Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
File:                     DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft (raw, json)
Hash identifier:          Iq0lNPbNaQgijHqnBCctIgsK2DMwziz9SFlQCqVT2DE=
Subject key identifier:   B5:67:31:E6:67:C1:6F:0E:91:F6:5B:AB:58:8D:23:21:2D:15:A0:F8
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       1FBB7C065E8025C4114181AF46523E9DC9CB8D93
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
Manifest number:          0201
Signing time:             Thu 21 Aug 2025 08:10:56 +0000
Manifest this update:     Thu 21 Aug 2025 08:05:56 +0000
Manifest next update:     Sun 24 Aug 2025 18:05:56 +0000
Files and hashes:         1: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: 7NwT3lu9JZjfjgapimGfIHaWTUgpUh5i3OuwyUj48VY=)
                          2: 3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa (hash: 5tTNaFKVIpcsc/okIuKSdd47tmmVdXhx+ntRKQSJMJQ=)
                          3: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: 1GWI9DsalLLnVqal8oinWe9NrHYqZtqJkFvL9lNkK+c=)
                          4: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: D7vL0dWhHLWGMsR8H6EfhySZTfu+/ovgCxiI8LpMnhg=)
                          5: 3130332e3131382e3137352e302f32342d3234203d3e20323130353337.roa (hash: H9HoLlwsPZ7vWOyU7iY4WK1IEAYm6ZYFQe1/pX+yL6k=)
                          6: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: kR8T9q/RgSSIceyvyByw5FPl6k8a1Y38HMh9CIjccZE=)
                          7: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 9b88BYrc5fW60hCTvccg2BM34mQg6ZvvmRF6BzjVMcc=)
                          8: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: Wp9W2Rj7SOYCUcu19j3p/Fdm3AlKEhaeQ0agpMYNbvU=)
                          9: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: oHm/b4iyQLSGBhCpt6FnAGvZb8oOHkZH9fWssNMlC38=)
                          10: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: +BXNEKTyQIjcl0qPczbAlblVHqKtw7MqFu+APMhxSxk=)
                          11: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl (hash: 9V1jqhpOyK8iY3m7mIafCQOdke1aHImewInH6Jiuojo=)
                          12: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: 0f2PA52uub2AIW3HVhP+kRWDT2sjTpqTW3vdzs5HzME=)
                          13: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: ZErCRMzj3m+Fl5KnJq4RrHkwrZjyK1a28QhPXfjqsjA=)
                          14: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: rTgQmdFwVK4QH13LPVhNkKRBGW9YevRVeOcoVmRvwXw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 18:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bb:7c:06:5e:80:25:c4:11:41:81:af:46:52:3e:9d:c9:cb:8d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Aug 21 08:05:56 2025 GMT
            Not After : Aug 24 18:05:56 2025 GMT
        Subject: CN=B56731E667C16F0E91F65BAB588D23212D15A0F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fb:cd:0b:57:49:37:2f:e5:fd:a7:de:ae:f2:
                    6c:3e:8c:35:6c:1e:cf:dd:c2:1c:43:cc:1a:c0:ba:
                    ea:67:3b:d7:fa:3c:f9:ac:c4:02:fe:a2:2d:8c:29:
                    4d:be:84:62:77:11:4e:3f:f3:da:80:64:e5:95:9c:
                    01:76:47:30:6c:48:54:94:dc:6b:d5:c7:3e:9d:42:
                    17:cc:cc:c1:5c:d3:07:2c:22:f4:53:cc:13:50:e3:
                    f2:21:38:43:28:ab:d8:81:90:85:43:4d:9d:7e:03:
                    f6:a2:1e:d4:21:09:25:2b:2c:59:34:cb:cd:62:b9:
                    10:a0:be:e6:79:2a:d3:5c:a5:a3:49:ea:e6:71:3c:
                    c0:0d:d3:30:20:aa:44:40:ba:82:05:0d:70:d7:b9:
                    90:5a:fa:25:29:75:c3:e3:c6:9e:22:db:ef:e9:98:
                    e7:9a:f9:59:9f:b4:ce:7a:c2:68:ce:53:bf:e7:6a:
                    bb:bf:e4:a2:1b:61:e5:eb:06:d8:c3:8d:41:c1:bf:
                    80:a4:ea:53:44:01:82:f5:35:ec:fb:96:ad:4a:03:
                    ad:ed:9f:98:38:e4:3d:eb:fc:f1:2e:3c:5a:cd:b9:
                    87:05:79:76:30:ce:e9:89:50:9c:57:ed:95:ec:85:
                    62:72:b0:24:15:f6:67:ab:43:df:51:ab:de:02:68:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:67:31:E6:67:C1:6F:0E:91:F6:5B:AB:58:8D:23:21:2D:15:A0:F8
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d5:d9:a6:60:ce:7d:b0:76:b0:a5:33:84:b2:14:06:ce:68:
         d6:ef:81:5e:38:4b:77:24:69:d6:59:0f:d4:de:d4:f0:d2:cc:
         1c:9c:ae:ce:b1:97:36:d7:f5:0d:76:78:d9:73:c8:86:e0:8e:
         16:54:73:9b:17:b4:9e:b7:2e:65:97:d0:ea:b1:38:85:3e:68:
         0a:60:d5:a0:bf:2c:a8:43:92:82:87:96:b4:30:23:28:f4:d7:
         85:0c:95:a0:5f:92:63:35:48:5d:72:6d:47:b7:0c:a0:ca:e7:
         44:28:c2:0b:98:83:3f:02:cc:65:4b:98:3b:94:22:1d:a8:82:
         79:93:b9:79:68:a1:0b:a3:0a:ec:b7:be:4e:d4:42:8e:8e:57:
         d2:3d:7e:9b:f5:33:0c:e1:10:59:28:88:ae:f3:61:e5:68:df:
         e5:97:e9:bb:9a:a5:aa:a7:25:dc:f0:e7:b2:29:2b:59:4a:4d:
         30:40:68:b6:d8:4f:c8:7b:fc:af:08:e7:14:6b:8c:d1:78:a3:
         b2:7e:58:2a:f2:ac:d4:44:1d:9e:0d:03:c4:fc:1a:64:88:89:
         06:8d:1e:ee:2b:45:94:16:e5:48:b0:59:12:1d:81:df:1c:d6:
         3c:bd:59:46:bb:5d:93:99:ff:96:08:63:1e:09:7c:6b:7c:27:
         0c:b5:50:3b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUH7t8Bl6AJcQRQYGvRlI+ncnLjZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZC
MDhFRkJGMzAeFw0yNTA4MjEwODA1NTZaFw0yNTA4MjQxODA1NTZaMDMxMTAvBgNV
BAMTKEI1NjczMUU2NjdDMTZGMEU5MUY2NUJBQjU4OEQyMzIxMkQxNUEwRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+80LV0k3L+X9p96u8mw+jDVs
Hs/dwhxDzBrAuupnO9f6PPmsxAL+oi2MKU2+hGJ3EU4/89qAZOWVnAF2RzBsSFSU
3GvVxz6dQhfMzMFc0wcsIvRTzBNQ4/IhOEMoq9iBkIVDTZ1+A/aiHtQhCSUrLFk0
y81iuRCgvuZ5KtNcpaNJ6uZxPMAN0zAgqkRAuoIFDXDXuZBa+iUpdcPjxp4i2+/p
mOea+VmftM56wmjOU7/naru/5KIbYeXrBtjDjUHBv4Ck6lNEAYL1Nez7lq1KA63t
n5g45D3r/PEuPFrNuYcFeXYwzumJUJxX7ZXshWJysCQV9merQ99Rq94CaBQbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtWcx5mfBbw6R9lurWI0jIS0VoPgwHwYDVR0j
BBgwFoAU27GMz1iRRSSvsRP+EzWcxrCO+/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
N2Q5ZDdjYi02Y2ZiLTRkZTAtOWRhYS1kMjIyYjdhODkwNzIvMC9EQkIxOENDRjU4
OTE0NTI0QUZCMTEzRkUxMzM1OUNDNkIwOEVGQkYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZCMDhF
RkJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdkOWQ3Y2ItNmNmYi00ZGUwLTlk
YWEtZDIyMmI3YTg5MDcyLzAvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlD
QzZCMDhFRkJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAzV2aZgzn2wdrClM4SyFAbOaNbvgV44S3ck
adZZD9Te1PDSzBycrs6xlzbX9Q12eNlzyIbgjhZUc5sXtJ63LmWX0OqxOIU+aApg
1aC/LKhDkoKHlrQwIyj014UMlaBfkmM1SF1ybUe3DKDK50QowguYgz8CzGVLmDuU
Ih2ognmTuXlooQujCuy3vk7UQo6OV9I9fpv1MwzhEFkoiK7zYeVo3+WX6buapaqn
Jdzw57IpK1lKTTBAaLbYT8h7/K8I5xRrjNF4o7J+WCryrNREHZ4NA8T8GmSIiQaN
Hu4rRZQW5UiwWRIdgd8c1jy9WUa7XZOZ/5YIYx4JfGt8Jwy1UDs=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:54 2025 by rpki-client