Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
File:                     1976DD7D4FBDFBEB355F0B96690613959E106872.mft (raw, json)
Hash identifier:          FsR1mo1mkG7tfBIz1/cBk+td5NA5Xz1NbplUjLwyowk=
Subject key identifier:   68:BC:23:8D:53:E6:21:78:AA:A7:6F:EB:28:AC:6B:97:10:A8:DB:25
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       34CB4CBC92D19F594F5E728178791B8539DD6FA6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
Manifest number:          04DF
Signing time:             Mon 02 Jun 2025 02:03:08 +0000
Manifest this update:     Mon 02 Jun 2025 01:58:08 +0000
Manifest next update:     Thu 05 Jun 2025 13:16:08 +0000
Files and hashes:         1: 3230332e3231302e38342e302f32322d3232203d3e203535363939.roa (hash: 7SlCCBwvpXf5oNDVNUKjezl2ujoj3pY3VJsCEIji7gA=)
                          2: 3136302e31392e36342e302f32322d3232203d3e203535363939.roa (hash: yJK4a8K11r+E+tJag+nY+8xsV5fpS89Sq9CzTcNXWcQ=)
                          3: 3230332e3230372e35362e302f32322d3232203d3e203535363939.roa (hash: pgKybEe1UDr8NMq8IDGfdGJ30yQQRx6GVXnTuNxgMuU=)
                          4: 3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa (hash: 5aSqM2G2yl80LesSPcdF7TAurA8t2nRlgTMy90PqfEI=)
                          5: 3132312e35322e3133362e302f32312d3231203d3e203535363939.roa (hash: LXI9mNoX4MU73UV9+XQILK6lbIuNFPN8Km57asx93mE=)
                          6: 3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa (hash: y4LCjeHJUSobMj/KV8lbwGmURe5cadaNn3OVULBwa7M=)
                          7: 3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (hash: GRueTMA2O7baTL3L4l0x1m5orgjkTOBplI10xnIAWvE=)
                          8: 1976DD7D4FBDFBEB355F0B96690613959E106872.crl (hash: loKuTb1MfgmPgLcwmVYLEQb+EqF9NXZDwIeL11Kfsmk=)
                          9: 323430343a613163303a3a2f33322d3332203d3e203535363939.roa (hash: qLMqaWG01btU4DjLVKlNjSmJQeLYWY8XvQDF/McekDU=)
                          10: 3230322e3135312e31322e302f32322d3232203d3e203535363939.roa (hash: X7lH+ZABzDfLLUY93QifZSz4LLPKca9OeiY0/c7tpYs=)
                          11: 3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (hash: QRbMpzKdAfgfaj6wVJQ8tKGh3zUVZXKDZTbjWChNsSM=)
                          12: 3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (hash: VUWhftZCz6t5WvzC4+/sPlF0zMj6ttLXWdYMj0+uIE4=)
                          13: 3130332e32332e33322e302f32322d3232203d3e203535363939.roa (hash: 6MeWYAWtNqzt67sAV06u6BArwq93v2nLiPhDZr8DwFc=)
                          14: 3130332e3235352e3135362e302f32332d3233203d3e203535363939.roa (hash: KQGoiV9BbegSAyEwUGTDu3EKXx16FmPyMikvR+g+1xM=)
                          15: 3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa (hash: Z0HkArdqIMJrBesbtTWXeTOTwVWpOh3aH8V39csunso=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Jun 2025 13:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:cb:4c:bc:92:d1:9f:59:4f:5e:72:81:78:79:1b:85:39:dd:6f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Jun  2 01:58:08 2025 GMT
            Not After : Jun  5 13:16:08 2025 GMT
        Subject: CN=68BC238D53E62178AAA76FEB28AC6B9710A8DB25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:1d:27:27:7d:c9:17:f4:76:e8:6f:5c:61:
                    61:f3:0d:04:7b:5c:14:47:41:cc:92:a3:b7:a8:79:
                    97:84:42:8b:48:e0:df:14:de:84:41:e5:31:29:48:
                    9f:22:f4:f5:1b:53:65:c3:3c:55:32:23:cd:0a:5b:
                    eb:d0:e3:14:95:65:c3:df:b3:1e:57:33:35:73:04:
                    49:38:e5:f4:10:49:02:de:f9:a1:56:07:1e:aa:80:
                    9d:cc:39:2e:f4:64:98:23:9f:d9:ab:92:d6:ae:03:
                    d5:b1:ea:03:93:cb:cd:52:2c:25:61:6d:d7:5d:6a:
                    f2:a3:4f:fa:d6:14:90:51:54:22:fb:c6:fe:ba:44:
                    0c:a3:9e:15:66:e1:8d:66:1b:3a:4d:f5:42:87:e1:
                    9f:22:38:e4:8f:2c:fe:14:a9:da:ee:1e:2e:a1:fb:
                    57:d0:7d:94:86:53:ec:c3:3d:a8:27:f5:4c:6a:c0:
                    7f:cf:b3:e0:b6:7b:e4:04:59:57:35:33:52:a6:88:
                    b3:6c:d3:43:2f:23:34:18:e3:48:ac:d2:70:46:40:
                    ee:47:1c:dc:a2:fe:51:42:cc:14:99:7e:4e:51:fa:
                    a2:c8:2a:fb:a9:43:f0:eb:3a:79:36:05:34:b2:c2:
                    6d:73:92:82:3d:e6:d4:82:14:57:39:19:65:df:14:
                    79:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BC:23:8D:53:E6:21:78:AA:A7:6F:EB:28:AC:6B:97:10:A8:DB:25
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:56:d5:bf:0a:97:18:f4:37:5a:57:c5:68:d2:84:23:d6:45:
         c2:5e:0e:cf:3c:74:06:b0:6a:89:1f:21:b5:fa:89:82:d3:1c:
         8e:4a:56:a2:09:0e:c4:2b:65:cf:e1:6b:0e:c7:66:30:4e:83:
         ad:94:93:fd:2f:9f:28:c3:94:ef:dd:89:6f:53:e3:66:40:dd:
         06:e1:eb:94:d5:94:4c:a4:9c:d4:27:23:f7:42:25:43:0b:8a:
         51:f7:75:2d:35:a7:7b:a0:53:4f:55:09:d2:33:92:85:95:a2:
         d2:aa:eb:07:15:98:70:20:d7:d0:ec:03:22:40:53:fe:be:ae:
         46:19:d9:a9:3e:51:f6:5a:03:fb:db:c1:10:08:69:ee:44:a3:
         47:78:77:d9:c1:9b:32:ab:f7:b8:80:1f:14:d0:c1:85:00:79:
         c5:96:a5:c6:4f:02:ef:52:21:2c:78:74:29:08:05:e2:64:50:
         69:42:43:98:4f:51:d7:44:4d:82:32:33:29:83:78:1a:c3:f8:
         50:a4:4a:25:c6:57:45:2f:71:4e:07:51:48:c1:ec:35:29:c6:
         82:c6:55:96:e9:18:58:e4:1f:96:b3:2e:56:11:80:21:72:f3:
         55:87:7e:68:84:cc:f5:54:66:87:c4:9b:14:f8:28:54:bf:41:
         c8:1e:a9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:39:21 2025 by rpki-client