Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
File:                     83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft (raw, json)
Hash identifier:          QyjoRxltjzO/5PWczZIJGIeRcqpUNTS8HpIbSY7V61U=
Subject key identifier:   FC:3A:DF:13:32:B0:11:84:49:5E:ED:C4:96:52:28:23:20:76:09:1F
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Certificate issuer:       /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial:       0A08AE7A9EA0C90C859A59261541A825C518EB4C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
Manifest number:          051A
Signing time:             Sat 23 Aug 2025 02:52:22 +0000
Manifest this update:     Sat 23 Aug 2025 02:47:22 +0000
Manifest next update:     Tue 26 Aug 2025 07:03:22 +0000
Files and hashes:         1: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: 4nd2DLm/J+RolIn9aIGsW+HXsvu2ybFSiuHkPOngkOI=)
                          2: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: Au0lkFPRKVBvBG5KfA74Xt/Sxl2Jzxo+Ex2p9zz5DkQ=)
                          3: 83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl (hash: LFEKAYq1oJjUet/w+GSgCAOBMe0oH0obufI5zNv2jjk=)
                          4: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: KvSvkJVty1qHjYffQieqFJAuh3dt1BHzGki9sQiAFXI=)
                          5: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: h7NsaP81E/4rqIyGV1dg1JRgScEeK/hJwwlj/aFKArk=)
                          6: 3135302e3130372e3130342e302f32332d3234203d3e203338353035.roa (hash: kM52J1VyVwAmdb6lGcMZz88a3uWT1MsaW2EWZd11F4g=)
                          7: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: uPV0voLTxjHrIsHmaExj5+EGVw7Nm+iGd6nJEj83KUE=)
                          8: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: 1FsOdleRSG3IEtzn2Y5KIghx/oCLGSKZKVzGT9z4mXU=)
                          9: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: EZdh60eQJ0O5FCzuczO3QBjbRRYgOvtWbCa5RUYH7z8=)
                          10: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: hmU/fFbEB5MHfxnUZwzr2O0p+/FFdJYTbJLKljW/yfY=)
                          11: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: IrBPaOzrnHx8A3kF5U8FLypO1fdlWfu1886gczEN4Os=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
                          rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 07:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:08:ae:7a:9e:a0:c9:0c:85:9a:59:26:15:41:a8:25:c5:18:eb:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
        Validity
            Not Before: Aug 23 02:47:22 2025 GMT
            Not After : Aug 26 07:03:22 2025 GMT
        Subject: CN=FC3ADF1332B01184495EEDC4965228232076091F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:11:f6:a3:af:ef:74:0d:54:af:0d:2f:32:
                    a0:37:c2:12:45:af:0e:fe:31:5f:3a:d0:27:da:71:
                    e4:be:57:85:1f:84:0f:d7:55:3f:1e:f9:ad:f1:9c:
                    e9:6e:b4:4c:02:1c:35:d8:5c:d9:42:ec:93:48:ac:
                    e4:be:4a:0a:8a:f7:a3:9d:98:c5:2b:aa:e1:43:db:
                    1a:8e:b1:b1:ab:73:ac:3f:07:77:e7:b9:22:1f:e8:
                    ea:ca:fd:6c:19:c4:0a:ce:06:42:7a:1b:70:d4:3f:
                    57:01:09:5f:e2:bd:6a:08:94:6b:98:c2:94:9a:a9:
                    4e:9e:66:2a:ff:4a:65:54:e3:6a:9f:88:71:2f:e0:
                    3d:48:58:56:9d:97:98:57:99:21:e0:1a:d1:7d:5a:
                    c8:5e:25:46:60:ca:8c:c3:75:2c:6f:3f:c7:14:e6:
                    c0:a2:b5:32:d5:04:3b:a8:60:95:31:11:84:d9:e3:
                    a9:18:16:60:3e:6c:a1:de:ec:8e:95:1b:b7:b6:4c:
                    64:5a:ba:6b:f4:b5:df:66:b4:41:0a:ff:d9:98:1b:
                    a2:88:ce:27:9a:e4:71:97:b2:2a:da:c6:dc:28:a7:
                    64:e9:0d:ee:a9:28:17:5a:85:bf:98:02:2b:70:70:
                    4a:fc:c5:90:88:38:c0:e2:db:b9:46:48:68:a8:d2:
                    9c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3A:DF:13:32:B0:11:84:49:5E:ED:C4:96:52:28:23:20:76:09:1F
            X509v3 Authority Key Identifier:
                keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ae:e2:1e:cf:6f:f2:cc:ca:cb:16:30:f2:f5:71:ac:0f:2b:
         f3:50:0f:93:30:e2:80:48:3e:d0:ab:b8:90:d7:52:e7:d2:0c:
         dc:27:4e:c4:cb:9c:65:7c:c3:75:85:9b:f8:7d:d5:32:b9:41:
         c0:c4:7d:53:b9:6f:84:54:e1:12:b1:7b:b9:8d:ac:d3:04:b5:
         c6:30:d6:d8:3a:1e:a9:1f:cd:1d:d8:65:6b:50:8a:20:d5:fe:
         ae:35:14:52:bd:43:74:a9:aa:b1:36:1e:e4:89:77:d3:39:32:
         3b:43:f0:e1:d6:0c:73:b7:65:a1:ad:90:90:3c:e8:d2:34:f5:
         8e:60:1e:8c:fd:c2:42:8b:de:ee:4e:17:b8:e8:93:ac:69:37:
         86:48:2b:85:70:67:ba:cc:d4:58:2e:88:e8:1d:61:3a:2a:02:
         fd:1d:15:39:ef:10:13:14:8b:14:1d:22:65:de:21:00:6f:9c:
         56:11:a3:43:5d:a2:ac:fb:8d:1a:1f:48:02:19:71:20:4a:ec:
         c3:6e:60:e0:3c:8f:2a:25:29:5b:1c:99:a5:4e:12:e5:9b:7e:
         35:5a:36:72:bf:cc:d8:b2:6c:48:cb:10:eb:06:c6:87:08:90:
         d0:52:e7:3c:ee:77:88:d3:b7:c0:51:35:9c:29:26:ac:d3:d9:
         3d:8d:14:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:18 2025 by rpki-client