Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
File:                     00EE953FD699788668C724460F4D8D420238194F.mft (raw, json)
Hash identifier:          sfP4So8teTJnIzzURliX4IVynbbJX37hDb7JkbIekYY=
Subject key identifier:   24:47:06:57:7D:59:F3:52:21:80:98:BF:BD:79:28:D2:8B:22:0D:59
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Certificate issuer:       /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial:       13365B4160EA888B1311D46C82F785E77B4CB9C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
Manifest number:          01FC
Signing time:             Fri 22 Aug 2025 00:40:37 +0000
Manifest this update:     Fri 22 Aug 2025 00:35:37 +0000
Manifest next update:     Mon 25 Aug 2025 09:50:37 +0000
Files and hashes:         1: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: ebM/F6KIH60LQhN77naN07o0NG2yDX1tXydmaED/mYQ=)
                          2: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: bvNupIpWmDhaL8rFDaTnVFDhI5fuAg0k+27/VGkzYJs=)
                          3: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: /6F+dCYfhj8nILz7NzSN2rSqER4M9P3bFQ45j14GuDI=)
                          4: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: SFv+wuFNNUXZIPzGgJ8H4FmCqsXvXTtUEEjtGiij04Q=)
                          5: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: V10gFKQc+WgMolRvJOryKxPX23lt9/y0uKRD456elbI=)
                          6: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: +0IYJt+ldEx6hRx5/LkWzdAnyMowfs90g5flb4WhwNI=)
                          7: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: sAwAc9IZ0DLVOhouh4zmTpqaxK9YADxytwY1+gNq8u0=)
                          8: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: FgOjY7TNj+vVOTY+T0f+/7XZ2PEhUJFN/481ZR8iBC4=)
                          9: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: sSIdllnvg4M1DGs8YGmNKZNiURvN96H1MMo+ucCRqd8=)
                          10: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: jtfCyTfV0URchGl+wzEZEXq1ZK6wyh3Rdim0gK9JxbY=)
                          11: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: oOdkzUMhWiV8RYKVpP+DjzstiVGxbGTPIWzG22cdnjM=)
                          12: 00EE953FD699788668C724460F4D8D420238194F.crl (hash: vFVwaf3JzyZS0/UcrEWlmdXBLqaidx1QA9ZVlWwSFo0=)
                          13: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: YWPfLwfnjAzwyRdQ8HMatujMpctNGsrqPWB+mJd3o7c=)
                          14: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: P5LJ10k2BHWyFCmNYnH84ZTaEVA9KJ8Poi0f/ODMh70=)
                          15: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: rkVkBOM1gxwGdr/crh5svI3UEvA+KgJo/zG78neJc4s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
                          rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 09:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:36:5b:41:60:ea:88:8b:13:11:d4:6c:82:f7:85:e7:7b:4c:b9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
        Validity
            Not Before: Aug 22 00:35:37 2025 GMT
            Not After : Aug 25 09:50:37 2025 GMT
        Subject: CN=244706577D59F352218098BFBD7928D28B220D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6f:83:24:d6:49:77:1b:d1:99:f9:ee:8d:74:
                    9a:77:ff:2c:3a:a6:62:0d:37:1f:94:73:cb:0c:d5:
                    1a:cf:32:74:72:1f:8f:9d:63:6b:ae:b9:25:09:0d:
                    15:c7:28:b6:0f:22:20:c6:7e:a7:bb:be:21:d0:3b:
                    54:78:0d:f1:01:b7:db:de:af:7b:61:10:c2:c9:f8:
                    37:44:cf:f4:1b:ab:61:09:7f:b1:53:30:b6:bb:b1:
                    8b:be:5e:9b:d6:b7:78:58:db:19:35:cb:71:f0:8c:
                    12:19:94:0e:36:e3:c1:78:eb:9d:a2:0a:20:5b:6a:
                    fd:4a:17:f1:ec:81:bb:1a:93:eb:3b:aa:dc:5a:32:
                    ca:c2:3d:be:d7:90:c2:ba:3f:4c:f0:98:3a:ba:50:
                    aa:77:29:18:3c:d1:2a:3c:f3:fc:39:e0:b8:55:2b:
                    06:f0:af:a7:5b:55:2d:01:6d:01:a9:da:c6:e6:34:
                    f8:47:66:c4:59:20:1e:38:01:f8:55:19:57:e5:06:
                    3a:1f:05:d4:55:b3:a6:ca:85:ed:ed:e2:d3:05:6a:
                    ed:88:b5:c4:a0:24:97:bd:30:6c:52:46:eb:97:0f:
                    93:56:11:76:f8:bc:e8:9b:2d:62:4b:3f:74:e8:22:
                    3a:84:45:14:f2:f0:af:3c:47:5e:3c:03:9a:15:db:
                    1e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:47:06:57:7D:59:F3:52:21:80:98:BF:BD:79:28:D2:8B:22:0D:59
            X509v3 Authority Key Identifier:
                keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fc:8f:4a:be:b5:9c:8b:e1:25:57:fb:0d:8d:81:2d:b5:51:
         dc:8f:57:82:2e:9a:ef:8d:db:c5:42:6e:69:fe:ab:5d:f0:ff:
         70:7b:0a:05:5f:b2:9e:28:a6:82:26:40:ee:62:5f:81:6e:e1:
         8d:6d:25:e8:87:5b:c0:b2:9b:f3:26:ef:b3:2a:69:53:69:af:
         ca:d6:06:51:a3:44:84:4e:f8:84:a1:94:94:fe:38:44:18:16:
         db:c1:b1:ce:91:a9:58:85:f7:50:a0:f1:fe:70:2a:1c:d3:c6:
         7b:89:4f:3c:46:77:3e:3f:e8:8b:66:55:8d:67:36:81:41:a6:
         61:1b:48:ff:19:d3:3a:99:c0:e7:9f:d6:d5:5e:6e:4d:c4:ce:
         7c:f7:b7:e8:b2:7b:96:45:a2:e0:5a:42:08:fe:ed:12:e9:c8:
         eb:89:cb:cd:74:14:49:af:c8:2b:b6:3a:19:03:b6:56:2a:95:
         7e:31:bb:51:70:ac:80:d2:04:59:06:b6:1d:b4:2c:a3:d0:ec:
         8d:aa:e9:25:c8:59:3a:1d:a9:c0:8b:89:e7:4b:be:89:27:fd:
         97:b2:69:58:46:ba:85:7b:b3:ec:d3:25:50:6e:f8:10:f8:3c:
         0d:c2:5e:f1:b1:03:6f:6d:25:4c:b4:3c:0f:f2:9e:86:3f:8f:
         ae:63:88:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:36:17 2025 by rpki-client