Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
File:                     67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json)
Hash identifier:          kJQ+YbOeym20LVL9qDSV0BXzubQW8ZXqQpDYjAUg2Eo=
Subject key identifier:   39:F0:18:79:CA:93:45:41:2C:1B:F7:F1:0C:E9:A4:0B:F4:93:4B:69
Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47
Certificate issuer:       /CN=67749A065BBCF1E57768F4207E1B2FE788604D47
Certificate serial:       7F66B03BA05BE37CC2C148B9A1211378359A133E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
Manifest number:          0165
Signing time:             Thu 21 Aug 2025 23:31:11 +0000
Manifest this update:     Thu 21 Aug 2025 23:26:11 +0000
Manifest next update:     Mon 25 Aug 2025 03:05:11 +0000
Files and hashes:         1: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: DrfxLIvnXV7Zd1k+L6FjxK0p1QfF/z3NuqgLUILzqc8=)
                          2: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: Qh4NkqdLEX3azCWhTl8CizeNJhplW1N5SIlASxA3v6M=)
                          3: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tIbwoMZK41wfJ142ETUMWiif6nOoigy0JRS2kkbypRw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl
                          rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 03:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:66:b0:3b:a0:5b:e3:7c:c2:c1:48:b9:a1:21:13:78:35:9a:13:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47
        Validity
            Not Before: Aug 21 23:26:11 2025 GMT
            Not After : Aug 25 03:05:11 2025 GMT
        Subject: CN=39F01879CA9345412C1BF7F10CE9A40BF4934B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:47:48:d7:28:7e:bd:c4:92:a9:ae:c9:91:
                    56:1b:a7:bb:c6:ff:c2:b6:62:b8:ce:95:47:d9:1a:
                    8d:ad:6f:4c:3b:94:bc:ea:32:0e:97:8b:e9:dd:b4:
                    52:13:12:1c:3a:89:d6:b5:4e:d7:65:ff:0e:c8:de:
                    29:b3:b7:84:d6:74:62:55:2e:e1:d1:de:b3:f2:67:
                    42:a9:27:df:f4:69:c2:45:a5:e5:96:69:5e:af:f9:
                    4d:17:45:13:94:ca:af:4f:97:23:9b:47:72:71:f2:
                    4c:2f:84:6b:24:20:1d:7d:b3:2d:6f:6f:d3:6b:33:
                    ed:62:45:ba:d1:d6:60:fe:79:ad:81:97:68:42:c9:
                    01:05:70:19:b6:8d:8d:6a:da:9f:fa:2c:8e:15:32:
                    d4:e3:4b:63:0b:f5:c3:36:52:f2:42:7c:15:31:34:
                    4c:8f:3d:6d:1f:71:23:7c:50:7d:bb:90:2f:a2:e1:
                    da:5c:dc:25:b3:c0:eb:12:76:2b:23:43:58:7f:80:
                    55:1f:34:5f:fa:ef:46:46:21:03:46:4f:59:df:a3:
                    5a:82:37:e6:0d:1f:12:8b:a3:62:81:c9:20:ef:5a:
                    53:31:23:7e:e4:8c:a0:af:42:0f:63:e3:67:1d:e1:
                    90:85:72:fb:db:4c:97:3b:e3:20:2f:41:f0:2f:83:
                    4b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F0:18:79:CA:93:45:41:2C:1B:F7:F1:0C:E9:A4:0B:F4:93:4B:69
            X509v3 Authority Key Identifier:
                keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:bd:2d:8e:82:24:f7:1f:25:ae:e0:d0:c0:15:a8:f5:0a:ce:
         68:05:89:34:cf:ae:48:78:e2:97:6a:e1:0c:ad:b9:1d:08:cb:
         20:67:9a:d8:7c:ec:dd:42:05:6d:42:67:20:2f:1d:c4:f2:03:
         f3:67:e5:aa:f3:10:0b:1a:a2:19:75:78:13:c1:9f:15:01:50:
         bd:76:46:3d:b4:de:27:41:bf:25:bc:47:98:c4:a0:96:7a:8a:
         cd:17:cf:a4:b3:fa:35:ee:b0:57:bd:ff:26:2b:bd:5e:70:27:
         49:23:d0:b3:ef:ac:11:ec:77:af:0b:28:34:df:6e:40:1e:0f:
         8b:25:ff:dd:a2:32:2c:18:80:13:3f:4e:66:f0:2f:19:f7:3a:
         36:d7:13:57:b8:0a:b2:b6:cd:a5:c3:cb:a4:ce:98:49:3b:fd:
         c9:47:94:f2:82:4c:64:c2:e0:6a:65:c1:e5:2a:f5:c6:59:e0:
         56:1c:44:17:3d:4f:ef:bd:1b:78:f8:c1:c9:91:0b:f9:fb:41:
         7f:ac:ae:bf:93:24:62:9a:78:e8:71:79:dd:2e:53:c6:de:ff:
         8e:10:b4:e4:f8:6e:a8:91:91:59:73:35:97:05:c7:4c:84:9e:
         f6:ed:8a:41:9d:7a:63:53:18:82:a9:bd:6b:7d:fb:96:10:54:
         0c:22:50:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:50 2025 by rpki-client