Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
File:                     83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft (raw, json)
Hash identifier:          SlZwLx+MTCTYKTkfTuXZrxQK9BkVsvW8A3GMiDPcdT4=
Subject key identifier:   6B:FD:90:98:03:28:DC:3C:E3:F4:CB:FC:FA:85:B6:DB:58:6B:E7:F0
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Certificate issuer:       /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial:       0EE16D285A358DA5E7B73701A06DA42EC92CBE59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
Manifest number:          04F7
Signing time:             Sat 07 Jun 2025 10:52:19 +0000
Manifest this update:     Sat 07 Jun 2025 10:47:19 +0000
Manifest next update:     Tue 10 Jun 2025 20:11:19 +0000
Files and hashes:         1: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: DY+I8fOVqUjezx/DmSAGLnloSubkgTLcYKo00TtWhVE=)
                          2: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: gMz09JidDcRWBTwU6ryArFJQlq35y7FUrFAp/Wy4yQg=)
                          3: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: Ni8K6MxuczEixPJW7FrAgC5kkezA9a+/a/29Cb7hSuw=)
                          4: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: T6zBCDYCBei1sIwoPeFlZke8e/0x59ASpBVpgvqvRNg=)
                          5: 3135302e3130372e3130342e302f32332d3234203d3e203338353035.roa (hash: OD3JiPGHDiL7kIqgNDTr6d3lXB+Vqj+hZ7qDs1qxRC4=)
                          6: 83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl (hash: mdXGaioTEovb9TBdecj/5rxtqGCOaeFEhmQMs706pXE=)
                          7: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: N2T7DBYjNznj0B0Gx8wABa3A4sF8W5Eo0nd66DsyVr4=)
                          8: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: 4vp0Qpf0MLP4khTVs9MQwOQui0ZXjUZqWXi8G+NFZc8=)
                          9: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: 0uFyEk4kSz2+PTofQStkvWY/ZflHglwyBx+4DydiuOs=)
                          10: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: E2PhZYIW23U+utUpZwqULcvTt6KlzYJl4T2mdMuJpvU=)
                          11: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: T4+pJPmCfgNNh91fQe+cFh2S1JfH4wE9FS6aSJjDE44=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
                          rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 10:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e1:6d:28:5a:35:8d:a5:e7:b7:37:01:a0:6d:a4:2e:c9:2c:be:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
        Validity
            Not Before: Jun  7 10:47:19 2025 GMT
            Not After : Jun 10 20:11:19 2025 GMT
        Subject: CN=6BFD90980328DC3CE3F4CBFCFA85B6DB586BE7F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:eb:99:50:cc:a2:c7:80:11:6e:20:27:48:cb:
                    4c:ad:dd:d7:71:05:88:54:2e:7b:74:9a:15:a7:02:
                    34:38:65:e8:cf:81:7e:b4:8e:a6:08:65:c1:d1:f7:
                    d8:99:2f:e1:75:2b:7a:ff:e8:ed:62:23:13:e8:f0:
                    26:dd:f6:d5:73:46:1a:4f:75:9c:a1:09:60:4a:49:
                    3d:13:d5:61:0c:99:79:9d:28:80:d9:5f:f7:77:f2:
                    c8:cd:7a:8a:42:45:2c:00:03:4a:b2:a9:45:c1:c3:
                    0a:5e:8f:c0:cd:7b:de:44:89:50:b4:40:6a:5d:4e:
                    9d:e6:25:9a:c9:66:be:05:9e:47:9d:14:e4:1a:83:
                    65:a8:8a:78:1a:1b:ee:c1:e9:09:ff:71:5c:60:59:
                    9c:2b:94:bd:86:12:50:17:ee:f4:a8:36:5a:59:fd:
                    b1:35:cc:56:60:69:dc:02:82:ef:3b:fa:68:45:2a:
                    0d:e5:87:5a:81:b4:45:15:c6:07:f7:d8:12:81:b3:
                    ed:1d:ca:d9:39:60:62:4d:ef:21:dd:f7:fc:3d:aa:
                    f9:bb:71:3a:3d:99:86:46:a2:33:3a:8f:7f:d9:ea:
                    05:db:b6:86:da:f6:4e:fe:c1:72:77:5d:6d:91:48:
                    7b:d8:26:35:61:bf:68:4d:ef:c9:2e:65:47:b3:a8:
                    f5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FD:90:98:03:28:DC:3C:E3:F4:CB:FC:FA:85:B6:DB:58:6B:E7:F0
            X509v3 Authority Key Identifier:
                keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d9:de:1e:35:2d:9a:7c:03:ed:54:5d:08:5b:63:22:94:36:
         da:0d:98:23:48:cb:1f:d2:50:52:30:2a:9f:da:47:bb:da:80:
         52:f5:19:4b:83:f9:7c:37:49:98:44:32:83:0f:aa:fb:97:6f:
         b6:bc:b0:37:55:c7:0d:fa:6d:fc:87:68:31:71:44:ec:34:8c:
         0d:74:e8:c8:73:93:c6:00:42:d8:c6:f7:cf:55:1b:50:e9:16:
         04:64:80:b7:3c:23:a0:c3:ff:01:2e:bc:be:b2:45:71:5b:fc:
         ff:da:b2:31:a9:40:42:5a:60:c1:5f:4d:e5:26:cc:93:ca:6c:
         8f:09:09:6b:97:59:82:35:7c:35:64:65:a6:0b:61:18:17:eb:
         0a:3b:1c:8b:7e:a8:de:c3:0f:44:0a:d6:15:fd:f7:1d:83:37:
         f2:27:f2:bf:83:f2:c8:1e:be:32:c1:17:61:e9:14:41:5e:98:
         a2:43:30:e3:7e:18:d9:db:6a:ab:f0:2e:8b:38:7c:82:b5:12:
         ad:68:17:10:8b:1b:57:2a:3b:bb:f7:c8:22:a2:a3:c4:0d:9a:
         66:31:0e:12:eb:2f:7b:b8:e7:69:39:59:b5:81:5d:d6:19:5d:
         6e:ce:be:b0:23:25:fa:3a:59:05:40:04:1d:ac:a5:2d:e3:30:
         c8:12:92:69
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDuFtKFo1jaXntzcBoG2kLsksvlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVE
MTFEMzNBNjAeFw0yNTA2MDcxMDQ3MTlaFw0yNTA2MTAyMDExMTlaMDMxMTAvBgNV
BAMTKDZCRkQ5MDk4MDMyOERDM0NFM0Y0Q0JGQ0ZBODVCNkRCNTg2QkU3RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ65lQzKLHgBFuICdIy0yt3ddx
BYhULnt0mhWnAjQ4ZejPgX60jqYIZcHR99iZL+F1K3r/6O1iIxPo8Cbd9tVzRhpP
dZyhCWBKST0T1WEMmXmdKIDZX/d38sjNeopCRSwAA0qyqUXBwwpej8DNe95EiVC0
QGpdTp3mJZrJZr4FnkedFOQag2WoingaG+7B6Qn/cVxgWZwrlL2GElAX7vSoNlpZ
/bE1zFZgadwCgu87+mhFKg3lh1qBtEUVxgf32BKBs+0dytk5YGJN7yHd9/w9qvm7
cTo9mYZGojM6j3/Z6gXbtoba9k7+wXJ3XW2RSHvYJjVhv2hN78kuZUezqPW5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUa/2QmAMo3Dzj9Mv8+oW221hr5/AwHwYDVR0j
BBgwFoAUg9OYbFy9Vr0M6QPRtR6tZdEdM6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
M2QwNzg2ZC0zZDNlLTQ1YjctOTY2NS04ZDQ3NGZkMTRhZWEvMC84M0QzOTg2QzVD
QkQ1NkJEMENFOTAzRDFCNTFFQUQ2NUQxMUQzM0E2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVEMTFE
MzNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNkMDc4NmQtM2QzZS00NWI3LTk2
NjUtOGQ0NzRmZDE0YWVhLzAvODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFE
NjVEMTFEMzNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAbZ3h41LZp8A+1UXQhbYyKUNtoNmCNIyx/S
UFIwKp/aR7vagFL1GUuD+Xw3SZhEMoMPqvuXb7a8sDdVxw36bfyHaDFxROw0jA10
6Mhzk8YAQtjG989VG1DpFgRkgLc8I6DD/wEuvL6yRXFb/P/asjGpQEJaYMFfTeUm
zJPKbI8JCWuXWYI1fDVkZaYLYRgX6wo7HIt+qN7DD0QK1hX99x2DN/In8r+D8sge
vjLBF2HpFEFemKJDMON+GNnbaqvwLos4fIK1Eq1oFxCLG1cqO7v3yCKio8QNmmYx
DhLrL3u452k5WbWBXdYZXW7OvrAjJfo6WQVABB2spS3jMMgSkmk=
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:22:46 2025 by rpki-client