Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
File:                     284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft (raw, json)
Hash identifier:          qiE2dQTYrbTVwbBrVP0CIefz2/wux64rFXWiiE8JHo0=
Subject key identifier:   C2:E7:1F:57:3C:F0:A9:28:F9:DF:3B:96:56:5A:72:A9:0F:8C:CE:75
Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA
Certificate issuer:       /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
Certificate serial:       37945720A155DAA946E2D5C11A97E4C86C89F2CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
Manifest number:          022D
Signing time:             Sun 29 Jun 2025 21:51:41 +0000
Manifest this update:     Sun 29 Jun 2025 21:46:41 +0000
Manifest next update:     Wed 02 Jul 2025 22:17:41 +0000
Files and hashes:         1: 3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (hash: Aybn7R6DKZgLNsyzOnIC5OzvxsaaE/Jkwzj5+uIo0ZA=)
                          2: 323430343a356434303a363a3a2f34382d3438203d3e20313338353938.roa (hash: N4ska4jT8GyC3wJ6UeRa470yDVKPeDBNuPa3uDDzMig=)
                          3: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (hash: Y7lmNtoprlRJly9WgGsWn6qQ0ew2imeiy62+KuKF1lw=)
                          4: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (hash: xtD4NorzIKyUJeEfNgVo0ESCO/9jj+bjHUWQd0PWTDA=)
                          5: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl (hash: HAvkU89VpgbpWwSNDu5trR87nW3qEqN1AO4SfmRM5t4=)
                          6: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (hash: GJY1uBn3hVszaq39dLLaSk2stRsKkoqme7WPjFA16js=)
                          7: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (hash: 7HCsscFWHwPhWZMbOcuZYtCZgWu1kaGruUGGQu1z3Bg=)
                          8: 323430343a356434303a3a2f34382d3438203d3e20313338353938.roa (hash: UK4y8U5FoaH31XYzSF1KACuxC0U7L5WzRWdPY69Zp1w=)
                          9: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (hash: BLOc4k1k/6kYVTD4owYMmHx5OOK/8Y7LoDi9RBV5ZS8=)
                          10: 323430343a356434303a333a3a2f34382d3438203d3e20313338353938.roa (hash: oldOLTzbZdnxuKb1GFFk/KT+RuyBaJzPj+vjKkTBhf4=)
                          11: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (hash: XDEGp8lWijrl4t6mUpWpRG/6LTKurJQjMuROjmEiZ6Q=)
                          12: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (hash: Q3P+SORmjSYUFWgFOxdx+KlxGjY858iSOT5wN8UZTKY=)
                          13: 323430343a356434303a323a3a2f34382d3438203d3e20313338353938.roa (hash: TGXfQuq1RmcYG5/rcQ5+kCiPWG3n75g2FUN2iHTafgE=)
                          14: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (hash: DFRzEWprrOiMSjx8SdHUt/uuD1K0oSG6/Rb0USOR/B8=)
                          15: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (hash: 01GhR87m6uISdoaVmw5/Uom42dMtA6W3HSfDP759MWE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl
                          rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:94:57:20:a1:55:da:a9:46:e2:d5:c1:1a:97:e4:c8:6c:89:f2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
        Validity
            Not Before: Jun 29 21:46:41 2025 GMT
            Not After : Jul  2 22:17:41 2025 GMT
        Subject: CN=C2E71F573CF0A928F9DF3B96565A72A90F8CCE75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:48:ed:71:ce:05:1c:0e:b4:22:c4:76:0d:
                    72:18:79:15:bb:c7:6f:ef:eb:59:ad:ad:d9:23:e8:
                    08:35:fe:e3:25:10:fc:41:ab:d3:6f:2e:f4:4b:da:
                    5d:1f:f7:14:91:cb:9c:02:f9:d3:cb:ce:2b:7b:9f:
                    7b:6f:dc:80:2b:55:e3:03:78:b7:5c:7c:ef:ee:2d:
                    79:12:e9:0d:e4:80:1d:0e:5a:aa:f4:55:bc:66:cb:
                    ee:66:94:5a:00:5c:77:40:04:c8:24:92:72:d9:b1:
                    65:6b:1e:92:88:2a:79:69:61:73:f4:7f:e0:bc:22:
                    64:a0:83:c2:ad:67:b2:d5:66:cc:d5:03:ef:91:c0:
                    42:cd:eb:5d:04:77:c8:ca:8e:bd:b1:ec:d5:c4:71:
                    f0:63:87:93:da:b5:12:27:89:40:82:dd:d5:12:59:
                    e5:30:1a:04:eb:3f:93:6c:7f:29:dd:87:a9:75:b9:
                    c7:7a:11:b1:47:e5:3a:7c:52:74:b9:9e:eb:7e:81:
                    dc:35:b1:f2:5d:8c:70:7d:10:cf:be:cf:67:df:3a:
                    37:7f:c3:3f:ca:f5:3e:18:ac:51:3c:71:23:e4:4d:
                    8b:f9:d5:65:8d:5d:66:07:45:b3:54:5c:47:5c:7f:
                    87:e0:5f:2b:e7:58:15:01:48:c1:75:ab:2f:b2:e8:
                    b9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E7:1F:57:3C:F0:A9:28:F9:DF:3B:96:56:5A:72:A9:0F:8C:CE:75
            X509v3 Authority Key Identifier:
                keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7d:5d:90:01:28:c5:94:b7:b4:6a:de:5d:f5:c3:f5:c2:34:
         be:c0:83:3f:05:1c:75:7f:13:65:f6:48:48:60:f2:79:1d:50:
         3d:c2:95:4b:b9:a2:05:c0:d2:96:82:dd:98:2f:b9:03:a6:c6:
         fd:c5:95:dd:ee:42:a8:b3:96:db:40:e3:66:e8:c1:d8:d3:13:
         77:65:00:2b:9a:ae:5a:22:6e:a5:fa:59:34:90:f9:6d:4b:0c:
         12:66:7d:69:ea:9d:f6:54:30:1f:d7:cf:94:1a:c0:69:a7:b2:
         c1:ec:94:fb:b3:7c:5e:65:77:ab:66:63:16:47:94:c6:c2:21:
         cb:e9:e2:f7:d5:c6:d5:23:15:b2:1c:5c:e2:e9:f3:5d:d4:e4:
         7f:fc:56:9f:f1:f4:03:86:1e:a5:79:c2:6c:89:52:b3:8b:da:
         75:c0:9b:84:0b:a0:d3:70:7b:2a:e0:2a:49:fa:cc:c6:90:c1:
         47:dc:a6:06:56:59:c2:f9:d7:70:b6:38:65:32:3e:31:17:6c:
         01:a9:83:6f:50:54:83:37:75:07:d9:9d:fd:a6:d6:61:2e:3f:
         b5:c1:5b:e1:03:c2:94:c1:df:99:a5:bb:25:14:50:b4:9b:7e:
         29:3d:a8:3b:3f:ef:53:40:e3:de:b6:c6:59:32:48:9b:96:af:
         df:6a:56:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:55:00 2025 by rpki-client