Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
File:                     F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft (raw, json)
Hash identifier:          Mxmo0gtT6bmI1XyN6KQMvqKilHvoXxjo1pm3HClNeUs=
Subject key identifier:   BB:F0:97:C7:12:0F:4F:31:06:1D:80:58:E8:8D:07:1A:32:04:2A:36
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Certificate issuer:       /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial:       73DB1269D6F26FED1C587619FD08A1FA4B5B130E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
Manifest number:          0333
Signing time:             Sat 28 Jun 2025 15:01:54 +0000
Manifest this update:     Sat 28 Jun 2025 14:56:54 +0000
Manifest next update:     Wed 02 Jul 2025 00:55:54 +0000
Files and hashes:         1: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (hash: aOzMI9PHIaU1+JYfqj3PgTWOSMZrS1G3wjVf+KJcQuA=)
                          2: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (hash: 6Gn2L5Gc0xaArWW6fS4YuSQAyW4Nw2vh1NIUwUVsqyA=)
                          3: 3230322e39312e33312e302f32342d3234203d3e203234353238.roa (hash: PYlzhe+IAch9XO1on1CijnQRACSSXKfMv/Z8ZKEBHq8=)
                          4: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (hash: FgWk4lEb+N8VyrkhQkA7AsDgO4pzlnxAR+so0eMn0MM=)
                          5: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (hash: 3mPJMmSU87HxOCz1kx2GnX89IU0Xnf2eTb3lccTca1k=)
                          6: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (hash: tGztSZAQJ35/hLuECvtTcpELlM1IpNOZ8zjyOffPPVE=)
                          7: 3230322e39312e32392e302f32342d3234203d3e203234353238.roa (hash: p6w84x+sTkId9KJBAsf0out+ASQwEBO6MAkMqXPQJmY=)
                          8: 3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (hash: WLK6N6lYU6j7qmPlWLYHBoNW0CsjIHOLp3K/3Jfw78k=)
                          9: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (hash: f+5HOc/sgnjP7t42vcbumcmwD5c7eyke5qlw/e0UPsk=)
                          10: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (hash: sxphp4GIGCV7hhFuUuJXQKH7CdkIoeuJ+Uc7gPS1Oeo=)
                          11: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (hash: nikRTC901Bllan4GreFOs5fithEDsAsxTQDrjRSiako=)
                          12: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (hash: 8CMqMpoCs6b6HNia3ifuD/WpzvcJj1kVCsO8zPSQ7wc=)
                          13: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (hash: nSNHUbZiqo6P3F9SIZ9EN5nCLPpwycyYrfB+M+PV3zw=)
                          14: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (hash: KiKi/4BGJg0K48DdjCfOcOBa77JCOo4OxuIg38BvrXI=)
                          15: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (hash: od2C/ltQ6m1xjAT8szqDpHM3qB6Kr8NBlMw+dYe1JvU=)
                          16: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl (hash: BK69mkCOqDOGUQ4RA2SHx8X4MczVJspXmU8qsQYNReM=)
                          17: 3230322e39312e33302e302f32342d3234203d3e203234353238.roa (hash: SRVdqccofthtkv2uwfSLIsY2tVzjR9tDeypT6l5PKBc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
                          rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 00:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:db:12:69:d6:f2:6f:ed:1c:58:76:19:fd:08:a1:fa:4b:5b:13:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
        Validity
            Not Before: Jun 28 14:56:54 2025 GMT
            Not After : Jul  2 00:55:54 2025 GMT
        Subject: CN=BBF097C7120F4F31061D8058E88D071A32042A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:00:9b:40:d9:df:3b:79:0d:7f:4e:e8:2e:
                    3a:f4:53:86:37:8a:6e:62:61:8f:5c:a7:70:ce:40:
                    7a:1e:48:76:cb:47:3c:37:b0:32:fe:c3:d1:d0:7f:
                    ee:db:e9:99:c4:f2:e6:b7:e5:df:c8:b5:b0:a1:13:
                    5a:39:28:2c:6b:44:b6:a3:ed:61:a7:bf:e0:16:2c:
                    3e:19:28:34:50:e3:4c:1c:f6:93:19:74:51:6d:46:
                    da:4d:92:83:d1:06:30:eb:bb:40:1e:8f:bd:e0:7a:
                    ef:5e:b8:8d:de:da:4a:3f:4a:d4:03:2a:d9:77:b6:
                    e9:d9:e5:45:5c:b2:0e:d4:97:99:5e:59:ce:ed:2e:
                    57:74:68:96:59:38:95:65:b5:fa:80:1e:a1:ec:fe:
                    cc:76:be:ca:b8:bb:36:61:b6:2d:79:4e:48:68:09:
                    fc:f8:79:f4:a8:d2:2a:61:a4:b1:b1:08:17:c1:3d:
                    6b:3c:0b:65:e0:64:df:55:6d:e9:65:70:b6:95:2b:
                    fd:d0:e4:e8:28:3b:d5:60:e4:50:07:2d:ff:90:89:
                    b4:24:67:29:58:ac:30:78:e7:b1:d6:fd:fb:5d:f3:
                    0f:a6:b2:dc:0f:b2:46:70:d9:87:35:fb:c9:02:6d:
                    8f:73:83:9c:a6:d4:7b:d0:01:3f:55:3d:da:79:78:
                    92:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F0:97:C7:12:0F:4F:31:06:1D:80:58:E8:8D:07:1A:32:04:2A:36
            X509v3 Authority Key Identifier:
                keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:cc:ad:d5:a0:58:8d:6d:cc:27:88:fd:06:17:1a:12:3b:42:
         cf:ba:73:82:52:27:04:25:e2:d1:16:e2:58:3c:93:2a:a2:2e:
         5c:e6:b9:4e:c9:00:b0:38:58:de:a2:6d:fd:ff:dc:61:95:1a:
         70:04:82:ca:94:97:04:4b:c4:61:2f:ca:f1:67:ef:1e:b6:1c:
         7e:cd:80:3b:26:64:94:53:4b:0a:9f:84:12:2c:b8:6f:de:9d:
         8a:32:f5:11:21:fd:19:97:db:df:5a:1a:49:d7:0f:d4:75:af:
         58:54:38:6f:ea:e9:69:0a:0d:2a:4d:1a:ed:d0:f3:fc:35:c5:
         32:ee:d7:98:9d:55:96:f8:d4:17:42:89:7f:92:3c:f5:37:97:
         dc:39:4e:bd:4d:86:ab:57:e9:c9:b0:d2:14:5b:3b:c7:c8:89:
         41:30:3e:f1:0d:46:08:c2:82:13:63:a5:51:d2:9c:0a:13:80:
         69:59:c8:43:ab:fd:50:dd:ec:52:82:e7:66:fd:26:f4:01:8c:
         12:29:85:6e:33:ab:06:7c:ee:db:e2:bd:34:a0:08:e9:1c:92:
         20:92:1a:97:c7:52:d6:d3:af:9e:2c:80:bf:c3:7f:74:df:08:
         81:6a:6f:a4:61:83:b2:8e:81:ac:6e:1f:50:ae:e2:f1:96:c3:
         90:c3:44:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:50:36 2025 by rpki-client