Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft
File:                     C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft (raw, json)
Hash identifier:          eCUMycHCliAXuzzCRFkXmSZF2dQzdcQ5X99mWKQ+vM4=
Subject key identifier:   0D:90:06:2B:E0:3A:A0:C3:74:43:19:AF:72:20:5E:F4:EE:9D:8B:E9
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Certificate issuer:       /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial:       3E12D4E9ACB9C2EF14BAA0AF4FCFD6381A6EF68A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft
Manifest number:          04F7
Signing time:             Mon 02 Jun 2025 01:02:33 +0000
Manifest this update:     Mon 02 Jun 2025 00:57:33 +0000
Manifest next update:     Thu 05 Jun 2025 03:20:33 +0000
Files and hashes:         1: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: Ketrz/J8f8AAk0/U1Pdx/6YBxlFbuGP5tM7vrclBTuI=)
                          2: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: Y3N/pOr0hqk+rgEWsHTxDUxkckXwK8BwQRc3Oa99toQ=)
                          3: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 7667q65z5ALRHOPz7ZlyjDc7iiTkR7i4e2iT+KR7k3I=)
                          4: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: dsLjT0RvHwdlA2P0hS8Ta/QvI/7GUPU2p577iDafIJk=)
                          5: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl (hash: XkaYPZp8/X3ZQV8Gxk0o3rwCvClA/sq2x17D4NqgPsQ=)
                          6: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: Q22OsVQGNiQHv7rsWq7HdXb5YFdsKjAZXlHpHoKvOag=)
                          7: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: 2g+NXNHiM0B7rPdW5gGiKA7VbkoVsAcew6mjSoTkRN4=)
                          8: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: haQraVSry86Exch9h906IOyEPpafpeXC5ih1PxjR4d4=)
                          9: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: gOJdZEtA6e6fwm7lb/MvZbjgtOf6sLlu0HNuBmiaEZM=)
                          10: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: 5A8+p1O/f/o7MKvT/iojY154TSW6xBkoOLtIqG2w4iU=)
                          11: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: mJ+S52vU66RNY0f8EN8g3gvOa1pNNig2fMcG1fH79DY=)
                          12: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: 23+gG2DOC+ur5eVWAZvoHWGDnxOhWjXAjjErKhmGrS4=)
                          13: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: xet50Y1T2RaCmjZyVilwT++Qk9zQxszZ374/545MhhM=)
                          14: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: SKzoUE6GJjGbrRoLBDSg0MJXDhRPXJNlIyQMu/0QWEw=)
                          15: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: hd2StT+jTnjUGpfUQ62nAy49x8ecNllIMBX9uxJvBO8=)
                          16: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: EaI6/Dsx2ZEnLc96pWiD/aogqQZmiIKOu7YhzjemiyQ=)
                          17: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: jyHfiZ6i7aZCFxYleJN7o61t2gr/9pVuDKWy33Zgxrk=)
                          18: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: QS/GUZ+NIoj800cmERiNyPU2Mys6n5EswZVGgcYBu4o=)
                          19: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: bwSFGiowGIWFw0Xqwv4OlEcc83VdK0o2KzJnJCZ2DT0=)
                          20: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: yOFSHNJ7/tBSXur8DRCWTGrdUQ9S5IWN+tn279DD4tU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
                          rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Jun 2025 03:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:12:d4:e9:ac:b9:c2:ef:14:ba:a0:af:4f:cf:d6:38:1a:6e:f6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
        Validity
            Not Before: Jun  2 00:57:33 2025 GMT
            Not After : Jun  5 03:20:33 2025 GMT
        Subject: CN=0D90062BE03AA0C3744319AF72205EF4EE9D8BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:ff:a5:79:81:7b:72:ce:80:d2:f5:2c:bb:
                    8f:45:76:27:79:88:25:bd:e6:dc:9f:50:bb:df:3a:
                    18:57:af:30:d8:bf:93:95:6f:8a:20:ae:29:9a:d8:
                    67:1d:2d:c3:39:5b:97:ed:f9:17:69:e8:4c:ac:78:
                    0e:32:8e:ac:a2:cb:68:37:55:59:92:f5:72:16:ad:
                    af:b0:50:bf:45:33:4a:0b:d7:4f:13:66:52:c4:81:
                    39:6f:11:8b:12:a8:5c:78:6b:e2:79:ce:bb:f8:e6:
                    0f:c3:0b:33:4b:94:7f:26:03:41:e1:2c:e3:09:ca:
                    94:f2:33:30:35:97:83:ab:ba:dc:59:55:19:02:d4:
                    3b:f3:e5:52:ed:d8:25:77:cb:98:72:c0:6b:b8:03:
                    4b:26:a5:c0:20:17:3d:ea:cb:d7:66:85:d8:41:f5:
                    6a:24:e3:47:7c:3c:02:4a:e3:fb:ad:c8:16:a0:4c:
                    69:49:be:29:cb:ef:89:e2:8b:c9:cb:ed:7e:e4:61:
                    c3:35:cc:a7:49:ef:ea:e6:87:c9:47:1d:52:bc:41:
                    bf:ce:f9:e0:bd:bb:e7:7a:d0:0d:d1:61:19:69:7a:
                    57:f6:bf:71:a4:68:c5:15:d0:a2:89:76:b2:9e:f5:
                    9d:62:c3:63:31:99:cf:ad:e5:93:06:d6:de:56:3d:
                    ec:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:90:06:2B:E0:3A:A0:C3:74:43:19:AF:72:20:5E:F4:EE:9D:8B:E9
            X509v3 Authority Key Identifier:
                keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:27:da:73:1e:d8:99:26:de:cb:91:77:bc:b5:00:64:19:f9:
         72:77:8b:38:bd:b0:1f:d4:c0:dc:33:cf:7c:15:ff:19:8c:f7:
         bc:cc:f0:46:4e:03:e3:27:ae:76:4f:a6:9e:51:2a:3e:6e:83:
         b8:ac:d9:58:29:8a:9f:93:f0:fa:d0:5f:ab:9b:1e:47:11:c2:
         89:e2:d1:a8:5d:f4:3a:e4:9a:70:7e:97:e9:79:d4:9d:9d:48:
         1c:b6:9e:34:76:0d:05:d2:32:3f:e2:c9:0a:88:a5:4d:b4:54:
         39:fe:93:1b:ef:2a:f4:12:60:19:c2:bc:2f:3a:fb:01:f3:9c:
         19:52:ac:f0:8c:1d:b5:9b:e2:be:22:d6:79:10:31:da:11:07:
         f7:e5:26:7c:25:2d:00:7d:a0:f7:26:0f:83:ef:5a:d3:bf:5b:
         77:a4:23:a3:70:e5:e1:64:20:a0:55:71:7a:04:3d:8e:5a:d2:
         40:9d:48:2c:eb:40:73:3a:ee:d9:d1:37:c0:98:0e:c8:9a:04:
         46:27:60:6c:e9:00:4f:cb:c7:ce:a0:77:12:de:99:aa:77:04:
         62:99:f5:a6:f7:b2:13:5d:52:20:83:92:df:1c:34:56:6c:e3:
         27:92:7e:68:1e:30:a0:85:68:8d:3e:70:67:e8:ed:b9:66:16:
         83:22:4d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:16:56 2025 by rpki-client