Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
File:                     F33127B2252454B491C5DC9FE3937C56F28F8066.mft (raw, json)
Hash identifier:          k+bivwy1PKwfr5aTWsBhiYwTMUox0OGgb2jfs1ikQUg=
Subject key identifier:   4D:5D:90:D0:37:5F:1A:9B:C7:36:26:D5:D8:A9:6A:1C:D8:0C:16:36
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Certificate issuer:       /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial:       55D730E0BD90EA21625E0A992E1F312DBA820762
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
Manifest number:          03CD
Signing time:             Sun 29 Jun 2025 23:00:55 +0000
Manifest this update:     Sun 29 Jun 2025 22:55:55 +0000
Manifest next update:     Thu 03 Jul 2025 04:33:55 +0000
Files and hashes:         1: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: LK7y7Lgv53BZtTgHVdhNU9vAFNrTBJKQoUlDcnr1peM=)
                          2: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: gRftjSQQEs2HA/M7jkf+ozLtCrIoawfYsZxOb3X4kBI=)
                          3: F33127B2252454B491C5DC9FE3937C56F28F8066.crl (hash: 2XxxYb/oRFx/ZE0uX830v5MUg/jjhJvXmN3RwFAY1fA=)
                          4: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: sfYpDs3jHVhySahEuUQy0V6BeSKjH1Lk7XnZpDOyCWI=)
                          5: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: DcGxDHPqViJVOJR4+8wZK4plCpX0AqnB3wzHsVU0B/I=)
                          6: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: nPfvFxh32GtLGhwJQ/WVsbfFCUobHuoJlvZ49Ao0HyU=)
                          7: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (hash: TZ45IaHiDcklYnYgaDPwrwSUbUctA3Q/NXqUbigRnzs=)
                          8: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: Xb1Bkjs5hzP5DiGreqFq1n1/N1wG2GKWoe1mJNbSKvU=)
                          9: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: m3SFMK5sTyp5JRSjSaSerEeKhJKK6aQm3Z3k3tuCZsA=)
                          10: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (hash: xd0vdotwl3DI/gtzK9jd/Z1SgDoCaQpGK+EAJgcM1tI=)
                          11: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: N0CbxEaJ84FtSM59t7S0gaGm9kXwBwxvj0vCyUhse+Y=)
                          12: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: BhrGTMcOlTnS9+LXizZepRTc8dUVDoSk9wrBjorwUZI=)
                          13: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: 44xJ+4HPqKcd5YyfQZtlfLdXLia/wNGmzcAqkBPsBnY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
                          rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 04:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d7:30:e0:bd:90:ea:21:62:5e:0a:99:2e:1f:31:2d:ba:82:07:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
        Validity
            Not Before: Jun 29 22:55:55 2025 GMT
            Not After : Jul  3 04:33:55 2025 GMT
        Subject: CN=4D5D90D0375F1A9BC73626D5D8A96A1CD80C1636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:44:15:7a:9b:81:70:a1:22:4a:ee:19:a4:
                    52:d8:d9:81:f9:f7:ba:2d:42:7c:9c:7b:a9:0c:86:
                    af:b5:62:40:17:70:84:ff:3a:24:53:02:f9:1c:3a:
                    cd:98:46:a7:b2:80:98:fa:78:bb:8e:fc:93:a0:94:
                    25:8b:b0:83:b1:29:d5:41:40:9f:1e:c3:fd:c8:22:
                    4c:c7:c1:a6:02:8f:66:76:ac:cf:b6:43:73:ae:ae:
                    20:9c:54:3e:3b:2d:70:5c:d7:3b:cc:3c:80:95:7a:
                    78:d3:38:74:44:bb:75:59:f4:95:06:ad:c9:05:01:
                    58:66:e2:a5:61:45:7f:36:ab:9a:ef:9e:8a:c8:86:
                    fa:c4:5e:5a:54:7d:65:04:e4:49:6a:2b:4a:30:59:
                    13:33:fc:4b:de:7f:90:49:f8:63:ec:81:62:ba:5b:
                    fc:5b:e4:96:27:d5:41:c1:88:0c:c9:14:c6:10:b8:
                    e6:91:4b:35:f6:7a:04:8f:cb:d9:e8:19:0d:bb:45:
                    fd:81:d7:30:37:76:b6:52:ba:ab:f0:20:f8:77:a2:
                    5f:4f:44:28:50:0d:71:92:a0:ef:fd:ec:ad:73:c2:
                    77:64:88:d2:0b:ce:30:33:ad:33:8f:96:54:79:b1:
                    92:4d:43:2f:2d:05:f0:dc:d0:2d:e2:d0:12:a9:74:
                    13:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5D:90:D0:37:5F:1A:9B:C7:36:26:D5:D8:A9:6A:1C:D8:0C:16:36
            X509v3 Authority Key Identifier:
                keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:44:33:f7:7a:5d:61:b3:05:24:64:e8:54:6c:25:b6:e5:5a:
         9b:33:a6:55:20:35:2c:85:4d:9d:33:54:2a:dc:d8:36:d1:4b:
         82:59:d3:9e:05:50:5d:6c:4d:a1:74:2b:e6:51:11:71:da:10:
         68:d7:33:9d:ce:31:0f:f2:68:31:d0:e1:50:cd:a7:59:73:00:
         20:e2:1a:50:c2:64:0f:cb:82:c9:fd:41:fe:4a:81:55:8e:1c:
         5a:7d:47:09:04:17:5d:47:8a:e5:7b:60:06:2f:e5:db:c7:b9:
         2a:9f:95:69:2e:e4:3e:50:38:87:b3:62:6b:d8:08:d5:f1:88:
         0a:6b:f4:75:5d:2f:ca:66:31:e6:c9:7a:49:df:d0:f3:0c:9c:
         f1:cb:02:d5:a6:82:75:6d:33:33:54:3f:38:7d:8c:4a:d2:4e:
         a1:12:68:36:96:81:33:ef:82:82:fc:be:16:bb:d0:52:26:47:
         de:01:f0:b2:b9:79:b9:98:8d:7d:25:8f:0a:fd:98:9f:1a:3f:
         a2:db:ec:94:09:4b:1b:c8:1d:79:fb:f5:50:e0:83:a1:cb:c0:
         be:da:d1:64:7a:e7:9a:37:5f:64:39:71:be:e0:0c:fe:f4:9f:
         67:4a:e9:5a:61:54:10:73:8e:2e:7a:e1:57:6c:a4:a1:25:03:
         fd:05:c6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:22:40 2025 by rpki-client