Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
File:                     065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json)
Hash identifier:          vU6aNEcTYvKWMCoJnM1NrD/tAP01bccVBNGms/c/SLM=
Subject key identifier:   49:93:F5:10:F7:F4:62:4F:1C:CA:5E:AA:61:E6:85:0E:F3:E0:53:49
Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28
Certificate issuer:       /CN=065943D1744CF4841A6D3D50944D2A4DB537A128
Certificate serial:       41D83E1279A337E1C422C17580DD4664077BBEF6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
Manifest number:          DE
Signing time:             Mon 30 Jun 2025 16:01:48 +0000
Manifest this update:     Mon 30 Jun 2025 15:56:48 +0000
Manifest next update:     Thu 03 Jul 2025 19:46:48 +0000
Files and hashes:         1: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: JkcKtcV//LYqaw+9zrmVkPhDbatpI5ildpclS3nEbmQ=)
                          2: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: was7v1WWiX0svUj5NSDshTL0Ofv847NEyARM6C64Mto=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl
                          rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 19:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d8:3e:12:79:a3:37:e1:c4:22:c1:75:80:dd:46:64:07:7b:be:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128
        Validity
            Not Before: Jun 30 15:56:48 2025 GMT
            Not After : Jul  3 19:46:48 2025 GMT
        Subject: CN=4993F510F7F4624F1CCA5EAA61E6850EF3E05349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:68:43:ec:70:a0:a8:7c:92:d0:7e:2e:aa:
                    6c:2d:da:92:3a:a8:2d:67:31:a9:16:69:77:1b:7d:
                    f4:d2:d0:5a:52:c1:68:ba:c1:db:e9:ba:16:bf:f9:
                    ac:6e:ea:6f:18:33:e5:6a:d0:46:49:4b:c0:16:10:
                    db:7a:ea:b6:7e:dc:8d:b4:05:81:ec:f6:08:6f:a6:
                    9c:52:db:be:42:85:cf:6a:f1:cb:fb:8c:a2:cc:54:
                    e9:98:8a:21:9b:f6:88:66:9e:b6:96:65:b2:71:2f:
                    c8:50:a1:1f:61:ae:73:69:8d:fd:84:03:54:8b:fc:
                    f9:eb:52:d1:17:99:7d:6b:0e:8a:98:f7:7d:23:22:
                    47:35:49:f7:5c:8b:c8:89:51:c2:b3:8e:a5:c1:87:
                    08:27:e4:3a:49:60:12:f0:e9:42:d6:7b:c4:99:24:
                    08:b1:6f:de:ad:78:52:42:bb:1c:10:ba:84:ef:0f:
                    7f:af:02:5a:f3:26:9d:45:73:a5:8c:1b:66:c2:bc:
                    66:0a:68:ab:67:4b:26:a7:b3:ea:6f:d8:74:8c:ad:
                    ad:2e:3d:ff:87:15:ca:9e:fc:95:36:55:0a:a7:38:
                    83:1f:0b:20:41:c0:67:02:68:e2:66:13:d0:6f:e2:
                    ad:7b:68:ad:eb:8a:32:ec:c3:9e:e3:4a:e5:4f:d0:
                    d6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:93:F5:10:F7:F4:62:4F:1C:CA:5E:AA:61:E6:85:0E:F3:E0:53:49
            X509v3 Authority Key Identifier:
                keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:df:51:b8:fa:89:1f:42:5a:62:dd:4e:57:f3:d1:f5:05:2a:
         03:c8:25:3a:1a:6a:51:08:87:9c:0f:0e:7b:e1:7d:cc:b2:0c:
         8b:2c:69:95:de:c9:66:36:c0:18:3a:2e:25:4c:2f:60:9d:c0:
         f1:aa:07:07:8a:bb:7c:f4:8c:ec:30:73:2f:49:18:13:f8:f9:
         ba:64:51:bb:c3:43:aa:69:9e:26:ef:3d:c7:3f:7d:40:ae:1a:
         76:0d:bf:0c:7f:70:ff:3d:10:41:09:1e:be:29:d5:41:aa:d5:
         82:74:53:dd:6e:06:f9:94:91:52:aa:bf:6b:5d:91:b8:c3:8d:
         2e:8a:7f:f8:72:2a:ef:9d:25:98:0c:2c:c5:79:a1:ae:23:a0:
         8e:e0:1f:c7:8a:02:98:da:f5:89:f9:54:28:3b:66:7e:bb:6b:
         ed:8a:de:d9:31:6e:eb:75:5f:a1:36:fa:87:90:14:0d:2b:24:
         98:37:01:c7:54:9c:a8:f1:30:ab:a7:45:c6:4f:16:06:48:9e:
         c6:7d:3e:76:5a:1c:12:62:d5:9d:6b:89:13:96:93:d8:d3:81:
         ee:06:5e:d6:ac:3a:5c:93:5d:4c:8e:79:a4:d6:6d:cf:ca:c5:
         d7:b8:27:4a:84:be:64:f4:95:a6:7c:4b:f2:7e:8b:72:f6:cb:
         e7:9d:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:24:50 2025 by rpki-client