Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
File:                     DA8766A90851AE44D76B8563D83586F0164FE5CF.mft (raw, json)
Hash identifier:          UzsM9+4BBsnw5tUs0rLcUCMeYk0tcuzobXCrusS39Ok=
Subject key identifier:   4F:BA:1F:08:92:98:4D:DA:69:C0:63:BB:2A:20:4D:6E:D3:08:DE:CB
Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
Certificate issuer:       /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Certificate serial:       43724E631B1C297F1EDDABDB793F5F20FDAFD73F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
Manifest number:          0541
Signing time:             Thu 21 Aug 2025 22:10:55 +0000
Manifest this update:     Thu 21 Aug 2025 22:05:55 +0000
Manifest next update:     Mon 25 Aug 2025 08:25:55 +0000
Files and hashes:         1: 323430353a616163303a3232323a3a2f34382d3438203d3e20313339393730.roa (hash: /qXePrhFwCSAITrsmjF9O+fZz00IlJM5sj2Sp0A2INA=)
                          2: 323430353a616163303a3130303a3a2f34382d3438203d3e20313339393439.roa (hash: r5ISPP8o2HPfHpTYeKJqTMHFk0FOHbid87VW1uUq8a8=)
                          3: 323430353a616163303a373a3a2f34382d3438203d3e20313339393439.roa (hash: KQZo+3HIHnlbyCCPEj10WYBSIOntfHXQo1x4ll1wXeQ=)
                          4: 323430353a616163303a35353a3a2f34382d3438203d3e20313339393439.roa (hash: yuxuROpR3UsRLPoFKCRswWmsub5LhfKgUbndSMMOdp4=)
                          5: 323430353a616163303a35333a3a2f34382d3438203d3e20313339393439.roa (hash: FXJHNsxSBOMPnA8vdwVqgLQk48uGK9FiBs0y6bniYV8=)
                          6: 323430353a616163303a35323a3a2f34382d3438203d3e20313339393439.roa (hash: K5rN2dEqu3kaZAIrXi9HWKyKXHot8xpfvFHNgqyUB3Y=)
                          7: 323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa (hash: beL+gm/Z0HEOJLWebvTWM02eae65ZxzPPiShihmuKhI=)
                          8: 323430353a616163303a31323a3a2f34382d3438203d3e20313339393439.roa (hash: 9kHtQIH8YzD0HWbTI7ApFkcBevmm7B3ZG7jYr4s08fM=)
                          9: 3130332e3134372e35322e302f32342d3234203d3e20313339393439.roa (hash: OOtD+Srj/TGQywXi6LwWOihraZAwBF5SEd1jbonASQU=)
                          10: 3130332e3134372e35332e302f32342d3234203d3e20313339393730.roa (hash: lCO4dBzU8QlNehADwjvKlKyAnMc64cSgqE/nhYWymAE=)
                          11: 323430353a616163303a31303a3a2f34382d3438203d3e20313339393439.roa (hash: +fUGCq/gnGGfXjgZH+TqncbWTqimwElr7d59iQeb3O0=)
                          12: DA8766A90851AE44D76B8563D83586F0164FE5CF.crl (hash: UpT16sGVCDNCBh7FSJb16f/3lYhquSg71oHyZTbsweI=)
                          13: 323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa (hash: IkcqCeYGQb80Q1AOJnsq13AQ5bpaYjmxKy7ulkw8B5Q=)
                          14: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa (hash: lumVBGk+aw/9tORzynY/aiVJHvV2Bg6D5FpFWGyG99o=)
                          15: 3130332e3134372e35332e302f32342d3234203d3e20313339393439.roa (hash: 9z7ZVj2rWK+5i6jgJ+YpLAQXRn/4DgMsF9g2sSGbA0k=)
                          16: 323430353a616163303a31343a3a2f34382d3438203d3e20313339393439.roa (hash: 5aUwKjxhW5F1xv+nDNzcsevQVN2X64RWQosSOI3P/lc=)
                          17: 323430353a616163303a3530303a3a2f34382d3438203d3e20313339393439.roa (hash: rPi35F8PvvKHwsT9xbH5vOghPHmWhiGoUJPmzISRw/g=)
                          18: 323430353a616163303a383a3a2f34382d3438203d3e20313339393439.roa (hash: LWmX8VJBo79sp16mdPKaXRXV6xMs7AWHG724RPLxSoc=)
                          19: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393730.roa (hash: 4llT7hZB15Pi+P6opWsDeTzdqlEW5rvghBdJ0Bbu86c=)
                          20: 323430353a616163303a3330303a3a2f34302d3430203d3e20313339393439.roa (hash: jm88+kjM4koBWvlRIo+d33M24ZrmzpDt3fol94UYN2k=)
                          21: 323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa (hash: jrNfGDSlGXEzxHOxg40yCG6SbX9z3FB3tiVldhoUUtI=)
                          22: 323430353a616163303a35363a3a2f34382d3438203d3e20313339393439.roa (hash: geflI9/4w7m7+iCOsFZdzYH8ahMptfHVtvGDBvvL4ns=)
                          23: 323430353a616163303a3232323a3a2f34382d3438203d3e20313339393439.roa (hash: /O39yU5iWDJ4j/7yQMSM8pDCjBsXajbdVPe1INNnNO4=)
                          24: 323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa (hash: VQoU1wEGqGabAe8YyCH/Xm7KlM9a3C94oAnpQ3yzvdI=)
                          25: 323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa (hash: JI0w6pTieSf2WTseZM5bkzS6iivykHspYYViWrkRs3w=)
                          26: 323430353a616163303a3430303a3a2f34302d3430203d3e20313339393439.roa (hash: EdYd7IGuHyCu/cThwtshNLf7zxuRmElBhySIxR+qG6g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl
                          rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 08:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:72:4e:63:1b:1c:29:7f:1e:dd:ab:db:79:3f:5f:20:fd:af:d7:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
        Validity
            Not Before: Aug 21 22:05:55 2025 GMT
            Not After : Aug 25 08:25:55 2025 GMT
        Subject: CN=4FBA1F0892984DDA69C063BB2A204D6ED308DECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:53:88:42:f2:54:84:22:0c:cf:49:2e:c6:85:
                    a3:18:a7:3f:b4:95:eb:11:33:64:59:2f:88:78:c1:
                    7a:f1:26:74:6f:e4:56:64:e7:be:25:d5:de:26:43:
                    0c:7f:2f:4c:0e:6d:d6:ef:d6:96:6b:99:c6:7d:b3:
                    fe:88:0e:c4:f7:ec:8a:b4:fb:d0:8a:56:5d:51:b5:
                    c6:89:5c:f7:2c:28:5d:12:8f:aa:88:77:ab:27:99:
                    d3:f5:6e:64:b4:f6:f5:06:65:3e:7d:7c:e7:3c:9e:
                    50:fe:de:ce:a9:f0:44:1f:6b:f2:5e:f8:c2:30:f6:
                    0b:83:54:72:96:6a:a3:b7:78:a3:bb:2d:ec:10:d7:
                    31:6b:04:a0:b5:ba:2c:06:98:a3:8d:84:6c:5f:7f:
                    20:14:10:54:21:4f:f4:4a:f9:ce:1d:5a:58:74:bc:
                    b5:62:38:be:f4:09:20:1c:b0:ae:d5:26:6a:87:61:
                    51:b2:51:0d:a0:41:07:74:4c:44:df:82:fa:25:59:
                    f5:2e:46:8a:1f:73:09:b5:32:ae:d3:ce:fc:0f:73:
                    c2:8d:b9:7a:a7:e6:45:0d:a6:d6:34:11:a3:7c:0a:
                    3d:2c:89:24:0f:0a:0d:17:04:20:bd:4c:db:20:ed:
                    85:8b:2c:a6:82:da:3e:55:c2:7e:b2:ca:57:bf:01:
                    c3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BA:1F:08:92:98:4D:DA:69:C0:63:BB:2A:20:4D:6E:D3:08:DE:CB
            X509v3 Authority Key Identifier:
                keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a2:69:f3:50:c9:78:98:40:f1:ec:7f:6e:f3:26:c2:b3:37:
         02:88:4e:5c:c0:17:53:74:ab:ad:4c:36:7d:e3:fe:0b:b2:f1:
         cb:03:a9:e6:42:b1:bb:3b:62:76:ce:94:cd:f2:dd:e9:85:d4:
         09:3d:20:5a:f2:74:3e:a2:33:d9:44:74:58:86:cc:b6:d3:f2:
         13:1e:5d:83:6c:c9:35:0b:80:ce:67:5b:f4:d2:26:d6:ec:e2:
         da:34:2a:05:d0:09:41:14:09:d0:21:6c:1d:cd:6c:ba:e7:2c:
         32:7b:9a:0d:1f:7e:99:29:5c:d7:fd:f4:d0:ba:f7:df:73:1f:
         3b:a5:f4:e7:e8:b7:ab:24:ab:a8:03:ae:1d:da:08:f2:4f:33:
         b0:44:9a:fb:40:09:4c:ba:40:5b:85:74:b5:94:69:8b:30:83:
         6f:d7:ae:12:72:d3:69:ca:86:10:b2:1f:6a:2b:95:4b:e4:bb:
         33:1b:21:d7:0b:8a:7b:fb:40:0b:68:4b:e5:3a:72:cd:90:b9:
         bd:df:96:77:a6:db:9f:67:af:ce:2a:e2:4a:8b:81:4f:9b:3f:
         9e:3e:c3:6a:b6:80:64:b9:9f:ed:e0:c1:8f:68:b4:34:f3:20:
         5a:5c:76:6c:2e:63:5c:d8:65:e3:bb:a6:82:68:04:19:93:d5:
         e6:78:9a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:36 2025 by rpki-client