Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
File:                     B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft (raw, json)
Hash identifier:          hGqEcBkq75oLfFIk4oXmMMFe+eYpp10xNvz4ggJX2vA=
Subject key identifier:   32:B4:D9:FA:71:13:2A:AF:8B:12:81:C9:CB:03:E6:99:76:6C:0F:B1
Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1
Certificate issuer:       /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
Certificate serial:       5386DDB23908D2B1A871F668DA8AA442FE06B62D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
Manifest number:          0218
Signing time:             Fri 06 Jun 2025 06:12:19 +0000
Manifest this update:     Fri 06 Jun 2025 06:07:19 +0000
Manifest next update:     Mon 09 Jun 2025 11:23:19 +0000
Files and hashes:         1: 3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (hash: as7KtFlD4iKysyXSKxxgu8y4XOhRCjKWFwK+lMzj6oQ=)
                          2: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (hash: WwW9nUa1rmjUn7BCAW+1oX9KPadjU43XCXkkj1toOfQ=)
                          3: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (hash: KAd16ldutYh48OLbDnroVNt1O/HTzAA/aCmbtAP1Odw=)
                          4: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl (hash: bQnhIOqLD0TV8QSCFMruf367yLLtk9zgSxMlsPktm7s=)
                          5: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (hash: YwiS5nlm2sACVNb5Xfq0EOTBtueDgKIv6RAnbgfUwRk=)
                          6: 3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (hash: yFLtXZhv4icStZGluIXSTKiVb7PeS6C1hGZnyhQ1yqo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl
                          rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 11:23:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:86:dd:b2:39:08:d2:b1:a8:71:f6:68:da:8a:a4:42:fe:06:b6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
        Validity
            Not Before: Jun  6 06:07:19 2025 GMT
            Not After : Jun  9 11:23:19 2025 GMT
        Subject: CN=32B4D9FA71132AAF8B1281C9CB03E699766C0FB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:9a:6e:a3:a0:da:b9:cd:aa:97:dd:50:65:
                    4f:12:4a:c9:78:cb:70:2f:f9:f3:38:be:6c:d0:6f:
                    18:24:2c:f8:ba:32:aa:cb:66:f6:62:d4:6e:11:35:
                    10:ee:b5:a0:62:75:a2:7a:38:18:0f:fd:ff:50:c0:
                    4b:a2:99:c8:92:76:45:55:ef:b0:a4:36:98:c5:65:
                    73:e5:9e:32:1a:2a:56:88:1e:0d:ab:1c:3f:7c:8f:
                    c3:98:15:90:0b:19:53:d1:8f:17:e3:05:f3:dc:e4:
                    62:a4:62:49:38:b9:1f:32:10:11:dd:f0:f3:2f:9a:
                    79:01:96:2f:c1:c2:bb:16:74:15:be:5a:f7:75:22:
                    0a:61:21:61:b9:4a:f5:de:73:81:4f:46:c1:7f:3b:
                    2b:ef:f9:c4:27:15:13:00:f3:8c:54:78:cd:b1:fa:
                    2b:77:8f:bd:08:ba:91:ad:d4:df:7d:b2:8b:f4:9c:
                    e0:e6:a2:31:4a:0f:59:f5:f7:36:0d:d3:20:1d:cc:
                    7c:c6:28:bb:45:9a:b4:68:77:a4:d6:86:c6:42:62:
                    04:14:9e:4d:d3:e1:02:8e:4c:24:c0:aa:ba:24:40:
                    43:c5:be:de:e1:1f:92:cd:64:42:9f:08:ad:3c:82:
                    3c:54:2a:80:b7:f5:33:c4:f5:05:0e:d5:62:d7:18:
                    24:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B4:D9:FA:71:13:2A:AF:8B:12:81:C9:CB:03:E6:99:76:6C:0F:B1
            X509v3 Authority Key Identifier:
                keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:54:10:06:74:19:f4:0e:1a:fa:49:df:ba:2b:b2:7f:74:34:
         e0:47:01:8a:0e:aa:f0:8b:c0:cf:a0:bc:61:21:c2:1f:e4:1c:
         64:24:51:97:5d:b4:5d:22:ad:dd:25:ba:51:16:9b:28:7b:06:
         f8:9e:b2:7c:6f:61:57:f2:18:73:9f:6e:0a:cc:35:c8:0f:14:
         9f:85:31:a0:14:6f:dd:73:3d:3d:d1:ce:2a:f7:22:5e:11:c2:
         e0:e1:c2:4f:2f:d3:15:d6:cf:03:8c:b7:8b:3b:de:65:c3:fc:
         4c:85:90:6f:cf:4c:4d:5b:fa:97:01:26:a3:b8:80:3c:77:52:
         5f:af:ec:90:4a:5e:85:03:15:02:b4:75:ac:37:09:c3:db:78:
         5e:50:3c:76:51:ac:71:34:27:df:10:51:c5:6a:fa:ca:fb:5a:
         1d:f2:a2:39:0b:e1:eb:89:84:cf:bf:44:c2:23:e2:a7:0f:98:
         de:b6:eb:16:4b:cd:40:f8:68:c0:71:71:2f:16:99:44:e2:f0:
         d2:58:0b:49:19:3e:9e:57:61:1b:b5:f7:7f:38:c4:00:e4:16:
         e4:33:1b:be:f7:74:86:0e:c3:a3:82:55:bd:7c:4b:d0:db:cb:
         96:86:62:76:b8:fc:6f:60:09:96:75:b4:ba:51:01:24:3c:dc:
         1b:7b:44:28
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUU4bdsjkI0rGocfZo2oqkQv4Gti0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJC
OTgzMzRGMTAeFw0yNTA2MDYwNjA3MTlaFw0yNTA2MDkxMTIzMTlaMDMxMTAvBgNV
BAMTKDMyQjREOUZBNzExMzJBQUY4QjEyODFDOUNCMDNFNjk5NzY2QzBGQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF45puo6Dauc2ql91QZU8SSsl4
y3Av+fM4vmzQbxgkLPi6MqrLZvZi1G4RNRDutaBidaJ6OBgP/f9QwEuimciSdkVV
77CkNpjFZXPlnjIaKlaIHg2rHD98j8OYFZALGVPRjxfjBfPc5GKkYkk4uR8yEBHd
8PMvmnkBli/BwrsWdBW+Wvd1IgphIWG5SvXec4FPRsF/Oyvv+cQnFRMA84xUeM2x
+it3j70IupGt1N99sov0nODmojFKD1n19zYN0yAdzHzGKLtFmrRod6TWhsZCYgQU
nk3T4QKOTCTAqrokQEPFvt7hH5LNZEKfCK08gjxUKoC39TPE9QUO1WLXGCSLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUMrTZ+nETKq+LEoHJywPmmXZsD7EwHwYDVR0j
BBgwFoAUsdT1SVvk+dmV6pwVRUacormDNPEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
OGU3OGVlMC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMC9CMUQ0RjU0OTVC
RTRGOUQ5OTVFQTlDMTU0NTQ2OUNBMkI5ODMzNEYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJCOTgz
MzRGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhlNzhlZTAtMDAwMi00YTY3LWE3
MzktMzAzM2Q1YjViYTYxLzAvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlD
QTJCOTgzMzRGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMhUEAZ0GfQOGvpJ37orsn90NOBHAYoOqvCL
wM+gvGEhwh/kHGQkUZddtF0ird0lulEWmyh7BviesnxvYVfyGHOfbgrMNcgPFJ+F
MaAUb91zPT3Rzir3Il4RwuDhwk8v0xXWzwOMt4s73mXD/EyFkG/PTE1b+pcBJqO4
gDx3Ul+v7JBKXoUDFQK0daw3CcPbeF5QPHZRrHE0J98QUcVq+sr7Wh3yojkL4euJ
hM+/RMIj4qcPmN626xZLzUD4aMBxcS8WmUTi8NJYC0kZPp5XYRu19384xADkFuQz
G773dIYOw6OCVb18S9Dby5aGYna4/G9gCZZ1tLpRASQ83Bt7RCg=
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:59 2025 by rpki-client