Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
File:                     8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft (raw, json)
Hash identifier:          Nb+Uz+huTXJwIxHAPoDTgHGXlQxr7lO4U0ZCg1YqQZs=
Subject key identifier:   54:02:01:1B:E5:58:B3:3E:69:31:E6:0C:A5:8F:2D:A2:9D:F7:CB:1D
Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6
Certificate issuer:       /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
Certificate serial:       3174CB62BDE73A192455C5F54D06C5040B65F45F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
Manifest number:          03DE
Signing time:             Sat 23 Aug 2025 01:52:09 +0000
Manifest this update:     Sat 23 Aug 2025 01:47:09 +0000
Manifest next update:     Tue 26 Aug 2025 09:50:09 +0000
Files and hashes:         1: 323430343a636163303a633032653a3a2f34382d3438203d3e20313339343137.roa (hash: /ipEpvxAxMNFMGkmyQkvLOJHP/gNCq+5XDe4sK/nkoY=)
                          2: 323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa (hash: Dbjg+vJVIA/12edzQmA2oSGprW6vIebqnxwMgbbyHSg=)
                          3: 323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa (hash: FMTDgQIzYg7LkyNw3U8hdH5e4+pcbdgl2jE3AQpixqA=)
                          4: 323430343a636163303a626162653a3a2f34382d3438203d3e20313339343137.roa (hash: kecTFoic7r1wTr3NJ9A3b39hJiSlgzYyqWz3ChKgWu8=)
                          5: 323430343a636163303a3a2f33322d3332203d3e20313339343137.roa (hash: U8X775Erg4KvjSwclcGWHuukxGyQmMyExSHIbSXOqZk=)
                          6: 323430343a636163303a3164353a3a2f34382d3438203d3e20313339343137.roa (hash: oRfT4X0Sy9tnBNiJsxtxMTFV7eQ+myy/o8BOZoNv2r8=)
                          7: 3130332e3133382e3131362e302f32342d3234203d3e20313339343137.roa (hash: JzP3prHOgFH/3pcbrciCFSrBpBQbgCsXcDvrDwP8+gk=)
                          8: 3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa (hash: HvZ4UYj4GoZLl8NmzF+1Ghc67KVbsVnEc2wguYPDAT4=)
                          9: 323430343a636163303a313164353a3a2f34382d3438203d3e20313339343137.roa (hash: lN6IUo8XcirGXXI7zultPSLQfKt0KthPpzYWW5DChjw=)
                          10: 323430343a636163303a316135623a3a2f34382d3438203d3e20313339343137.roa (hash: XIq5Jxfb9ma1VO6ZcqWrbd6msJG9iOe53aiAMMFJVTU=)
                          11: 8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl (hash: lTELhNMwKTgWmrnX6Eh1Dn50bzGNbEWMkFQJ+SjiD8o=)
                          12: 323430343a636163303a666630303a3a2f34302d3430203d3e20313339343137.roa (hash: KSjkQ8QwpppJxiJX2WOeGB6CdtpxTCvIwn/6JwQhtW0=)
                          13: 323430343a636163303a313030303a3a2f34382d3438203d3e20313339343137.roa (hash: mLEiuQCorcJxBHY4wKeDm97Zmemknme8ExMbOOO5lWE=)
                          14: 323430343a636163303a3a2f34382d3438203d3e20313339343137.roa (hash: uZbhPmuZtG5Md74mhofu8RolET7EoiAnsaXNVE7s4XM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl
                          rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 09:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:74:cb:62:bd:e7:3a:19:24:55:c5:f5:4d:06:c5:04:0b:65:f4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
        Validity
            Not Before: Aug 23 01:47:09 2025 GMT
            Not After : Aug 26 09:50:09 2025 GMT
        Subject: CN=5402011BE558B33E6931E60CA58F2DA29DF7CB1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:67:80:6e:91:2a:97:34:02:fb:9a:ff:fc:
                    f7:41:94:ed:78:81:e2:11:21:98:66:b4:93:1d:b3:
                    10:89:04:e9:5e:ae:ea:ac:ca:7a:1d:8a:46:0f:40:
                    7d:34:cc:76:06:24:1b:c7:04:d7:a2:44:6f:57:96:
                    7b:1f:c0:27:1d:99:9f:e2:6f:54:52:f0:98:63:f6:
                    90:02:d8:be:04:e0:dd:0e:79:10:64:3d:3d:fb:ec:
                    79:50:ba:1c:5b:04:23:fe:8d:15:b5:ca:f0:7f:1d:
                    f8:21:32:b8:15:68:e5:6e:59:2c:a5:c9:6d:33:1a:
                    94:3e:02:aa:9c:d7:03:31:62:58:46:01:47:e0:d7:
                    f8:34:be:0e:0a:4b:be:6f:52:6b:4a:13:fa:6e:9f:
                    87:2a:3e:96:9d:99:8e:ca:87:81:6c:5a:51:9b:d5:
                    b2:e5:cb:d3:14:1d:2d:3b:5e:20:98:ec:5d:70:53:
                    bc:a6:61:9c:17:17:dc:b3:e5:5d:c7:78:75:75:89:
                    ec:42:e5:73:1e:73:9a:95:e1:54:9f:59:cd:60:bd:
                    9f:fd:e9:8b:4d:25:38:64:e1:f9:ea:ce:ba:cf:09:
                    f0:54:be:20:a2:ec:02:d9:11:0a:1f:20:16:5f:6b:
                    46:eb:36:d0:81:30:b8:cd:e1:3d:af:07:55:56:23:
                    9c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:02:01:1B:E5:58:B3:3E:69:31:E6:0C:A5:8F:2D:A2:9D:F7:CB:1D
            X509v3 Authority Key Identifier:
                keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:8a:66:81:ff:00:e9:69:98:8f:33:72:16:b0:f6:23:c3:51:
         2f:89:7f:03:c9:5a:ca:0b:08:4c:00:29:f4:01:7b:d9:40:96:
         90:be:71:9f:32:6e:01:a4:c0:57:d1:0e:7d:9b:cb:f4:55:f0:
         ce:7d:21:f3:ac:98:64:b5:f3:6c:61:46:26:49:29:93:85:82:
         c3:5c:02:9a:4a:2d:c5:88:6f:10:23:3a:e9:f6:13:1a:a3:0f:
         16:9e:04:28:6d:fe:97:9f:ab:b1:f8:e9:5d:74:1c:e6:3f:50:
         3b:44:e2:28:b4:36:60:ae:ff:a7:9f:f6:c5:52:ce:09:01:22:
         1c:f1:8b:53:62:4d:f4:cf:94:2c:77:be:5c:53:35:94:6f:81:
         74:f3:9a:62:d3:16:6a:be:47:8e:9a:e8:71:70:39:ba:59:11:
         00:b0:52:37:98:d8:fb:4d:5f:ab:1e:6e:f1:65:3e:18:e2:bf:
         39:69:37:2b:16:9c:1b:8f:12:a0:4b:d9:9a:b9:13:88:06:48:
         c3:5c:4d:74:c3:93:2a:88:c1:f6:0b:28:38:81:94:12:7f:98:
         bb:00:dd:86:b5:14:5e:7f:fb:76:51:6d:1e:24:e6:d9:24:4c:
         3e:6f:69:63:8f:7f:f4:7d:db:4f:54:37:d8:ea:a7:da:95:c9:
         ce:72:55:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:35:16 2025 by rpki-client