Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
File:                     10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json)
Hash identifier:          VgbUVZWF3NMdYJ7eQ4WH0eXBKZdtdDsFaANAc52a+JA=
Subject key identifier:   5A:C1:39:A5:15:D4:5E:7A:F8:DF:42:71:15:54:AB:CC:BF:4E:D7:7D
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       1B992989D0328781B3A0AE96F5AA252BCAFEA7AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
Manifest number:          050B
Signing time:             Sat 23 Aug 2025 12:32:03 +0000
Manifest this update:     Sat 23 Aug 2025 12:27:03 +0000
Manifest next update:     Tue 26 Aug 2025 18:16:03 +0000
Files and hashes:         1: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: Htx/fOPObPi6ATUBVsfJbs0qEhGzdpd2T6aHa8E9uiQ=)
                          2: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: nIo8hwuirVHnHkmWMKJHXedLZK1IsiVp+gI1eB5wIWM=)
                          3: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: uDN60ejcwmufdw9lRATsCm8TNe8pbZTXPxEDJDFJrtI=)
                          4: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: u7HIVNgPT8nOMxVXRQicLF9a4KID/8Fh81X51PzO+cY=)
                          5: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: rAFjuW4Ob+s+8+VX602W+l2HlUbwposeuUvXP5ZI5FU=)
                          6: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +XotVkUYpiJ83hc89EWoIGxGRhhZu0xl8ZYTUA6r/r8=)
                          7: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: jQaUGbMnprmPG29gShaOC88VLFUYJfQ53uR+ITg6jLM=)
                          8: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: UmYtyoPy4ZvZZv42ISGmkzTMakpIhylvPVTLu1TKOwE=)
                          9: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: NQhanJjaDTGlHqgVpp7WZk1oBiHC9a8024nRDhFHB5U=)
                          10: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: qwxYNTh6xKdp2uATuIFR5O42e+8ng5z76v1e121JSWc=)
                          11: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: YJQzg1U9jA4AWFaUYLdryvvEck232YTbH13zq010OFw=)
                          12: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: 85lx2+O0c1Tye1V/YF4G0HFNwN1FRAy3MZlTA2YttNs=)
                          13: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: R5DcBcZsZ/tVTFJsSzzQGY3wUUyH7B2253S6p3vidZI=)
                          14: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: TkM6f8/8bl8VJM/y37L1BIkGsrEx/IcZC/SKW3F/E78=)
                          15: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: Oqj6PoE4F8AznRA3O47Q/vammp0q4o8hLusJKPdYYNc=)
                          16: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: lrGsnHWNUUeWw86IHGDadF3wESv1aEvqYzkKNtLSTYI=)
                          17: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: wPrR/CuGOoimfu2ESRqwKfIX+XXz6lk/Ile4WLcqwSQ=)
                          18: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: 8yEyL4RD7Qa35m9yx8L60c6viJWD8aIwuREP+x+PT4o=)
                          19: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: YHjBm2LvUfFx3i20nJ1UxN03ptuvpE1OSaTUjFP0j/s=)
                          20: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: SjzDmLz46qIS/nJ0zn3gr3kiE+RR+H/5PGnqBHKVams=)
                          21: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: C8WKEDh35WX/j3rJi1+NJXVLBziYbBALI4qujCiFsgQ=)
                          22: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: wXhkK7uiuOpjHC2A0NMyoBCjpeit4b5RIwLk/h9wbpQ=)
                          23: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=)
                          24: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: noUPhk/lMic4mWf4jKWj6yuqbnoenZnLHoMy6mHYvdE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 13:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:99:29:89:d0:32:87:81:b3:a0:ae:96:f5:aa:25:2b:ca:fe:a7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Aug 23 12:27:03 2025 GMT
            Not After : Aug 26 18:16:03 2025 GMT
        Subject: CN=5AC139A515D45E7AF8DF42711554ABCCBF4ED77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:45:39:4e:15:d9:fc:09:fe:6a:a1:f5:8d:fa:
                    b8:82:20:99:a2:2b:51:d3:f7:ce:ea:fe:c6:1d:83:
                    49:aa:6c:2e:e5:41:6b:f1:da:01:31:59:43:d6:a2:
                    b3:96:da:b1:98:f6:4a:04:31:f5:5c:b1:05:bb:67:
                    63:24:01:65:10:54:bd:4e:11:02:12:fb:8d:22:5d:
                    58:8a:8f:40:82:63:a5:6a:a8:81:a3:8d:3a:2d:66:
                    e1:d3:0f:18:e5:07:3f:3a:4d:b8:a1:87:33:69:29:
                    af:75:80:7c:ad:e8:d3:4d:e3:35:d8:05:ab:a3:2e:
                    bf:5a:d0:10:89:b7:33:15:9f:6d:89:ef:73:c3:a8:
                    15:d8:7b:5e:f6:8c:2f:28:26:27:2a:ea:d0:ed:32:
                    ec:8e:32:ad:42:f1:17:5e:a2:5b:f2:8f:78:e0:37:
                    66:30:b7:c9:9e:89:f8:03:5d:d1:63:e5:eb:ba:b9:
                    62:a1:8e:5d:26:59:94:14:55:b8:09:ab:8f:35:1a:
                    2e:1c:6f:de:db:4b:6b:af:f5:1c:db:92:1f:a8:db:
                    00:35:94:bc:f6:2b:24:67:c4:47:f3:39:7c:d4:69:
                    b5:20:34:4d:95:89:89:d5:96:3e:53:d4:96:9d:40:
                    24:33:6b:b5:76:ff:55:9a:fc:df:86:8e:97:41:cb:
                    e3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C1:39:A5:15:D4:5E:7A:F8:DF:42:71:15:54:AB:CC:BF:4E:D7:7D
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ce:41:f4:d3:93:da:40:f9:9a:32:3c:f9:79:77:b9:3a:d2:
         32:8b:2e:dc:51:ff:74:c1:45:43:37:8b:58:c5:b1:fb:64:9b:
         59:9b:5f:7e:78:7e:1e:59:d3:ee:52:98:2f:ec:36:c2:e5:c1:
         f7:6c:a8:c6:77:3a:b4:fa:60:91:09:89:f0:7c:a0:f9:e1:57:
         06:71:5f:9d:6e:92:60:4a:a8:f0:a0:02:37:7b:1e:bd:8e:af:
         87:33:dd:8a:a2:f7:00:e7:1a:80:7f:9e:e7:23:47:73:4e:1b:
         6f:2d:3c:1a:59:0d:35:8d:4e:c7:41:eb:58:33:8d:ff:7c:bc:
         c7:c8:19:ee:6e:f9:4d:49:84:b6:52:1c:1e:b5:9f:da:07:04:
         38:ce:fc:29:6a:08:45:4e:c0:0d:23:d5:f9:2e:d9:d7:e5:30:
         03:cc:f1:6b:ce:97:62:96:e6:43:87:4c:53:ed:2e:d6:f6:8f:
         bf:54:a7:56:2a:dd:76:b8:66:0f:0b:64:57:5a:96:b5:d7:9f:
         65:52:21:00:5f:eb:26:43:98:b6:68:e9:32:79:b8:f8:bc:0b:
         a3:03:ae:94:e1:69:10:f1:8a:61:9a:53:9d:81:de:5f:af:9c:
         62:57:14:c9:36:fa:8c:43:f3:3d:81:30:94:d6:b3:92:c4:44:
         cc:73:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:39 2025 by rpki-client