Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft
File:                     D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json)
Hash identifier:          RCEqdjpwvZi7Q8ohKUXrNLYDpkko2OQTsYEb46bLD6w=
Subject key identifier:   0E:39:E7:F9:F0:6D:F3:3E:93:69:5C:32:D9:3D:10:65:EA:E4:B6:D8
Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29
Certificate issuer:       /CN=D3BDA2123144839640DA280D6B971C12D0C9C929
Certificate serial:       0400FFD796E109D530B66729245CEE629D2AFEAF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft
Manifest number:          01C8
Signing time:             Fri 22 Aug 2025 10:01:43 +0000
Manifest this update:     Fri 22 Aug 2025 09:56:43 +0000
Manifest next update:     Mon 25 Aug 2025 15:59:43 +0000
Files and hashes:         1: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: QdCw43x/9kW+BltcXfqotWhMcMtcjpqs4l4ioQDkfKg=)
                          2: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: 4X1JxcSmayIhgSwsgvbbBh0nVrfOfdW4VG7Ltuesc5s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl
                          rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 15:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:00:ff:d7:96:e1:09:d5:30:b6:67:29:24:5c:ee:62:9d:2a:fe:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929
        Validity
            Not Before: Aug 22 09:56:43 2025 GMT
            Not After : Aug 25 15:59:43 2025 GMT
        Subject: CN=0E39E7F9F06DF33E93695C32D93D1065EAE4B6D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:f5:82:50:0c:02:63:b6:6c:9d:c7:d4:05:
                    3c:f3:de:49:25:a7:a2:d0:02:b2:a9:a2:90:f9:52:
                    d0:bd:c0:25:8e:57:3e:ce:88:64:1b:99:6e:c7:7e:
                    e3:58:0e:0a:3a:39:d2:70:4f:de:4a:89:dd:7a:6d:
                    5a:5c:a2:e3:22:57:c5:16:7d:58:6d:f1:53:2b:ed:
                    60:d5:fa:51:d4:69:e9:e1:c5:5d:8c:b0:c3:08:9f:
                    fb:e2:1b:6a:49:93:5d:ee:0d:0b:f7:91:07:35:9f:
                    c8:6c:7b:a9:d1:51:f1:97:e7:49:d8:3c:54:9a:79:
                    7f:7f:88:21:16:1a:7b:7b:49:0e:fb:72:a9:bc:d4:
                    c5:65:ea:0e:d1:64:7e:0c:7f:1f:7c:60:a5:f9:4a:
                    17:76:e8:5e:fd:0b:f2:fb:a0:be:66:0b:40:9e:19:
                    cf:13:8f:9b:6e:31:53:30:f1:94:71:4c:e4:ff:e7:
                    29:21:e8:aa:85:b7:4b:6c:82:51:e5:a5:4d:e3:83:
                    d7:83:63:a4:33:59:6e:90:fb:6c:1a:72:e6:ae:f5:
                    62:dd:e3:59:35:1a:4e:95:cd:05:cc:ba:c8:4a:c2:
                    1f:14:23:74:c1:36:f5:a6:19:32:c2:8a:bd:18:43:
                    a8:eb:71:09:93:dc:7e:5d:60:33:65:01:7a:1d:03:
                    dc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:39:E7:F9:F0:6D:F3:3E:93:69:5C:32:D9:3D:10:65:EA:E4:B6:D8
            X509v3 Authority Key Identifier:
                keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d7:f9:bc:c3:9e:d8:4f:ed:89:9d:0f:ed:8c:38:76:30:0d:
         fd:e6:4d:9a:bf:29:e6:8c:90:56:65:cb:dc:84:0f:26:3e:c0:
         3e:88:a1:19:81:96:b8:04:dc:31:46:fb:10:c6:ad:eb:7e:f7:
         5c:35:c6:02:4e:0a:1d:64:d5:a0:3f:8e:90:fa:a4:c9:ec:20:
         fe:88:c2:fc:b7:0b:3c:e2:31:d3:75:fc:b9:0b:db:b7:c4:d0:
         07:7d:53:91:d3:9a:1a:0f:ab:a4:40:7c:4b:3e:f8:dd:e5:92:
         d6:df:86:a5:5b:c4:be:c3:f4:42:18:6e:98:bd:76:25:12:a4:
         25:64:f6:82:a0:f1:c2:30:1b:de:d1:48:d3:d1:9d:32:74:0c:
         0a:84:1a:2b:87:8f:e4:fe:da:ea:76:c9:7b:6c:f9:ea:85:54:
         40:ce:0c:97:6f:25:4b:d7:ad:bf:fa:39:aa:9d:d4:02:a1:6b:
         fd:73:90:c7:80:24:f4:87:ab:6d:78:33:d3:7f:b0:90:1c:aa:
         92:aa:87:ab:44:ed:eb:99:02:9c:37:32:9f:69:ad:da:46:2c:
         cc:d7:31:25:de:70:6e:b7:03:98:28:fb:1b:c8:5d:ea:32:fd:
         b5:2c:b7:7c:c1:58:3b:fc:34:5a:05:c8:49:f4:ce:be:9f:f9:
         17:d8:2a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:56:36 2025 by rpki-client