Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
File:                     1976DD7D4FBDFBEB355F0B96690613959E106872.mft (raw, json)
Hash identifier:          CA+u1eBLKwQq0aTxLuup7mMzjYyhx7/98Ey+EVet/sQ=
Subject key identifier:   DC:E8:EE:E9:08:B0:FF:3B:DA:B5:CA:F9:65:21:5D:E6:93:5B:6D:10
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       79FBFB8D00A90FF6B3A73BE7901A6664076DC16C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
Manifest number:          04EB
Signing time:             Sun 29 Jun 2025 12:11:53 +0000
Manifest this update:     Sun 29 Jun 2025 12:06:53 +0000
Manifest next update:     Wed 02 Jul 2025 19:18:53 +0000
Files and hashes:         1: 3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa (hash: y4LCjeHJUSobMj/KV8lbwGmURe5cadaNn3OVULBwa7M=)
                          2: 3230332e3230372e35362e302f32322d3232203d3e203535363939.roa (hash: pgKybEe1UDr8NMq8IDGfdGJ30yQQRx6GVXnTuNxgMuU=)
                          3: 3132312e35322e3133362e302f32312d3231203d3e203535363939.roa (hash: LXI9mNoX4MU73UV9+XQILK6lbIuNFPN8Km57asx93mE=)
                          4: 3136302e31392e36342e302f32322d3232203d3e203535363939.roa (hash: yJK4a8K11r+E+tJag+nY+8xsV5fpS89Sq9CzTcNXWcQ=)
                          5: 3230322e3135312e31322e302f32322d3232203d3e203535363939.roa (hash: X7lH+ZABzDfLLUY93QifZSz4LLPKca9OeiY0/c7tpYs=)
                          6: 3130332e3235352e3135362e302f32332d3233203d3e203535363939.roa (hash: KQGoiV9BbegSAyEwUGTDu3EKXx16FmPyMikvR+g+1xM=)
                          7: 3130332e32332e33322e302f32322d3232203d3e203535363939.roa (hash: 6MeWYAWtNqzt67sAV06u6BArwq93v2nLiPhDZr8DwFc=)
                          8: 3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa (hash: Z0HkArdqIMJrBesbtTWXeTOTwVWpOh3aH8V39csunso=)
                          9: 323430343a613163303a3a2f33322d3332203d3e203535363939.roa (hash: qLMqaWG01btU4DjLVKlNjSmJQeLYWY8XvQDF/McekDU=)
                          10: 3230332e3231302e38342e302f32322d3232203d3e203535363939.roa (hash: 7SlCCBwvpXf5oNDVNUKjezl2ujoj3pY3VJsCEIji7gA=)
                          11: 3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (hash: GRueTMA2O7baTL3L4l0x1m5orgjkTOBplI10xnIAWvE=)
                          12: 1976DD7D4FBDFBEB355F0B96690613959E106872.crl (hash: +LMGXXQyUwRhz2vF2mc+SnuEGATs8nvfdhnmM4gfjeU=)
                          13: 3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa (hash: 5aSqM2G2yl80LesSPcdF7TAurA8t2nRlgTMy90PqfEI=)
                          14: 3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (hash: VUWhftZCz6t5WvzC4+/sPlF0zMj6ttLXWdYMj0+uIE4=)
                          15: 3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (hash: QRbMpzKdAfgfaj6wVJQ8tKGh3zUVZXKDZTbjWChNsSM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 19:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fb:fb:8d:00:a9:0f:f6:b3:a7:3b:e7:90:1a:66:64:07:6d:c1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Jun 29 12:06:53 2025 GMT
            Not After : Jul  2 19:18:53 2025 GMT
        Subject: CN=DCE8EEE908B0FF3BDAB5CAF965215DE6935B6D10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:3c:e0:2c:b1:85:28:c7:9b:c5:e8:2b:dc:
                    8d:c0:ce:58:10:36:92:37:2a:86:91:2e:b2:0c:37:
                    c8:df:7f:1d:91:e0:c9:e8:7f:93:9e:fb:12:2e:6c:
                    98:4e:63:d3:bb:fd:c1:6e:a3:db:1d:ee:82:8a:1b:
                    0d:8e:85:ee:12:94:3b:11:95:2f:f5:03:8d:35:34:
                    ad:84:1a:6d:18:8d:75:54:4e:24:72:da:f0:48:d2:
                    44:3b:28:38:53:fc:2b:93:b9:37:c3:2c:17:29:cb:
                    85:29:34:05:43:20:dc:d9:03:b1:f0:29:57:36:d1:
                    1a:9a:e4:70:6c:27:11:c8:b3:93:10:47:b6:04:f8:
                    68:da:0c:a5:ee:64:a2:74:07:0b:b9:0d:c6:49:65:
                    b6:ea:25:57:56:10:07:63:08:bd:d4:98:ba:05:4a:
                    91:ec:52:a2:ab:cb:46:24:32:f6:f1:8f:b4:b2:26:
                    f2:39:25:f8:2b:15:d0:57:fe:3c:e6:fa:f9:54:05:
                    eb:7e:97:93:37:98:fc:18:74:ab:84:17:92:9d:f8:
                    78:26:e8:ba:ae:33:0b:39:de:62:c0:50:84:6a:9c:
                    fb:ca:80:6f:fd:11:81:6c:c2:1c:b1:6d:68:48:a3:
                    49:14:9d:f6:3c:de:9d:5c:14:c9:b8:32:89:b1:7d:
                    f2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E8:EE:E9:08:B0:FF:3B:DA:B5:CA:F9:65:21:5D:E6:93:5B:6D:10
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:e8:de:bb:94:6a:aa:eb:14:c0:52:3a:9b:79:1c:11:66:9a:
         f8:98:de:4c:e2:59:34:94:9f:25:c0:c0:cf:e6:49:95:b5:13:
         23:37:83:01:1c:87:bf:66:f4:a2:74:d9:c2:14:64:4f:e4:c7:
         82:bc:fc:c5:87:c5:67:ee:fc:fe:16:f0:56:79:33:bc:2e:c1:
         49:72:0a:9b:34:f1:07:6a:98:71:c0:4d:df:df:5f:1e:bc:22:
         51:5a:0e:2a:1b:43:08:99:43:a1:06:6c:4f:3b:ee:f1:74:46:
         7f:22:1f:3b:da:db:00:38:55:45:fd:34:3b:b8:4f:32:05:d5:
         41:89:82:64:ff:db:96:d2:ff:21:4e:0b:9a:0b:71:60:96:84:
         04:d2:f3:32:e7:33:72:96:15:dd:28:04:0f:e4:b7:e8:79:2d:
         b3:ef:20:37:3b:34:f5:47:98:1d:9c:b2:00:7a:7e:48:62:0b:
         41:de:8d:9f:33:96:6d:f1:ea:98:7b:de:ba:1c:d5:57:6b:a6:
         47:59:c9:dd:8c:e5:04:0b:cf:02:43:d2:4f:ae:eb:19:56:fc:
         3b:80:61:8a:5f:e1:ff:ff:17:81:6d:d1:41:c2:8f:28:f7:41:
         98:ab:59:7f:9c:c1:86:e2:43:c8:70:88:b4:52:7d:43:3e:50:
         79:df:2b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:32:08 2025 by rpki-client