Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft
File:                     19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft (raw, json)
Hash identifier:          TMmiKqzAXo1vaKS0F1XeQ2ohuJ8TaM6YeIEvUV4fIRI=
Subject key identifier:   75:FD:CE:FF:81:66:FD:DB:4F:EE:96:67:94:7D:73:F7:0C:C7:04:3F
Authority key identifier: 19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C
Certificate issuer:       /CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C
Certificate serial:       3A4600CEAF069676706CAB4F97FF090B883A213C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft
Manifest number:          04E7
Signing time:             Sat 28 Jun 2025 19:01:47 +0000
Manifest this update:     Sat 28 Jun 2025 18:56:47 +0000
Manifest next update:     Tue 01 Jul 2025 22:46:47 +0000
Files and hashes:         1: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: yCfGLKGWTw0wAfTHt+3rKRfpUiZgwzZqi9YE0DFo8qw=)
                          2: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl (hash: c55RB4gwSAKcTtx6nxh6Epirc3QMi3bN9dq/AC/24uk=)
                          3: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: U5fnoyr/5IIStrT2HEQ+BlCOUuRxzROoZ8IEFi9/L1Q=)
                          4: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: HO0xgGTKI8hDqeJBD1vkonWKYqVkEjngRgMiBcK+FFk=)
                          5: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Be1o2enB5OVbfeTb11FQx0y/6KQQnTeDSPNmLL8NRc4=)
                          6: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: 4brGPOCgGPQmWwoETwSHHbE2lw9R22KEcXYm0M7Fp90=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl
                          rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 22:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:46:00:ce:af:06:96:76:70:6c:ab:4f:97:ff:09:0b:88:3a:21:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C
        Validity
            Not Before: Jun 28 18:56:47 2025 GMT
            Not After : Jul  1 22:46:47 2025 GMT
        Subject: CN=75FDCEFF8166FDDB4FEE9667947D73F70CC7043F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:79:51:5e:cd:28:a7:57:3e:d5:c1:b5:1d:
                    5f:3e:64:07:b4:14:83:2d:57:49:55:23:80:5a:bf:
                    45:5a:75:64:d3:d5:22:55:f5:24:1f:ab:a1:68:22:
                    0f:50:de:c3:ba:b3:8a:c9:f9:f2:75:6b:54:e5:1b:
                    fe:0a:e3:76:3d:1b:99:c6:b4:ba:6c:15:1b:ee:ca:
                    0a:33:a0:88:bc:ca:2c:bc:69:bb:90:49:01:ad:f1:
                    38:27:e9:50:8a:5c:11:1e:b7:84:61:7b:08:b4:27:
                    cb:64:c5:f2:6e:bb:71:de:89:ca:d4:d1:79:e6:94:
                    48:96:0a:59:d4:c0:f6:c5:a7:a2:51:33:3a:b6:5a:
                    d5:44:ff:5d:5f:66:65:ea:f3:bb:c5:e8:2d:20:63:
                    ee:90:3e:c8:b8:7b:3c:0c:88:3a:89:52:5e:f3:39:
                    96:36:b2:52:83:17:48:29:50:90:93:b1:f6:48:60:
                    8e:1b:eb:b0:e6:2f:9d:69:8c:32:b2:e1:7a:53:ae:
                    94:3f:5b:75:b0:b2:d5:d9:2b:f8:37:53:d0:0e:e4:
                    29:20:59:7e:90:26:54:a7:90:0f:a2:bd:ce:be:a3:
                    21:e3:09:41:2b:04:e3:99:83:49:15:6f:c8:88:45:
                    72:40:b1:b3:b7:30:54:55:15:1b:c0:0a:b2:9d:d3:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FD:CE:FF:81:66:FD:DB:4F:EE:96:67:94:7D:73:F7:0C:C7:04:3F
            X509v3 Authority Key Identifier:
                keyid:19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:03:99:23:5e:9c:36:00:1c:2e:d0:40:1f:c7:5a:7c:fa:39:
         1f:a8:97:32:21:6e:16:80:50:d3:51:d1:b0:9c:8e:72:34:8b:
         0f:3a:85:74:f8:37:73:21:eb:f3:8e:38:df:24:cc:ca:4e:d2:
         db:2a:e8:9a:7e:93:ac:11:32:04:21:7e:8a:78:cf:72:9d:e4:
         05:59:9b:ed:ea:f0:16:bd:8b:ec:15:6f:72:c1:94:34:3c:8a:
         a4:fa:02:52:4e:ad:26:72:be:81:32:5e:85:88:28:c9:bc:91:
         a1:c8:2c:ab:4b:0d:32:4a:ba:b4:22:71:b1:c8:aa:c3:a2:d8:
         3d:b4:56:77:0c:de:5b:1e:35:26:77:12:13:1d:dd:b6:fa:14:
         09:87:8a:0b:d4:20:b2:28:14:06:f3:06:0f:84:08:1f:65:69:
         ff:04:4b:5b:81:71:5f:2b:c6:f2:da:8d:cf:cc:91:d4:96:ad:
         c5:8a:67:23:6b:ce:fa:e8:35:9f:ab:1a:73:0a:67:37:e3:3d:
         d0:1d:d7:35:2f:cc:2e:45:17:d1:25:8e:8f:c7:3d:25:10:fc:
         8c:96:3a:06:b9:64:c6:b2:92:6d:0f:cc:5e:ed:ef:81:a8:bb:
         9b:d4:64:b6:dc:2f:fd:a8:30:e2:84:aa:53:a3:a8:cf:f1:ee:
         40:11:9f:40
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOkYAzq8GlnZwbKtPl/8JC4g6ITwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4
N0U2NUMzQzAeFw0yNTA2MjgxODU2NDdaFw0yNTA3MDEyMjQ2NDdaMDMxMTAvBgNV
BAMTKDc1RkRDRUZGODE2NkZEREI0RkVFOTY2Nzk0N0Q3M0Y3MENDNzA0M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJnlRXs0op1c+1cG1HV8+ZAe0
FIMtV0lVI4Bav0VadWTT1SJV9SQfq6FoIg9Q3sO6s4rJ+fJ1a1TlG/4K43Y9G5nG
tLpsFRvuygozoIi8yiy8abuQSQGt8Tgn6VCKXBEet4Rhewi0J8tkxfJuu3HeicrU
0XnmlEiWClnUwPbFp6JRMzq2WtVE/11fZmXq87vF6C0gY+6QPsi4ezwMiDqJUl7z
OZY2slKDF0gpUJCTsfZIYI4b67DmL51pjDKy4XpTrpQ/W3WwstXZK/g3U9AO5Ckg
WX6QJlSnkA+ivc6+oyHjCUErBOOZg0kVb8iIRXJAsbO3MFRVFRvACrKd0215AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdf3O/4Fm/dtP7pZnlH1z9wzHBD8wHwYDVR0j
BBgwFoAUGaGW9eW6ujGSbFru9E/BY4fmXDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
Yjg4NThlMC1lY2YwLTRlNTMtYTQ5MC0zYjdjMmRlMTY5M2MvMC8xOUExOTZGNUU1
QkFCQTMxOTI2QzVBRUVGNDRGQzE2Mzg3RTY1QzNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4N0U2
NUMzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmI4ODU4ZTAtZWNmMC00ZTUzLWE0
OTAtM2I3YzJkZTE2OTNjLzAvMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMx
NjM4N0U2NUMzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHMDmSNenDYAHC7QQB/HWnz6OR+olzIhbhaA
UNNR0bCcjnI0iw86hXT4N3Mh6/OOON8kzMpO0tsq6Jp+k6wRMgQhfop4z3Kd5AVZ
m+3q8Ba9i+wVb3LBlDQ8iqT6AlJOrSZyvoEyXoWIKMm8kaHILKtLDTJKurQicbHI
qsOi2D20VncM3lseNSZ3EhMd3bb6FAmHigvUILIoFAbzBg+ECB9laf8ES1uBcV8r
xvLajc/MkdSWrcWKZyNrzvroNZ+rGnMKZzfjPdAd1zUvzC5FF9Eljo/HPSUQ/IyW
Oga5ZMaykm0PzF7t74Gou5vUZLbcL/2oMOKEqlOjqM/x7kARn0A=
-----END CERTIFICATE-----
Generated at Sun Jun 29 18:08:56 2025 by rpki-client