Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
File:                     C00163880F235714759920507217F2A7D557C953.mft (raw, json)
Hash identifier:          8C43E2jOVbjlg37+nLfgCSTZUbs1vPuodTI4Go7axz8=
Subject key identifier:   38:C5:B2:56:D5:22:AA:11:9C:64:E1:47:27:5F:8F:AB:B1:51:C3:35
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       4C479E32A5F195E05058A6E42CE46E10F41DB449
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
Manifest number:          0519
Signing time:             Sat 06 Sep 2025 17:01:07 +0000
Manifest this update:     Sat 06 Sep 2025 16:56:07 +0000
Manifest next update:     Tue 09 Sep 2025 20:08:07 +0000
Files and hashes:         1: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: xHN63AGHVhpLy6i5Ne/Rg1b8TEgYmsmsilFtTygXtok=)
                          2: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: /nevEPzljzS1GPlEHXnOO2d6UHLxx+c29+SvhwCD4hA=)
                          3: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: rTOdy2cdmmm5QYorTFShkoD3ZBHt/J9THDepoiG1zQU=)
                          4: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: g6G0tGc+VbiXH94zgiJaavS68ToTcFl7b92TkAIdvw4=)
                          5: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: ojFdU43pMzAF8Kl2ss98Rrj2MseDcSjIaVkU6XMeYuI=)
                          6: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: g2oV0iGk+oSLBEAQ3+fcNmyGfdkZlXFUuvI/IByWsRg=)
                          7: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: V5/+oe0yc47TDeQuvZAPNLqrTj16mL6buLmaKxjOGog=)
                          8: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: 2Y6D9qyT24i+mrDmXDYxZ/h+kMGeojU/2MwD0/st0XM=)
                          9: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: YznKDs1CbxF08N3mJ1JGQ46Fgw+8Zoc4by7UrLF1FjE=)
                          10: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: prxETRZ+UcJYInSy8kj+pHh+ePpdBSveL40hYMcOpu4=)
                          11: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: pKw5LGAwZ02j8bp/435WnbI3b3bMVBsuwWMCKuHmspo=)
                          12: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: wJcVXH5kdnO3oVC250cjFRiURy0rH8CsrLKZhYlCnvE=)
                          13: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: XSZGKE/S6Hn7twCZ3sUL7QvBv8/jTjIsBvikiErVDPQ=)
                          14: C00163880F235714759920507217F2A7D557C953.crl (hash: eUqGSxTXzHPt0dog9zo6vSS0qKPBs0OHiYHpej+2AJw=)
                          15: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: /9HEDitBud2JL5PjNF8lccXxuUn2nEtlKhSkIJ1OpE8=)
                          16: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: IDWCZT4uAeHS9R8+qCUs6bMdQGmyEUG0b6ZQgSamVag=)
                          17: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: oCRdMEaQb+0L+jLmpAQiC99Gb3FvgP0DAlKAkjWxSuo=)
                          18: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: M5MIXM9yrLqkivi97+1D94IkM8JBddI+ZQwKNBZcwPA=)
                          19: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: ne4Fd9z4GMtggr+H/mTwmUbV1S7/FJjgjsGd2sQh0+E=)
                          20: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: drDWXbS5Lt2BNjwhp2t9NFg/ubNQHhmV8ihSFb/W+xw=)
                          21: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: 8Pbf5fsxv/JzP6C1MTXqHphtIKSudWZyH6TaxId01SE=)
                          22: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: oKxubgVSq9KanfdFvoxAtxxPQZTjjUlhGrzvFIeghIM=)
                          23: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: J/qEk8PLS2L818NmmW0MNEe+BNloyc7SI+CudCB88po=)
                          24: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: JYMDp6E4TEckql4p/4GjSNO2rr/124noQyLp4F0BuMo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 20:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:47:9e:32:a5:f1:95:e0:50:58:a6:e4:2c:e4:6e:10:f4:1d:b4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Sep  6 16:56:07 2025 GMT
            Not After : Sep  9 20:08:07 2025 GMT
        Subject: CN=38C5B256D522AA119C64E147275F8FABB151C335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:63:d3:4f:5e:01:13:79:82:0e:17:be:ad:6a:
                    23:55:e1:ad:5f:dc:e3:cf:d6:c6:93:f6:a8:62:35:
                    2b:92:0f:ad:7e:78:5e:33:88:d3:43:b2:57:82:6b:
                    27:62:e7:4b:d8:3e:6e:ef:33:e8:6f:8c:63:ef:e3:
                    a0:0b:e9:e6:cc:ac:8d:86:e0:8c:06:40:63:39:f0:
                    d7:3a:6f:d7:08:26:22:1d:24:66:5c:33:f5:9d:e0:
                    8a:a7:07:36:38:bd:ea:97:03:b8:52:45:4f:c6:45:
                    e5:37:0f:ad:fb:ff:5d:8e:ee:80:91:89:a3:54:6c:
                    a3:69:2b:e5:d5:8d:97:cf:86:88:ba:dc:8d:47:51:
                    7c:df:63:5c:45:56:66:53:a3:da:be:87:b2:62:d3:
                    7d:76:af:14:9f:26:43:aa:0e:14:d9:dd:bf:2b:81:
                    f7:01:5a:dd:b3:85:64:c6:2d:e1:d2:c6:45:f3:98:
                    73:19:01:46:a9:8a:30:56:aa:71:a9:e9:2c:06:c6:
                    99:7f:25:6b:0f:27:67:ef:eb:65:0e:23:59:bc:db:
                    31:c4:f4:51:d1:33:92:e4:0f:23:65:49:8e:6a:bb:
                    1b:94:30:ae:82:17:68:0e:5d:1a:1c:e1:46:9f:32:
                    f0:ae:ba:2a:03:94:ea:14:42:dd:b0:24:89:06:dc:
                    4a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C5:B2:56:D5:22:AA:11:9C:64:E1:47:27:5F:8F:AB:B1:51:C3:35
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:6f:d9:87:bc:b1:39:49:32:4a:5b:e0:8c:cb:44:8c:9b:7a:
         69:26:49:2e:99:df:07:5b:1c:eb:79:c7:15:65:b1:aa:84:7c:
         d8:2d:0e:c2:56:c3:da:27:3b:c7:91:c2:07:47:2b:41:bd:6d:
         d4:17:fe:ac:6e:5d:27:00:95:4f:a1:24:01:da:d8:4c:fd:a8:
         75:13:8d:3e:5e:ab:f1:f8:19:14:42:cb:f0:b0:9c:5e:76:96:
         b9:e4:21:6b:79:bf:20:b8:3c:ed:bf:2c:a4:51:db:e7:bb:67:
         ed:f2:f1:64:2e:b1:d7:c5:0e:53:24:ea:00:4f:5a:b2:6a:a5:
         74:9a:17:2e:71:85:83:3a:bf:24:df:3b:b8:8c:9d:ed:18:50:
         0b:eb:12:e9:99:dc:86:42:29:28:33:c8:4f:1b:c7:c7:88:ce:
         42:3b:26:6a:32:e2:e2:23:19:ca:85:aa:1f:ab:53:3c:29:83:
         8f:cc:ed:9c:54:7e:90:ec:cc:f4:5e:54:6f:be:d6:1f:e6:c0:
         48:44:ae:3d:5f:cd:1c:fe:41:ba:20:28:43:c1:1e:d5:a4:10:
         60:69:98:76:b3:a1:c5:03:ec:d1:ce:99:4d:80:e0:8f:13:19:
         9a:26:31:05:e0:3d:36:05:46:63:2d:93:0c:e2:53:4c:05:1e:
         40:a4:9a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 13:57:36 2025 by rpki-client