Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
File:                     D1E28E396E82778793018513BD084854BE663886.mft (raw, json)
Hash identifier:          fMMAeXLHwL2CJA/c8b2qOuHeVwqcamVbFimJTpUzlj8=
Subject key identifier:   2C:14:B8:3E:6F:8E:27:B6:4A:6D:8A:60:17:82:20:FA:50:D7:4F:79
Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86
Certificate issuer:       /CN=D1E28E396E82778793018513BD084854BE663886
Certificate serial:       4E591A7C2F7532FB7FFD71BD660BA21537F51A6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
Manifest number:          0252
Signing time:             Wed 06 Aug 2025 12:00:45 +0000
Manifest this update:     Wed 06 Aug 2025 11:55:45 +0000
Manifest next update:     Sat 09 Aug 2025 12:38:45 +0000
Files and hashes:         1: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: wAotKcJ/dAT1Ar3MTmbAktiozrzps2/cZFRmdSxY5TY=)
                          2: D1E28E396E82778793018513BD084854BE663886.crl (hash: k6WhrHeeKcMr4D79o+PFG9pPGcb574mDkb7jSKh7IJY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl
                          rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 12:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:59:1a:7c:2f:75:32:fb:7f:fd:71:bd:66:0b:a2:15:37:f5:1a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1E28E396E82778793018513BD084854BE663886
        Validity
            Not Before: Aug  6 11:55:45 2025 GMT
            Not After : Aug  9 12:38:45 2025 GMT
        Subject: CN=2C14B83E6F8E27B64A6D8A60178220FA50D74F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:bb:45:47:05:2e:2a:13:f6:3e:e8:8f:7b:
                    a6:49:97:19:9b:fa:15:a6:0d:5b:3c:76:03:24:58:
                    7a:43:10:c4:00:88:98:8f:80:c2:13:9a:84:97:d5:
                    69:ea:6c:f3:eb:fc:8b:78:d4:cc:18:1d:08:8f:25:
                    8c:cb:0f:9c:b4:05:a6:06:45:81:d2:4a:00:68:aa:
                    a7:d9:ec:94:44:c6:9f:7a:31:45:5e:36:29:83:ff:
                    9c:a2:0a:86:8f:59:d5:a9:2d:31:08:b6:bc:76:2c:
                    c3:4a:65:74:55:fa:cb:ee:ab:72:43:e4:ff:ec:b9:
                    f0:13:f2:f5:a7:19:df:bd:14:51:20:70:e7:ca:04:
                    ff:17:15:dd:d4:c1:2e:98:7d:35:42:85:f8:1d:22:
                    22:2d:cb:d9:93:17:e7:a5:09:2c:02:57:70:5b:fa:
                    6e:dc:b7:45:37:d2:70:34:7a:1e:d7:24:e1:94:fc:
                    f2:81:67:c7:db:93:be:a4:f8:bf:e9:2a:3e:29:39:
                    de:ca:72:80:4f:ab:8b:fb:6d:75:1f:d4:0c:aa:21:
                    23:8c:1b:f4:93:a7:3e:e1:3e:4e:35:0a:66:0d:c8:
                    72:24:e9:34:21:a1:d5:6a:48:c9:09:05:f9:40:0b:
                    7b:9f:b9:01:8d:0e:cc:b4:f8:0a:70:61:02:f0:c1:
                    5f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:14:B8:3E:6F:8E:27:B6:4A:6D:8A:60:17:82:20:FA:50:D7:4F:79
            X509v3 Authority Key Identifier:
                keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:94:7e:47:dc:72:58:01:ac:4e:b6:b2:4d:5e:07:39:96:05:
         75:ae:8e:c2:3d:21:6c:2c:0c:b9:ae:a6:34:01:43:52:30:34:
         74:c9:e2:5d:43:38:e0:19:d3:af:05:1a:ec:60:b1:aa:10:85:
         a5:49:76:3c:9b:3b:54:1a:53:c4:eb:d2:fa:61:19:dc:3b:f9:
         57:7a:64:9b:a4:55:9d:c8:b5:29:1e:3b:d1:fe:64:d1:76:a7:
         c0:07:51:35:5f:e5:41:c8:13:de:c0:d4:ec:f4:b6:b7:60:7d:
         a8:65:7b:95:17:6c:fa:3b:ba:cb:49:55:02:9f:2b:86:d7:64:
         0c:52:27:87:23:9d:d7:96:90:ec:a2:99:84:2d:5d:d9:84:19:
         5d:a5:69:71:44:68:61:80:14:63:97:54:cc:87:37:fd:56:4a:
         37:6d:29:cb:e2:ce:e5:91:a2:bd:60:12:8d:27:be:36:55:65:
         91:c0:50:4e:4f:9d:55:dd:d4:9d:ad:b1:9e:4a:1a:7b:9d:4a:
         bd:ac:5d:cd:ad:94:05:22:a3:de:78:e2:6b:ef:fe:21:0e:47:
         ab:b4:7b:dc:91:65:c8:8f:d0:ef:0c:51:d7:e5:ed:24:02:9d:
         19:ac:21:7f:90:14:88:da:25:53:97:12:c0:08:a4:58:a4:42:
         d2:c9:40:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:53:52 2025 by rpki-client