Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
File:                     2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json)
Hash identifier:          8R0MgO20S9iY1DwQrtmFNqRU+OPBci/TKSH+neWnm18=
Subject key identifier:   25:9F:35:07:11:DE:92:25:CD:56:41:E7:3F:12:83:93:AD:5D:CD:63
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       6A57C2A4A8861A45EEF2357617A1D97F804E472B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
Manifest number:          04E3
Signing time:             Sun 29 Jun 2025 01:51:49 +0000
Manifest this update:     Sun 29 Jun 2025 01:46:49 +0000
Manifest next update:     Wed 02 Jul 2025 01:51:49 +0000
Files and hashes:         1: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: afV3DuPWJs229SMBfZ6L1zzWwdYeqEIzLl+zAnPOPc8=)
                          2: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: oOJaEiRPwPQflN2dss15Y4scB4IK0srdXT4sQ+7Afow=)
                          3: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: M1sZzZsXerpK67gBWx+pwUlEiAdZNEC8sdxke6ageOg=)
                          4: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: iEwos51aWtJInprKu1evUCiZY2FYY6kr/E794RVuLRw=)
                          5: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: 2I4LUvDndEY+56Z45Zke7IZg+TWoP7vGoCnv2WeX4qA=)
                          6: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: sTkMNKXQHwGJCIGPBjMVfmb030wQu4FTAnEhwXDkkhA=)
                          7: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: MNsCflRoTlLLKOy1y3qU2xpl0KIGEKY8wK60n9pU+7g=)
                          8: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: 7CnLEJTxSmV5XmK1oL/nqrOB4/valIkxzWgpmSqfSL0=)
                          9: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: euoMpvL4eG72VF7oEqlEoSVWhRjwaeq3y0huB9mjd6w=)
                          10: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: vVu41fldo66s3GTiO3p70Y9WjrS6PJn4ErhvMTYrL+0=)
                          11: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: akxHC8MKM3EFjHhlpdlYP+/pk7TEX/1Nsq+20Bs3aRk=)
                          12: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: GOw6BJn4XT5wEmOGVeX/6A1aWsswmeb6q3J3zFZr2JM=)
                          13: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: 3hpRgS72xqbHw/rzHvrZvr06sNkUSk2YClN/PS2G8VY=)
                          14: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: Ge6toEI3GzH1rudvQNuKe4sTOqkKcImFzmaL0fB9K2A=)
                          15: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: Rjbhv9edaboHxu8zehTXAVaGiJWP5SEtMWZfSRiWBmE=)
                          16: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: DnA9pVTlc5t5JUQmGO4bpvoQrAWbOAtoPuSdy5Z19iI=)
                          17: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: nbkYpz+Buhh+XcMqkAbLahjlkTuDcneq98AvbJE0oqQ=)
                          18: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: bu8PQupPQERGQ/wzLVVe3ZYhIOmwELfx937WvLW0lzc=)
                          19: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: 9DRtavO7TXPRRO9r4nJOU2l6z0jZDLCjiuHMpKPIfJU=)
                          20: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: impujDOUoN2BKQyTyiVBUJjqkOdpqC1eOXOcnJD1Ge8=)
                          21: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: BmEaO16p1CV5y0V3iJr8YidxhV9qux3v/SICizhYNm4=)
                          22: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: ktBqyZQvnsVWZJg0o8QMMym54n+sUY8BtLk1pA6WS3M=)
                          23: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: O4758ltnaCnZlk7IYIR3KUuRIpNS2S4KZ7yVd+rr0y0=)
                          24: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: qU/iCVYcrH5NwRFFUnpTANC1C4dNa/LYJXSxq8pN8yQ=)
                          25: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: Pm3ejHe0iKXyhk2uLd7JZnNwWHWfKfQSqqt4OykxpQA=)
                          26: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: l7IvhWfbT+lx2dajFWFQHmgoo+JryhgkVz+DjITDf5w=)
                          27: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: t73bJSev/MnTBxda4w51EgtY3s6q8wQKW/7viVMLk2M=)
                          28: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: SpSJ2mlMQ8WdpZZy+WtaRGJCKRn7SkirsoH4mwvq2iA=)
                          29: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: b1d2IpMrPiIjBD6MTNOx5pdXixsLXZonVO5D5NGCeqQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 01:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:57:c2:a4:a8:86:1a:45:ee:f2:35:76:17:a1:d9:7f:80:4e:47:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jun 29 01:46:49 2025 GMT
            Not After : Jul  2 01:51:49 2025 GMT
        Subject: CN=259F350711DE9225CD5641E73F128393AD5DCD63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:35:cc:e6:23:9a:53:c4:40:b8:18:43:51:e2:
                    13:83:87:b7:2a:21:98:d2:b8:d6:82:c6:fe:44:ce:
                    7d:04:3a:ee:0e:f0:10:e2:5b:f4:f8:9e:25:80:65:
                    88:a2:b0:0c:83:ea:4c:05:5a:0a:43:77:53:03:d7:
                    c6:a6:2b:ab:59:dd:49:ae:12:f6:78:19:4d:d9:26:
                    b8:b9:88:06:a9:6e:f4:1a:ab:c1:6b:0f:66:96:92:
                    a3:44:43:23:83:4b:d5:ff:78:1c:59:3f:cd:48:d5:
                    ca:03:48:35:da:e9:f5:5c:3e:71:66:43:14:b1:97:
                    69:8f:7f:f9:47:95:a9:bd:03:fe:dd:c1:cd:40:70:
                    8f:b3:22:0b:63:74:c5:32:f2:b4:61:3b:57:ff:85:
                    92:13:83:21:f8:1f:2a:f5:75:e5:1a:97:b0:45:80:
                    cf:0e:f2:2f:22:39:75:24:fb:52:bb:2a:26:f5:5c:
                    09:98:fc:5a:88:26:84:90:fb:55:34:8e:21:cf:6a:
                    d5:1a:ce:4e:81:3f:c1:26:c2:6b:ac:9d:f8:50:52:
                    ca:ba:4c:33:9a:4b:9a:b0:f4:ea:3e:2e:79:ca:65:
                    93:3d:98:74:e3:e6:46:60:cd:cd:ae:74:3c:dc:01:
                    d2:36:da:24:b0:77:23:18:40:80:7c:ce:4c:b5:55:
                    b9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9F:35:07:11:DE:92:25:CD:56:41:E7:3F:12:83:93:AD:5D:CD:63
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7f:6e:0c:75:37:79:99:14:29:20:5c:be:65:2b:60:71:34:
         97:cf:27:3c:55:3c:6d:b7:58:8f:34:3f:5b:4f:e3:19:bb:cc:
         24:2a:ad:fc:dc:95:49:85:42:1f:67:0b:42:2a:5a:1c:90:4a:
         f1:ef:7c:3e:94:0a:de:ec:69:c8:44:e5:67:b1:91:c7:e7:25:
         8f:a7:c8:bf:dc:0f:8f:62:37:7b:cf:2d:4a:d9:4d:a8:09:26:
         de:2a:fb:20:c3:e1:0e:e2:1f:b3:6d:09:3a:c9:e6:3a:51:8d:
         61:02:4a:36:48:76:8b:9d:21:68:2e:96:f0:69:dc:07:05:87:
         4f:38:ff:76:93:d0:e0:6a:06:b3:b3:2b:3a:3a:1b:9b:b2:8a:
         a9:7d:e2:0d:8f:89:03:25:c1:1f:1e:79:1e:59:12:24:b2:8f:
         21:05:ec:5b:9d:d2:d5:e4:d4:66:50:d9:a5:f5:4c:94:58:15:
         4c:e2:72:84:82:ac:48:f3:ea:dc:ab:a3:99:6d:d2:4d:1a:6a:
         ce:ef:29:f5:8f:03:f4:84:a2:b6:a1:23:b8:86:ce:31:94:bc:
         8e:81:89:4a:c9:bc:24:9f:bc:0e:42:79:f7:19:b6:01:8c:0d:
         b0:ab:fc:f6:bd:c8:5a:7d:45:17:14:6a:b6:d9:8d:d2:8b:40:
         14:0b:f4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:42:14 2025 by rpki-client