Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
File:                     42042E672B688C3072FD4743B3E7DD81EC7CA306.mft (raw, json)
Hash identifier:          kVaei7FZ4qIywZxTWmX1zEP0ulTEwYUF+dsBkCRObpU=
Subject key identifier:   02:9C:0F:EB:AE:EF:F6:F2:75:E1:D8:05:3B:B5:8A:83:3D:60:6A:8F
Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
Certificate issuer:       /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Certificate serial:       45670BD80D896A08213DC863FB9FFD3029B762AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
Manifest number:          0328
Signing time:             Sat 06 Sep 2025 15:40:45 +0000
Manifest this update:     Sat 06 Sep 2025 15:35:45 +0000
Manifest next update:     Tue 09 Sep 2025 16:51:45 +0000
Files and hashes:         1: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (hash: W3Rk8oMCIZrZG18jw5tK5o5kQjsEemd0y2JxL184dQU=)
                          2: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (hash: 0wFTN/XqtAoutydwqc+DafnIfaxz+FirKWo3fLraaUs=)
                          3: 3230322e3138302e302e302f32342d3234203d3e2037353837.roa (hash: cje0RNSx9P/cOPpCtYQDwkY1I+kc9+6oUoy5ingJOIs=)
                          4: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (hash: CpXbrXmGX4ITchWOi7/vrQ9BAy1FQYBh+LSYePLlGN8=)
                          5: 323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (hash: ghIreGGw1MSr8fVsMwycbTOs/dBctFRQZd0vQbqY1I0=)
                          6: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (hash: BnGtn4VWnuPol8Hcuxr+9+BtpB9xmH5yyn9/+BeKN6Y=)
                          7: 323030313a6436383a3a2f34382d3438203d3e2037353837.roa (hash: VNcs+Fmh0oNgiWo/oCDkDKUsnCnybqve/EpfB0M2J0s=)
                          8: 42042E672B688C3072FD4743B3E7DD81EC7CA306.crl (hash: jviG5kgeGuD2d+zjwvuqfyBXgq2u//ilVSUokG1CIkM=)
                          9: 323030313a6436383a373a3a2f34382d3438203d3e203338373539.roa (hash: muxJdFe2pixOmgM0+n/vOhMDRG8grm2Btn/Nr9wnHdc=)
                          10: 323030313a6436383a31323a3a2f34382d3438203d3e203338373539.roa (hash: BqoEpAp2+UEuN6knkf0iHBFe+NlPdDdo1asiTk5cnH4=)
                          11: 3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (hash: 99pjiFxy6i9aAF5V+k03NOY+ffA/N57vuM+xXi4hwV0=)
                          12: 3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (hash: 7wzHDGiNPdR1rFQHicraAxcZjQRCh3/Q5KM8DSR+Lzc=)
                          13: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (hash: 6gKMD4zRtDAlRcIkaIZo0T1mR3a0YZm8KjfJzM2lqqc=)
                          14: 3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (hash: ieZuTIxFCE7GT48kZHlnhDRdoyyMo22tAQF2MzZLBUM=)
                          15: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (hash: 5jpE9PaDWg32h1mep4+lRpd6+XHerxcnHEsnK1sv4vU=)
                          16: 3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (hash: HtfoWX2moqZb8+kymM9PVl+dux6Wm9LUZexAAwCV9Wk=)
                          17: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (hash: U1oEb+i6KKGi7dOnpejft8TEWnvu9mWUcqiHJxud3FE=)
                          18: 323030313a6436383a31333a3a2f34382d3438203d3e203338373539.roa (hash: fFkVLevboYrZm0ldmwFZBHRDjcsbCO8x/cTP2HxOjwo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl
                          rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 16:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:67:0b:d8:0d:89:6a:08:21:3d:c8:63:fb:9f:fd:30:29:b7:62:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
        Validity
            Not Before: Sep  6 15:35:45 2025 GMT
            Not After : Sep  9 16:51:45 2025 GMT
        Subject: CN=029C0FEBAEEFF6F275E1D8053BB58A833D606A8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b2:b6:ee:22:56:f6:62:8b:c7:e8:30:52:36:
                    51:bc:f8:8f:ed:83:ae:a4:6c:2a:2c:22:d8:00:fd:
                    2c:c8:30:39:52:d9:30:f0:47:24:f0:e0:ab:a6:53:
                    94:b7:f8:c7:bc:2c:d3:df:8b:24:02:15:d2:3f:ad:
                    14:9d:45:67:46:ac:52:16:1f:5f:e3:4c:31:65:3c:
                    04:38:2c:eb:2e:78:d2:44:30:0a:b5:c1:98:37:8c:
                    fa:5f:39:04:5a:14:f3:49:cd:ae:25:8a:4d:e0:8c:
                    f3:bf:c4:ef:8f:7b:fd:d3:87:63:9a:61:b4:b4:7d:
                    9d:3a:45:ac:3d:83:bb:3b:96:f0:2e:3d:f6:30:f0:
                    bd:c8:6b:d8:cd:fe:6d:a0:c9:46:f8:81:6e:2f:01:
                    a0:f3:39:39:19:af:df:92:73:28:64:d5:2a:36:e0:
                    00:e8:23:8c:72:d0:90:d3:76:6a:52:cd:1d:0c:1c:
                    0f:05:89:19:bb:46:a3:c2:5b:e4:ea:0a:d6:a0:8b:
                    d1:d8:5a:47:e6:7f:29:65:c1:c9:d6:26:19:bc:79:
                    03:e1:d3:7f:ff:2b:af:ff:b4:16:e2:a2:3f:13:27:
                    e0:62:db:3d:af:11:8f:56:9c:49:e7:bb:20:bc:c6:
                    aa:77:1e:b1:3c:3c:49:6a:06:5a:49:90:df:78:2f:
                    e7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9C:0F:EB:AE:EF:F6:F2:75:E1:D8:05:3B:B5:8A:83:3D:60:6A:8F
            X509v3 Authority Key Identifier:
                keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:3b:72:15:a8:f7:2e:b4:50:27:d0:3f:ee:7a:2f:da:72:d4:
         b6:0e:77:aa:d0:68:f3:d2:d4:84:2c:c4:1c:94:ab:0e:2e:b0:
         94:5d:47:0d:54:be:7d:c7:10:a1:42:f2:6a:7c:11:37:2a:f5:
         19:e9:d7:97:6f:3b:94:da:a5:a2:8d:47:44:0f:26:1f:46:ad:
         f1:1e:5e:b0:f0:9d:8b:ab:6d:2b:d8:85:97:a7:63:2b:75:41:
         99:62:bd:6f:e9:74:5a:78:df:15:b0:e5:1c:aa:51:4c:9a:86:
         51:73:bc:9e:01:13:b0:29:62:48:b1:5d:6f:5a:45:49:c6:8f:
         ad:b3:da:fd:b2:17:88:7f:57:9e:2e:ab:b2:2e:8d:86:2c:bb:
         75:23:9e:ff:f0:10:a2:60:d4:7c:a2:ca:a8:c7:f9:25:76:76:
         65:b2:24:30:f8:30:a4:5f:4c:a7:90:6f:46:aa:fa:38:29:ee:
         cc:de:18:7f:b2:46:c0:8a:17:a9:48:d5:7a:e9:03:82:87:dd:
         a6:35:ab:7e:ac:d1:d2:97:a7:e3:a2:43:81:7b:55:e2:4f:8c:
         e6:1f:05:66:f3:83:2b:af:c4:77:e0:fb:de:97:d7:5e:04:65:
         0b:ff:f0:a8:9e:91:43:bd:99:a3:72:11:c6:43:5d:36:50:df:
         1a:22:03:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:59:46 2025 by rpki-client