Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
File:                     5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft (raw, json)
Hash identifier:          VODqPjI1jYtjZno+xqhuZw3Kq/6vGI0Vx+twzvO7D40=
Subject key identifier:   2F:47:93:20:8D:93:1E:30:4F:DF:BD:C8:8F:85:2B:AA:59:77:64:2E
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       528971C1AEADB965BA82E8DD942D3C6787C698BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
Manifest number:          0501
Signing time:             Wed 03 Sep 2025 12:40:01 +0000
Manifest this update:     Wed 03 Sep 2025 12:35:01 +0000
Manifest next update:     Sat 06 Sep 2025 23:51:01 +0000
Files and hashes:         1: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: r/svlrZcSr5sJUDVP99x6FJY548aywPcFlNv37DJt2Y=)
                          2: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: dTEDIPJlLGDlRHB30/PzLB90DYFKiiQue74QgGKHEVI=)
                          3: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: qGI/gZ+/LHiM5HYO/jSSY227nu7Rlo4VufnCOUnRtK4=)
                          4: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: tUFNikuzZ5Dxu83zUyF9psB1ZAXrbnO+JVBeZVWaO4g=)
                          5: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: 9KZ9F45elzM13kws/U0IoAzbbI/YdymyAIpoe5+fMUI=)
                          6: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: mp213bICEXwH+LqnHma8nvPV6BFgfv4aiHAHQpn9yQs=)
                          7: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: ghDv+E88LbsHp+yiOmZsjAqDuH4NzWOqybkoMe5BmV8=)
                          8: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl (hash: Gx9jxSQqH8t5L/dty19adlS7IqR0X81368TmUrHexbI=)
                          9: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: oriUzK7mgQPCjaTV1H4IccgCRtyIm4Y5jf+70OM+bhw=)
                          10: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: orPkEwdvzbgAdBqwJx5fyoqFz6nU1AjYY7pCrQmrMAU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Sep 2025 23:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:89:71:c1:ae:ad:b9:65:ba:82:e8:dd:94:2d:3c:67:87:c6:98:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Sep  3 12:35:01 2025 GMT
            Not After : Sep  6 23:51:01 2025 GMT
        Subject: CN=2F4793208D931E304FDFBDC88F852BAA5977642E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:43:60:1f:0b:2b:1f:67:e4:a7:36:31:48:b0:
                    0a:de:c2:d7:82:8f:c7:bc:aa:a6:89:92:ff:3d:e6:
                    62:4b:ea:b3:f3:1c:61:3f:98:cc:71:c4:2d:2d:f1:
                    aa:d6:f3:63:76:bf:ec:ff:a2:40:6b:a1:7d:11:29:
                    15:97:be:a4:f7:1a:a1:76:67:cd:0a:3a:4e:4d:27:
                    4f:43:4e:8b:df:d7:25:e6:85:c4:67:8a:1e:f1:aa:
                    29:38:7e:de:d4:3e:83:e3:bf:64:d6:b4:cc:6a:d8:
                    5e:c5:bf:76:dc:aa:64:ca:ce:32:96:b1:ee:94:c5:
                    22:89:3f:a5:6b:b7:a3:56:cb:02:9b:80:8f:af:e4:
                    09:e4:9a:84:55:31:d8:14:37:22:0a:2b:7f:51:fb:
                    3d:a4:ac:84:66:97:58:42:b0:df:a5:9a:01:0b:95:
                    c0:28:79:f5:d9:54:b2:a2:5f:89:a2:75:4d:3f:59:
                    4f:a6:4f:0e:04:94:6a:2d:7f:f3:bc:23:1a:b9:28:
                    95:a7:0e:1b:fc:3b:ae:6e:35:e1:f8:a3:00:34:36:
                    f1:ee:b7:f0:af:6a:b7:0c:f1:bc:cb:32:78:68:d3:
                    80:83:63:9e:0f:63:f4:f5:d4:11:33:57:fd:d8:0d:
                    25:34:16:d3:cc:ec:58:f8:1a:f3:99:ff:d6:ad:9d:
                    60:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:47:93:20:8D:93:1E:30:4F:DF:BD:C8:8F:85:2B:AA:59:77:64:2E
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:52:29:60:6e:49:40:cb:40:d2:c7:3a:df:7b:12:fb:5b:2e:
         ec:82:ff:7b:ca:8e:c4:4d:01:2a:31:e1:ee:e9:41:07:5e:94:
         bc:49:78:27:e8:69:d3:5f:e0:58:85:a6:cb:07:dd:44:96:05:
         4e:ca:33:90:d1:d2:42:a9:ec:26:27:20:1d:59:4c:89:c1:43:
         36:25:ac:5f:5b:a3:f1:fe:46:c2:bc:e1:d2:5b:75:83:55:8d:
         0d:2f:73:d2:50:a8:d0:6b:03:ea:8d:ef:c9:78:c2:ae:6b:75:
         d7:80:3b:25:84:4e:52:c1:dc:ec:fe:14:ae:80:29:6f:ca:ec:
         f5:47:6f:63:86:70:32:7a:96:be:17:40:c3:f3:29:e2:48:82:
         e7:eb:9d:5e:9c:16:bc:a6:12:e2:60:96:18:cc:92:1b:a1:c4:
         46:5b:86:76:16:bd:7e:59:cd:cf:74:84:9d:11:8f:95:be:5d:
         cb:6c:ea:b9:0b:d8:99:69:ee:da:cc:be:55:83:60:83:24:29:
         ba:e2:61:1a:f9:6d:5f:2e:cc:f8:21:55:1d:b4:c5:9c:12:67:
         44:e6:7e:cc:48:9d:0a:44:0a:a0:b9:8a:e1:43:26:e3:f1:af:
         77:7b:74:75:3c:de:66:75:15:7b:15:f4:89:ad:35:a0:fb:1b:
         28:f3:11:b7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUolxwa6tuWW6gujdlC08Z4fGmLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1
REUwRUEwQzAeFw0yNTA5MDMxMjM1MDFaFw0yNTA5MDYyMzUxMDFaMDMxMTAvBgNV
BAMTKDJGNDc5MzIwOEQ5MzFFMzA0RkRGQkRDODhGODUyQkFBNTk3NzY0MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQ2AfCysfZ+SnNjFIsArewteC
j8e8qqaJkv895mJL6rPzHGE/mMxxxC0t8arW82N2v+z/okBroX0RKRWXvqT3GqF2
Z80KOk5NJ09DTovf1yXmhcRnih7xqik4ft7UPoPjv2TWtMxq2F7Fv3bcqmTKzjKW
se6UxSKJP6Vrt6NWywKbgI+v5AnkmoRVMdgUNyIKK39R+z2krIRml1hCsN+lmgEL
lcAoefXZVLKiX4midU0/WU+mTw4ElGotf/O8Ixq5KJWnDhv8O65uNeH4owA0NvHu
t/CvarcM8bzLMnho04CDY54PY/T11BEzV/3YDSU0FtPM7Fj4GvOZ/9atnWDVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUL0eTII2THjBP373Ij4Urqll3ZC4wHwYDVR0j
BBgwFoAUURCnF+/paxLl06R16bIXnl3g6gwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjA3ZDkyOS00Y2E4LTRmNTMtYTI5OC01ZTMzYmUxZjg2MDQvMC81MTEwQTcxN0VG
RTk2QjEyRTVEM0E0NzVFOUIyMTc5RTVERTBFQTBDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1REUw
RUEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYwN2Q5MjktNGNhOC00ZjUzLWEy
OTgtNWUzM2JlMWY4NjA0LzAvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3
OUU1REUwRUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGRSKWBuSUDLQNLHOt97EvtbLuyC/3vKjsRN
ASox4e7pQQdelLxJeCfoadNf4FiFpssH3USWBU7KM5DR0kKp7CYnIB1ZTInBQzYl
rF9bo/H+RsK84dJbdYNVjQ0vc9JQqNBrA+qN78l4wq5rddeAOyWETlLB3Oz+FK6A
KW/K7PVHb2OGcDJ6lr4XQMPzKeJIgufrnV6cFrymEuJglhjMkhuhxEZbhnYWvX5Z
zc90hJ0Rj5W+Xcts6rkL2Jlp7trMvlWDYIMkKbriYRr5bV8uzPghVR20xZwSZ0Tm
fsxInQpECqC5iuFDJuPxr3d7dHU83mZ1FXsV9ImtNaD7GyjzEbc=
-----END CERTIFICATE-----
Generated at Fri Sep 5 10:36:16 2025 by rpki-client