Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
File:                     667078BDA093F84040F3016D179CABA67F68A647.mft (raw, json)
Hash identifier:          OPyvCXF9E0I6jLSIRNOCmCuzBZZ7CbNIVNcK4Df0Rzw=
Subject key identifier:   76:06:A6:DD:C6:9A:FB:61:AD:75:AC:9D:DB:7D:06:8F:36:74:6D:8D
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       14358E4D8BC903BE3527C6DB85929964AB31656D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
Manifest number:          028E
Signing time:             Sat 28 Jun 2025 05:11:22 +0000
Manifest this update:     Sat 28 Jun 2025 05:06:22 +0000
Manifest next update:     Tue 01 Jul 2025 13:07:22 +0000
Files and hashes:         1: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: v5G7kmND4W3J/K5+mTTiIU5a1MXpKeI9ErNdzwXM+xc=)
                          2: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: oIugf7SkpkLh2rA1SUGcdVhDVwaoCqTNTgMKOIhVMMI=)
                          3: 667078BDA093F84040F3016D179CABA67F68A647.crl (hash: IgxdIvJNbbPvPJIFgoWsQrgZLbmOvInEm4lnz8BXkQI=)
                          4: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: f1PpRxL3xmZAFFxFfzO5NNMp7lmH15xQgW21SceJnv4=)
                          5: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: STQ8FWii/hKTuO2HgGm9t5vTCO9x73WQ7dbNQLgSBY8=)
                          6: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: KjBI4hI0AlEFbo2xU6Bm4rvZiTCH+24WsSGbJ4G6HvE=)
                          7: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: K7wbvP8VipTjZ61KDQJhbbGGoXz8zSKyn6wY7TPFZF8=)
                          8: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: gzAKun938h8MEEYn2Es4sjxOwM+BBzImFI8E5s6Tryg=)
                          9: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: bxs7h997RIiZF6c39aYCG2w95CeY51sHbMaUnM9gLUg=)
                          10: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: bikfKb1C7cQAEY1CyyouPcQSs6oSuCD6TbZ1wF/jE50=)
                          11: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: WznhULhoAr96hBAHamaaGBFJbGkn7dyLR/yoxDJeWgk=)
                          12: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: x4DDjlfJXD8JPTM+yjgeUkBoc/VsMYv5J2mqGIAVt3k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 13:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:35:8e:4d:8b:c9:03:be:35:27:c6:db:85:92:99:64:ab:31:65:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Jun 28 05:06:22 2025 GMT
            Not After : Jul  1 13:07:22 2025 GMT
        Subject: CN=7606A6DDC69AFB61AD75AC9DDB7D068F36746D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:03:6c:3a:4a:5f:bc:9a:1e:d1:6f:2e:00:65:
                    5d:e8:e8:24:fb:7e:0f:fe:01:ed:c3:a6:eb:fc:53:
                    ca:37:4b:68:09:f2:7a:92:4e:a0:4e:db:3c:1e:f4:
                    79:6a:7d:24:6b:b7:78:d7:69:58:24:69:5a:80:14:
                    50:79:a6:b3:b0:59:3e:cc:79:e4:5b:94:39:9e:c8:
                    e6:ee:0a:49:e1:99:55:a4:82:f4:a3:cf:94:3b:f7:
                    d0:b3:54:c7:ca:27:c3:47:4c:cd:a3:3c:db:43:c1:
                    26:d3:98:e2:9e:7b:b7:18:16:44:08:d3:a4:37:2b:
                    5c:cf:46:28:ad:76:b3:47:5a:ec:4d:9c:65:4d:45:
                    7c:33:c6:b3:65:27:28:02:c5:f6:df:72:58:7b:ea:
                    01:6b:b9:c5:6d:f1:7f:65:f8:ff:3e:22:c3:de:66:
                    15:4c:95:7a:df:34:06:b5:31:26:1f:65:20:4a:90:
                    74:0f:90:3e:f6:97:88:b6:de:85:9f:64:80:b8:62:
                    3e:6c:aa:f5:3b:6b:b6:c2:9b:5d:25:0f:fc:dc:36:
                    5f:a5:af:ec:a2:f3:3c:a1:cd:85:47:16:67:32:53:
                    07:36:e4:df:38:a1:2f:60:12:13:c8:b0:8a:e0:12:
                    25:5d:cf:dc:7f:d8:67:87:5c:87:06:dd:40:44:c2:
                    9d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:06:A6:DD:C6:9A:FB:61:AD:75:AC:9D:DB:7D:06:8F:36:74:6D:8D
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a0:50:2e:2f:1f:d2:62:5f:4a:fd:7a:e5:cf:89:5c:04:2d:
         34:f3:c0:1c:55:c7:3f:75:7c:d3:fd:e1:c3:47:02:46:6a:14:
         84:66:15:e1:d3:10:bf:c2:b5:52:7d:a9:20:51:f5:4b:35:ff:
         9b:64:d8:f4:59:4f:b6:31:ed:00:48:64:3f:80:f9:26:db:e1:
         80:b9:94:46:06:b5:63:cf:c9:fd:4d:80:15:97:9d:a4:81:a5:
         ee:4a:3f:eb:ae:3f:47:bf:18:ec:82:2e:5e:d2:d3:54:5a:75:
         26:5a:11:5d:3e:c1:45:08:01:37:e6:34:44:1a:a6:ee:c6:b3:
         c2:ec:d2:61:a6:8c:c5:56:7b:85:e9:45:e2:be:90:5d:fd:6e:
         e3:f3:e6:36:e4:bd:c6:4b:f0:ba:47:7a:1c:20:13:3b:e7:16:
         1d:b6:ef:98:f6:b6:41:22:94:b1:3a:00:69:f9:ec:97:7f:ad:
         8d:87:74:a8:b2:56:9d:29:dc:a0:dc:d6:22:89:b7:03:c1:a7:
         dd:d2:72:ed:7e:6d:cf:db:cd:fd:1e:3a:ad:dd:08:7a:f8:48:
         eb:d9:f7:ec:bd:13:19:5c:aa:e8:0a:c8:34:bf:8c:7d:ef:17:
         11:87:53:8d:66:82:f5:2a:af:33:ed:e1:2d:bb:16:36:8e:64:
         82:44:86:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:11:43 2025 by rpki-client