Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
File:                     7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft (raw, json)
Hash identifier:          F5E3JhcJpjVd0eNpB5QTysDN/dRgiu920WdnOlqnFnU=
Subject key identifier:   E6:C0:C4:AC:34:34:58:54:23:5F:60:FD:DB:18:EB:07:7B:72:D4:D8
Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
Certificate issuer:       /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Certificate serial:       7199B01DCF517349C73219A385251A9EEFE41AD6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
Manifest number:          04FF
Signing time:             Sun 29 Jun 2025 07:02:02 +0000
Manifest this update:     Sun 29 Jun 2025 06:57:02 +0000
Manifest next update:     Wed 02 Jul 2025 11:20:02 +0000
Files and hashes:         1: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: IDS7wT53F/9d+GGxnBDomzis7H+va5MBv/3bGTQques=)
                          2: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: 56yoy1pZXhES0/QXKkOUvjrn9k9A+/MhvPggVyF266U=)
                          3: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl (hash: dbZqnPqO2uAGvxBgirz7byqa1nOm1vDaGrBeFQatXkI=)
                          4: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: BQTtvc745IuKZaE72oqsQIokxS6D/NEUcrmFIac+agM=)
                          5: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: qQ/OJJBLuknzR6dOBM+bTowxaxIwEUGdeh8g4k+xMHc=)
                          6: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: J/jPlTXp+kWKv5LyWjv+I0N1cAy55yAD17Rj2NwYkPM=)
                          7: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: N0fiZGpp7G4AcyGQiECW3/6Q5p0a7A1fAhfbX9FH1ms=)
                          8: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: vPo4xg80UOtB6VJUwA4UWFKXU9vTxzV/7Yqjm3eG2dU=)
                          9: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: 0fYEP8T/Nnelfp7GTy05C/LwRW0usrD9PvaWq6iCxUk=)
                          10: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: NEhivRqvBCnBURZf09iLRn6F9NwBbv/MNUQSDs4qTsQ=)
                          11: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: H7BZrybLTpX0NJFsDuTjqzH8VF1huH+0BD/mvn2lSto=)
                          12: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: UkRWHYHFSXJQvTnbIud8PmlndW+kHrowErEkvw8GIIU=)
                          13: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: KTTSzhJyEe2+3+LNGtWkObwsWEdVtFCSQXuEdew12yU=)
                          14: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: 7qX9WcxP/RC8tMcJg/P60OwjJ/UboqeJrbX2Ange7f0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
                          rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 11:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:99:b0:1d:cf:51:73:49:c7:32:19:a3:85:25:1a:9e:ef:e4:1a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
        Validity
            Not Before: Jun 29 06:57:02 2025 GMT
            Not After : Jul  2 11:20:02 2025 GMT
        Subject: CN=E6C0C4AC34345854235F60FDDB18EB077B72D4D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:60:08:da:99:5a:2e:3c:dd:98:1a:da:13:
                    ce:70:99:6f:06:f2:f7:21:77:fc:3b:b0:e4:ce:eb:
                    33:13:e4:53:db:aa:e4:fc:82:2f:b6:68:df:51:d6:
                    93:f6:57:4d:62:ae:42:c3:81:cd:58:a7:ef:0e:89:
                    86:17:2a:3b:ef:b9:f3:9e:ef:b6:69:51:38:a8:de:
                    78:34:f3:e9:0c:9f:d3:10:bc:48:ea:92:62:88:c1:
                    06:c4:3c:68:34:76:c2:f4:ba:ee:54:b0:9b:2d:28:
                    2c:c8:c5:ad:c5:83:71:33:ac:e3:5c:eb:04:96:ae:
                    d8:99:6c:84:51:30:a8:95:29:56:18:f3:bf:49:54:
                    bf:95:4e:57:69:e5:a0:bb:cd:2a:e6:eb:ec:8d:a7:
                    8a:97:77:a8:ff:1d:56:2c:5d:dc:db:7b:c8:32:c0:
                    1d:3d:07:83:e5:d6:a4:14:de:ec:fc:28:bb:68:a5:
                    76:11:bd:30:bd:36:92:03:06:c8:02:ae:bb:42:ee:
                    28:be:aa:cb:bf:f6:e2:c2:6a:de:7e:dc:dd:ca:43:
                    35:25:e7:c0:ae:98:be:58:da:43:2d:d8:93:43:22:
                    7b:f4:81:e8:b1:45:2a:f1:2a:32:91:e4:de:0b:b1:
                    76:a9:98:7d:6d:ae:ec:35:d2:87:28:1a:76:d5:98:
                    be:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C0:C4:AC:34:34:58:54:23:5F:60:FD:DB:18:EB:07:7B:72:D4:D8
            X509v3 Authority Key Identifier:
                keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:51:e0:3c:c9:d8:5a:be:5a:a5:97:ba:a5:54:51:c9:03:b2:
         8c:e0:bf:09:41:9c:76:68:eb:83:a4:10:19:40:d8:07:3c:7c:
         2a:45:43:58:63:db:51:5c:3f:5f:1e:cf:a7:f7:b5:5a:63:6f:
         45:f9:31:5e:3c:a8:10:14:ac:b5:e4:06:9f:bf:7f:3b:21:6b:
         5d:be:e2:94:67:1b:1e:cf:37:3d:85:f3:26:a1:64:71:9d:61:
         65:26:ae:e5:d2:e5:a6:77:62:fa:07:b1:52:63:92:2c:de:df:
         b7:04:88:89:37:1e:54:4c:b0:45:25:e3:e9:e8:17:98:73:17:
         7a:6d:9c:a9:52:22:07:0d:e7:c5:2c:61:60:f3:c1:9c:9e:e3:
         b0:d8:c8:23:24:f4:23:2b:29:1d:18:fb:8b:68:60:b1:17:a4:
         2b:f1:e5:78:a4:46:02:07:02:7f:d2:e7:20:a7:1f:dc:2b:6d:
         5f:fa:a8:a6:99:41:2f:b1:f5:e6:5d:05:d3:9a:64:20:eb:60:
         fe:f4:3e:df:6f:6f:40:d8:fb:18:f8:db:c4:cc:55:e7:cb:04:
         7a:f0:56:f0:0c:dd:24:8c:b8:ec:e8:52:f2:5b:49:76:31:57:
         bc:62:cf:e1:ef:fa:01:a8:e6:10:0c:05:d6:35:2a:67:71:a9:
         34:86:02:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:27:08 2025 by rpki-client