Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
File:                     62F71C75A752B45AE4B51A4E7010124979820A90.mft (raw, json)
Hash identifier:          UG8MX+BYIydj6gRAdxokmmn9mKKSVrhk6m7v8qA0sr0=
Subject key identifier:   71:0C:A2:29:EE:C7:BD:6C:02:18:44:B1:68:21:44:E9:85:C0:79:C8
Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90
Certificate issuer:       /CN=62F71C75A752B45AE4B51A4E7010124979820A90
Certificate serial:       2395F70A25654F5251B885BA819B20DB4D2CEC49
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
Manifest number:          AB
Signing time:             Tue 17 Jun 2025 19:20:43 +0000
Manifest this update:     Tue 17 Jun 2025 19:15:43 +0000
Manifest next update:     Fri 20 Jun 2025 22:55:43 +0000
Files and hashes:         1: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: GWaWKRBrWSX+bUdESxh+m2otGWb/hOeTShn9gb95F3w=)
                          2: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: SP12xLDyV/VP9N1xqFMD2+nxhDzqIZUfpt67MZUwfE8=)
                          3: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: Eu+4u02FPo/RfVFVxOIqvYkg8/wWVoya955tDIny+5E=)
                          4: 62F71C75A752B45AE4B51A4E7010124979820A90.crl (hash: o2WuGZI3j7JzsZUIfgx0ASNYvCr3vN3kpPT1Pj71UmY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl
                          rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 22:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:95:f7:0a:25:65:4f:52:51:b8:85:ba:81:9b:20:db:4d:2c:ec:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90
        Validity
            Not Before: Jun 17 19:15:43 2025 GMT
            Not After : Jun 20 22:55:43 2025 GMT
        Subject: CN=710CA229EEC7BD6C021844B1682144E985C079C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:86:a6:e6:e3:69:e2:13:76:45:81:96:72:73:
                    1c:6d:f4:f0:b9:f8:79:55:99:e3:64:0d:75:fb:c1:
                    9e:d6:cf:5e:e2:db:66:1e:99:99:9e:1c:35:ca:04:
                    6f:73:9b:e0:a5:cf:53:97:1d:a1:ed:01:77:ab:93:
                    6b:d3:65:c1:a2:b6:3d:b9:be:66:e2:b1:9a:7f:6d:
                    c9:68:ae:01:51:4f:aa:b8:ea:b2:a0:9a:fa:3b:84:
                    44:7a:72:2a:f7:cc:54:11:3c:6a:e8:8c:25:79:60:
                    a2:07:c6:de:74:58:ad:80:63:f1:fb:ab:71:6b:27:
                    76:3a:0f:e6:38:19:36:77:02:0d:1c:de:1b:ee:fc:
                    50:00:fc:d3:fd:0f:a2:89:54:14:a5:fe:d7:5f:03:
                    7a:94:cf:17:e3:cb:98:f5:3b:2c:e0:74:1d:30:10:
                    1c:72:60:2f:12:00:04:6a:1c:02:21:af:a2:1e:12:
                    cf:db:96:51:e0:d8:f1:29:c5:c5:9d:ac:fd:45:60:
                    5e:99:23:da:ad:b7:96:20:c2:84:c4:47:82:37:a8:
                    78:75:d7:42:34:51:74:23:25:f5:54:6c:b4:6f:82:
                    bb:dc:dc:10:32:b8:b3:e8:de:b8:ef:6b:5e:2e:bc:
                    22:57:7a:25:78:a0:ad:35:65:fc:af:ee:0d:df:f4:
                    4d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0C:A2:29:EE:C7:BD:6C:02:18:44:B1:68:21:44:E9:85:C0:79:C8
            X509v3 Authority Key Identifier:
                keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f2:e3:a6:6b:4e:77:6d:d9:63:d1:5c:f9:38:c6:f2:ef:ef:
         37:7f:7c:02:27:07:86:43:f5:a9:2e:2d:2e:e3:fa:44:13:32:
         36:57:dd:82:30:3d:9b:d4:ac:1d:2c:51:b2:cf:61:22:16:a0:
         7c:a4:ee:88:5f:fc:ef:e3:1a:ef:33:78:90:e0:52:bb:db:bf:
         8a:c2:f3:60:78:49:53:aa:41:dc:e0:9b:59:78:87:e4:fe:c0:
         3b:e3:ec:2b:ff:e7:b2:04:92:35:66:7a:52:4c:fa:95:71:7b:
         de:5d:81:92:b5:bc:15:08:2b:5a:31:8b:3d:16:01:bf:d2:ae:
         e1:02:a2:2a:78:9f:34:0d:f1:ee:68:74:31:c1:cd:7d:3d:f2:
         34:d7:62:3c:d7:f9:1d:22:19:97:00:23:e1:36:ef:3d:36:16:
         9f:7d:cc:69:de:08:fb:31:e6:e1:3b:c0:af:10:bf:c7:be:01:
         f1:fc:21:cb:fc:90:d0:7f:44:27:96:39:01:6a:71:9a:ff:34:
         cf:76:90:9e:56:45:06:0f:b7:97:57:cf:04:37:76:cb:c4:62:
         fc:68:f0:21:24:c3:6e:cb:2c:f2:18:27:41:3a:c0:aa:e3:d4:
         41:0c:09:24:a8:97:a0:2b:b1:64:3f:ec:d1:60:5e:be:9d:42:
         52:c0:ca:44
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUI5X3CiVlT1JRuIW6gZsg200s7EkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEyNDk3
OTgyMEE5MDAeFw0yNTA2MTcxOTE1NDNaFw0yNTA2MjAyMjU1NDNaMDMxMTAvBgNV
BAMTKDcxMENBMjI5RUVDN0JENkMwMjE4NDRCMTY4MjE0NEU5ODVDMDc5QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDshqbm42niE3ZFgZZycxxt9PC5
+HlVmeNkDXX7wZ7Wz17i22YemZmeHDXKBG9zm+Clz1OXHaHtAXerk2vTZcGitj25
vmbisZp/bclorgFRT6q46rKgmvo7hER6cir3zFQRPGrojCV5YKIHxt50WK2AY/H7
q3FrJ3Y6D+Y4GTZ3Ag0c3hvu/FAA/NP9D6KJVBSl/tdfA3qUzxfjy5j1OyzgdB0w
EBxyYC8SAARqHAIhr6IeEs/bllHg2PEpxcWdrP1FYF6ZI9qtt5YgwoTER4I3qHh1
10I0UXQjJfVUbLRvgrvc3BAyuLPo3rjva14uvCJXeiV4oK01Zfyv7g3f9E1FAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcQyiKe7HvWwCGESxaCFE6YXAecgwHwYDVR0j
BBgwFoAUYvccdadStFrktRpOcBASSXmCCpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMC82MkY3MUM3NUE3
NTJCNDVBRTRCNTFBNEU3MDEwMTI0OTc5ODIwQTkwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEyNDk3OTgy
MEE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj
ZWYtN2JlYjU4NWNmMjQxLzAvNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEy
NDk3OTgyMEE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFTy46ZrTndt2WPRXPk4xvLv7zd/fAInB4ZD
9akuLS7j+kQTMjZX3YIwPZvUrB0sUbLPYSIWoHyk7ohf/O/jGu8zeJDgUrvbv4rC
82B4SVOqQdzgm1l4h+T+wDvj7Cv/57IEkjVmelJM+pVxe95dgZK1vBUIK1oxiz0W
Ab/SruECoip4nzQN8e5odDHBzX098jTXYjzX+R0iGZcAI+E27z02Fp99zGneCPsx
5uE7wK8Qv8e+AfH8Icv8kNB/RCeWOQFqcZr/NM92kJ5WRQYPt5dXzwQ3dsvEYvxo
8CEkw27LLPIYJ0E6wKrj1EEMCSSol6ArsWQ/7NFgXr6dQlLAykQ=
-----END CERTIFICATE-----
Generated at Thu Jun 19 09:20:04 2025 by rpki-client