Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft
File:                     D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft (raw, json)
Hash identifier:          NZArYNRs6UewQVJR7AQS2Ab5QBYvRXoMLgy0V+Xupe8=
Subject key identifier:   1B:A5:70:F3:13:71:DA:98:79:40:B0:6A:8A:87:84:F8:08:70:43:3C
Authority key identifier: D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40
Certificate issuer:       /CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40
Certificate serial:       29D974A7548B322CB18D057CF862E094FD1A3FAB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft
Manifest number:          75
Signing time:             Thu 21 Aug 2025 02:00:49 +0000
Manifest this update:     Thu 21 Aug 2025 01:55:49 +0000
Manifest next update:     Sun 24 Aug 2025 13:01:49 +0000
Files and hashes:         1: 3230322e3133332e302e302f32312d3231203d3e203234323030.roa (hash: TfiqH+4JRlzCqMd+ohke3uaa5qrL5wiizfc5eyZU4Bw=)
                          2: 3230322e3133332e372e302f32342d3234203d3e203234323030.roa (hash: sHrERPT1Gki4rCwtxWJOl3kaPuH5N8410kKwTEyBzNs=)
                          3: 3230322e3133332e362e302f32342d3234203d3e203234323030.roa (hash: PwrwjwU7TfjmAzlVIhNNq7JmiMiE2zPrnJS6Vjw4fpA=)
                          4: D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl (hash: mwHDP36AEi0es+pr4QBFAMEDgLSc0EUxHdpDQnvAQoM=)
                          5: 3230322e3133332e332e302f32342d3234203d3e203234323030.roa (hash: KBjjsWsKQFuN1REWppuBIRLZLM4xHEbHMPv7NBToWH4=)
                          6: 3230322e3133332e352e302f32342d3234203d3e203234323030.roa (hash: fpRL8Fma9ykhIZFDzSC08kbZM+itPsUgTlUHNfip6cw=)
                          7: 3230322e3133332e312e302f32342d3234203d3e203234323030.roa (hash: +WQDDpOr7BIkoO1ou9EO6AdPk7I9sWGQQ0uBCTy/cyM=)
                          8: 3230322e3133332e302e302f32342d3234203d3e203234323030.roa (hash: Pppa12U1FBCWUbrjFLtimpCCb2f/w2y+Q5IjM+b5DpI=)
                          9: 3230322e3133332e322e302f32342d3234203d3e203234323030.roa (hash: bz45Mn7ZgKZreN1WmgS7I4+teMbA4Do/dtC0u8jELGY=)
                          10: 3230322e3133332e342e302f32342d3234203d3e203234323030.roa (hash: aPtODejZ83CWdVDiKww6DVNDrHJed0ktroNcqSgEID0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl
                          rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d9:74:a7:54:8b:32:2c:b1:8d:05:7c:f8:62:e0:94:fd:1a:3f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40
        Validity
            Not Before: Aug 21 01:55:49 2025 GMT
            Not After : Aug 24 13:01:49 2025 GMT
        Subject: CN=1BA570F31371DA987940B06A8A8784F80870433C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a3:1f:67:17:24:1f:5e:75:f4:e8:e7:7e:65:
                    65:c6:cc:47:42:c3:dd:77:cf:91:9c:1f:a8:f9:f8:
                    a9:62:66:50:60:44:c1:b1:41:91:28:9f:38:ac:99:
                    95:b0:ca:e6:0e:91:eb:ce:56:ef:e9:fa:38:19:f4:
                    8a:28:8c:1e:df:31:c5:d7:80:a4:f6:4b:21:41:ce:
                    d4:bb:33:e9:cd:d6:cc:e3:55:39:65:59:4c:5d:57:
                    88:de:be:83:26:7b:68:e1:aa:c0:9e:64:9f:b6:59:
                    4c:e4:c0:0c:60:54:53:af:ca:9f:a1:4a:20:37:7d:
                    30:d0:84:a8:a9:94:e6:0f:51:43:41:a9:5f:f4:92:
                    c8:f1:ce:3b:c7:50:cd:e1:bd:f9:f8:9f:68:de:f4:
                    47:7b:a6:e1:6f:0d:4f:76:db:2c:91:14:bc:2f:40:
                    a0:bb:1d:cb:1f:30:ef:24:f6:46:81:a2:c4:a3:e7:
                    0b:cc:c5:2b:ce:b5:af:18:f9:8b:c6:08:b1:02:6a:
                    bf:96:c5:64:f3:7f:c7:bc:70:59:ce:6f:f2:52:4e:
                    51:59:5c:4c:58:26:c2:f2:ee:b4:88:94:89:0d:e3:
                    a1:ae:4e:b8:91:d0:92:5a:d5:ce:6e:11:55:98:1b:
                    ed:eb:d6:13:eb:f7:ef:d6:f0:5d:17:1b:db:23:21:
                    9d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A5:70:F3:13:71:DA:98:79:40:B0:6A:8A:87:84:F8:08:70:43:3C
            X509v3 Authority Key Identifier:
                keyid:D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a8:7d:19:e6:11:51:0e:7a:3e:cf:65:03:1d:c9:df:82:29:
         6f:15:a8:ca:42:fa:22:a7:2b:48:16:f9:7b:6b:e2:9e:14:d3:
         74:8e:0c:00:9c:f5:3c:ed:08:b6:45:d8:0f:37:a6:64:8f:20:
         35:86:13:57:5d:bc:96:04:2c:fe:c9:9e:68:b3:69:f1:15:65:
         3a:92:2e:dc:bf:4e:00:7f:51:0e:55:28:7d:99:3f:6f:69:96:
         54:e3:de:e7:04:a8:60:95:8f:00:73:be:76:8a:0c:2f:6e:f0:
         7e:7d:7d:22:79:5f:bc:27:aa:96:51:07:3c:0c:ed:2b:7b:74:
         a0:9f:d4:e5:6d:b9:c5:18:c2:86:3e:be:1d:b5:67:8b:00:f0:
         41:d0:03:98:f2:ef:32:88:45:73:e1:da:bf:35:e2:28:c3:09:
         70:41:68:f7:23:38:48:41:40:1a:c1:b0:56:fc:5a:0d:5a:0c:
         30:36:47:91:52:41:e8:09:4c:49:bf:ea:29:66:ba:5f:4f:82:
         a7:60:01:71:a4:f4:bc:af:aa:03:42:c1:4d:8c:56:6d:32:f9:
         36:9a:81:b4:cd:68:49:10:ab:14:af:a2:d2:2a:19:19:e0:eb:
         72:ba:0b:1e:ee:7b:21:d6:3d:72:94:22:fc:69:a2:28:ec:9d:
         e1:02:e9:39
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKdl0p1SLMiyxjQV8+GLglP0aP6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4
QkE3QkU0MDAeFw0yNTA4MjEwMTU1NDlaFw0yNTA4MjQxMzAxNDlaMDMxMTAvBgNV
BAMTKDFCQTU3MEYzMTM3MURBOTg3OTQwQjA2QThBODc4NEY4MDg3MDQzM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYox9nFyQfXnX06Od+ZWXGzEdC
w913z5GcH6j5+KliZlBgRMGxQZEonzismZWwyuYOkevOVu/p+jgZ9IoojB7fMcXX
gKT2SyFBztS7M+nN1szjVTllWUxdV4jevoMme2jhqsCeZJ+2WUzkwAxgVFOvyp+h
SiA3fTDQhKiplOYPUUNBqV/0ksjxzjvHUM3hvfn4n2je9Ed7puFvDU922yyRFLwv
QKC7HcsfMO8k9kaBosSj5wvMxSvOta8Y+YvGCLECar+WxWTzf8e8cFnOb/JSTlFZ
XExYJsLy7rSIlIkN46GuTriR0JJa1c5uEVWYG+3r1hPr9+/W8F0XG9sjIZ3fAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUG6Vw8xNx2ph5QLBqioeE+AhwQzwwHwYDVR0j
BBgwFoAU0MbXXDw0fVsnx4kR9ixfq4unvkAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MzY2OWVhNC1lODJmLTQ2YzMtOGRkMy0yZTk4ODE1OWIyMDIvMC9EMEM2RDc1QzND
MzQ3RDVCMjdDNzg5MTFGNjJDNUZBQjhCQTdCRTQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4QkE3
QkU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2NjllYTQtZTgyZi00NmMzLThk
ZDMtMmU5ODgxNTliMjAyLzAvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVG
QUI4QkE3QkU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE+ofRnmEVEOej7PZQMdyd+CKW8VqMpC+iKn
K0gW+Xtr4p4U03SODACc9TztCLZF2A83pmSPIDWGE1ddvJYELP7JnmizafEVZTqS
Lty/TgB/UQ5VKH2ZP29pllTj3ucEqGCVjwBzvnaKDC9u8H59fSJ5X7wnqpZRBzwM
7St7dKCf1OVtucUYwoY+vh21Z4sA8EHQA5jy7zKIRXPh2r814ijDCXBBaPcjOEhB
QBrBsFb8Wg1aDDA2R5FSQegJTEm/6ilmul9PgqdgAXGk9LyvqgNCwU2MVm0y+Taa
gbTNaEkQqxSvotIqGRng63K6Cx7ueyHWPXKUIvxpoijsneEC6Tk=
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:43 2025 by rpki-client