Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
File:                     882209E37356E0512FBE4E81B00E4F2481865087.mft (raw, json)
Hash identifier:          aqjnRlUdhhoSyVbLRJGf5y61UfBLfagFtOScTLV5cCM=
Subject key identifier:   CC:FA:DB:9C:E1:4C:5D:6B:38:7B:B9:B7:F3:39:CC:C1:42:BD:43:FF
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       7B016D1737EF442876CC49998FB939C7EAE442D9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
Manifest number:          0504
Signing time:             Mon 08 Sep 2025 07:52:03 +0000
Manifest this update:     Mon 08 Sep 2025 07:47:03 +0000
Manifest next update:     Thu 11 Sep 2025 17:13:03 +0000
Files and hashes:         1: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: 4exgwdcQ1exTycgJCK/gqBNOkO+g3t+MeUPzY4BXBs4=)
                          2: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: GNr97+CgZOUFbCIDGfnRBjjUL8CMyp0MB4VIgO96YwM=)
                          3: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: TUhhdvGp1LOiLtnysRzIGChLZFMNnT5PF4OEU6rQz1g=)
                          4: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: RohtMVPp7ZjWT76AR25hywvAjC+yVkxy154FLnUsdBk=)
                          5: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: 4YSDNpw3vRi1ZpYELRMW9RHjucU5y6DLjYnJw7lk5Lw=)
                          6: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: upfq/Ll023pCAPQGTeGs2hbSXasfCV07dRWvMTFoCJY=)
                          7: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: sH9AL8idt6oa1DBw1y1K2NRJOkrnep4hXxdB09oly/A=)
                          8: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: s/GWk0rnx1fQe+9N5/NiE2vZ64ixoUOqYZCvVVS5fa4=)
                          9: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: sxL8WI3UrWSTsLdgL4krtb4YzuPS2/H7rwpNl9kG2s8=)
                          10: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: GuM7P7x/u39aCvmJkxVuMlpYCmbP89xnoCs5WogcWI4=)
                          11: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: ae/dG+5qLBYT7KzQliS37oy8tODqNSMPLH4vHatbgLA=)
                          12: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: yQorJw+u2n8BFPvZbej71Ji8nM/16g2mSwkEj1PF54g=)
                          13: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: fWpUZJchVDwudRJxgK1oYcEU6iSSZ9RgPdltpwuInA8=)
                          14: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: UtJFn8cjB9oRRuew5QEOrcUcIRIAJ+KfKoJMwxwZf1I=)
                          15: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: ILfqmoxfXPHlh8GmZbUT7jZa6GPfE6TlAFjcXTufWHY=)
                          16: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: MdJ8RxR8ZYDVXBT9P8fF751Cc4xL7JgxekzcB9xdKx0=)
                          17: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: njg/qVMnSFnXNm23LFJOAC9Brxk9FM9096rC9yQ0CXk=)
                          18: 882209E37356E0512FBE4E81B00E4F2481865087.crl (hash: 9jdBl+riA9kxnqZvYLjF4Nu4YLr7M5H6Ao+49JxNWXY=)
                          19: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: 5In45d5yPgAgu4EKrWednA3s/tNDYrqkLBEAtmGlKjI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 12:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:01:6d:17:37:ef:44:28:76:cc:49:99:8f:b9:39:c7:ea:e4:42:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: Sep  8 07:47:03 2025 GMT
            Not After : Sep 11 17:13:03 2025 GMT
        Subject: CN=CCFADB9CE14C5D6B387BB9B7F339CCC142BD43FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4e:b2:ed:ee:a1:13:b7:85:52:dc:7d:e5:c7:
                    2a:49:bc:de:cd:f1:5d:87:64:2a:7b:28:67:ec:67:
                    a3:56:74:08:c7:c8:35:a4:18:c8:61:6d:87:fd:39:
                    a7:a5:dc:66:8e:e9:ba:94:f8:f2:5c:64:8f:ef:e8:
                    92:ec:9e:5c:9b:35:43:2d:35:12:95:c5:c8:18:3a:
                    3e:5c:cd:14:26:6d:0b:9c:b6:89:f2:2f:ef:2b:55:
                    66:d9:6e:e0:d9:86:5d:ec:12:ae:f5:03:7c:75:bc:
                    40:54:1c:3d:4b:c1:fd:31:ce:2c:8c:8c:de:89:7a:
                    78:6d:9c:b5:26:14:71:19:34:39:63:e1:31:ea:b7:
                    0a:31:e5:1d:c4:69:8b:7a:d4:37:63:27:2d:f8:b8:
                    38:39:d5:af:58:6f:0f:13:40:72:42:89:cb:24:5e:
                    5c:0f:ce:ed:b6:78:43:59:c4:d0:13:0b:45:2a:d2:
                    c6:c8:55:83:f4:ec:ca:39:7c:d8:07:2f:8d:96:de:
                    5f:ee:e3:0f:95:99:91:06:67:01:4a:b4:4b:93:20:
                    7c:32:8d:de:26:77:91:47:e5:96:fd:00:6d:29:38:
                    fe:48:7a:89:37:2b:fa:e9:52:af:2f:96:44:79:46:
                    03:ee:35:3c:29:35:07:6b:2a:b7:b3:3d:f6:d6:77:
                    df:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FA:DB:9C:E1:4C:5D:6B:38:7B:B9:B7:F3:39:CC:C1:42:BD:43:FF
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3b:c1:52:0d:61:0a:6f:e7:6d:91:5f:06:cc:9c:88:c4:66:
         97:66:29:e0:6a:3d:8c:fe:37:bf:b1:13:c5:59:4c:16:02:b8:
         8c:31:fb:f5:c7:75:b6:77:dc:63:4f:8d:f9:5d:96:61:d9:d4:
         54:f9:8f:6b:ec:df:c9:27:db:78:20:64:3d:cc:3a:83:fc:c0:
         50:a2:a3:26:e1:fc:fa:63:f2:52:82:6f:63:00:77:23:c5:6f:
         fd:36:58:0b:7e:b7:65:01:5b:18:a9:88:0e:d2:a3:27:fc:25:
         6f:d8:5f:a1:57:90:de:0f:cc:41:c3:4b:1c:16:8f:91:a9:61:
         e2:f9:ef:74:c3:bc:9b:5a:a2:85:d3:f4:e0:3a:88:88:13:9a:
         29:36:64:33:04:8e:7b:67:eb:89:eb:d9:45:a8:f6:5e:be:1d:
         f2:36:fc:4b:20:ec:e6:7f:a6:27:95:fd:d0:b3:f9:20:64:f5:
         f9:1e:4f:06:b4:22:ed:dc:be:48:47:f0:db:dc:c3:41:41:3b:
         19:97:6a:c8:6a:75:ed:41:78:a3:f7:6d:ee:a1:0d:d5:c5:9d:
         fd:7e:49:7b:ab:bc:45:3f:61:db:f0:b8:97:ad:cb:7b:2a:41:
         31:be:a3:6f:0e:28:0f:65:27:c4:7d:a0:e1:76:fa:cb:27:c6:
         db:3a:c2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:45:47 2025 by rpki-client