Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft
File:                     D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft (raw, json)
Hash identifier:          H3UY5uKFvhwk3nvmpG3q/SoeWCIRNiUzSgDYYk/HC6w=
Subject key identifier:   95:08:7E:8E:CF:44:6F:FF:01:87:2F:C6:1E:32:F5:4E:98:1B:D7:D9
Authority key identifier: D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40
Certificate issuer:       /CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40
Certificate serial:       325E0A253BE05ECE0323EDCD8C621DA55EFCABCB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft
Manifest number:          5D
Signing time:             Fri 27 Jun 2025 22:10:49 +0000
Manifest this update:     Fri 27 Jun 2025 22:05:49 +0000
Manifest next update:     Tue 01 Jul 2025 03:00:49 +0000
Files and hashes:         1: 3230322e3133332e302e302f32342d3234203d3e203234323030.roa (hash: Pppa12U1FBCWUbrjFLtimpCCb2f/w2y+Q5IjM+b5DpI=)
                          2: 3230322e3133332e322e302f32342d3234203d3e203234323030.roa (hash: bz45Mn7ZgKZreN1WmgS7I4+teMbA4Do/dtC0u8jELGY=)
                          3: 3230322e3133332e372e302f32342d3234203d3e203234323030.roa (hash: sHrERPT1Gki4rCwtxWJOl3kaPuH5N8410kKwTEyBzNs=)
                          4: 3230322e3133332e312e302f32342d3234203d3e203234323030.roa (hash: +WQDDpOr7BIkoO1ou9EO6AdPk7I9sWGQQ0uBCTy/cyM=)
                          5: 3230322e3133332e332e302f32342d3234203d3e203234323030.roa (hash: KBjjsWsKQFuN1REWppuBIRLZLM4xHEbHMPv7NBToWH4=)
                          6: 3230322e3133332e302e302f32312d3231203d3e203234323030.roa (hash: TfiqH+4JRlzCqMd+ohke3uaa5qrL5wiizfc5eyZU4Bw=)
                          7: 3230322e3133332e362e302f32342d3234203d3e203234323030.roa (hash: PwrwjwU7TfjmAzlVIhNNq7JmiMiE2zPrnJS6Vjw4fpA=)
                          8: 3230322e3133332e342e302f32342d3234203d3e203234323030.roa (hash: aPtODejZ83CWdVDiKww6DVNDrHJed0ktroNcqSgEID0=)
                          9: D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl (hash: 1Uubs73k6Sq4NyQKoNTWWaqcAuu4uCfqdHn/7R6IxaM=)
                          10: 3230322e3133332e352e302f32342d3234203d3e203234323030.roa (hash: fpRL8Fma9ykhIZFDzSC08kbZM+itPsUgTlUHNfip6cw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl
                          rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5e:0a:25:3b:e0:5e:ce:03:23:ed:cd:8c:62:1d:a5:5e:fc:ab:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40
        Validity
            Not Before: Jun 27 22:05:49 2025 GMT
            Not After : Jul  1 03:00:49 2025 GMT
        Subject: CN=95087E8ECF446FFF01872FC61E32F54E981BD7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e4:79:fd:67:1b:82:8f:88:ee:3c:e0:09:46:
                    8e:c0:18:3f:77:77:a3:46:4f:5e:61:4d:6d:d2:4c:
                    63:7b:dc:04:4f:fb:a5:5b:c3:48:d3:db:ae:9e:97:
                    7c:d3:48:8f:69:41:f8:9e:63:fd:8b:40:5c:ff:b9:
                    6d:0b:c8:08:b6:b1:2c:8a:35:70:78:52:0d:2e:a3:
                    19:8c:31:3f:b3:58:b6:f0:4f:b8:2e:9c:1a:ad:d7:
                    b5:a7:22:76:1b:8e:c5:55:8b:c2:bd:05:1f:80:01:
                    85:ee:f2:24:31:da:9c:e8:03:38:da:ef:af:17:a2:
                    39:f2:97:a8:cd:77:d8:d1:b6:89:1b:62:db:73:c4:
                    ef:b5:30:20:2e:a9:e9:b4:10:a5:51:00:43:eb:39:
                    e2:83:5f:33:29:e0:bc:5b:d7:da:ba:d8:9e:8b:62:
                    54:f8:17:10:cf:f3:b8:d9:30:43:f1:db:c9:9a:e7:
                    10:19:83:fa:65:33:dc:92:20:c2:b6:82:87:4c:69:
                    17:04:35:36:f5:90:5e:a1:73:12:db:90:eb:f4:d4:
                    a5:de:96:80:9c:a1:71:77:9d:26:96:56:5e:26:9e:
                    b4:65:6f:87:81:8d:ea:96:67:04:3e:73:ac:59:99:
                    db:38:a1:2a:d0:74:8a:ea:ee:e3:e8:6a:78:80:a5:
                    50:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:08:7E:8E:CF:44:6F:FF:01:87:2F:C6:1E:32:F5:4E:98:1B:D7:D9
            X509v3 Authority Key Identifier:
                keyid:D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:a2:0f:d2:66:82:ef:fc:18:19:2f:1e:b8:88:4b:61:a0:09:
         e3:c8:12:e3:f7:55:fa:c5:b0:24:0b:1f:5c:ee:a4:54:3e:0b:
         d7:4a:00:74:d8:b6:f1:a7:64:5b:f0:f0:c7:b1:a0:5c:68:a3:
         0f:b8:46:9c:f0:b6:d5:f5:d2:c7:9a:5c:fa:d8:f7:8d:b7:b2:
         4a:bd:e5:a9:e6:ba:a6:4f:08:a9:46:2a:2d:bf:b7:98:94:b6:
         ac:3b:bc:e0:42:ed:2e:c0:f2:34:69:d7:92:3d:5f:b4:ef:8e:
         58:3f:50:bb:5e:00:a4:c3:56:1d:d2:af:f1:51:14:da:f6:fa:
         7d:65:57:51:51:82:3c:d5:0e:bc:40:16:1e:bd:35:76:9d:7c:
         9d:89:74:95:30:30:80:19:77:4d:76:af:59:ec:c4:ca:75:2e:
         fb:38:0c:51:64:6f:22:ca:82:50:5a:67:56:cf:28:d5:bb:ca:
         69:8e:e8:b4:21:2f:f0:2b:3b:0e:a6:f2:e9:96:63:0f:68:0f:
         af:b1:be:05:ea:4d:44:be:46:00:a5:1b:4f:0f:59:81:b8:78:
         55:d0:9c:ca:2b:35:a4:39:20:af:bd:aa:4a:b1:bf:d9:6b:4b:
         47:3c:64:63:d9:9a:73:a0:3b:91:02:d4:36:05:54:06:84:cc:
         fa:5a:2b:6e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMl4KJTvgXs4DI+3NjGIdpV78q8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4
QkE3QkU0MDAeFw0yNTA2MjcyMjA1NDlaFw0yNTA3MDEwMzAwNDlaMDMxMTAvBgNV
BAMTKDk1MDg3RThFQ0Y0NDZGRkYwMTg3MkZDNjFFMzJGNTRFOTgxQkQ3RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5Hn9ZxuCj4juPOAJRo7AGD93
d6NGT15hTW3STGN73ARP+6Vbw0jT266el3zTSI9pQfieY/2LQFz/uW0LyAi2sSyK
NXB4Ug0uoxmMMT+zWLbwT7gunBqt17WnInYbjsVVi8K9BR+AAYXu8iQx2pzoAzja
768Xojnyl6jNd9jRtokbYttzxO+1MCAuqem0EKVRAEPrOeKDXzMp4Lxb19q62J6L
YlT4FxDP87jZMEPx28ma5xAZg/plM9ySIMK2godMaRcENTb1kF6hcxLbkOv01KXe
loCcoXF3nSaWVl4mnrRlb4eBjeqWZwQ+c6xZmds4oSrQdIrq7uPoaniApVBDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlQh+js9Eb/8Bhy/GHjL1Tpgb19kwHwYDVR0j
BBgwFoAU0MbXXDw0fVsnx4kR9ixfq4unvkAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MzY2OWVhNC1lODJmLTQ2YzMtOGRkMy0yZTk4ODE1OWIyMDIvMC9EMEM2RDc1QzND
MzQ3RDVCMjdDNzg5MTFGNjJDNUZBQjhCQTdCRTQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4QkE3
QkU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2NjllYTQtZTgyZi00NmMzLThk
ZDMtMmU5ODgxNTliMjAyLzAvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVG
QUI4QkE3QkU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAM+iD9Jmgu/8GBkvHriIS2GgCePIEuP3VfrF
sCQLH1zupFQ+C9dKAHTYtvGnZFvw8MexoFxoow+4RpzwttX10seaXPrY9423skq9
5anmuqZPCKlGKi2/t5iUtqw7vOBC7S7A8jRp15I9X7Tvjlg/ULteAKTDVh3Sr/FR
FNr2+n1lV1FRgjzVDrxAFh69NXadfJ2JdJUwMIAZd012r1nsxMp1Lvs4DFFkbyLK
glBaZ1bPKNW7ymmO6LQhL/ArOw6m8umWYw9oD6+xvgXqTUS+RgClG08PWYG4eFXQ
nMorNaQ5IK+9qkqxv9lrS0c8ZGPZmnOgO5EC1DYFVAaEzPpaK24=
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:51:13 2025 by rpki-client