Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
File:                     0110A7C2C5E7B74C89B036FFF78974619577D31C.mft (raw, json)
Hash identifier:          3BQo8bSXBjMHaEQVlcEUBHnHZX6cksLkRGqm3UJs1Ao=
Subject key identifier:   D7:10:BB:6C:EC:85:D7:1F:07:6E:AA:B7:7F:F6:67:B7:38:18:EA:69
Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
Certificate issuer:       /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Certificate serial:       3373E689BC32FD7731BE6256A323422716F70311
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
Manifest number:          0375
Signing time:             Fri 05 Sep 2025 22:02:13 +0000
Manifest this update:     Fri 05 Sep 2025 21:57:13 +0000
Manifest next update:     Tue 09 Sep 2025 08:09:13 +0000
Files and hashes:         1: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: AljrwxcXPRJV2CeaxgkjeFz1mPYn0NpdJRkpDNeohWs=)
                          2: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: neHLBe/fEcPkBE3oSjIGkPPuzPFnKvLrnK1gADqMmBU=)
                          3: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: L9UqHBOT0KM8Y3HKq7TuZiV7NwWM18YFSbtkcApuAS0=)
                          4: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: PwS8ZteZSgPMYr/+U7TBWB1NbbKeXLIctaDRv9tMXAw=)
                          5: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: fYJfmsjf+SULVX6dy88bE8cQRoUB/HUNHP8Mc9BU5Es=)
                          6: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: F5F4og+0ANkMp2eyG+y4uSqqLHGppY2rxvIFdOjz0YY=)
                          7: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: 3F5ryh384+w3GpvdHsyBJS1AxEbRZUnJ/gwprNobPkU=)
                          8: 0110A7C2C5E7B74C89B036FFF78974619577D31C.crl (hash: UJ+YgLSuCkoXKz4CPDxGatAvs5SincGwA+eswi6mLh4=)
                          9: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: keDZ5dqo7QpwKbY9EEgBghaBvUKpvyvuxTWbyrg58Eo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl
                          rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 08:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:73:e6:89:bc:32:fd:77:31:be:62:56:a3:23:42:27:16:f7:03:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
        Validity
            Not Before: Sep  5 21:57:13 2025 GMT
            Not After : Sep  9 08:09:13 2025 GMT
        Subject: CN=D710BB6CEC85D71F076EAAB77FF667B73818EA69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:f5:f3:9f:82:78:84:23:be:d7:14:74:7e:
                    38:a8:d2:ed:9b:8f:8b:cb:d2:9f:f9:e0:53:1b:7d:
                    cd:32:68:a2:b7:e7:3b:c0:d9:26:9f:2d:b4:54:1a:
                    ef:cd:12:fe:c2:c2:33:73:84:8e:43:a2:f3:8b:4a:
                    4b:21:03:19:fd:05:a4:3e:38:1a:f5:80:6a:94:6d:
                    10:2c:a5:38:70:9e:0c:e2:44:75:c6:f1:33:b1:13:
                    f2:fd:e5:7f:e5:3c:fb:4f:79:8b:aa:76:57:e3:6b:
                    12:e5:25:84:d9:52:b3:16:8c:78:e0:8c:27:75:94:
                    55:3e:a2:b4:71:7d:8a:c8:3d:78:94:05:cb:a1:d6:
                    c5:0d:58:dc:b5:9d:6c:c4:89:d4:a3:64:11:0f:f8:
                    0f:10:c4:07:44:1b:d8:7a:dd:54:d5:b8:a7:d2:d3:
                    eb:90:9a:fe:07:ed:d1:76:09:04:a8:c1:09:5f:5e:
                    92:e0:72:63:2f:b7:88:3f:f1:6b:58:c5:58:33:d3:
                    c5:43:d0:70:7b:0b:73:56:45:ae:84:93:9e:4e:92:
                    33:2c:f1:05:18:a8:b9:b6:f6:95:d2:fa:c2:f4:02:
                    b6:51:fa:ca:0b:29:d5:25:c8:a8:f9:8a:4d:8d:30:
                    18:7b:88:ff:a2:a0:09:0d:cf:ed:2f:84:ea:87:ea:
                    9f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:10:BB:6C:EC:85:D7:1F:07:6E:AA:B7:7F:F6:67:B7:38:18:EA:69
            X509v3 Authority Key Identifier:
                keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:b4:7f:8c:24:e9:3b:67:79:4d:2d:8f:f7:d2:91:67:69:3e:
         d3:75:f4:43:29:df:6e:bd:46:1a:4b:22:81:7c:58:34:0c:d8:
         20:e0:1f:a8:af:38:4f:8f:82:d9:10:a9:78:8e:f3:d7:f2:be:
         19:61:19:9d:ed:5a:61:be:54:85:45:41:ae:60:48:5d:78:37:
         41:dd:97:07:fe:eb:f1:81:ca:f0:7d:c4:23:58:db:ef:a2:28:
         7d:3a:08:ce:49:62:c7:fe:e1:a4:d6:ad:7c:49:6f:8f:88:6c:
         ce:cc:1e:e1:97:d5:b5:a9:c1:da:fb:d2:48:b1:4b:53:8e:fe:
         f2:bf:46:40:0c:43:d6:f7:52:2f:3a:87:0d:6c:66:b1:15:b1:
         52:d1:40:bd:79:de:f0:ed:db:69:f9:80:0a:b8:35:41:51:b2:
         ff:69:22:da:1f:c0:07:eb:99:40:dc:63:cc:ce:7d:51:fb:64:
         07:a2:1a:b8:b1:49:83:3a:f4:c6:32:e2:de:6e:8a:d8:eb:7c:
         7c:20:4d:71:c7:d4:ab:04:ca:8a:40:20:69:b9:68:6e:30:7e:
         88:1b:4a:9e:fe:58:e5:35:1b:99:ee:55:90:3d:dd:57:4c:ba:
         8d:5a:80:d6:d9:cb:49:c7:6f:91:63:6a:fc:c1:2a:df:e8:24:
         03:cb:59:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:25:54 2025 by rpki-client