Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
File:                     8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json)
Hash identifier:          MiGRB5y7NXCTfhiptbi4Hag4eWLQDv7mZj2HY2eGFWQ=
Subject key identifier:   86:D5:17:C5:CD:9F:B8:D9:DC:0E:3A:1B:BE:C4:40:E4:B7:35:A7:C3
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Certificate issuer:       /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial:       01D6A8B6994D078DD97CEB361A2E4E3520CBFBCD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
Manifest number:          0514
Signing time:             Fri 22 Aug 2025 09:54:08 +0000
Manifest this update:     Fri 22 Aug 2025 09:49:08 +0000
Manifest next update:     Mon 25 Aug 2025 18:58:08 +0000
Files and hashes:         1: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: D991UEHbv0mT0xjDcSLCu5iaTm6ib67YwDcjKkL5vPw=)
                          2: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: lzhEeQ6DAkKFZoSDXb/ij7h8jtExSjFLGzcvwIopMPE=)
                          3: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=)
                          4: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: WQBf9L7YNKGpOB9D76iz/iiKrbYilC5sLegGPKm/HYs=)
                          5: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=)
                          6: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=)
                          7: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=)
                          8: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: lYozuS7H8g71TmDAhlsE7Z+j/6P9Ega8nsca+NA9iZs=)
                          9: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=)
                          10: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: DLEEWRg8CzNEC40bkoq+06vWx/pLLLcKvRY7UIZLKcs=)
                          11: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: yw3K/bp/LPi1I2OAb+IKkUT9fIWUEaXPoYhzWvShryU=)
                          12: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=)
                          13: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=)
                          14: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: gnvURXZkhn/FEj22B4ytqTMsZk8ZLC9E8Tq6VbTdHlg=)
                          15: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=)
                          16: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=)
                          17: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=)
                          18: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: +h2OIV45k9IMNmhDrlIF5o27fKX07HhXCAJxexuPVfw=)
                          19: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: gD3qH0CL5kDWzLn1NnDdXaxbwmPWUV8Kvspy5PDfTJA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
                          rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 18:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d6:a8:b6:99:4d:07:8d:d9:7c:eb:36:1a:2e:4e:35:20:cb:fb:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
        Validity
            Not Before: Aug 22 09:49:08 2025 GMT
            Not After : Aug 25 18:58:08 2025 GMT
        Subject: CN=86D517C5CD9FB8D9DC0E3A1BBEC440E4B735A7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3f:8f:ec:f0:6a:03:0a:ba:bb:60:5e:d7:b1:
                    32:f1:eb:0b:e6:a3:0b:54:7d:57:e1:e2:50:41:0a:
                    96:28:d4:3a:fa:93:05:ab:ac:05:f3:30:62:51:cd:
                    b3:07:d8:a5:c1:59:04:31:60:6d:52:ff:87:71:d5:
                    8f:07:ea:ff:e8:76:e4:69:8a:7c:9c:72:de:16:02:
                    ee:fd:4e:c0:3e:5a:e2:c6:aa:62:a9:c2:f3:33:2a:
                    5c:7b:78:17:23:28:4c:78:14:e3:92:17:f8:a5:ac:
                    26:61:db:47:8c:a4:4a:ab:3f:e8:5f:af:39:eb:56:
                    1b:2c:5e:4b:37:ab:6f:04:df:8c:61:79:f8:9f:10:
                    60:ed:31:6e:b1:0f:55:5a:2d:80:34:60:32:bb:2b:
                    84:15:07:2a:f8:14:f0:32:35:91:30:83:ab:ed:c4:
                    8f:b9:fb:99:2b:58:10:23:df:a1:30:d2:21:82:ee:
                    4b:82:01:bc:02:87:43:61:ef:b0:cf:b5:dd:30:d6:
                    d7:a0:99:85:09:f6:6f:c1:3c:66:2a:4f:1b:88:35:
                    9b:14:05:31:8b:58:91:62:60:e5:70:ca:22:ef:ad:
                    e4:30:d7:19:e3:91:ba:0f:d5:80:06:99:ad:ee:fb:
                    5d:d1:be:dd:c9:85:41:ab:8e:e3:09:5f:d8:7a:39:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D5:17:C5:CD:9F:B8:D9:DC:0E:3A:1B:BE:C4:40:E4:B7:35:A7:C3
            X509v3 Authority Key Identifier:
                keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:86:00:e8:8c:b5:a6:09:32:f9:3c:f2:97:c2:8e:b9:92:be:
         9c:55:9f:1c:73:00:c3:ff:a9:cf:5f:86:ce:02:e7:4a:32:0f:
         c3:d3:86:40:15:53:20:78:12:e5:8c:56:d0:c9:fc:29:d1:4b:
         99:c1:13:49:4e:c5:b4:65:fe:77:b9:80:4a:1a:9b:03:7d:ff:
         94:4f:cb:5a:b5:51:ec:03:e2:f9:8a:90:9f:23:4f:fd:98:fe:
         bf:f5:61:cb:ad:92:03:fb:53:f6:82:d8:80:05:a1:83:41:d6:
         42:48:a9:4b:a6:90:10:92:62:86:00:21:78:b3:bc:ae:7d:6f:
         c4:08:58:11:28:87:31:5b:06:99:c1:38:dd:b4:46:3d:80:3b:
         42:15:f8:f5:0d:b7:d7:ce:44:19:63:1e:13:11:f9:62:df:81:
         5d:39:80:57:ad:1a:1b:3b:41:f7:2d:3b:a5:fc:8d:ec:b7:ea:
         bb:1c:33:37:8b:1b:f3:ef:a8:de:c8:eb:c8:81:8b:88:90:7f:
         26:d0:53:14:74:d6:8e:54:97:bb:a0:1a:db:d4:8f:0f:aa:4d:
         6d:65:38:0e:07:a9:8d:0c:ce:b4:34:8d:f3:d6:ba:19:34:c9:
         08:8d:40:f6:53:26:01:9c:12:26:aa:8d:51:46:31:9f:f2:2b:
         ae:66:61:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:08 2025 by rpki-client