Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
File:                     29A4AE587F980E73A344FD1ED55C47566E609511.mft (raw, json)
Hash identifier:          DMc+SjXPHY7Bl9OD6soVNg5TOtnHnxKa2nZr7sRx+dc=
Subject key identifier:   CB:BC:0B:64:D3:7C:92:FC:6B:15:8F:D7:10:62:95:93:4E:97:D5:3B
Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
Certificate issuer:       /CN=29A4AE587F980E73A344FD1ED55C47566E609511
Certificate serial:       1DC89C8F73B3DC14C4187A7BF7036DE8560BD126
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
Manifest number:          01AE
Signing time:             Sun 29 Jun 2025 10:00:54 +0000
Manifest this update:     Sun 29 Jun 2025 09:55:54 +0000
Manifest next update:     Wed 02 Jul 2025 12:36:54 +0000
Files and hashes:         1: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: NxNlrKrZTlmWmVaaoGudLY4lFXk9X6JplSyhuLDh9i0=)
                          2: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: p88SKszqxgKJl2zFe9Ix9VzOkkPPIGnrGQlceJpq1Is=)
                          3: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: GSwWK5SKTFAU7AOJ/9DuPKdDxhcqh8eUZIsdCou3WA4=)
                          4: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: pskMfYPfJQyJpqkNm3oh9E3JvBHhwECedewtWAR2iFU=)
                          5: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: Q4L5Bzc5PAgnS3en5iCGkdfsYZiseb5S267daUQcEZ0=)
                          6: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: lltuIPEk+BVWdUULpXiLbJeUz6Fla9jWTH/D4vTGGig=)
                          7: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: P6ntY2yEhntkcQoC2QezxV/SxChW1e9QIusqd+CGFLo=)
                          8: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: VvCiNNZNkR+jOL82aTEAoMNVNijK6DWUneBhRdG1bTg=)
                          9: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: 2/Cw3A1dSRg+Ts21fc2NwcUb6gMHV9LcM0XWFRm53vo=)
                          10: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: 7ZU6XQSzatgJu+l+DGXob1hGuSGT5xqJ7YTseOv5Aj8=)
                          11: 29A4AE587F980E73A344FD1ED55C47566E609511.crl (hash: IbF1Zt51ywJfyZDsTwJuEXiPTALl/Qi9/EZXBkLv/LQ=)
                          12: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: TkM70rMf+ZfBRNei/e49W4wEHFGWueoMkkciY1FDq5I=)
                          13: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: R8tKT5t+qGKeLH+mvJmhZYmQ+JVJFCVIeC0OR+NlWGo=)
                          14: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: RB7D/SJUrlL2iPypVkULBTpibH96XBcLleeWSsiOxLI=)
                          15: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: 91eiJyGAtCZEdj+H4LaJ35hkFRrcG4XIG2UpAPMXkVQ=)
                          16: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: 9rMYsccqlUlU/MG43HYhUrMN+tfhHpYZ3vOxhHvtNFA=)
                          17: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: dG8//08WgWJdVwfWHOamSCBCgAVZtc+xat2iGit/ozU=)
                          18: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: i6EDiTdMclRBYpvIVrK48fCJh2o5PNaEH/CBRrGOXIU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
                          rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c8:9c:8f:73:b3:dc:14:c4:18:7a:7b:f7:03:6d:e8:56:0b:d1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511
        Validity
            Not Before: Jun 29 09:55:54 2025 GMT
            Not After : Jul  2 12:36:54 2025 GMT
        Subject: CN=CBBC0B64D37C92FC6B158FD7106295934E97D53B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:f8:5c:92:71:31:a8:fb:54:06:6e:32:70:
                    b2:e3:67:e7:bd:56:87:e6:60:d1:93:35:5c:8a:9c:
                    1a:2e:87:dc:37:7b:e8:20:17:63:60:15:db:1f:b0:
                    0a:9c:0f:71:62:f3:d4:93:7c:a5:a4:ec:27:c7:49:
                    f6:15:db:d1:bf:6d:03:de:01:9c:9d:e0:66:ca:a0:
                    34:19:41:50:19:0b:48:f1:a5:26:da:80:98:3a:f5:
                    e8:3a:4e:b4:12:7f:92:e8:a2:d7:40:a1:1d:d4:7b:
                    6e:83:69:84:fd:cc:0d:1e:1a:6b:13:f5:af:d4:6e:
                    94:a4:a2:74:84:97:04:6f:2c:a4:54:b4:44:6a:90:
                    23:fb:f4:ed:5c:60:2d:2d:8a:39:be:71:62:48:21:
                    08:34:b5:2d:fd:72:4d:a5:cd:81:a8:be:6a:45:c4:
                    2d:87:76:56:1b:c9:a6:55:89:b5:c5:48:9c:65:57:
                    03:1e:54:c4:2a:55:10:01:3e:b2:0b:a4:d2:e5:75:
                    d1:11:7c:d4:73:10:a9:08:26:34:74:ae:68:33:68:
                    8e:4f:f3:d2:6c:45:54:9e:b0:9c:fe:a9:90:3a:bf:
                    59:14:99:14:33:8f:a8:ae:e9:20:7e:e1:af:3d:22:
                    3e:8c:39:86:e6:39:8f:10:19:42:be:be:56:e6:f7:
                    13:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BC:0B:64:D3:7C:92:FC:6B:15:8F:D7:10:62:95:93:4E:97:D5:3B
            X509v3 Authority Key Identifier:
                keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:53:25:78:fa:6f:b0:2f:ab:75:9e:b2:91:a2:a5:c0:f0:8e:
         7b:3e:59:24:6c:b5:c0:ed:bc:cc:d7:a0:e4:9e:b2:ca:6b:f4:
         43:69:ec:62:a2:71:67:fd:a7:98:67:d4:e7:31:f5:8d:25:84:
         93:d6:aa:26:9b:07:eb:28:cc:9e:25:55:90:f0:95:ca:e3:93:
         64:7a:80:1e:7b:3d:a9:77:ad:54:60:be:a1:a2:61:3e:e4:57:
         30:69:35:a1:17:ab:04:b9:2c:f1:3a:51:9d:65:65:7f:39:c6:
         8c:93:1e:07:b3:69:77:6b:98:08:55:2f:0c:01:91:11:85:80:
         2e:6f:77:2d:f5:93:3f:9f:bf:f4:eb:86:69:61:5e:43:94:57:
         04:e4:be:0c:78:37:b6:82:9d:ca:f7:8d:19:fd:75:fd:3a:05:
         8b:31:ef:80:b6:0c:be:84:52:55:26:2c:ae:fa:0e:0f:7f:c6:
         a1:a7:7f:d6:e1:3e:ae:5d:cf:98:1b:22:0d:24:39:2a:97:91:
         32:be:e3:94:7d:e2:3d:58:d1:65:f0:d3:f2:3a:ed:ff:14:f3:
         5a:af:d1:d8:72:34:53:6e:93:a7:e6:8f:6a:a4:bf:3c:9c:12:
         4b:b0:ce:e1:60:a9:e9:6e:e2:24:ad:86:2d:80:1b:53:0c:88:
         0a:33:e1:67
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHcicj3Oz3BTEGHp79wNt6FYL0SYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2
RTYwOTUxMTAeFw0yNTA2MjkwOTU1NTRaFw0yNTA3MDIxMjM2NTRaMDMxMTAvBgNV
BAMTKENCQkMwQjY0RDM3QzkyRkM2QjE1OEZENzEwNjI5NTkzNEU5N0Q1M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQvhcknExqPtUBm4ycLLjZ+e9
VofmYNGTNVyKnBouh9w3e+ggF2NgFdsfsAqcD3Fi89STfKWk7CfHSfYV29G/bQPe
AZyd4GbKoDQZQVAZC0jxpSbagJg69eg6TrQSf5LootdAoR3Ue26DaYT9zA0eGmsT
9a/UbpSkonSElwRvLKRUtERqkCP79O1cYC0tijm+cWJIIQg0tS39ck2lzYGovmpF
xC2HdlYbyaZVibXFSJxlVwMeVMQqVRABPrILpNLlddERfNRzEKkIJjR0rmgzaI5P
89JsRVSesJz+qZA6v1kUmRQzj6iu6SB+4a89Ij6MOYbmOY8QGUK+vlbm9xOlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUy7wLZNN8kvxrFY/XEGKVk06X1TswHwYDVR0j
BBgwFoAUKaSuWH+YDnOjRP0e1VxHVm5glREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MDhiMjk1OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8yOUE0QUU1ODdG
OTgwRTczQTM0NEZEMUVENTVDNDc1NjZFNjA5NTExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2RTYw
OTUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA4YjI5NTktMWMyNS00NmEwLTg5
ZDEtZjc3ZDVjNDc0NjkxLzAvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3
NTY2RTYwOTUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJFTJXj6b7Avq3WespGipcDwjns+WSRstcDt
vMzXoOSesspr9ENp7GKicWf9p5hn1Ocx9Y0lhJPWqiabB+sozJ4lVZDwlcrjk2R6
gB57Pal3rVRgvqGiYT7kVzBpNaEXqwS5LPE6UZ1lZX85xoyTHgezaXdrmAhVLwwB
kRGFgC5vdy31kz+fv/TrhmlhXkOUVwTkvgx4N7aCncr3jRn9df06BYsx74C2DL6E
UlUmLK76Dg9/xqGnf9bhPq5dz5gbIg0kOSqXkTK+45R94j1Y0WXw0/I67f8U81qv
0dhyNFNuk6fmj2qkvzycEkuwzuFgqelu4iSthi2AG1MMiAoz4Wc=
-----END CERTIFICATE-----
Generated at Sun Jun 29 20:05:34 2025 by rpki-client