Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
File:                     5058CBC5AF21280546887DEF6CFA4341A8F99150.mft (raw, json)
Hash identifier:          r24nKGmH1Wyaox6ywSXIphcANpiYQ9pxNtW7M2MsCxM=
Subject key identifier:   B4:DD:57:B6:5A:61:F9:5D:CC:24:4F:E4:BF:6A:A4:11:F1:36:F7:89
Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
Certificate issuer:       /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Certificate serial:       1A71F149DA126F7A2BED438774BE65F6CB662A46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
Manifest number:          F2
Signing time:             Mon 20 Oct 2025 06:52:02 +0000
Manifest this update:     Mon 20 Oct 2025 06:47:02 +0000
Manifest next update:     Thu 23 Oct 2025 07:57:02 +0000
Files and hashes:         1: 3135302e3132392e3139312e302f32342d3234203d3e203338313439.roa (hash: sg9h3bKYAlqGHJDMvyUj6H0/M1Aw0iaDSiX106si2NI=)
                          2: 3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa (hash: 31mkkj2+9HZK3DntlbInuHBDcdFSQRlGXD8Zmc4rUM0=)
                          3: 3135302e3132392e3138382e302f32342d3234203d3e203338313439.roa (hash: tgGGslIm+JlwZ3B9SMFEH85qZqhmUeU8C5Oc+jwQtf0=)
                          4: 3230322e3135322e3230372e302f32342d3234203d3e203633383539.roa (hash: Eh7tmqkuq57xlfobk4M7FLmYqi5AfrKI1DM6fiC6my0=)
                          5: 3130332e332e3231322e302f32322d3232203d3e203338313439.roa (hash: 5psPknEmypZIRcV8YM/0X/lutsHgczkNWReWTG7yCJE=)
                          6: 3230322e3135322e3230302e302f32342d3234203d3e203633383539.roa (hash: U7zsrHiqdt1Qo1B6xfxOyIpSIT6Eg44KAPPrNmLrIG4=)
                          7: 3130332e332e3231352e302f32342d3234203d3e20313331373435.roa (hash: DCq8NWxNUdZYR2PU43lxvyiXQg84ScqhviiyUTDm8RE=)
                          8: 3230322e3135322e3139332e302f32342d3234203d3e203633383539.roa (hash: aHFMnyhh47UaoLaj5P570D9nqN6nQjfKB0KyJ10Bqlo=)
                          9: 3130332e332e3231332e302f32342d3234203d3e203338313439.roa (hash: f7FOJnMyBZ4XNlHdy991ZxwGJQehkmOcfk+LL3+U5Fs=)
                          10: 3230322e3135322e3139322e302f32302d3230203d3e203633383539.roa (hash: f8b8ZEBPlEImYkbnkpmvkas1RzOl3JK/cPP6s/pxu7I=)
                          11: 3135302e3132392e3138382e302f32322d3232203d3e203338313439.roa (hash: CEJ3yKIwnTpt+ImukVgRvxnWPT8Hth1fQgkKpGWcSEo=)
                          12: 3230322e3135322e3230332e302f32342d3234203d3e203633383539.roa (hash: +yojSrIhe0qfYYoNaS+bjIGGRqdco9vP3EvqLvXSniA=)
                          13: 3230322e3135322e3139322e302f32342d3234203d3e203633383539.roa (hash: sueljug0A0cLELzQ10q3SYM/qivmbpI6TdGOwm3lCaU=)
                          14: 3230322e3135322e3139362e302f32342d3234203d3e203633383539.roa (hash: q9iza0H2rtEt+ACiqvHrrsVLjS6bvi7IjiExCl+Gt50=)
                          15: 3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa (hash: NITrN6jD7nr5oOwLkcfYoDWIPHvMh97xHgy4U3OmoE8=)
                          16: 3230322e3135322e3139372e302f32342d3234203d3e203633383539.roa (hash: oYNKTwfcxqyIB1OXRbrwMgJ3fSYv5LQtaFy8X3lU6Gg=)
                          17: 3230322e3135322e3230342e302f32342d3234203d3e203633383539.roa (hash: Axn8ERr+dCmvsiqqyuPKnJfBVVJriYKk4K22F1CTADk=)
                          18: 3230322e3135322e3230312e302f32342d3234203d3e203633383539.roa (hash: VB7muXOs/KUgbeY56FO085YD+k7/KBG+CVGoqwGS/LQ=)
                          19: 3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa (hash: /r/8FbAnrRY9+Q4m/2LANGmYkN67339eqGM2Pr09v38=)
                          20: 3230322e3135322e3139392e302f32342d3234203d3e203633383539.roa (hash: hEA8tWNHo/TIh0zdljEtCOyHV35vtVjy/xEF9Jp2eSk=)
                          21: 5058CBC5AF21280546887DEF6CFA4341A8F99150.crl (hash: +TBPsqzDl7Ya8fclYDYJCYsxK9zkAOcWH5k41egWKaY=)
                          22: 3230322e3135322e3230352e302f32342d3234203d3e203633383539.roa (hash: vVq7LUx06+oQEtVvYge1Q2+hkKlr27bVyXKL74EChRk=)
                          23: 3135302e3132392e3139302e302f32342d3234203d3e203338313439.roa (hash: H5limOsnw+oXhtBdjEt0fmYaX6A1zxSuyCkqRKHAtzA=)
                          24: 3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa (hash: qykkhhxHnO0ydNs5JBAQOA0f9BAZyPwR6KhTyOO68q8=)
                          25: 3130332e332e3231342e302f32342d3234203d3e203338313439.roa (hash: 1FiHn4gIC4kH5MoP4rKX52q2L0AmuUmzqqq7XVdC5N0=)
                          26: 3130332e332e3231322e302f32342d3234203d3e203338313439.roa (hash: BdFOwYWDeGnfKDAaGDA7BBj23j1cFiNFG1WQ7TDA43I=)
                          27: 3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa (hash: 08dE8+5h5VM8IAQN0ml1YiJAjJEdE4Qbpafz+/inBuI=)
                          28: 3230322e3135322e3139352e302f32342d3234203d3e203633383539.roa (hash: xIwOhaK9F8GaMLO+48a1gHgLSh8/QXMa+ox/aPfD8ZE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
                          rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 07:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:71:f1:49:da:12:6f:7a:2b:ed:43:87:74:be:65:f6:cb:66:2a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
        Validity
            Not Before: Oct 20 06:47:02 2025 GMT
            Not After : Oct 23 07:57:02 2025 GMT
        Subject: CN=B4DD57B65A61F95DCC244FE4BF6AA411F136F789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:99:2d:3b:6f:c2:d1:36:12:66:76:45:df:e1:
                    d3:f1:a9:95:9b:db:71:09:34:9e:76:f8:97:94:d1:
                    12:88:6b:e9:df:67:5f:d9:b7:0e:b1:3d:49:bc:84:
                    3b:8b:08:28:b9:76:04:75:67:3d:23:43:00:56:50:
                    a2:46:73:1a:cd:ec:d1:4c:11:22:dc:fa:6c:c1:2e:
                    80:f0:5d:56:7c:94:d0:bb:56:ae:1d:f6:fd:70:fe:
                    5a:63:43:a2:5c:96:53:75:ba:09:88:53:79:4a:3b:
                    88:99:b9:a7:c7:d2:2b:46:39:3e:40:76:a1:72:6c:
                    7a:7c:a0:0b:97:2d:bf:bd:c2:c7:b9:8e:7d:e6:f3:
                    38:4d:90:c1:6b:2b:b7:10:dd:bf:95:3c:f9:f6:02:
                    93:a8:89:4a:10:72:76:79:4d:70:2e:4b:f4:25:49:
                    51:6d:81:30:14:a5:2c:f9:96:39:0f:8d:b2:0a:70:
                    23:5d:20:a7:1a:3c:7e:38:68:15:de:a3:6f:b5:ed:
                    9b:07:da:ef:2f:ff:fa:e8:2a:6b:01:81:72:b2:88:
                    1e:9b:43:63:db:ce:db:40:fa:3e:56:bf:5b:8c:b7:
                    6c:15:1b:f2:4e:9f:1f:bb:df:7a:b4:60:ef:62:81:
                    a0:df:6d:2e:e4:8a:fc:7c:33:95:44:0c:88:31:99:
                    d1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DD:57:B6:5A:61:F9:5D:CC:24:4F:E4:BF:6A:A4:11:F1:36:F7:89
            X509v3 Authority Key Identifier:
                keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c2:93:b3:5f:4f:37:25:fa:8f:55:c4:96:aa:0b:4c:7b:1d:
         88:9b:e1:05:10:d0:ca:39:ca:b9:27:e1:c0:77:72:65:5e:85:
         1f:87:78:e3:66:6c:23:85:28:93:40:8a:59:bf:0e:65:73:52:
         7a:cb:1f:11:e4:7b:09:45:e1:6e:a5:9e:0d:7a:da:a4:89:c2:
         3d:d7:b2:46:73:3f:e9:bb:72:60:0d:3e:fb:45:42:dc:76:ae:
         8d:9f:9e:5f:8d:3a:6f:ac:3c:ea:39:8b:76:24:92:39:67:ab:
         1f:36:da:6b:6b:72:df:c5:d2:49:0b:a7:77:a6:87:93:d3:79:
         2a:e8:8d:3d:cf:a7:5c:35:eb:70:a2:6a:88:22:23:07:4a:b7:
         57:e3:6d:3e:48:74:5b:ca:86:0b:94:8a:9c:15:60:b4:af:46:
         df:0d:98:b3:ed:7c:81:d1:4e:73:e1:21:d0:c9:86:6e:d1:a5:
         fe:ce:9a:ce:b6:1d:82:17:6b:04:ea:a5:5b:ae:81:6b:03:5a:
         2a:be:57:9f:6b:1b:e3:e5:fb:37:c2:85:25:97:25:2d:d0:4b:
         97:82:eb:e2:a6:d9:0c:42:eb:83:81:4c:cc:52:5c:42:bb:02:
         df:b3:27:25:53:08:be:1f:b3:c6:f4:b2:9f:56:47:46:5a:24:
         1c:00:97:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:52:16 2025 by rpki-client