Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
File:                     DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft (raw, json)
Hash identifier:          Rb/sgCO8qk+Niq4F671m4oHVGOUWAUTv8A4wkPCPZ9A=
Subject key identifier:   66:CC:A5:4D:6F:D8:35:C7:AB:16:FC:A6:FA:11:D0:1C:31:CC:0D:95
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       13E94FE663B31ECBEE092FE31B56401503232F61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
Manifest number:          01E9
Signing time:             Sat 28 Jun 2025 23:00:54 +0000
Manifest this update:     Sat 28 Jun 2025 22:55:54 +0000
Manifest next update:     Wed 02 Jul 2025 10:52:54 +0000
Files and hashes:         1: 3130332e3131382e3137352e302f32342d3234203d3e20323130353337.roa (hash: H9HoLlwsPZ7vWOyU7iY4WK1IEAYm6ZYFQe1/pX+yL6k=)
                          2: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 9b88BYrc5fW60hCTvccg2BM34mQg6ZvvmRF6BzjVMcc=)
                          3: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: 1GWI9DsalLLnVqal8oinWe9NrHYqZtqJkFvL9lNkK+c=)
                          4: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: Wp9W2Rj7SOYCUcu19j3p/Fdm3AlKEhaeQ0agpMYNbvU=)
                          5: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: 7NwT3lu9JZjfjgapimGfIHaWTUgpUh5i3OuwyUj48VY=)
                          6: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: oHm/b4iyQLSGBhCpt6FnAGvZb8oOHkZH9fWssNMlC38=)
                          7: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl (hash: uT5s1Ire6DeKPXDwYC6L2cCZ08Z6e7F8T3AwozIGkXM=)
                          8: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: 0f2PA52uub2AIW3HVhP+kRWDT2sjTpqTW3vdzs5HzME=)
                          9: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: rTgQmdFwVK4QH13LPVhNkKRBGW9YevRVeOcoVmRvwXw=)
                          10: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: D7vL0dWhHLWGMsR8H6EfhySZTfu+/ovgCxiI8LpMnhg=)
                          11: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: ZErCRMzj3m+Fl5KnJq4RrHkwrZjyK1a28QhPXfjqsjA=)
                          12: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: kR8T9q/RgSSIceyvyByw5FPl6k8a1Y38HMh9CIjccZE=)
                          13: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: +BXNEKTyQIjcl0qPczbAlblVHqKtw7MqFu+APMhxSxk=)
                          14: 3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa (hash: 5tTNaFKVIpcsc/okIuKSdd47tmmVdXhx+ntRKQSJMJQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e9:4f:e6:63:b3:1e:cb:ee:09:2f:e3:1b:56:40:15:03:23:2f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Jun 28 22:55:54 2025 GMT
            Not After : Jul  2 10:52:54 2025 GMT
        Subject: CN=66CCA54D6FD835C7AB16FCA6FA11D01C31CC0D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c4:a8:c2:a0:ea:61:57:5d:9f:46:58:56:f6:
                    36:ac:49:6f:0b:a0:8f:36:d1:6d:55:77:fd:0f:0f:
                    4a:54:62:33:fe:7f:f4:84:e2:13:35:c9:ad:47:3b:
                    04:43:3d:de:dd:e1:cf:a0:7e:f8:f3:6d:aa:2c:59:
                    2f:7e:c7:45:a8:be:15:61:09:77:ae:c3:55:96:80:
                    75:5c:de:d4:3e:0f:b4:c4:fe:0d:6b:63:00:77:8b:
                    74:bf:ef:d6:25:e2:37:1d:b4:e8:1f:34:7f:fe:9e:
                    0e:c1:28:e7:fa:d5:06:2a:61:5f:f6:65:37:d9:ef:
                    84:26:51:4f:ff:ba:04:52:8f:3f:01:ee:a5:47:df:
                    9c:d8:3c:fc:d2:d2:0c:70:d7:a7:85:c6:c1:21:04:
                    97:b3:74:fc:c2:22:55:f1:71:e2:f3:d4:c7:a3:b1:
                    f2:d6:94:bb:0d:87:aa:68:9d:32:cf:5a:12:92:bf:
                    f5:e7:b5:5f:43:71:85:cd:b1:a7:e6:07:8f:a8:3d:
                    6a:67:de:62:4e:f6:f6:48:1e:f1:fd:5a:ad:31:a8:
                    ea:b3:a3:5b:6b:e0:a9:21:ce:61:4a:b2:32:b6:b8:
                    63:e6:0b:89:7a:b8:cc:69:47:3c:90:8c:89:07:a8:
                    a8:f5:12:d5:5e:a5:70:ee:2e:a1:6f:6c:27:a2:92:
                    65:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CC:A5:4D:6F:D8:35:C7:AB:16:FC:A6:FA:11:D0:1C:31:CC:0D:95
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:75:8f:cc:7c:3b:8e:51:03:80:e6:fa:4f:76:9d:56:8d:ce:
         0c:ae:01:18:a2:e5:f9:1a:50:92:b7:d8:36:60:91:eb:47:3c:
         86:2d:27:12:bd:e4:a0:f0:a7:a1:0f:cb:0d:3a:00:cc:53:ba:
         9b:eb:71:41:d6:3d:f5:51:3f:82:8f:0a:74:09:7f:b6:f8:2a:
         0c:7f:b1:66:fd:da:82:96:a1:1b:56:2b:54:c6:ea:e7:c6:7c:
         72:14:b5:b9:2e:ca:b9:3e:61:c3:60:57:e2:5d:65:f5:1c:d2:
         62:f4:ee:61:86:24:3b:ae:9c:4a:d9:0e:77:5c:e9:91:f5:35:
         c5:98:a2:4f:88:cf:00:e6:97:2a:d2:19:2b:99:0d:99:fa:f2:
         4b:5f:db:ce:11:f3:d2:38:90:1d:47:ce:ff:fe:dc:9b:dd:1b:
         9c:4e:ca:7b:3d:4c:9d:13:57:d4:74:6f:68:3c:0b:8a:e4:6e:
         44:33:1d:96:1d:e0:1b:b6:85:d0:eb:ce:09:ca:db:c6:3d:34:
         55:a1:0e:5f:b3:ab:12:d8:d4:3a:d1:22:9f:c0:59:3b:de:e1:
         1c:b8:d4:7a:5e:a4:d6:96:f2:26:19:64:30:42:93:1d:a5:09:
         7a:82:8c:55:f9:17:0f:2e:20:9e:65:cb:d0:15:24:cf:dd:aa:
         66:a3:3b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:03:51 2025 by rpki-client