Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft
File:                     228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft (raw, json)
Hash identifier:          v34Pt6xY/kfalKQilVNP8t5zAajORQnLOzY9YiGQkrg=
Subject key identifier:   8E:66:66:80:30:03:AD:F3:37:A5:05:CC:A9:DD:8F:22:D8:2A:0F:CB
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Certificate issuer:       /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial:       1E3B41FD16E09A09500646AF415FB379B5727AA7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft
Manifest number:          01F6
Signing time:             Sun 19 Oct 2025 04:21:21 +0000
Manifest this update:     Sun 19 Oct 2025 04:16:21 +0000
Manifest next update:     Wed 22 Oct 2025 05:31:21 +0000
Files and hashes:         1: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: 2gYjkNpQS7rIhX41LQ5E9ZRuFubPcLm5+1qbHYEWbNU=)
                          2: 3132342e3130392e32322e302f32342d3234203d3e20313339393439.roa (hash: HVWbk3IWKH+5JXE4MGQxsGy0csGyHkuWv0WX8uhGzdw=)
                          3: 3131392e34372e39352e302f32342d3234203d3e20313439343039.roa (hash: IOQi+x8HL04tSdZdkybbwTiZjcbDVMFrGx/+Tn9mObQ=)
                          4: 3130332e32352e3130382e302f32342d3234203d3e20313332363334.roa (hash: fBDOlCYFIj49Ll99j2HPW9RAkablwrcxgHTldEFv/Jk=)
                          5: 3132342e3130392e32312e302f32342d3234203d3e203338353237.roa (hash: JF25GsZLyzVMqdMpnO1WYlSsjR6hM621Mtm2BRDUvVE=)
                          6: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: gaK9TNDkDAX6rLbicLT8NaMu8dPZqEuVmgkAb8uim8M=)
                          7: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl (hash: kYHifNtasovePNNV7cw8B8HsQ1tqVc2PNELtV2zLYOc=)
                          8: 3132342e3130392e32332e302f32342d3234203d3e203338353237.roa (hash: hSmHQriBgEB6G8euGPo5okmMfhhllZ1AqyrcnX9VlJE=)
                          9: 3132342e3130392e32302e302f32342d3234203d3e203338353237.roa (hash: ETJz1GlN0xqgrI/TiDRe3oL2wRqZlR8gI6HL/idn2yc=)
                          10: 32372e3132342e38332e302f32342d3234203d3e20313332363334.roa (hash: 2EEYdzWr91JIl7YnldqA+u9ZlAli1CH0l6dUJ+oRlZU=)
                          11: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: 2N3BwgIjWHFbTQKqljv/UDzpCDNCSry44iBQjllcOAY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
                          rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 05:31:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3b:41:fd:16:e0:9a:09:50:06:46:af:41:5f:b3:79:b5:72:7a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
        Validity
            Not Before: Oct 19 04:16:21 2025 GMT
            Not After : Oct 22 05:31:21 2025 GMT
        Subject: CN=8E6666803003ADF337A505CCA9DD8F22D82A0FCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:95:6d:34:ec:8c:a3:f8:87:52:3e:4a:d9:
                    d1:96:58:9b:c5:9e:57:c2:5b:60:c8:52:86:7d:bd:
                    fd:27:72:ac:59:b8:ff:06:76:72:cd:ff:de:7b:1f:
                    89:40:b0:47:2d:45:20:95:19:a4:2e:18:bf:91:7a:
                    d9:9f:00:c3:2a:cf:80:52:38:64:0e:37:d0:58:a4:
                    f8:a6:96:bd:5f:35:48:a9:93:af:5c:be:91:85:cc:
                    08:47:3a:54:d8:4e:3b:c9:97:76:b2:1a:7a:a7:76:
                    64:c7:2b:5b:01:f4:6c:81:22:30:20:f9:33:d7:46:
                    a4:89:82:a9:a9:04:73:9d:4f:7d:42:29:5c:c7:ed:
                    02:74:1f:a4:0d:38:49:ee:71:71:f4:d0:7a:6f:c0:
                    c0:fe:c6:fe:66:f8:26:b5:ed:9c:26:27:01:d1:ab:
                    ca:52:1a:e1:3e:aa:cc:c5:3b:95:95:f1:8f:dc:15:
                    77:65:66:1e:f4:1d:7f:7c:51:f2:cf:58:66:8e:70:
                    cd:b6:99:17:a5:00:e0:cc:cc:97:67:d7:83:3b:70:
                    58:df:0b:3e:86:e9:e2:1c:ee:62:87:86:a3:bb:e3:
                    21:fe:97:0d:da:65:fd:8d:0a:ca:e8:15:25:ee:21:
                    8e:71:cb:a4:07:fc:4e:90:1d:91:93:24:e3:7e:0e:
                    6a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:66:66:80:30:03:AD:F3:37:A5:05:CC:A9:DD:8F:22:D8:2A:0F:CB
            X509v3 Authority Key Identifier:
                keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:1c:da:99:da:5e:72:8d:17:66:aa:c1:a6:78:de:34:64:61:
         f2:b3:b8:c9:40:d5:1c:41:c8:0e:6b:cb:b4:7c:d6:c9:15:e1:
         2c:f6:1e:74:c9:59:35:5a:35:41:62:01:4f:9c:d4:c6:6f:0c:
         ac:d7:17:10:8f:3a:49:4d:eb:52:be:5e:32:c9:38:f7:43:c1:
         10:3b:f2:03:09:dd:f3:85:bd:43:c2:27:d5:bb:e4:b0:ab:f5:
         c1:05:c2:e2:4b:99:bc:94:3f:b4:8b:ef:4b:22:de:72:79:db:
         60:eb:78:5e:8a:9f:26:b6:66:39:19:65:67:77:bc:c6:58:18:
         20:b1:be:df:7b:4e:1e:e1:f6:2a:3d:8f:25:30:e2:d0:a2:93:
         63:9a:c6:46:31:67:13:91:41:26:9f:89:c5:35:39:f5:00:9e:
         16:c8:34:20:41:7b:bd:8b:c5:e3:73:64:bb:47:1a:6e:d7:8e:
         79:cc:bf:33:c4:51:90:3a:ed:fb:e9:c0:8b:ed:31:7a:04:5b:
         13:da:0d:0a:fa:5d:27:a6:64:00:4c:d0:d4:93:43:92:01:c2:
         0f:82:e0:3c:e8:61:f6:65:f1:7a:43:de:ac:a0:86:3b:89:b6:
         d0:82:37:4b:83:92:d4:a4:60:d7:02:d2:cb:0c:d1:6d:dd:90:
         f7:15:27:29
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHjtB/RbgmglQBkavQV+zebVyeqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD
RjlBNjQ3MzAeFw0yNTEwMTkwNDE2MjFaFw0yNTEwMjIwNTMxMjFaMDMxMTAvBgNV
BAMTKDhFNjY2NjgwMzAwM0FERjMzN0E1MDVDQ0E5REQ4RjIyRDgyQTBGQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDZVtNOyMo/iHUj5K2dGWWJvF
nlfCW2DIUoZ9vf0ncqxZuP8GdnLN/957H4lAsEctRSCVGaQuGL+RetmfAMMqz4BS
OGQON9BYpPimlr1fNUipk69cvpGFzAhHOlTYTjvJl3ayGnqndmTHK1sB9GyBIjAg
+TPXRqSJgqmpBHOdT31CKVzH7QJ0H6QNOEnucXH00HpvwMD+xv5m+Ca17ZwmJwHR
q8pSGuE+qszFO5WV8Y/cFXdlZh70HX98UfLPWGaOcM22mRelAODMzJdn14M7cFjf
Cz6G6eIc7mKHhqO74yH+lw3aZf2NCsroFSXuIY5xy6QH/E6QHZGTJON+DmoDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjmZmgDADrfM3pQXMqd2PItgqD8swHwYDVR0j
BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG
QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB
NjQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3
MGYtZjY5OWRmZjk3ZGU1LzAvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VE
NTBDRjlBNjQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFoc2pnaXnKNF2aqwaZ43jRkYfKzuMlA1RxB
yA5ry7R81skV4Sz2HnTJWTVaNUFiAU+c1MZvDKzXFxCPOklN61K+XjLJOPdDwRA7
8gMJ3fOFvUPCJ9W75LCr9cEFwuJLmbyUP7SL70si3nJ522DreF6Knya2ZjkZZWd3
vMZYGCCxvt97Th7h9io9jyUw4tCik2OaxkYxZxORQSaficU1OfUAnhbINCBBe72L
xeNzZLtHGm7XjnnMvzPEUZA67fvpwIvtMXoEWxPaDQr6XSemZABM0NSTQ5IBwg+C
4DzoYfZl8XpD3qyghjuJttCCN0uDktSkYNcC0ssM0W3dkPcVJyk=
-----END CERTIFICATE-----
Generated at Tue Oct 21 05:10:39 2025 by rpki-client