Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
File:                     10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json)
Hash identifier:          8gsYBcDamKNJI6GVYWPg6ddxx9hV5CbFn224rIFH+eI=
Subject key identifier:   51:3A:8C:48:D5:E8:F5:9F:88:0E:60:11:EB:08:7D:0B:77:22:31:2E
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       0258195959B877FD196F99761457D22DA45BE333
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
Manifest number:          04F2
Signing time:             Tue 01 Jul 2025 05:01:56 +0000
Manifest this update:     Tue 01 Jul 2025 04:56:56 +0000
Manifest next update:     Fri 04 Jul 2025 10:45:56 +0000
Files and hashes:         1: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: SjzDmLz46qIS/nJ0zn3gr3kiE+RR+H/5PGnqBHKVams=)
                          2: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: wPrR/CuGOoimfu2ESRqwKfIX+XXz6lk/Ile4WLcqwSQ=)
                          3: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: uDN60ejcwmufdw9lRATsCm8TNe8pbZTXPxEDJDFJrtI=)
                          4: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: noUPhk/lMic4mWf4jKWj6yuqbnoenZnLHoMy6mHYvdE=)
                          5: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: u7HIVNgPT8nOMxVXRQicLF9a4KID/8Fh81X51PzO+cY=)
                          6: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +XotVkUYpiJ83hc89EWoIGxGRhhZu0xl8ZYTUA6r/r8=)
                          7: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: R5DcBcZsZ/tVTFJsSzzQGY3wUUyH7B2253S6p3vidZI=)
                          8: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: rAFjuW4Ob+s+8+VX602W+l2HlUbwposeuUvXP5ZI5FU=)
                          9: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: Htx/fOPObPi6ATUBVsfJbs0qEhGzdpd2T6aHa8E9uiQ=)
                          10: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: 9oKO6g1ubJMPn+KO0b/5NKvsIE0sjvdEPhP+zwJwgK8=)
                          11: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: jQaUGbMnprmPG29gShaOC88VLFUYJfQ53uR+ITg6jLM=)
                          12: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: Oqj6PoE4F8AznRA3O47Q/vammp0q4o8hLusJKPdYYNc=)
                          13: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: /L5xs6PGKpRT/JJeBTXRVK04bWdHgmJFRa12gb3q/ao=)
                          14: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: wXhkK7uiuOpjHC2A0NMyoBCjpeit4b5RIwLk/h9wbpQ=)
                          15: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: TkM6f8/8bl8VJM/y37L1BIkGsrEx/IcZC/SKW3F/E78=)
                          16: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: i8BpctBtDR1cL+NnxkziOtf21/F0kdql2uvKW16NHeU=)
                          17: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: K244iScN8M4O5u7S2cH3/W0yr++iJmaE7tZQk4Lm388=)
                          18: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: Gw/GPl5gYxttHp5faN5aSb3Qqxvl1LvpI7r17Iv2Euw=)
                          19: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: C8WKEDh35WX/j3rJi1+NJXVLBziYbBALI4qujCiFsgQ=)
                          20: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: UmYtyoPy4ZvZZv42ISGmkzTMakpIhylvPVTLu1TKOwE=)
                          21: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: YJQzg1U9jA4AWFaUYLdryvvEck232YTbH13zq010OFw=)
                          22: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: 85lx2+O0c1Tye1V/YF4G0HFNwN1FRAy3MZlTA2YttNs=)
                          23: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: NQhanJjaDTGlHqgVpp7WZk1oBiHC9a8024nRDhFHB5U=)
                          24: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 10:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:58:19:59:59:b8:77:fd:19:6f:99:76:14:57:d2:2d:a4:5b:e3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Jul  1 04:56:56 2025 GMT
            Not After : Jul  4 10:45:56 2025 GMT
        Subject: CN=513A8C48D5E8F59F880E6011EB087D0B7722312E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:01:27:14:31:8f:ec:38:8a:bc:52:31:7b:
                    88:bc:8d:7b:85:de:92:98:67:5d:c7:c2:bc:15:5c:
                    3d:c7:94:35:a5:94:8e:07:4b:15:1f:f4:cf:85:0e:
                    0e:c4:0a:29:71:d5:06:29:64:16:23:cd:cc:ab:55:
                    60:91:67:e8:63:9b:9f:cc:9b:c4:c3:a2:c2:31:da:
                    7f:c6:14:17:21:e2:2c:be:0e:7a:4b:ce:82:2c:bd:
                    bd:3c:53:69:6c:79:09:33:a8:09:4d:28:c1:4d:96:
                    cd:35:40:80:46:2d:73:0e:5f:20:64:cc:8c:29:52:
                    dd:f2:85:f4:1b:40:b5:38:c8:4c:3f:4d:e2:18:39:
                    e3:1d:1a:54:57:40:27:2e:d0:f4:1e:32:0c:c8:25:
                    54:1f:63:15:6c:f2:f0:c7:6d:f2:ef:b5:27:74:5a:
                    b3:e1:be:9e:8e:6b:f2:09:23:07:b1:f0:87:96:0a:
                    68:4c:d0:fd:b5:e4:cc:68:3b:72:8a:2f:2e:3d:5b:
                    e7:37:06:6e:06:d2:39:8e:11:2e:1f:e9:e0:44:42:
                    36:71:49:18:59:4a:22:80:29:ac:a3:de:a7:64:e5:
                    11:3c:48:68:a2:3a:15:83:a2:a6:de:39:bb:90:e4:
                    a3:a6:79:2d:13:58:30:af:b8:bb:ed:6b:a6:16:b0:
                    46:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3A:8C:48:D5:E8:F5:9F:88:0E:60:11:EB:08:7D:0B:77:22:31:2E
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:18:ae:c6:a7:7b:29:40:ec:f0:b9:9d:79:91:ff:d2:a3:23:
         33:06:ab:17:e7:70:69:95:4e:39:36:f7:3d:5f:3a:f5:58:76:
         cc:65:70:b3:2d:48:47:7e:6b:74:5a:ac:df:1e:0a:77:7e:72:
         99:2b:5e:54:d4:cb:42:46:56:bc:bd:9a:40:ed:9d:d0:40:f5:
         0a:24:91:90:41:0c:58:bd:98:3c:16:90:8f:1d:0f:b1:79:be:
         49:8b:c1:1e:ab:91:9c:51:44:31:7b:e2:00:ad:c5:6e:54:36:
         92:d5:c9:7e:81:89:3e:36:33:ce:69:f8:9a:9e:f5:65:07:51:
         70:9d:fd:6f:8e:26:73:e0:e6:7d:95:f7:95:54:20:8d:76:e7:
         be:ac:20:a2:e7:80:eb:5f:d4:26:d3:05:d6:57:e1:25:0c:06:
         e6:70:ed:62:b5:dd:bd:4b:5d:61:c6:d7:25:9c:b5:0d:ac:73:
         57:7b:2b:5b:63:c1:b8:a9:c5:71:e0:bd:bb:9d:92:32:25:76:
         67:ac:10:18:65:55:50:fa:84:47:89:75:ec:f1:de:5b:6b:56:
         f8:47:89:72:3b:d0:a9:14:7b:df:ad:7d:7e:c3:03:34:ee:71:
         6e:e7:95:e0:26:17:62:0b:a1:db:75:c6:5f:5d:87:5c:ee:90:
         8e:cb:83:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:18:47 2025 by rpki-client