Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
File:                     49CDCA308C289D688C649C2303BECB3ED76B5054.mft (raw, json)
Hash identifier:          rfh5tAwprTUd/IWwH0s0DGflrE5yOlgSpTI1v5WDhFM=
Subject key identifier:   21:4E:FA:0B:A5:0C:89:30:AD:A4:54:C6:B7:B4:65:C2:A8:EF:27:27
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       5D31D3DB9919CC767D00F65551BC441713F33925
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
Manifest number:          0511
Signing time:             Sun 07 Sep 2025 18:41:11 +0000
Manifest this update:     Sun 07 Sep 2025 18:36:10 +0000
Manifest next update:     Wed 10 Sep 2025 20:40:10 +0000
Files and hashes:         1: 3130332e31362e3139392e302f32342d3234203d3e20313331373735.roa (hash: lh1ua1Y9ZtE2dDW45ObJ8+6IvX0lmoDB+fa6NG7jmTA=)
                          2: 3130332e31362e3139382e302f32332d3233203d3e20313331373735.roa (hash: 04eyxXbv9jngQdgYmmSjLsuCye8qiexJidy0wMhDXkQ=)
                          3: 3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa (hash: VOPS8e3VH0l6ubQIOcds4q8+0PaehGxHMdByhPPUMRk=)
                          4: 3230322e37342e3233382e302f32342d3234203d3e20313331373735.roa (hash: PNF09SxEelapDmbcZhAv/JlSjlnccRnMVMsb6Vjd5Cs=)
                          5: 3130332e3235312e34342e302f32342d3234203d3e20313331373735.roa (hash: Ha3WoHQ/zP70el2yWIeTgLkGHqYuIOHL7pH96V5JFfw=)
                          6: 3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa (hash: 6lzTZpzOtbXaisX77lh3zqfu4RoYr39Ke230rMF+BLA=)
                          7: 3130332e3235312e34342e302f32332d3233203d3e20313331373735.roa (hash: 38apIlW13UqRkBJC0AvLF1JxLSXx4uzPA7tj9m0g40E=)
                          8: 49CDCA308C289D688C649C2303BECB3ED76B5054.crl (hash: Ddpwv6LxX6HDbK6o9HRSSLXD8nVI9VwQWmq/6CJOzQU=)
                          9: 3230322e37342e3233392e302f32342d3234203d3e20313331373735.roa (hash: +XaFO38Q9dXCmJ85JQuHQCLrxReLtpZeqTNCnHE/ld8=)
                          10: 3230322e37342e3233362e302f32342d3234203d3e20313331373735.roa (hash: 6VuJVE5V+cRzw0YC3j26AjnB200tu5ynyJ2PlMkHwdk=)
                          11: 3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa (hash: GUJzG7I21c6XIuzE+3MXjSNzND91626bZhTZv88Tj9U=)
                          12: 3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa (hash: 2ttGNYSIno2YUVrl5iMDUeYoXTM+0/k8iShvnFHSZUg=)
                          13: 3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa (hash: 6e4gMBIWBCHTWU94MEtj6eyxSIoX56aVHgjbVxpfxNg=)
                          14: 3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa (hash: gEYK+18FP+7kBMfZJoRXCpV612TXysZxOtU9C0Gw8cc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 20:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:31:d3:db:99:19:cc:76:7d:00:f6:55:51:bc:44:17:13:f3:39:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Sep  7 18:36:10 2025 GMT
            Not After : Sep 10 20:40:10 2025 GMT
        Subject: CN=214EFA0BA50C8930ADA454C6B7B465C2A8EF2727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:68:2f:fd:13:fe:dd:6e:bc:a7:8b:23:0b:
                    01:a6:0a:8d:9f:8f:f9:f8:e2:36:9e:ab:19:97:d9:
                    12:5e:18:cb:be:0f:82:8a:a5:1f:35:0f:e7:3f:1e:
                    6e:9d:e9:19:c4:b5:4f:a6:6b:9e:dd:f8:ad:11:ef:
                    da:15:8d:9a:37:15:53:86:24:e3:0f:e2:38:f0:4c:
                    93:d1:d7:bc:07:ba:72:cb:00:6f:5b:02:7e:23:d3:
                    d9:5d:1e:c7:21:80:86:15:88:fb:81:39:21:d3:8f:
                    27:93:55:ee:0a:5e:4f:64:d7:ec:da:ad:e1:80:19:
                    58:5b:5d:75:ea:04:42:2e:9f:ae:dd:3b:78:0f:31:
                    c1:03:4a:cc:5e:af:68:ca:54:79:10:c3:11:6a:d1:
                    11:5d:86:a4:ed:58:6c:0e:29:71:e3:b6:ab:12:c5:
                    e0:a1:90:9b:5b:39:82:e2:1e:11:52:d1:46:20:4c:
                    59:fd:31:a3:fa:7e:ab:7b:f7:1e:60:63:26:26:0b:
                    6f:87:b8:e0:0a:0a:37:b5:70:6c:c4:26:a5:69:a3:
                    3d:0d:fb:74:03:35:ef:ad:58:01:24:a0:0f:74:f3:
                    f6:e0:a6:eb:2f:24:38:12:12:c7:86:9b:4b:68:69:
                    e7:36:b2:c5:7f:ae:e3:8f:76:97:48:43:82:fa:07:
                    50:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4E:FA:0B:A5:0C:89:30:AD:A4:54:C6:B7:B4:65:C2:A8:EF:27:27
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:82:3f:50:ff:a2:11:58:2b:15:01:5a:3b:a9:50:4a:e4:dd:
         f6:0f:d6:3b:73:4b:d9:a6:91:9a:cd:6c:18:ff:30:68:b8:64:
         61:14:27:28:e8:56:b7:97:d8:05:9e:b0:90:2d:ac:c6:c4:bd:
         49:a8:b8:b0:bf:19:29:ed:ec:18:38:77:29:cf:5b:13:cc:55:
         c5:91:0d:e7:e5:44:7e:dc:17:73:1d:e0:5e:a5:8d:8c:f7:f8:
         c5:20:c0:97:39:12:ef:44:d4:b1:b6:d6:9d:f9:79:c1:8a:21:
         5b:14:17:12:18:50:52:0d:59:4e:6c:8f:60:38:4d:0a:5a:46:
         f6:4e:69:d1:d3:75:3b:61:06:5f:69:4a:0e:59:6e:9d:11:d5:
         9e:c6:9f:a3:dd:1d:f7:9e:3a:61:30:5b:69:31:8c:43:69:79:
         4d:43:81:17:27:30:95:a5:24:ee:30:ff:6b:7b:76:19:93:35:
         ca:87:f2:08:d4:37:f0:50:c9:48:8a:c7:31:ac:47:48:6b:b5:
         e2:39:2a:b3:fd:73:36:65:d9:50:4e:bc:1e:a0:6d:6a:6e:e4:
         f8:e4:7b:dc:b5:21:3d:1b:c6:8d:7a:38:14:a7:b3:f9:0e:3f:
         fd:ec:24:b1:13:dd:50:20:5f:79:15:7c:3e:4d:a2:6f:12:e0:
         7f:5d:0a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 15:47:29 2025 by rpki-client