D7E6E87330C585BFDCE0A263408DCA31
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
Manifest number:          01AA
Signing time:             Fri 05 Sep 2025 16:41:28 +0000
Manifest this update:     Fri 05 Sep 2025 16:36:28 +0000
Manifest next update:     Mon 08 Sep 2025 20:09:28 +0000
Files and hashes:         1: 3230322e37332e32312e302f32342d3234203d3e203538383136.roa (hash: +UYTL16FoJzljt1WcPKnLkea4mRmhRtr/yGtN5BCt4Y=)
                          2: 34332e3235322e3138352e302f32342d3234203d3e203538383136.roa (hash: hamVtzyWWFgDoUv3GhJNoDFMf/gHi6nIkoDk9iZqkLo=)
                          3: 34332e3235322e3138342e302f32342d3234203d3e203538383136.roa (hash: zkaOl3WDUKt7L8bc11OX90l50YOHPUCk7N8DGiMpczs=)
                          4: 3130332e3234382e35382e302f32332d3233203d3e203538383136.roa (hash: CV4aj5c0qTtoAuk2gjVJIigxTtOqOHVk941GV0y4c2o=)
                          5: 3230322e37332e31362e302f32322d3232203d3e203538383136.roa (hash: b6WR2/tkj/TJmHf4T96jHhe4cr6ziz5DRZJiP/dYI8w=)
                          6: 3230322e37332e31372e302f32342d3234203d3e203538383136.roa (hash: kRRcaFc2J9dVlk1FFSz0s3hPY1eoKnszPg9ucUh3LNQ=)
                          7: 3230322e37332e31382e302f32342d3234203d3e203538383136.roa (hash: 2KzZDAzCYvLDGmuyMQTwS12UkngL2r4uYLx3E6PowDU=)
                          8: 2042008AEC80152F373D2A04DFD3893EE2F92166.crl (hash: G4qlrJ2xlDzsG7/y8+Qvh145zIe8bi8YSgiyKE6af+s=)
                          9: 3130332e3234382e35382e302f32342d3234203d3e203538383136.roa (hash: 5t1AVxnTVPWVliNjx4dePm/Uoa7VF9/XPOB2dVW7zIc=)
                          10: 34332e3235322e3138362e302f32342d3234203d3e203538383136.roa (hash: cEeTKWmwIc5D8VRx4Wjyqi25fM0+EqJrs6oXdMSObyg=)
                          11: 3230322e37332e31362e302f32342d3234203d3e203538383136.roa (hash: 7u4efn7bHYzED6nyNb+Hqw9a6DQWqirinCujiYt23iE=)
                          12: 3230322e37332e31392e302f32342d3234203d3e203538383136.roa (hash: 5m5TlKYtb1BvkeOY5L0iLxzd9TDfvf4dSOsCxsnrroA=)
                          13: 3230322e37332e31362e302f32312d3231203d3e203538383136.roa (hash: Og2Q3pkFZ4RS1IltvMh5+zdPdJjL3PWI9O/DVgS24lg=)
                          14: 3130332e3234382e35362e302f32342d3234203d3e203538383136.roa (hash: Fp3TdqFb3PCcEDYFQYYU/EXsl8Z+niV/5Guw5uw0Pl4=)
                          15: 34332e3235322e3138372e302f32342d3234203d3e203538383136.roa (hash: Q14M8/H1GKD5N/6iQpjuxENjm1t2nAKNH5gzPjfdhGE=)
                          16: 3230322e37332e32302e302f32342d3234203d3e203538383136.roa (hash: oxNl3kL7pfOEMCZna82D8P/b9qkWwOtKEU4nTRdcl3U=)
                          17: 3130332e3234382e35392e302f32342d3234203d3e203538383136.roa (hash: ItE1oa3zcA/J6v7neMwAUFSJuwJHlB5fYUCcNJ52lrY=)
                          18: 3130332e3234382e35372e302f32342d3234203d3e203538383136.roa (hash: KnUhOivFyTwSLl1lFtmGPDtu87HmW4jCAVjkx4JXtuo=)
                          19: 34332e3235322e3138342e302f32322d3232203d3e203538383136.roa (hash: 1qIDwmf6H3mEaUgvN2oFExXVVv8QpKj00JvdsYifsuk=)
                          20: 3230322e37332e32322e302f32342d3234203d3e203538383136.roa (hash: 8OfgAbNQVhDJJTxQBxc34yWofgtcid4J/JQSeq4njCk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
                          rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 20:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:15:89:09:d7:e6:e8:73:30:c5:85:bf:dc:e0:a2:63:40:8d:ca:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
        Validity
            Not Before: Sep  5 16:36:28 2025 GMT
            Not After : Sep  8 20:09:28 2025 GMT
        Subject: CN=832CF15268966F17C546BFD88E8A279F92ED5ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:7f:62:82:e9:03:4e:12:d8:f6:20:10:71:
                    b3:cd:c4:b8:0b:e9:9e:ee:f7:9a:9b:53:b2:a6:44:
                    21:3e:34:4d:08:fa:0a:3b:6b:19:2f:24:9f:28:7d:
                    af:a2:c6:4e:38:59:e4:49:41:6d:48:96:8c:fd:f5:
                    7d:10:77:23:1a:69:67:67:91:97:e3:a1:3b:78:21:
                    50:47:7e:f1:41:82:86:07:1c:81:7b:84:7d:09:0b:
                    a0:97:24:3a:df:be:0f:57:0c:41:5d:a7:06:83:55:
                    7b:05:24:b1:7d:09:36:ab:c2:82:01:80:c4:b0:d9:
                    47:f2:50:1b:64:d6:45:57:31:0a:d0:07:45:f6:93:
                    05:63:90:6e:9b:dc:6c:2f:ed:81:ff:ca:be:43:6d:
                    ce:8b:b3:55:fd:3d:2d:49:db:4f:3e:00:19:ad:8b:
                    47:ac:b3:38:90:4d:10:09:2e:55:ff:1b:0a:37:97:
                    cf:a7:54:1b:64:12:08:86:4b:fa:5c:7c:21:4e:6d:
                    ac:0e:ff:20:ed:88:d5:f3:7b:93:37:54:76:b5:f6:
                    d8:88:7c:85:09:ae:2a:15:a0:08:a8:1c:ee:a9:cc:
                    2e:b1:8a:cc:42:64:9b:2b:dd:83:20:3b:6f:50:b5:
                    a7:73:dd:66:b8:bd:22:de:f6:12:f4:e0:a9:b2:01:
                    c8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2C:F1:52:68:96:6F:17:C5:46:BF:D8:8E:8A:27:9F:92:ED:5E:D3
            X509v3 Authority Key Identifier:
                keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d8:d5:61:a6:39:94:aa:8d:6a:8d:f1:c7:56:ba:f1:23:1e:
         fd:24:7e:89:b4:fc:96:f6:28:e9:d6:1b:c2:66:78:38:07:ba:
         40:ad:a0:43:47:a8:5d:22:9d:ab:13:57:ba:de:67:ea:d4:ff:
         cd:8e:2b:16:91:8d:5c:dd:76:57:74:5f:74:24:8b:d3:d4:a1:
         ec:cd:25:3b:9f:a9:72:93:4c:ab:91:31:38:3a:96:8c:39:95:
         04:fd:72:4c:e1:12:f8:26:91:92:ba:dc:74:f9:2e:81:b7:af:
         7c:81:89:00:c9:94:56:f1:71:8d:5c:86:60:8f:38:8b:1b:62:
         37:77:58:01:fc:08:96:e6:44:1b:b1:90:d0:6a:98:f1:73:d4:
         85:dd:ad:3a:1a:95:b8:cc:45:9f:0f:1f:7c:ea:dd:7b:cd:93:
         7e:9e:4c:5b:60:54:42:c5:dd:cb:5a:d0:fb:17:aa:58:03:00:
         46:0a:cf:0a:64:e7:75:2c:3a:c5:48:ac:31:50:3f:ec:0d:d2:
         27:f5:4d:7b:28:24:24:16:6b:ae:cf:13:4f:21:3f:f6:ab:b2:
         a0:88:c7:17:b6:ad:be:a2:9b:68:ec:62:59:22:e5:5a:1e:8d:
         6c:4a:ed:76:b2:dc:59:51:85:cb:b7:f5:78:95:50:f0:a8:ab:
         00:c8:73:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:05:29 2025 by rpki-client