Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
File:                     6969B3009665224541D322068C9E3444C78F90F9.mft (raw, json)
Hash identifier:          P6Z5grNayFaR4ylMlR3eT2WMTGDyyg/kRkl59NK/Y0E=
Subject key identifier:   95:21:9E:1C:E4:ED:AA:00:39:95:65:B6:E4:F2:2B:88:F4:91:13:E6
Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
Certificate issuer:       /CN=6969B3009665224541D322068C9E3444C78F90F9
Certificate serial:       21B6469CD38A113770BA3BBF11A9AB6E6B3FA5B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
Manifest number:          048A
Signing time:             Thu 21 Aug 2025 08:10:36 +0000
Manifest this update:     Thu 21 Aug 2025 08:05:36 +0000
Manifest next update:     Sun 24 Aug 2025 13:45:36 +0000
Files and hashes:         1: 323430353a633434303a383a3a2f34382d3438203d3e20313339393732.roa (hash: MRKapDwhJWKDpN14X0h/O1jz/ZplSxgiOCb6cDtszqE=)
                          2: 323430353a633434303a393937323a3a2f34382d3438203d3e20313339393732.roa (hash: Pu0wJEo+XXadVijB7isyEjKAERKeoNWdSqwY7VuwWUs=)
                          3: 323430353a633434303a363a3a2f34382d3438203d3e20313339393732.roa (hash: UZJBFUmGOWcyCUvIIFKUbAc9VXTri6PNHyeB4hhkFvw=)
                          4: 323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa (hash: 7I1Bs101/iTn1fXI/3h4GvzMfanTKUOjRc8cRguPLfg=)
                          5: 323430353a633434303a393a3a2f34382d3438203d3e20313339393732.roa (hash: cUXfxLq9SrJidRBDLWjTWhlyTdpXk138loj4yvcAltY=)
                          6: 323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa (hash: +bc7dUDcl/zyxgFD9hjH1WhAYFjRstDV27EEB/SKBg8=)
                          7: 323430353a633434303a343a3a2f34382d3438203d3e20313339393732.roa (hash: iT+MaDJ4i5BeR8TDDIOP07f7P6GIAJ+rbvY/CrktoQk=)
                          8: 323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa (hash: OSOXxJexRBCXGpEnlOsOg5TOUDuRwzl9RE1pFY2Qqhg=)
                          9: 323430353a633434303a353a3a2f34382d3438203d3e20313339393732.roa (hash: gyPh3b00K9+EtWewGNdy24gtbijTmPkvS+xaYyHiNaA=)
                          10: 323430353a633434303a313a3a2f34382d3438203d3e20313339393732.roa (hash: UQ99M3V6H/oFrfldgf9Xq1Fi/A6v60uZYgPA1HT2lMI=)
                          11: 323430353a633434303a3a2f34382d3438203d3e20313339393732.roa (hash: a6npMa+FlITcHX71eVXaeqWPwvQUau4yeny3IXatXbE=)
                          12: 323430353a633434303a333a3a2f34382d3438203d3e20313339393732.roa (hash: QsRvRtbvklzx+fVhZ+bHLVPp5flqQEGx3NdKmk6EOjo=)
                          13: 323430353a633434303a3a2f33322d3332203d3e20313339393732.roa (hash: 7B9NMIAt6o2ouwcqf5Q5a326EHxky3KwQZQYJ3mikGI=)
                          14: 6969B3009665224541D322068C9E3444C78F90F9.crl (hash: tLzrZlZ3RMR9vYbnuqZsKnyYhRC8viUgEMTQcPaJdTM=)
                          15: 3130332e3134372e3234362e302f32342d3234203d3e20313339393732.roa (hash: fClrGVo7KIbodlsfiTmY+K3veEcIh6A6Yqks/n4Pem0=)
                          16: 323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa (hash: PqiUcpNf/7FxBWSo0M7ORKTw4r0GFcdqTZ8jW03mfAU=)
                          17: 3130332e3134372e3234372e302f32342d3234203d3e20313339393732.roa (hash: fKh3U2WGihSnjBjskCr/A8r5tehkzUOR/0W5SqS1toE=)
                          18: 3130332e3134372e3234362e302f32332d3233203d3e20313339393732.roa (hash: teCWdBffnsSq00HVFNB0zTbUb3mhJ+Mb1bWy4BeWvPg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl
                          rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b6:46:9c:d3:8a:11:37:70:ba:3b:bf:11:a9:ab:6e:6b:3f:a5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9
        Validity
            Not Before: Aug 21 08:05:36 2025 GMT
            Not After : Aug 24 13:45:36 2025 GMT
        Subject: CN=95219E1CE4EDAA00399565B6E4F22B88F49113E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:27:4a:6a:a5:8f:51:30:1f:6f:af:7e:2d:5f:
                    01:39:3b:76:85:93:32:e5:9a:b9:f8:e7:57:9c:a6:
                    92:de:67:79:bf:6c:1e:33:f3:7f:f7:64:14:a2:56:
                    d7:5e:37:b1:e3:33:32:8c:03:6b:5f:66:20:c9:38:
                    db:57:70:67:bb:94:47:89:ed:6f:c8:50:98:ce:3a:
                    8a:08:a3:b9:1c:a4:1a:af:ab:e4:ec:ec:38:e2:d7:
                    ac:dc:89:f7:7e:f8:b7:cf:ad:99:ff:ca:24:04:2c:
                    82:fa:81:e9:53:85:4e:5e:5c:e9:75:84:fc:79:1b:
                    90:7b:c7:77:6a:e9:c9:7b:22:92:3e:ce:97:fd:9c:
                    8d:8f:4e:70:6e:90:a7:16:71:3c:69:dd:d1:6b:88:
                    da:b5:ac:84:2d:c7:c3:0c:b8:9b:1f:81:12:0d:f5:
                    71:57:6b:d0:a4:57:62:34:c0:43:91:0c:4c:37:24:
                    09:ef:cb:12:e0:54:07:b3:36:2b:97:e7:93:ab:d6:
                    70:c7:67:f2:4d:11:3d:54:1c:40:8d:e8:14:f1:ad:
                    98:da:80:25:32:2d:11:dd:75:58:75:48:cf:ff:bf:
                    66:66:3d:d9:70:1b:69:93:fa:50:5d:03:52:1e:d8:
                    a0:21:ab:e2:ce:79:be:d7:76:8c:8c:0e:9a:87:f9:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:21:9E:1C:E4:ED:AA:00:39:95:65:B6:E4:F2:2B:88:F4:91:13:E6
            X509v3 Authority Key Identifier:
                keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:97:a0:4b:51:1c:2f:0e:7a:01:21:94:21:3c:11:eb:5d:5b:
         37:05:90:8f:e8:70:33:9b:0e:4c:f3:0f:82:69:da:57:45:8f:
         98:47:3c:1d:d6:c9:78:d1:b5:2e:fa:bd:67:d3:2c:47:d9:24:
         31:18:31:72:50:a5:10:d4:8e:1a:aa:ff:a5:3b:b8:37:6a:b0:
         ba:ff:df:6e:1a:f5:48:cd:db:b2:14:b7:20:08:42:85:36:3c:
         3b:54:99:45:34:01:da:65:c7:41:90:1d:32:11:6d:4c:00:bc:
         c6:31:46:29:e9:2b:b8:79:5b:e3:34:de:06:a6:a7:ae:8e:c8:
         60:63:04:3e:7f:10:10:20:9f:3d:66:15:bc:35:68:4a:f3:73:
         c5:49:d9:b6:9e:b4:65:f7:a8:5c:ff:6b:07:df:1f:f9:94:a3:
         46:ce:ea:8d:9c:57:bd:f6:93:94:72:b6:11:11:ad:bc:16:29:
         48:02:7c:2a:3c:4b:dd:e7:f6:68:dc:06:32:3c:3a:0d:5e:e3:
         31:75:e8:7c:2f:1b:d1:bb:f0:a0:76:c8:a4:6a:b9:d4:3a:84:
         22:f2:6d:31:61:7e:21:33:88:56:d7:b8:3a:eb:d4:32:a3:83:
         89:85:4c:f9:9a:2d:63:e8:8e:cd:d4:f9:bf:a6:c8:9a:1d:60:
         6b:93:fd:fa
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIbZGnNOKETdwuju/Eamrbms/pbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRD
NzhGOTBGOTAeFw0yNTA4MjEwODA1MzZaFw0yNTA4MjQxMzQ1MzZaMDMxMTAvBgNV
BAMTKDk1MjE5RTFDRTRFREFBMDAzOTk1NjVCNkU0RjIyQjg4RjQ5MTEzRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJ0pqpY9RMB9vr34tXwE5O3aF
kzLlmrn451ecppLeZ3m/bB4z83/3ZBSiVtdeN7HjMzKMA2tfZiDJONtXcGe7lEeJ
7W/IUJjOOooIo7kcpBqvq+Ts7Dji16zcifd++LfPrZn/yiQELIL6gelThU5eXOl1
hPx5G5B7x3dq6cl7IpI+zpf9nI2PTnBukKcWcTxp3dFriNq1rIQtx8MMuJsfgRIN
9XFXa9CkV2I0wEORDEw3JAnvyxLgVAezNiuX55Or1nDHZ/JNET1UHECN6BTxrZja
gCUyLRHddVh1SM//v2ZmPdlwG2mT+lBdA1Ie2KAhq+LOeb7XdoyMDpqH+XDjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlSGeHOTtqgA5lWW25PIriPSRE+YwHwYDVR0j
BBgwFoAUaWmzAJZlIkVB0yIGjJ40RMePkPkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OWVlYmY3Yy1mZTM4LTQ2YTktODMxMS1lMDUzZmNhNTBkZmQvMC82OTY5QjMwMDk2
NjUyMjQ1NDFEMzIyMDY4QzlFMzQ0NEM3OEY5MEY5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRDNzhG
OTBGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTllZWJmN2MtZmUzOC00NmE5LTgz
MTEtZTA1M2ZjYTUwZGZkLzAvNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0
NDRDNzhGOTBGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI+XoEtRHC8OegEhlCE8EetdWzcFkI/ocDOb
DkzzD4Jp2ldFj5hHPB3WyXjRtS76vWfTLEfZJDEYMXJQpRDUjhqq/6U7uDdqsLr/
324a9UjN27IUtyAIQoU2PDtUmUU0Adplx0GQHTIRbUwAvMYxRinpK7h5W+M03gam
p66OyGBjBD5/EBAgnz1mFbw1aErzc8VJ2baetGX3qFz/awffH/mUo0bO6o2cV732
k5RythERrbwWKUgCfCo8S93n9mjcBjI8Og1e4zF16HwvG9G78KB2yKRqudQ6hCLy
bTFhfiEziFbXuDrr1DKjg4mFTPmaLWPojs3U+b+myJodYGuT/fo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:53 2025 by rpki-client