Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
File:                     80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft (raw, json)
Hash identifier:          GNiPQGw9IS+0j/o5OUhahbV98tHjEA9Cc6wo7/m/zLE=
Subject key identifier:   CE:E1:5A:5F:94:58:13:7D:31:19:67:24:28:6E:C1:0A:13:B2:E8:E3
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Certificate issuer:       /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial:       613818D2651FC686D3D1766B4EF429EB016A7720
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
Manifest number:          04EC
Signing time:             Sun 29 Jun 2025 01:21:29 +0000
Manifest this update:     Sun 29 Jun 2025 01:16:29 +0000
Manifest next update:     Wed 02 Jul 2025 04:25:29 +0000
Files and hashes:         1: 323430353a6334303a363030303a3a2f33362d3336203d3e20313338383837.roa (hash: 9Hphz4rTA2sQyZSSBKURj5EBn+fJ7avpUnADOEhDzkQ=)
                          2: 3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa (hash: zfEP/Pp+voTq+tnwh6zrXyttg/V3CtiXWPgzCewZNzw=)
                          3: 3130332e3134312e32302e302f32332d3233203d3e20313338383837.roa (hash: JOw9fnf2+llt+bHgY5YC1ivMLd9ZzOF5XKFMaUzNn4I=)
                          4: 3130332e3134312e32312e302f32342d3234203d3e20313338383837.roa (hash: r2sMVBIlcCozBKFBq0diWRJjeE6cRdUNaq5HifiiwWA=)
                          5: 323430353a6334303a343030303a3a2f33362d3336203d3e20313338383837.roa (hash: QJm/lblduNPd02BEuIg39qDUkH4IZEUKUU8ZLrF08QA=)
                          6: 80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl (hash: E7kzIK/NYrIovV2UyqokZCIs3uJTs6PI13hzHGeaAYk=)
                          7: 323430353a6334303a3a2f33332d3333203d3e20313338383837.roa (hash: wp6HGRFsjrQsDDxYN+2VcMhnqzQCe6fyQbIqHpdg2Os=)
                          8: 323430353a6334303a3a2f33322d3332203d3e20313338383837.roa (hash: ruIZZO7QM8ImQmI2gqHbRwgzA5H9KzvEbmp6IKH6GiU=)
                          9: 323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa (hash: wQ5s1z2AdYlcJThfcBR2RUp7JW/nVYYistipQnAGWOk=)
                          10: 323430353a6334303a3a2f33362d3336203d3e20313338383837.roa (hash: UDxgb+p/OheGc5Pu54zU2k+ER7Buis6ZE5oNXaOKTTA=)
                          11: 323430353a6334303a313030303a3a2f33362d3336203d3e20313338383837.roa (hash: Pkxhtzc/wMq1OgU/fO/ZVo996RxoRVPZUmYGZ2IhOu0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
                          rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 04:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:38:18:d2:65:1f:c6:86:d3:d1:76:6b:4e:f4:29:eb:01:6a:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
        Validity
            Not Before: Jun 29 01:16:29 2025 GMT
            Not After : Jul  2 04:25:29 2025 GMT
        Subject: CN=CEE15A5F9458137D31196724286EC10A13B2E8E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:33:3b:8a:0d:bc:c6:46:6b:36:53:b8:2b:
                    99:5a:3f:48:0d:b7:dd:60:d3:7a:d5:46:bc:65:b5:
                    7c:ea:3b:3c:0a:db:7b:8c:d2:f6:47:39:f0:1c:3b:
                    a2:1f:7d:9e:b8:1c:93:39:67:53:e0:13:4b:c9:11:
                    57:62:41:98:a7:b5:d4:87:4e:7e:fa:2b:c1:61:f3:
                    fa:97:ae:0a:92:14:5e:95:c7:b1:67:a1:45:ae:e3:
                    a1:a6:f0:22:cc:d4:81:2b:f5:23:e8:23:79:fa:2b:
                    9c:dd:7e:46:45:aa:d0:2c:c8:7b:c7:07:47:74:3b:
                    5f:43:a2:75:75:dd:70:f0:57:b6:5b:5f:50:f1:ab:
                    4c:5c:89:1e:84:68:53:db:74:5f:8b:06:83:d6:f7:
                    06:9c:e8:93:d2:f6:59:45:4f:ab:8c:42:f4:cd:24:
                    6c:18:c7:89:b6:de:e3:bc:16:47:5f:04:06:65:a5:
                    1e:df:82:a8:25:e4:60:2a:66:56:38:d5:d2:7d:00:
                    0d:93:4a:00:5b:69:e2:c7:25:d3:1e:bc:bd:24:26:
                    6e:20:f4:b9:21:0b:c4:8f:0d:50:85:8b:a6:d6:43:
                    57:31:62:58:e7:fc:c9:ac:02:1c:ae:e0:6b:10:09:
                    b0:d0:7d:c3:29:78:74:f2:13:81:09:3a:cd:3c:06:
                    9a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E1:5A:5F:94:58:13:7D:31:19:67:24:28:6E:C1:0A:13:B2:E8:E3
            X509v3 Authority Key Identifier:
                keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:4c:36:98:00:47:24:5c:14:f9:9d:1c:77:9c:02:24:fc:d1:
         d2:b6:70:74:8d:21:7c:c3:d6:1d:1a:45:ac:81:93:28:7b:01:
         5f:04:83:df:79:7c:34:2c:ef:23:dc:48:bf:5c:9c:de:16:69:
         8d:a0:ab:31:87:23:53:06:75:de:6b:66:d5:9e:a7:a4:b6:62:
         d2:4e:43:ac:ed:2b:a7:68:a0:5e:2e:93:96:19:03:27:ac:94:
         9b:88:e5:1d:f1:9a:0c:99:44:46:7a:a0:89:90:e7:e0:7e:56:
         a5:fe:a3:2c:d6:6f:61:4f:25:ed:d5:c4:bc:94:bf:7d:b1:61:
         5d:17:75:2f:c8:29:95:fa:da:e1:d0:37:9f:ab:bd:02:9e:87:
         aa:cd:cb:9f:1d:c5:ff:41:0c:63:48:d7:79:40:a0:04:78:eb:
         b2:2b:e9:bd:2b:0c:23:7e:a3:f2:ca:42:8e:af:fc:ed:80:35:
         ac:98:d2:b6:d3:cc:65:19:23:98:46:2d:ea:ce:6d:a4:ca:5c:
         f0:06:36:cc:f3:47:44:1e:7e:c3:ec:3f:61:65:f0:ee:c1:b6:
         40:56:62:29:46:98:02:f4:30:4b:68:2e:91:b8:0c:03:76:29:
         86:e1:83:ff:c4:41:44:10:53:f6:c5:b7:6c:a6:53:62:68:fb:
         7a:fc:15:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:10:42 2025 by rpki-client