Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
File:                     80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft (raw, json)
Hash identifier:          E5I0uMmN16B8H40HsfZSno1cW33YFOMZU6+2QUiftZE=
Subject key identifier:   33:FA:D8:B1:FD:A6:2F:24:20:7F:A9:FA:AD:5D:7B:75:32:CA:29:DE
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Certificate issuer:       /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial:       751788BA220C6A49A0E3E82D4609CA41316B0A78
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
Manifest number:          0504
Signing time:             Fri 22 Aug 2025 13:11:31 +0000
Manifest this update:     Fri 22 Aug 2025 13:06:31 +0000
Manifest next update:     Mon 25 Aug 2025 14:59:31 +0000
Files and hashes:         1: 323430353a6334303a3a2f33322d3332203d3e20313338383837.roa (hash: ruIZZO7QM8ImQmI2gqHbRwgzA5H9KzvEbmp6IKH6GiU=)
                          2: 323430353a6334303a343030303a3a2f33362d3336203d3e20313338383837.roa (hash: QJm/lblduNPd02BEuIg39qDUkH4IZEUKUU8ZLrF08QA=)
                          3: 3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa (hash: zfEP/Pp+voTq+tnwh6zrXyttg/V3CtiXWPgzCewZNzw=)
                          4: 323430353a6334303a363030303a3a2f33362d3336203d3e20313338383837.roa (hash: 9Hphz4rTA2sQyZSSBKURj5EBn+fJ7avpUnADOEhDzkQ=)
                          5: 323430353a6334303a3a2f33362d3336203d3e20313338383837.roa (hash: UDxgb+p/OheGc5Pu54zU2k+ER7Buis6ZE5oNXaOKTTA=)
                          6: 3130332e3134312e32302e302f32332d3233203d3e20313338383837.roa (hash: lmx0XZquBskC7D+0GLv2mO10TyL75yCcIcmOAKJbJoQ=)
                          7: 323430353a6334303a3a2f33332d3333203d3e20313338383837.roa (hash: wp6HGRFsjrQsDDxYN+2VcMhnqzQCe6fyQbIqHpdg2Os=)
                          8: 3130332e3134312e32312e302f32342d3234203d3e20313338383837.roa (hash: r2sMVBIlcCozBKFBq0diWRJjeE6cRdUNaq5HifiiwWA=)
                          9: 323430353a6334303a313030303a3a2f33362d3336203d3e20313338383837.roa (hash: Pkxhtzc/wMq1OgU/fO/ZVo996RxoRVPZUmYGZ2IhOu0=)
                          10: 323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa (hash: wQ5s1z2AdYlcJThfcBR2RUp7JW/nVYYistipQnAGWOk=)
                          11: 80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl (hash: A2Ft49/g/1BkmbUIWOlID9bU2h8lEwW+S+lf+smRCmc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
                          rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 14:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:17:88:ba:22:0c:6a:49:a0:e3:e8:2d:46:09:ca:41:31:6b:0a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
        Validity
            Not Before: Aug 22 13:06:31 2025 GMT
            Not After : Aug 25 14:59:31 2025 GMT
        Subject: CN=33FAD8B1FDA62F24207FA9FAAD5D7B7532CA29DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:00:cb:44:1d:0d:f2:fb:46:47:a0:5a:bc:90:
                    bb:8a:ec:6c:55:62:cc:ee:d1:2e:a7:76:e7:d6:56:
                    e7:c3:ae:db:f2:86:d3:a9:c8:95:1b:00:a2:fa:28:
                    4e:fb:ca:3c:54:a1:47:13:21:cc:55:d3:4c:38:5f:
                    65:92:fb:e0:cc:e9:0a:97:27:80:1b:c5:f3:71:7f:
                    17:13:6d:0f:08:73:b6:e6:67:7a:e0:a5:29:d4:8f:
                    b5:62:b9:cf:30:f3:af:9a:f0:ff:cf:71:e5:22:6e:
                    86:b7:d3:fd:bd:db:bd:aa:44:d5:87:94:a6:63:7b:
                    40:3c:58:af:bf:e0:d3:cb:34:14:08:b6:5f:93:97:
                    61:59:2d:c2:97:1f:5a:8f:8d:3c:00:4b:eb:0f:8a:
                    60:08:34:a7:4e:94:70:f9:54:cd:40:db:d4:6d:1f:
                    c1:ed:42:7b:02:a7:ad:44:2b:03:80:9d:ce:53:2d:
                    13:a0:04:5b:ae:80:c0:ef:d4:f1:fe:3c:54:0f:f0:
                    25:7b:4e:14:2f:52:c8:f9:f0:93:90:20:4b:5e:07:
                    f9:f4:a5:59:db:d9:ca:71:e6:e4:0a:2d:e0:0d:2d:
                    be:6e:0e:da:f3:1c:26:e5:ba:c6:8d:66:49:2f:0f:
                    77:62:2f:16:b1:51:7a:e6:60:9f:93:8d:59:fc:1b:
                    cd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FA:D8:B1:FD:A6:2F:24:20:7F:A9:FA:AD:5D:7B:75:32:CA:29:DE
            X509v3 Authority Key Identifier:
                keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0c:aa:9f:d9:fc:e4:1a:ff:73:94:ee:e5:72:96:3a:10:e1:
         3a:0d:99:2a:1c:3e:f8:bf:e9:20:ee:0c:6f:71:67:16:58:7f:
         92:e1:45:90:67:13:41:5f:b5:61:a3:80:28:17:af:ab:1c:d8:
         dd:58:56:a9:9e:df:86:26:47:35:1c:94:e6:bd:93:9c:a2:7a:
         ca:a2:87:22:70:cf:38:8f:da:8d:b3:e9:9c:b8:5f:36:1b:68:
         cd:37:b2:45:c2:6f:2a:c9:b8:98:ac:92:f3:c8:0e:a3:6c:a9:
         1a:50:13:99:f2:e2:36:46:7f:e3:f2:84:c1:fa:5e:82:4a:52:
         b8:3e:8a:c4:3b:6a:79:76:ee:a4:d8:03:fd:f7:90:81:a9:ef:
         70:97:8a:4f:f0:6d:37:21:91:ff:6a:92:8c:dd:af:04:6c:2e:
         b7:18:72:cb:08:ad:25:4e:c9:9c:c7:18:4a:64:97:e6:cc:f7:
         d0:3e:f5:1a:84:ed:48:60:b3:64:8e:e1:ed:b9:d4:4f:6e:05:
         49:2f:7f:1f:e8:12:27:7e:c0:21:0e:0a:2a:30:21:c8:db:15:
         69:42:49:04:7c:d0:ee:67:97:81:81:29:bb:6e:c1:61:d6:c3:
         af:ec:8f:1b:44:ca:53:7c:48:9e:02:44:51:79:8e:e4:69:4a:
         ac:76:68:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:03 2025 by rpki-client