Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
File:                     BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft (raw, json)
Hash identifier:          PHmoOZoR+P7QQ7g1aU6lU6yncRsWWOITDzTNRk39whw=
Subject key identifier:   30:CF:D1:6F:49:61:B7:00:33:8A:81:8D:44:7A:BB:3B:96:98:E7:45
Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
Certificate issuer:       /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Certificate serial:       2DE4465FECAE534EAC6933A2F3D1F8A0FA8B15EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
Manifest number:          0517
Signing time:             Sat 18 Oct 2025 10:21:14 +0000
Manifest this update:     Sat 18 Oct 2025 10:16:14 +0000
Manifest next update:     Tue 21 Oct 2025 20:09:14 +0000
Files and hashes:         1: 323430333a323730303a343030363a3a2f34382d3438203d3e203338353030.roa (hash: mT5M0yPm3/dROrkx7EXtMvuuuiLJJBueeArGpe0kXEU=)
                          2: 323430333a323730303a343030313a3a2f34382d3438203d3e203338353030.roa (hash: KUe9YItWJewDr+vCEqi/EWllhXguJY0TmzIo3kUmGpg=)
                          3: 3131362e36382e3234382e302f32342d3234203d3e203338353030.roa (hash: CjwAdgechVyDEmdpWTYBD8Ris/80uI0UGLAhyRKKJA0=)
                          4: 323430333a323730303a3a2f34382d3438203d3e203338353030.roa (hash: C7t3QQh/DTqZqDmxOH5Nzo0bVmfi2oIbzbzkt/a9NWE=)
                          5: 323430333a323730303a313a3a2f34382d3438203d3e203338353030.roa (hash: e98j/GnS4Qx/kvETXwDsBan3judrk6fv46l57y5vEAg=)
                          6: 323430333a323730303a343030393a3a2f34382d3438203d3e203338353030.roa (hash: QNOvqxPhnejQxGTKHiQXSiXfIuY1m87nHG2q2XmKahg=)
                          7: 323430333a323730303a393a3a2f34382d3438203d3e203338353030.roa (hash: YrLtsOYvp+DPw1cXnGNExzyx3eWKJFFV1BLJsck7tXI=)
                          8: 323430333a323730303a323a3a2f34382d3438203d3e203338353030.roa (hash: 0t+sP9mMUayz06wxXRa0Zlci2ba1YMNRtNd8apwlSzo=)
                          9: 3131362e36382e3235352e302f32342d3234203d3e203338353030.roa (hash: 8srxXf6sCBp8LKU/ba9SFEFlNY8/TI8wDKtzcsi3W7k=)
                          10: 323430333a323730303a333a3a2f34382d3438203d3e203338353030.roa (hash: 4XZ+2oDbC6jWPVbtwhOIpx0Ovr9SsBW1YMGL1IND6yA=)
                          11: 3130332e3234342e33392e302f32342d3234203d3e203338353030.roa (hash: 5BUitJKGxpFSJUUsM/tb96/1vZXkv4i9MubxNUYqkCI=)
                          12: 3133372e35392e31352e302f32342d3234203d3e203338353030.roa (hash: lO5FLbufasmDWnZ9uvAVgaRmYYXGBSTz+dfylI0ofXQ=)
                          13: 323430333a323730303a343030323a3a2f34382d3438203d3e203338353030.roa (hash: brBoAiHnPAXN7w+iiY5nOKnIJikx1cWKFRJLTv9yELs=)
                          14: 323430333a323730303a343030303a3a2f34382d3438203d3e203338353030.roa (hash: j8bdRIZx+6qyB9G1jeoDSrbJdadjDRQ67ND37zYlpko=)
                          15: 3133372e35392e31342e302f32342d3234203d3e203338353030.roa (hash: 0fv19luagoO93f5fwpQzyxrCgwGajNrOA8tDwWa++20=)
                          16: 3133372e35392e31332e302f32342d3234203d3e203338353030.roa (hash: eSUzjWuiojseXg64akzIRz5XswNmVhnqy1cUbaNq3YA=)
                          17: 323430333a323730303a343031303a3a2f34382d3438203d3e203338353030.roa (hash: 8uCEZaq+ErAkXmWnljIKQtRBspsZSJtLGFr9COygbXs=)
                          18: 3131362e36382e3235342e302f32342d3234203d3e203338353030.roa (hash: brbz9ziFS0tbMcRonA9TyxfYawTYuBLpI2gS2ZyTNq8=)
                          19: 323430333a323730303a343a3a2f34382d3438203d3e203338353030.roa (hash: Has9KhYZW/xL+AZ5Y86DT/rX9uV6ZdOQ3QRaKxgL1+g=)
                          20: 323430333a323730303a353a3a2f34382d3438203d3e203338353030.roa (hash: dkBm1uq0fOeNnS/XAl8fOwdP51OmJH2MKhTJVDaflPk=)
                          21: 323430333a323730303a363a3a2f34382d3438203d3e203338353030.roa (hash: jvNDZEnqhiROy2saBd3ptbOt84MblTLhLgl0wHJO/VY=)
                          22: 323430333a323730303a343030373a3a2f34382d3438203d3e203338353030.roa (hash: GOMGqpabFLARAkTD3/79W716x+tCxTdb6049snwD2sY=)
                          23: 323430333a323730303a31303a3a2f34382d3438203d3e203338353030.roa (hash: 3E5JAaPCnmY7zISSQ4gI8lzsfCOHDli32AP+3Nlaqx8=)
                          24: BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl (hash: 8yRn9D7ckIGx2gVShNXeV6VttpHqMi6bNFGuMz9XS84=)
                          25: 3130332e3234342e33372e302f32342d3234203d3e203338353030.roa (hash: CR1it/5lcj5mKjbJVyhsPIojVY8ODCkmMaMNHWrImtQ=)
                          26: 323430333a323730303a343030333a3a2f34382d3438203d3e203338353030.roa (hash: in6zkVgSo1zvq2LTLhVOqlCHjB8xLXn2xL9+G3wkap0=)
                          27: 323430333a323730303a383a3a2f34382d3438203d3e203338353030.roa (hash: qURilkjtdA9tmzrVI6OrtqFXtdHl5I4HX6q7a9Ca7gg=)
                          28: 3131362e36382e3234392e302f32342d3234203d3e203338353030.roa (hash: oY5bwkHOZ5o/T4nyqHVk+QlZTq6zSV5WkYvYpvg7OW0=)
                          29: 323430333a323730303a373a3a2f34382d3438203d3e203338353030.roa (hash: zom4OgHCT9yNR9s7PClSziJLNh/98AcRHADEEh70B44=)
                          30: 3131362e36382e3235312e302f32342d3234203d3e203338353030.roa (hash: V3KmgD3tTwhMEvs0Z12c99jKw1ctfp/222r2PmQ0tu8=)
                          31: 323430333a323730303a343030343a3a2f34382d3438203d3e203338353030.roa (hash: +GSzXEw9XVO9MZTg/3tsdoDls1yUaHYhurx3LSZ7ZG4=)
                          32: 3131362e36382e3235302e302f32342d3234203d3e203338353030.roa (hash: FidrCQYO33Zq2TbkFlxgDF0SdKNPwCMdkDhbgsLO8bE=)
                          33: 323430333a323730303a343030353a3a2f34382d3438203d3e203338353030.roa (hash: ScL2Ml9V0JxrkWOtUekcUkbGo5E4qCUz801UmzIBxWo=)
                          34: 3130332e3234342e33362e302f32342d3234203d3e203338353030.roa (hash: ml8tgAzjPWfRZ6grIN5HL2FzB13oLZfVDnZYbJMHBAs=)
                          35: 3133372e35392e31322e302f32342d3234203d3e203338353030.roa (hash: flQKP/0naoXCI/90O73XuvucNpqyALJ5YVya2pQLkEw=)
                          36: 3131362e36382e3235332e302f32342d3234203d3e203338353030.roa (hash: hTvjuYJru8sBC5Vi4eVcg0T8y4PjzTgW+TTHVszhGGY=)
                          37: 323430333a323730303a343030383a3a2f34382d3438203d3e203338353030.roa (hash: lU+XzrpXlPGqlVGdSD9IV3Pgign0OrucSJ9ueYpQFA4=)
                          38: 3130332e3234342e33382e302f32342d3234203d3e203338353030.roa (hash: d8faUdzBnFVRw5kIwanXJwWwTtXxeTRqt8Ed9RkYJwQ=)
                          39: 3131362e36382e3235322e302f32342d3234203d3e203338353030.roa (hash: vqAXc/V8UGRafSTW/TKjmRMeoC5nQdooNvEc7Q7KX+Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
                          rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 20:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e4:46:5f:ec:ae:53:4e:ac:69:33:a2:f3:d1:f8:a0:fa:8b:15:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
        Validity
            Not Before: Oct 18 10:16:14 2025 GMT
            Not After : Oct 21 20:09:14 2025 GMT
        Subject: CN=30CFD16F4961B700338A818D447ABB3B9698E745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ef:da:1c:ac:bc:d0:8e:7f:d9:c8:8f:55:fb:
                    dd:2e:67:81:e6:ec:67:43:e4:4e:eb:16:79:92:a6:
                    64:9e:c5:43:fa:f8:13:12:63:1e:00:6d:0a:e4:1b:
                    5d:7d:91:c9:c0:75:02:57:9e:8e:b2:b0:8f:67:24:
                    de:bd:14:59:6f:0a:38:7f:00:92:66:a2:06:1f:78:
                    c6:8d:5b:16:e1:65:f7:b3:29:c2:2d:ce:25:a7:e9:
                    15:6e:af:b1:8c:a6:b6:a6:f5:6a:07:8c:43:2e:7c:
                    0a:89:b1:4f:07:2b:19:b3:61:73:32:79:ba:e2:85:
                    d4:ef:10:35:c9:24:f8:56:a2:06:a7:43:07:ba:27:
                    5a:a7:51:9a:c5:5f:13:ff:13:ae:5e:d3:95:ef:d9:
                    52:50:56:bd:31:80:11:c2:99:73:3e:b6:f8:7b:1b:
                    02:2a:bf:c6:08:08:21:67:65:e8:f2:2e:0e:56:2e:
                    3e:d0:d5:a2:da:bb:46:16:e7:99:90:96:fc:3d:50:
                    7b:ca:d0:37:cc:bf:78:fd:9b:54:f6:43:f6:84:f9:
                    a0:b4:da:16:56:63:3b:09:3e:0f:88:2c:ae:cc:41:
                    4c:a6:92:ba:bd:6b:8a:ec:38:fe:4d:da:b8:d0:89:
                    1c:3f:6c:81:07:2f:13:35:60:55:03:d7:7e:d8:f0:
                    b1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CF:D1:6F:49:61:B7:00:33:8A:81:8D:44:7A:BB:3B:96:98:E7:45
            X509v3 Authority Key Identifier:
                keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3a:a8:35:53:a7:36:2b:31:eb:78:66:ec:b9:e1:3b:09:0d:
         dd:c3:f1:41:00:93:cf:90:29:ca:04:0d:87:64:b2:8f:f0:47:
         a3:9b:4b:38:cc:7d:67:97:79:2d:69:db:0c:ee:33:cb:87:0f:
         05:56:1f:63:c3:03:c2:2d:b1:fb:7f:0c:ec:35:a2:54:7f:e9:
         87:9b:54:bf:af:33:22:75:93:c2:f5:5e:a9:21:28:35:f2:95:
         cd:aa:8d:5a:d6:7b:02:8c:68:06:3d:7f:2b:17:94:1d:5a:0a:
         02:b9:25:42:2a:88:36:c0:5c:be:d6:df:e5:97:03:de:9e:01:
         cc:c1:b2:7d:9b:47:f8:64:2e:69:84:fe:8e:7e:16:27:3e:5b:
         3c:16:79:82:4d:42:08:d9:f5:39:a2:6a:ab:eb:48:f9:81:20:
         16:83:b5:97:0e:00:ce:c4:b7:1b:e2:86:55:0e:4b:28:e9:d3:
         74:2f:c0:57:72:50:71:ee:39:66:49:77:c2:19:44:b5:e7:c1:
         10:02:16:ba:3a:a9:1f:01:05:90:cb:bc:7e:6e:92:88:f5:3a:
         25:41:68:2d:15:de:55:f5:ae:ff:4d:7b:86:34:a1:d3:a0:ce:
         b3:82:98:49:2a:1a:ac:f2:f8:fb:cf:b6:91:42:1b:c3:f3:02:
         1f:24:0c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:46:29 2025 by rpki-client