Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
File:                     8469874AE268E2CD4E9A137EDD5599C748530E9E.mft (raw, json)
Hash identifier:          1ulHx3bVx9Eh/PheS881CDwZbRjBc624pMDAkL3p/f4=
Subject key identifier:   20:03:3A:BA:ED:86:01:94:90:D6:CB:38:0E:86:15:4A:C9:79:F6:39
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Certificate issuer:       /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial:       2FEEB6E9BF378A4CE6824B57B276D86D131DA5C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
Manifest number:          0513
Signing time:             Mon 04 Aug 2025 17:42:10 +0000
Manifest this update:     Mon 04 Aug 2025 17:37:10 +0000
Manifest next update:     Fri 08 Aug 2025 03:53:10 +0000
Files and hashes:         1: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: 8kcmZ4RG24jB44cBv71IJKv0c+Dtp9Ygk9nrjPzZQxo=)
                          2: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: 1wEjJgzGmGFQx1qLaHwF1vXvoQd7g22cQT5tuVMpCSs=)
                          3: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: 6BZFe33/a07P77heVgE/RRa/s7Eo4pTfBbM0ftWFlFs=)
                          4: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: LN+YrVCzUblkTbFghEN9RcfZWB+oIkio+9woygN18Nk=)
                          5: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: zqqM4+D0YvV3kzADDLg9UoTtA+fv3LSZ59niExdp6h4=)
                          6: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: lejxupJB/ypozilIjk9IOKEOtlHup4PnPlCfI+BqLVI=)
                          7: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: w3mgpqsf+QCQ0IESSJ7u/cpRjR0jksdX+ZR9wNYh8rI=)
                          8: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: nBHgJ9scpxnDLh4WsmH3WPakx6Rx02RsuPBuZbUxKAs=)
                          9: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: t5dSILf0M9LETh0ONTCtPeHbE5Gq+eulQJzX449lTa8=)
                          10: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: 0on0Zr09JZO2uwExsn4al/aKrzhro4Rbk1hM7yfdFaI=)
                          11: 8469874AE268E2CD4E9A137EDD5599C748530E9E.crl (hash: 3BE12k35JYlvrZ2EgFwFxFGkudlNGBY+Nc5hfWrEjOs=)
                          12: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: q6gnQ689gbyPRWkFyTqwu7clrVFZi6YA0qntQoU052Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
                          rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 03:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ee:b6:e9:bf:37:8a:4c:e6:82:4b:57:b2:76:d8:6d:13:1d:a5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
        Validity
            Not Before: Aug  4 17:37:10 2025 GMT
            Not After : Aug  8 03:53:10 2025 GMT
        Subject: CN=20033ABAED86019490D6CB380E86154AC979F639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:7f:83:7d:23:2c:ce:a1:bf:c7:4a:90:07:
                    3a:4f:b8:b0:0b:a3:b0:89:5a:f0:0b:5c:7d:f3:80:
                    3d:b2:e4:8d:41:07:13:9c:b5:8f:44:89:d2:14:07:
                    34:28:26:48:f1:9d:7a:96:d5:bc:06:30:27:31:95:
                    e3:13:86:0b:b9:e9:0b:82:26:1c:21:25:e8:58:27:
                    56:c0:a7:73:03:35:76:66:07:0e:cc:d4:cf:95:47:
                    22:0a:b7:7a:aa:09:67:21:39:05:43:b7:a6:01:8f:
                    8f:6c:8b:2f:41:bb:e5:84:f0:e5:b2:18:35:48:ec:
                    f8:ae:8e:ae:32:0b:e4:aa:75:77:77:78:48:77:c0:
                    fe:47:1a:63:2a:dc:30:4b:5b:62:77:63:2d:bd:f9:
                    9e:a9:18:ba:a5:5b:43:4d:52:db:74:86:b7:72:76:
                    8e:5a:86:3d:84:44:b0:33:0b:9e:aa:5f:e2:e1:41:
                    63:fb:6b:88:39:cd:92:d1:74:5d:dd:df:22:df:d8:
                    49:ed:4b:d2:c8:7e:de:34:68:f1:a5:45:e9:79:49:
                    3b:e9:ab:79:cc:47:64:59:e2:5b:01:a8:be:7f:7d:
                    a0:81:60:31:c3:3f:36:b2:95:78:95:b2:70:e0:14:
                    b8:15:a5:a8:9c:1d:29:aa:28:7f:1d:d6:69:cd:74:
                    32:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:03:3A:BA:ED:86:01:94:90:D6:CB:38:0E:86:15:4A:C9:79:F6:39
            X509v3 Authority Key Identifier:
                keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c7:c0:89:a5:b3:7d:2c:b2:d5:83:b5:34:28:50:a2:44:d6:
         f7:fd:4a:31:e8:9a:6b:06:4f:59:3a:cc:4b:3c:2a:6c:fb:3c:
         cb:7f:c7:a0:61:65:cf:b1:04:56:12:f9:85:10:ba:df:41:57:
         e2:9e:ba:83:82:31:44:9a:38:1c:6e:64:e9:40:a5:6e:09:eb:
         cb:b3:cd:38:56:36:3d:12:e4:c6:b9:31:ff:21:13:ec:d0:2d:
         cb:64:92:26:73:ee:95:82:7a:6e:2e:c0:2a:76:33:5c:5b:b3:
         6a:0b:2a:31:f1:af:1d:14:09:9b:35:58:0c:37:fb:86:08:ca:
         93:0c:44:b4:73:fe:40:b4:ff:d3:e4:eb:7e:8e:e3:e3:e4:a9:
         27:30:5e:44:01:21:a0:dd:34:19:64:58:ed:9e:ab:51:d4:a3:
         48:95:8b:67:ac:ff:a4:ac:64:2e:2d:a5:22:2b:83:1d:ca:22:
         e0:d3:63:fd:2f:1a:bd:ff:5c:07:77:66:8b:ff:9b:c9:b1:df:
         39:a7:75:8a:50:5d:c8:88:54:bf:14:94:57:1a:29:d5:88:b1:
         05:7f:1f:a8:fd:4f:3e:bc:59:5f:4c:0e:4c:10:42:2f:c5:56:
         7b:7c:a8:2c:6e:79:de:a6:eb:33:6c:d8:25:20:b7:79:f7:c4:
         9b:43:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:26:55 2025 by rpki-client