Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
File:                     8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft (raw, json)
Hash identifier:          9biEvMCLUoWoZ9TEGg1566Le+S6gfS0Qb2R0TTZwWbA=
Subject key identifier:   9F:C3:8C:E9:56:46:25:8A:EC:FC:AE:FD:48:CA:AA:C8:F1:53:23:93
Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6
Certificate issuer:       /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
Certificate serial:       738C4ECDB43255C6A41DCB508042E1C7A1F7C3C1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
Manifest number:          03E3
Signing time:             Wed 03 Sep 2025 21:52:10 +0000
Manifest this update:     Wed 03 Sep 2025 21:47:10 +0000
Manifest next update:     Sun 07 Sep 2025 01:34:10 +0000
Files and hashes:         1: 323430343a636163303a626162653a3a2f34382d3438203d3e20313339343137.roa (hash: kecTFoic7r1wTr3NJ9A3b39hJiSlgzYyqWz3ChKgWu8=)
                          2: 323430343a636163303a316135623a3a2f34382d3438203d3e20313339343137.roa (hash: XIq5Jxfb9ma1VO6ZcqWrbd6msJG9iOe53aiAMMFJVTU=)
                          3: 323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa (hash: Dbjg+vJVIA/12edzQmA2oSGprW6vIebqnxwMgbbyHSg=)
                          4: 323430343a636163303a3a2f33322d3332203d3e20313339343137.roa (hash: U8X775Erg4KvjSwclcGWHuukxGyQmMyExSHIbSXOqZk=)
                          5: 323430343a636163303a3a2f34382d3438203d3e20313339343137.roa (hash: uZbhPmuZtG5Md74mhofu8RolET7EoiAnsaXNVE7s4XM=)
                          6: 323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa (hash: FMTDgQIzYg7LkyNw3U8hdH5e4+pcbdgl2jE3AQpixqA=)
                          7: 323430343a636163303a666630303a3a2f34302d3430203d3e20313339343137.roa (hash: KSjkQ8QwpppJxiJX2WOeGB6CdtpxTCvIwn/6JwQhtW0=)
                          8: 323430343a636163303a313030303a3a2f34382d3438203d3e20313339343137.roa (hash: mLEiuQCorcJxBHY4wKeDm97Zmemknme8ExMbOOO5lWE=)
                          9: 3130332e3133382e3131362e302f32342d3234203d3e20313339343137.roa (hash: JzP3prHOgFH/3pcbrciCFSrBpBQbgCsXcDvrDwP8+gk=)
                          10: 323430343a636163303a313164353a3a2f34382d3438203d3e20313339343137.roa (hash: lN6IUo8XcirGXXI7zultPSLQfKt0KthPpzYWW5DChjw=)
                          11: 3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa (hash: HvZ4UYj4GoZLl8NmzF+1Ghc67KVbsVnEc2wguYPDAT4=)
                          12: 323430343a636163303a633032653a3a2f34382d3438203d3e20313339343137.roa (hash: /ipEpvxAxMNFMGkmyQkvLOJHP/gNCq+5XDe4sK/nkoY=)
                          13: 8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl (hash: GGi0iHEAny3DYG7qY7+/9gO0NvPovzPD1Zt7MvZFuV8=)
                          14: 323430343a636163303a3164353a3a2f34382d3438203d3e20313339343137.roa (hash: oRfT4X0Sy9tnBNiJsxtxMTFV7eQ+myy/o8BOZoNv2r8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl
                          rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Sep 2025 01:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8c:4e:cd:b4:32:55:c6:a4:1d:cb:50:80:42:e1:c7:a1:f7:c3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
        Validity
            Not Before: Sep  3 21:47:10 2025 GMT
            Not After : Sep  7 01:34:10 2025 GMT
        Subject: CN=9FC38CE95646258AECFCAEFD48CAAAC8F1532393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:70:27:37:49:90:16:d9:30:44:0c:05:f0:42:
                    ce:e2:65:ed:4d:a8:5c:dd:ae:43:89:72:63:4b:a4:
                    ed:cb:ee:1b:fe:07:0d:59:58:94:f4:12:67:7b:ed:
                    5d:12:ce:fe:f2:10:e9:2d:00:ec:7b:4b:57:69:ee:
                    d2:b6:95:d6:f3:a9:bf:ba:5d:35:70:c5:c9:f1:03:
                    d0:bc:6c:c2:b8:ef:66:e8:c1:ea:0a:a4:b2:d1:a3:
                    07:f8:65:ef:a3:d1:13:4b:e6:33:91:39:fe:d2:d9:
                    57:b2:67:5b:ee:72:41:2b:e7:bb:62:66:b0:1b:fc:
                    ee:c2:51:c7:33:6c:f2:27:db:7e:0b:5d:f9:ec:e9:
                    f2:06:ff:a3:e5:4d:db:2e:7f:90:2c:78:55:3a:6b:
                    08:85:99:69:4a:9c:3c:fa:a5:dd:b0:45:ca:f1:bf:
                    dd:56:30:03:4a:e3:0d:8b:35:22:93:90:c9:a9:61:
                    63:fa:81:12:d7:3d:52:7e:0d:75:e7:3d:c6:16:eb:
                    9c:79:34:9d:dc:4c:ca:97:06:e1:41:06:b9:f3:b4:
                    14:51:b2:18:01:24:ca:d2:21:41:af:c8:94:36:b4:
                    0f:ac:34:b2:53:78:ef:61:ee:92:b8:72:b7:76:6e:
                    49:57:d0:34:71:d1:9e:9c:a7:09:3b:49:44:01:7d:
                    50:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C3:8C:E9:56:46:25:8A:EC:FC:AE:FD:48:CA:AA:C8:F1:53:23:93
            X509v3 Authority Key Identifier:
                keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:15:e3:bd:d2:91:36:35:c7:51:7b:7f:e0:1a:ce:bd:ba:c3:
         04:cc:4e:0c:f0:38:d3:a2:4d:26:d4:0c:29:da:ca:2d:7c:9e:
         aa:31:42:74:b6:73:bb:39:b5:64:1f:71:07:9e:30:95:f4:18:
         b7:79:ad:a2:1d:6f:92:7e:9c:ff:81:1c:79:12:01:b6:fd:8d:
         2d:51:83:d9:c4:fe:9f:11:0d:9d:f3:bb:92:ae:14:0d:a1:e8:
         f1:58:32:e9:47:76:46:0d:a6:44:96:da:5d:f4:e2:fa:bd:67:
         79:07:ef:74:8f:c2:14:56:e4:da:c2:4c:cb:c1:27:86:55:2e:
         58:d7:29:53:b9:10:4f:9e:4a:24:54:d4:6a:83:2b:d7:bc:61:
         53:32:41:c6:63:16:69:d4:8c:30:7e:63:da:a6:3c:a8:db:81:
         a5:72:40:f0:86:ea:34:2e:c1:08:28:ec:2c:ed:9e:3f:af:3f:
         1b:b9:31:09:c5:69:20:35:c7:ef:0e:6b:96:19:83:d6:7c:08:
         bd:48:07:57:de:2b:cd:5b:cc:51:cd:09:10:30:e9:51:da:de:
         8c:44:6e:79:31:48:67:94:de:3d:46:fc:60:b4:c8:4d:33:e5:
         a6:85:80:6d:62:9a:3d:45:94:c3:5a:6e:87:4a:2f:74:71:b3:
         f6:85:8a:09
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc4xOzbQyVcakHctQgELhx6H3w8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3
MkRBRURENjAeFw0yNTA5MDMyMTQ3MTBaFw0yNTA5MDcwMTM0MTBaMDMxMTAvBgNV
BAMTKDlGQzM4Q0U5NTY0NjI1OEFFQ0ZDQUVGRDQ4Q0FBQUM4RjE1MzIzOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfcCc3SZAW2TBEDAXwQs7iZe1N
qFzdrkOJcmNLpO3L7hv+Bw1ZWJT0Emd77V0Szv7yEOktAOx7S1dp7tK2ldbzqb+6
XTVwxcnxA9C8bMK472boweoKpLLRowf4Ze+j0RNL5jOROf7S2VeyZ1vuckEr57ti
ZrAb/O7CUcczbPIn234LXfns6fIG/6PlTdsuf5AseFU6awiFmWlKnDz6pd2wRcrx
v91WMANK4w2LNSKTkMmpYWP6gRLXPVJ+DXXnPcYW65x5NJ3cTMqXBuFBBrnztBRR
shgBJMrSIUGvyJQ2tA+sNLJTeO9h7pK4crd2bklX0DRx0Z6cpwk7SUQBfVC/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUn8OM6VZGJYrs/K79SMqqyPFTI5MwHwYDVR0j
BBgwFoAUj8SJnKPWEqRcHB3AKiH2M3La7dYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTQxM2ZmNC0yMDJiLTQ5OTktYjQ1ZC03M2M5NzJmMTAxMTYvMC84RkM0ODk5Q0Ez
RDYxMkE0NUMxQzFEQzAyQTIxRjYzMzcyREFFREQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3MkRB
RURENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU0MTNmZjQtMjAyYi00OTk5LWI0
NWQtNzNjOTcyZjEwMTE2LzAvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2
MzM3MkRBRURENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKwV473SkTY1x1F7f+Aazr26wwTMTgzwONOi
TSbUDCnayi18nqoxQnS2c7s5tWQfcQeeMJX0GLd5raIdb5J+nP+BHHkSAbb9jS1R
g9nE/p8RDZ3zu5KuFA2h6PFYMulHdkYNpkSW2l304vq9Z3kH73SPwhRW5NrCTMvB
J4ZVLljXKVO5EE+eSiRU1GqDK9e8YVMyQcZjFmnUjDB+Y9qmPKjbgaVyQPCG6jQu
wQgo7Cztnj+vPxu5MQnFaSA1x+8Oa5YZg9Z8CL1IB1feK81bzFHNCRAw6VHa3oxE
bnkxSGeU3j1G/GC0yE0z5aaFgG1imj1FlMNabodKL3Rxs/aFigk=
-----END CERTIFICATE-----
Generated at Fri Sep 5 10:34:25 2025 by rpki-client