Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
File:                     1976DD7D4FBDFBEB355F0B96690613959E106872.mft (raw, json)
Hash identifier:          72JWSJqbtpGil7GVRA1RbHTOwO+XxSeO92gEeMGgUjU=
Subject key identifier:   19:F9:F4:AF:AF:36:7A:B4:0F:D5:40:22:96:65:82:98:61:B4:42:F7
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       514198C5543DCE05F56C959B5847F3CE429553C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
Manifest number:          052A
Signing time:             Sat 15 Nov 2025 12:52:02 +0000
Manifest this update:     Sat 15 Nov 2025 12:47:02 +0000
Manifest next update:     Wed 19 Nov 2025 00:33:02 +0000
Files and hashes:         1: 323430343a613163303a3a2f33322d3332203d3e203535363939.roa (hash: 8hhOR4WCINakOuDn9ngdKAlBm2vVq/aSfVO70m35uwA=)
                          2: 3130332e3235352e3135362e302f32332d3233203d3e203535363939.roa (hash: KQGoiV9BbegSAyEwUGTDu3EKXx16FmPyMikvR+g+1xM=)
                          3: 3230322e3135312e31322e302f32322d3232203d3e203535363939.roa (hash: X7lH+ZABzDfLLUY93QifZSz4LLPKca9OeiY0/c7tpYs=)
                          4: 3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa (hash: y4LCjeHJUSobMj/KV8lbwGmURe5cadaNn3OVULBwa7M=)
                          5: 1976DD7D4FBDFBEB355F0B96690613959E106872.crl (hash: 4DAW+B+mzzgsEjIzagBRWeprMxMA1cS46eozeYXFLMY=)
                          6: 3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (hash: QRbMpzKdAfgfaj6wVJQ8tKGh3zUVZXKDZTbjWChNsSM=)
                          7: 3130332e32332e33322e302f32322d3232203d3e203535363939.roa (hash: 6MeWYAWtNqzt67sAV06u6BArwq93v2nLiPhDZr8DwFc=)
                          8: 3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa (hash: 5aSqM2G2yl80LesSPcdF7TAurA8t2nRlgTMy90PqfEI=)
                          9: 3132312e35322e3133362e302f32312d3231203d3e203535363939.roa (hash: LXI9mNoX4MU73UV9+XQILK6lbIuNFPN8Km57asx93mE=)
                          10: 3136302e31392e36342e302f32322d3232203d3e203535363939.roa (hash: yJK4a8K11r+E+tJag+nY+8xsV5fpS89Sq9CzTcNXWcQ=)
                          11: 3230332e3231302e38342e302f32322d3232203d3e203535363939.roa (hash: 7SlCCBwvpXf5oNDVNUKjezl2ujoj3pY3VJsCEIji7gA=)
                          12: 3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (hash: IBqG3JTOb2BDjjHywaslInJ9v2wxZNaFPsj9QnGmFyU=)
                          13: 3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (hash: GRueTMA2O7baTL3L4l0x1m5orgjkTOBplI10xnIAWvE=)
                          14: 3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa (hash: Z0HkArdqIMJrBesbtTWXeTOTwVWpOh3aH8V39csunso=)
                          15: 3230332e3230372e35362e302f32322d3232203d3e203535363939.roa (hash: pgKybEe1UDr8NMq8IDGfdGJ30yQQRx6GVXnTuNxgMuU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Nov 2025 00:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:41:98:c5:54:3d:ce:05:f5:6c:95:9b:58:47:f3:ce:42:95:53:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Nov 15 12:47:02 2025 GMT
            Not After : Nov 19 00:33:02 2025 GMT
        Subject: CN=19F9F4AFAF367AB40FD540229665829861B442F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:72:26:68:3c:d3:43:f2:f6:9b:e3:6c:f5:
                    83:bd:eb:df:c6:f8:eb:84:e6:1b:f8:83:46:8c:5f:
                    fb:08:39:10:43:0f:c7:75:d9:15:0d:ea:be:88:df:
                    e7:05:3e:23:8b:5a:05:db:02:a7:c0:2e:6e:c1:70:
                    09:a6:7d:ef:62:43:31:cd:c3:82:aa:4b:2f:20:a8:
                    1a:db:78:d9:2e:8e:0e:e1:dc:4a:16:4b:4e:06:f7:
                    a4:5a:8a:a6:b9:c5:2a:76:46:c1:22:a3:c5:47:50:
                    ea:01:80:f5:a2:09:af:9a:c4:50:fa:cd:53:69:29:
                    bb:5b:0d:3f:48:4e:23:0b:fc:11:78:55:52:08:46:
                    9f:58:5e:ea:7f:42:33:83:bf:b5:a3:db:9e:9a:1d:
                    09:85:c1:a4:b9:4f:28:1c:fc:8b:9f:7e:b0:d1:be:
                    fd:1b:1c:6b:cc:37:7e:cd:16:6c:2d:c9:69:4c:44:
                    3f:eb:e5:15:f2:0d:44:21:8e:92:d6:b7:f7:64:ad:
                    a4:20:d5:a9:d3:21:81:73:f0:77:b9:d0:03:a7:e3:
                    6e:2f:f0:f7:b1:05:bc:79:ca:a7:30:61:c4:dd:ef:
                    9d:6a:89:ee:ae:13:83:55:ae:08:b2:6d:62:56:c5:
                    20:56:2b:5b:13:86:6b:9c:d9:1d:39:75:be:ae:b7:
                    be:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F9:F4:AF:AF:36:7A:B4:0F:D5:40:22:96:65:82:98:61:B4:42:F7
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f4:47:2d:98:37:8f:94:52:4c:c6:41:d0:14:db:d6:e8:10:
         c8:6b:b4:9d:d2:9a:a7:ec:31:79:c9:56:5c:2e:4e:17:70:3c:
         da:2d:62:c8:3b:e0:2c:db:c9:53:5b:7c:d6:a3:b1:c1:38:4c:
         00:9a:43:92:66:0e:4a:64:61:5e:2d:32:64:8e:c5:10:ae:17:
         c1:e2:9b:87:c2:80:72:52:e1:9c:98:70:33:f4:d5:22:d1:4b:
         a1:52:86:7c:b8:25:1f:51:88:2f:ff:fe:d5:b2:23:3f:df:58:
         74:c6:6c:75:09:15:93:39:fe:9b:14:ad:da:5c:08:6c:6b:64:
         47:ad:d7:7f:41:d0:0a:1c:c8:d1:da:9a:ef:d5:59:78:5c:68:
         b2:02:86:d6:1d:36:85:0d:fc:6f:24:df:7e:c4:80:6f:da:5a:
         d6:20:65:31:36:4f:cb:86:24:21:96:14:5f:d4:9e:95:54:ea:
         7e:0c:fb:74:d7:27:ae:be:b3:1a:83:52:e0:58:dc:6a:a1:f8:
         18:b3:ef:f1:b2:34:11:57:00:cc:79:40:fc:2f:94:55:78:be:
         e7:ae:d6:d6:c4:b4:2f:a0:ca:d0:85:a2:53:8c:ee:4b:46:a2:
         99:2a:d5:d0:c5:2e:75:86:32:57:6c:0d:f2:bd:32:dc:db:dc:
         65:33:53:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 01:27:23 2025 by rpki-client