Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
File:                     3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json)
Hash identifier:          JF0ekUAbospH0UEUVb0cQJSpS9HF/jK4hicUogmJnMQ=
Subject key identifier:   F8:36:A0:25:72:58:D7:12:ED:CC:5C:48:A6:9F:88:73:C8:03:97:A2
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Certificate issuer:       /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial:       1B56891928B706F10995E13AC5FC8F4D73D09B6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
Manifest number:          0211
Signing time:             Tue 01 Jul 2025 21:32:03 +0000
Manifest this update:     Tue 01 Jul 2025 21:27:03 +0000
Manifest next update:     Sat 05 Jul 2025 08:30:03 +0000
Files and hashes:         1: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: Vxu7OgcrZ32tVA4THVShJIrGxnq9jK2ER/olk1k8ato=)
                          2: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: C6l6zdsNHMzfA4VroXv38wYjaYdlZyMXfkyZpHinjgQ=)
                          3: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: KOtMCKjlsRH1lLDnevyJXiZMgG5swJZ/VL9ngtoVNrw=)
                          4: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: KM8HCAE941ny+NeclcPdlUg9VIqsSih6MjHoa5IqXb8=)
                          5: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: QBM9H9rd8+lS4gn1TV/zjjSpwBwL7sSfYx4yVL1I50s=)
                          6: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: oP5w04R+DVBIXz7VN32/pUudJby5Bdnn9OzpJHzqMrY=)
                          7: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: naME29BjJNXWcG5xS5OYZKvtjsmmITu0eSf0OkwWWqI=)
                          8: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 318Q6731sMFPRMDMOoStaI6Bz5sS+OT9DxYXEQE+OOU=)
                          9: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 7h+0gopoSFJ2M48QEyz8CL99eJtVxfcZjzTpUAYVTZo=)
                          10: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sYsKqli8EUEzTvSQXavM3oM1AVTdmnNeXY5Ib9nTkXk=)
                          11: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: FWaIS2C5y+tF+eXrrfhUKvMiaO2hbKHJ6PXu+XjlFjU=)
                          12: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: znbfpwqo/RqJTtKokVQJprWVfIE6ZeyWhe8h0U97wlw=)
                          13: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: /v/t0LVvwP8ItAgvAEV4d3ird2OFydIuyNvk7Hjv9rU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
                          rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 08:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:56:89:19:28:b7:06:f1:09:95:e1:3a:c5:fc:8f:4d:73:d0:9b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
        Validity
            Not Before: Jul  1 21:27:03 2025 GMT
            Not After : Jul  5 08:30:03 2025 GMT
        Subject: CN=F836A0257258D712EDCC5C48A69F8873C80397A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1b:70:bc:1b:40:82:bf:48:7c:d1:db:e8:3c:
                    86:75:72:15:cc:38:63:0e:12:72:b5:8a:e2:fd:3e:
                    c6:a2:60:8d:b9:11:d2:46:c2:93:9b:b1:f3:46:08:
                    f0:04:78:b3:89:7b:ae:c2:23:02:ac:5d:c0:09:81:
                    62:7d:6e:83:79:1b:a7:5b:49:7a:56:4e:b4:8b:e7:
                    9a:e2:08:94:4f:e4:43:10:8b:26:8b:2a:9a:00:41:
                    9b:60:8d:8d:69:8e:b7:a5:cc:4e:96:ba:7f:1d:45:
                    68:d7:c6:c7:16:c6:04:e4:0f:6e:4d:90:ac:ec:e5:
                    e1:92:eb:a3:2c:94:7a:52:69:4b:26:a6:97:f2:07:
                    d2:b7:9a:04:95:6c:da:c8:a7:37:c9:3b:59:3e:e2:
                    4d:e5:7c:c7:09:7d:a8:b9:ae:eb:13:be:31:ca:03:
                    98:f4:c0:66:12:18:c9:de:a7:d2:57:5d:cc:1d:53:
                    26:72:81:b9:82:1e:77:b4:02:de:72:09:bb:3f:ba:
                    48:ac:b8:5f:36:b5:8d:ad:ba:1a:4f:f2:dd:94:86:
                    25:31:7a:2f:7d:87:19:e9:c3:7d:2a:90:a7:2b:ac:
                    34:4e:f5:64:e3:c9:f3:41:27:26:f8:53:2d:e3:a3:
                    13:81:1f:6a:cd:63:d1:4b:b0:a1:e2:ae:50:4c:aa:
                    29:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:36:A0:25:72:58:D7:12:ED:CC:5C:48:A6:9F:88:73:C8:03:97:A2
            X509v3 Authority Key Identifier:
                keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:37:61:39:c0:c6:81:ca:f2:fc:52:37:18:06:e3:d1:66:c3:
         b4:84:8b:f4:03:8e:08:4c:7b:1f:bd:a6:a4:43:9a:8e:67:fa:
         66:a0:ea:0d:62:90:6c:6d:b6:eb:3b:af:a5:eb:bd:77:a4:a5:
         4b:6f:76:de:d2:08:9a:ea:4a:f1:4c:fa:1b:2e:32:4b:43:86:
         e6:d1:ea:46:41:09:a4:49:30:f2:31:3d:73:82:0f:ab:6c:de:
         6a:50:ac:8f:62:53:98:5e:2b:28:a8:d9:13:71:4c:82:3a:32:
         e6:f5:58:16:cd:d0:38:a4:2b:54:40:d2:ed:78:83:ee:5a:65:
         af:75:43:74:26:a2:b9:3f:06:c9:19:9e:81:86:7a:dd:34:e0:
         d0:81:46:3a:12:83:dd:87:8b:48:c9:df:3f:73:4a:68:94:a0:
         ce:2d:95:90:8e:d5:5e:f3:cd:c2:ad:c7:20:04:9f:75:55:54:
         f4:2a:e9:25:68:46:46:21:56:a0:9e:63:62:0d:31:32:53:6b:
         fc:a5:0e:f9:7a:43:cd:6a:8e:44:cb:99:a4:15:c6:1e:8a:a3:
         03:52:2e:f9:4e:95:e6:6a:c8:99:c2:a4:88:57:f7:67:cb:85:
         a3:1b:c8:c0:43:0b:93:62:17:d2:f1:41:96:af:04:b8:06:c8:
         5f:d2:22:a9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUG1aJGSi3BvEJleE6xfyPTXPQm2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG
QzhBN0U5NzAeFw0yNTA3MDEyMTI3MDNaFw0yNTA3MDUwODMwMDNaMDMxMTAvBgNV
BAMTKEY4MzZBMDI1NzI1OEQ3MTJFRENDNUM0OEE2OUY4ODczQzgwMzk3QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiG3C8G0CCv0h80dvoPIZ1chXM
OGMOEnK1iuL9PsaiYI25EdJGwpObsfNGCPAEeLOJe67CIwKsXcAJgWJ9boN5G6db
SXpWTrSL55riCJRP5EMQiyaLKpoAQZtgjY1pjrelzE6Wun8dRWjXxscWxgTkD25N
kKzs5eGS66MslHpSaUsmppfyB9K3mgSVbNrIpzfJO1k+4k3lfMcJfai5rusTvjHK
A5j0wGYSGMnep9JXXcwdUyZygbmCHne0At5yCbs/ukisuF82tY2tuhpP8t2UhiUx
ei99hxnpw30qkKcrrDRO9WTjyfNBJyb4Uy3joxOBH2rNY9FLsKHirlBMqil5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+DagJXJY1xLtzFxIpp+Ic8gDl6IwHwYDVR0j
BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF
MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB
N0U5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MTlhZWItNWM1Ni00Y2IzLTk0
YTAtMGY0MDBlYTZhMzc1LzAvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUz
QUFGQzhBN0U5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC43YTnAxoHK8vxSNxgG49Fmw7SEi/QDjghM
ex+9pqRDmo5n+mag6g1ikGxttus7r6XrvXekpUtvdt7SCJrqSvFM+hsuMktDhubR
6kZBCaRJMPIxPXOCD6ts3mpQrI9iU5heKyio2RNxTII6Mub1WBbN0DikK1RA0u14
g+5aZa91Q3Qmork/BskZnoGGet004NCBRjoSg92Hi0jJ3z9zSmiUoM4tlZCO1V7z
zcKtxyAEn3VVVPQq6SVoRkYhVqCeY2INMTJTa/ylDvl6Q81qjkTLmaQVxh6KowNS
LvlOleZqyJnCpIhX92fLhaMbyMBDC5NiF9LxQZavBLgGyF/SIqk=
-----END CERTIFICATE-----
Generated at Wed Jul 2 12:53:18 2025 by rpki-client