Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft
File:                     88BD1AAEA16D8A24550416CDB95E232152249B3E.mft (raw, json)
Hash identifier:          iFPb/0YNeq03B0S3ONIR/KqJt8ULqgDhmeNdTkUW844=
Subject key identifier:   FE:F5:6C:DE:7E:FC:F1:B6:A6:B2:B0:C3:28:75:85:AD:7C:D8:C3:AC
Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E
Certificate issuer:       /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E
Certificate serial:       50A21E27079EA222F6FBB9766F54F920AAE738F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft
Manifest number:          02D7
Signing time:             Mon 30 Jun 2025 10:22:17 +0000
Manifest this update:     Mon 30 Jun 2025 10:17:17 +0000
Manifest next update:     Thu 03 Jul 2025 12:12:17 +0000
Files and hashes:         1: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: Em18K+MRLc18yaX14YQfb1826gcDLLiSRdz/WlnRnnE=)
                          2: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: C+T8dBvggaTCEh5/1ll1reorawVQeZDheWzvM6XklTw=)
                          3: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: /mZXNu9+SQReAU7jMOiZ9/UmtltzHLxdMGIPnZIiib4=)
                          4: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: kPaKCzbfTu6Kb7lNVFVqCdSC7iBWhY5WqPXZPd+gQ/s=)
                          5: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: 4N83F1FY8HtDNTq6OMGSFNYU4XLLuDbuSDKgz6IAVpA=)
                          6: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: FrHSWZownm6A7T3AZIhQ7h7eaOkOIIg4+temM4RnNJ4=)
                          7: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: ae4O0AtYse0yRkTQsAXYp92EBw2Zh6JfYntTF84Qbd0=)
                          8: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: 18b0Gg5/45qsHWWMKCPhmvKnsrcZsZ/fmda1ZKbjIBk=)
                          9: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: JCNF2AqA+9yLiNsXD2G46cVY5ai2iXqfYKsqNNx0uaI=)
                          10: 88BD1AAEA16D8A24550416CDB95E232152249B3E.crl (hash: w4DYnuPHQO8T9/JyuVaLS8r/RjlBkOIt7fw3lup2cuY=)
                          11: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: IXux5BvkTuomSLlcfO/atgRq6FYsd2lPJysl7WoyMqY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl
                          rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 12:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a2:1e:27:07:9e:a2:22:f6:fb:b9:76:6f:54:f9:20:aa:e7:38:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E
        Validity
            Not Before: Jun 30 10:17:17 2025 GMT
            Not After : Jul  3 12:12:17 2025 GMT
        Subject: CN=FEF56CDE7EFCF1B6A6B2B0C3287585AD7CD8C3AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:15:01:3e:c1:8c:55:c1:9e:03:20:3b:63:e9:
                    b6:85:43:29:aa:c2:81:17:f4:92:d4:5d:8f:23:00:
                    38:5d:fd:c6:43:70:6c:ec:fe:0a:4b:21:e0:2b:6b:
                    f6:d7:7c:82:e6:24:d5:25:4f:72:64:d5:55:cb:4b:
                    a6:7a:23:4c:49:0a:04:aa:fa:ff:d8:f3:57:f2:33:
                    ff:e8:55:9e:d0:41:80:51:38:bc:f3:ff:46:c1:f2:
                    8f:a3:f4:24:1e:55:3e:c5:35:2e:bf:27:28:86:a8:
                    2e:1a:dd:a3:35:17:28:bd:19:a6:35:cf:61:46:48:
                    84:5b:32:28:0f:f9:97:4a:e8:d0:5d:c6:a4:4b:0e:
                    80:d9:6b:db:d4:db:f8:3c:51:05:57:b3:d3:c0:36:
                    02:a2:d2:d9:f3:5f:2d:14:44:e7:30:9f:ca:44:38:
                    e5:1e:7f:2d:af:6e:08:e7:db:07:ac:5e:2d:05:58:
                    40:c0:38:e7:e8:6b:f1:66:85:6e:0f:96:25:a6:f2:
                    55:d0:69:c8:bb:db:12:55:b9:e1:7c:64:20:a1:a0:
                    b1:f7:e3:ea:c5:07:16:99:47:f0:20:0a:18:0b:0e:
                    14:8b:2d:55:66:0b:7a:62:9d:29:45:91:1b:1a:81:
                    ef:b9:62:73:6c:03:e5:ed:54:c6:50:77:18:d7:08:
                    d0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F5:6C:DE:7E:FC:F1:B6:A6:B2:B0:C3:28:75:85:AD:7C:D8:C3:AC
            X509v3 Authority Key Identifier:
                keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:a9:ea:25:70:c4:27:5f:9f:bb:04:39:43:a5:e2:e1:0b:fb:
         dd:af:55:49:fa:c9:40:c1:5b:0a:27:18:ee:d6:89:fb:53:d2:
         b5:81:86:e0:df:10:10:a1:89:2a:1b:df:f7:e9:a9:27:4d:56:
         8c:83:dd:c9:62:47:4f:a3:70:ec:07:26:bf:df:73:f0:d1:ff:
         ae:7f:9c:e6:fb:d1:0e:57:3a:2e:67:b2:a5:6c:11:0b:7a:53:
         43:e5:21:5e:93:ef:ab:33:a1:13:f7:65:e0:a0:9d:cb:35:be:
         0c:c2:94:97:61:b0:22:4c:89:38:81:9a:c7:5d:72:5d:9a:a7:
         14:a5:28:eb:39:a8:cd:a8:4c:9d:9e:e6:73:1c:2a:d6:66:55:
         65:ff:1d:eb:49:a6:14:7a:80:84:36:08:44:18:ea:8e:c6:c0:
         dc:41:56:5a:30:ea:38:b4:27:e0:8d:c3:df:83:96:d3:4f:dc:
         5c:24:05:58:1e:e2:cb:33:cf:f1:0b:e8:f4:c6:34:72:01:0a:
         1a:77:56:c7:35:8b:8d:69:cf:3c:23:c4:b8:85:8a:09:93:18:
         e4:0a:b2:18:60:3a:d1:c7:e0:bf:e3:d7:b9:9b:95:58:c2:22:
         24:92:93:72:4e:b0:51:7a:41:e0:67:d4:bc:00:f0:10:37:8e:
         68:29:16:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:30:26 2025 by rpki-client