Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
File:                     7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft (raw, json)
Hash identifier:          B8blgLLp/gqXH76swgtafcJeAz0pw7giGi6kuy0npHA=
Subject key identifier:   4A:D6:9C:C2:46:FD:98:C7:51:D5:C5:A9:3B:BB:40:15:30:81:06:A4
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       4D21542E81C57038AB72332385739FED60EE5D0E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
Manifest number:          053D
Signing time:             Sat 28 Jun 2025 13:52:17 +0000
Manifest this update:     Sat 28 Jun 2025 13:47:17 +0000
Manifest next update:     Tue 01 Jul 2025 17:57:17 +0000
Files and hashes:         1: 3132352e3230382e3132382e302f31382d3234203d3e2034373837.roa (hash: 5hlI5K/Zd6cztt6GagBhpilRPp9R7JGMqdcSMY/aeFI=)
                          2: 3130312e35302e32312e302f32342d3234203d3e20313338313338.roa (hash: AiGiqAkEHw+5crqFHerViQemTcTzd+2hewVs9y5PNBI=)
                          3: 3230322e3135382e35302e302f32332d3234203d3e2034373837.roa (hash: f6zbYylwme3jupFjo2qnWcX+FQ8SLrNxSPjQQ5cgX6A=)
                          4: 3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa (hash: OCAMhceoK6FqEu5cqv0eRfxFnTETlN562dCqSYdjkuU=)
                          5: 3130312e35302e31362e302f32302d3234203d3e2034373837.roa (hash: NHdK+iKVttVEPrqO6Kcav9eiYXn2bDjiJdfed95C7xA=)
                          6: 3230322e3135382e302e302f31372d3234203d3e2034373837.roa (hash: ikTUrluwHZTIHCOQ2d5+zlRq0v2Hm+t0sCMi6E63aCk=)
                          7: 323430353a383138303a3a2f33322d3438203d3e20313335343738.roa (hash: iU4O+4m5tujQVxnp/4Adigc7sGjZ5zmejSmnE7rldmA=)
                          8: 323030313a6431303a3a2f33322d3438203d3e2034373837.roa (hash: GH/AvB3XPKEHE15PdTdBvAXLFeT58VRzE2oxTkhNN5g=)
                          9: 3130312e35302e32302e302f32342d3234203d3e20313336313038.roa (hash: Z/vhqzRK2E34P6LIN8S8nqYVKvvu1P8GgSzY5FNndB4=)
                          10: 3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa (hash: Qq0X69fpKkgoXdxqOric3DILoOypszE2/fpWSdPOnc0=)
                          11: 3130312e35302e31362e302f32342d3234203d3e20313331313137.roa (hash: Yq8Ks4j9wMdxcKEOcQIXo01Ac19KkunXRZKrsNsLi5U=)
                          12: 3130312e35302e31372e302f32342d3234203d3e20313331313138.roa (hash: NUMOofc9YOcPpk7vREZlaXRyrgd4v2FQ2DUc6NLbzuI=)
                          13: 3231302e3231302e3132382e302f31382d3234203d3e2034373837.roa (hash: XA8SkuahloSTigJSRo7AmwFnL75t6bQcetyBIEe16jI=)
                          14: 34352e3132362e38302e302f32322d3234203d3e20313335343738.roa (hash: x6o5u5/0DxRQEySa49qmGya7YYANPJUMXSQP4dlam9A=)
                          15: 3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa (hash: bSaTuo9sDugIK74bgWEH/NaeFrepofco9BHUfKaMqME=)
                          16: 3130312e35302e31382e302f32342d3234203d3e203338353038.roa (hash: oH263tN8kcoSKRWpko2LpvJSAmvaUSR58O+0L+qhui4=)
                          17: 323030313a6431303a393430303a3a2f33382d3438203d3e20313335343738.roa (hash: mYEPcDWqh45DZX0iAyYKAz59fadnIYlQXPhKnTSk7hQ=)
                          18: 3130332e36312e3234382e302f32322d3234203d3e20313335343738.roa (hash: hxzbCeLrZCOLSwn5ZAyAiy7U+mIRt+YlyE50dA4sH9U=)
                          19: 323430353a383138303a3a2f33322d3332203d3e2034373837.roa (hash: Vu5j6RZnsw+EkkPvhMV3KgS6O4woOvBYcdBEUgMPi6o=)
                          20: 3130312e3132382e36342e302f31382d3234203d3e20313335343738.roa (hash: Oz3no7yKpa1GxXEXVBInv0tnqEhNgjyzNKZ0eGG/VIg=)
                          21: 323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa (hash: McVkIfORU9dtjsrjsOkr171X/vURjfE2aEuSMP86xXU=)
                          22: 7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl (hash: wE9t381pEeIGa8LBlfRPUDGppWjz8dg9gET17rWs7Ps=)
                          23: 3131362e3230362e3234302e302f32322d3234203d3e2034373837.roa (hash: Fw/0AJDMHBUjrTpFISAUnqnpVom/VzAtOWBqxJyUap0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 17:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:21:54:2e:81:c5:70:38:ab:72:33:23:85:73:9f:ed:60:ee:5d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jun 28 13:47:17 2025 GMT
            Not After : Jul  1 17:57:17 2025 GMT
        Subject: CN=4AD69CC246FD98C751D5C5A93BBB4015308106A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:39:1a:3f:36:00:17:5c:ed:26:ee:6f:46:
                    fc:ed:fe:fa:9e:29:8e:e3:c9:3c:d9:01:3f:2f:4a:
                    c7:73:59:49:8b:26:58:61:17:24:56:63:c7:df:90:
                    5a:64:62:91:0d:60:a5:b9:2d:03:e1:87:d7:f2:33:
                    b4:c9:97:de:ab:05:8e:5f:85:d2:42:6d:05:26:25:
                    f9:94:91:b9:76:7f:d1:e0:6f:66:62:09:5b:23:13:
                    46:22:c0:d2:b9:12:d6:73:ef:6f:29:95:24:c1:59:
                    3c:83:5d:26:cd:1c:0b:d8:8e:6f:be:69:25:80:14:
                    31:11:be:35:52:2f:97:be:07:03:ce:f6:c4:9e:47:
                    c1:f6:4c:98:0d:ab:52:d3:3b:ba:1b:1f:cc:61:a2:
                    c2:89:86:62:f2:0c:44:fe:be:af:a3:59:2d:b2:6b:
                    72:bd:7b:8d:d7:ae:12:48:14:15:2e:ed:97:80:1c:
                    56:c2:9d:ac:6a:2b:6f:4d:9c:03:b5:28:61:80:2e:
                    de:62:99:e6:7f:fe:01:d7:28:e2:e4:f0:5d:84:35:
                    a9:de:c6:e5:e9:ed:3d:c6:29:2c:f5:dc:b1:ed:7e:
                    b7:dc:e5:e7:14:8d:99:f2:dc:1e:ad:11:83:58:23:
                    22:13:f2:86:0f:0b:82:7e:d6:16:a5:67:18:b9:6b:
                    23:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D6:9C:C2:46:FD:98:C7:51:D5:C5:A9:3B:BB:40:15:30:81:06:A4
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:c1:12:ec:80:ef:0c:47:6e:e2:59:4a:69:9f:89:5f:62:69:
         64:42:22:df:c8:70:ed:4b:5e:0a:d6:fc:0a:a2:05:51:c3:4b:
         30:eb:a8:8f:3e:c8:d4:0a:39:1f:29:68:0a:ef:dd:28:cb:37:
         63:32:51:1f:90:3d:1b:41:9d:4b:64:e3:6f:8b:a3:b9:9a:32:
         8b:a4:c4:5a:1f:ba:33:3b:2a:22:27:e1:55:94:67:df:50:f8:
         b3:c2:2d:13:95:81:8f:58:58:9b:df:dc:6a:66:84:07:f0:7a:
         74:ee:c7:0e:c6:61:ae:c4:8a:04:bf:b0:2c:f5:9f:dd:cf:8c:
         51:b8:80:6e:cb:7c:c9:fc:f9:39:43:1b:57:92:3a:2d:28:68:
         7c:66:e1:f6:b3:7a:d6:62:b0:82:43:1b:07:e3:db:7d:8e:ee:
         95:8b:34:d1:a1:c0:16:7c:1f:0d:b7:61:51:b6:d4:11:29:91:
         90:24:54:76:f8:a7:73:1f:85:be:71:b0:d1:67:dd:b3:a3:96:
         14:0f:7c:39:68:93:78:dc:a2:a6:db:ba:b4:07:a3:4d:66:bc:
         54:5c:71:f0:86:52:8e:91:05:93:af:db:45:f6:ef:15:f2:d6:
         bb:8d:af:83:3f:a0:88:78:ee:cc:41:20:46:27:61:1a:b8:e7:
         13:db:0d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:13:53 2025 by rpki-client