Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
File:                     2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json)
Hash identifier:          fs588Y+IxHvumuMKK6lIo/ytUcl/eIPfncPMEIetYZ8=
Subject key identifier:   FF:16:D8:EF:92:AF:69:2B:54:2E:0E:A0:4A:C3:6A:E3:EC:4B:9B:52
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       31EED130F0C639BF722D6C3F606375DA108BA311
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
Manifest number:          04F5
Signing time:             Thu 07 Aug 2025 16:41:53 +0000
Manifest this update:     Thu 07 Aug 2025 16:36:53 +0000
Manifest next update:     Sun 10 Aug 2025 21:03:53 +0000
Files and hashes:         1: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: bu8PQupPQERGQ/wzLVVe3ZYhIOmwELfx937WvLW0lzc=)
                          2: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: euoMpvL4eG72VF7oEqlEoSVWhRjwaeq3y0huB9mjd6w=)
                          3: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: MNsCflRoTlLLKOy1y3qU2xpl0KIGEKY8wK60n9pU+7g=)
                          4: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: Pm3ejHe0iKXyhk2uLd7JZnNwWHWfKfQSqqt4OykxpQA=)
                          5: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: O4758ltnaCnZlk7IYIR3KUuRIpNS2S4KZ7yVd+rr0y0=)
                          6: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: l7IvhWfbT+lx2dajFWFQHmgoo+JryhgkVz+DjITDf5w=)
                          7: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: M1sZzZsXerpK67gBWx+pwUlEiAdZNEC8sdxke6ageOg=)
                          8: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: 2I4LUvDndEY+56Z45Zke7IZg+TWoP7vGoCnv2WeX4qA=)
                          9: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: DnA9pVTlc5t5JUQmGO4bpvoQrAWbOAtoPuSdy5Z19iI=)
                          10: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: oOJaEiRPwPQflN2dss15Y4scB4IK0srdXT4sQ+7Afow=)
                          11: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: ktBqyZQvnsVWZJg0o8QMMym54n+sUY8BtLk1pA6WS3M=)
                          12: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: qU/iCVYcrH5NwRFFUnpTANC1C4dNa/LYJXSxq8pN8yQ=)
                          13: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: vVu41fldo66s3GTiO3p70Y9WjrS6PJn4ErhvMTYrL+0=)
                          14: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: GOw6BJn4XT5wEmOGVeX/6A1aWsswmeb6q3J3zFZr2JM=)
                          15: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: impujDOUoN2BKQyTyiVBUJjqkOdpqC1eOXOcnJD1Ge8=)
                          16: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: SpSJ2mlMQ8WdpZZy+WtaRGJCKRn7SkirsoH4mwvq2iA=)
                          17: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: nbkYpz+Buhh+XcMqkAbLahjlkTuDcneq98AvbJE0oqQ=)
                          18: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: t73bJSev/MnTBxda4w51EgtY3s6q8wQKW/7viVMLk2M=)
                          19: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: iEwos51aWtJInprKu1evUCiZY2FYY6kr/E794RVuLRw=)
                          20: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: akxHC8MKM3EFjHhlpdlYP+/pk7TEX/1Nsq+20Bs3aRk=)
                          21: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: Ge6toEI3GzH1rudvQNuKe4sTOqkKcImFzmaL0fB9K2A=)
                          22: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: 3hpRgS72xqbHw/rzHvrZvr06sNkUSk2YClN/PS2G8VY=)
                          23: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: 9DRtavO7TXPRRO9r4nJOU2l6z0jZDLCjiuHMpKPIfJU=)
                          24: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: 7CnLEJTxSmV5XmK1oL/nqrOB4/valIkxzWgpmSqfSL0=)
                          25: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: sTkMNKXQHwGJCIGPBjMVfmb030wQu4FTAnEhwXDkkhA=)
                          26: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: afV3DuPWJs229SMBfZ6L1zzWwdYeqEIzLl+zAnPOPc8=)
                          27: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: b1d2IpMrPiIjBD6MTNOx5pdXixsLXZonVO5D5NGCeqQ=)
                          28: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: Rjbhv9edaboHxu8zehTXAVaGiJWP5SEtMWZfSRiWBmE=)
                          29: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: 50c42wbMJd/3zHSQYnPp2sq4dhoDBUFTgpkHjJjx5gs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 21:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ee:d1:30:f0:c6:39:bf:72:2d:6c:3f:60:63:75:da:10:8b:a3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Aug  7 16:36:53 2025 GMT
            Not After : Aug 10 21:03:53 2025 GMT
        Subject: CN=FF16D8EF92AF692B542E0EA04AC36AE3EC4B9B52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:c3:34:25:df:a9:c0:79:ca:2b:d4:54:28:
                    d3:5e:dd:94:c1:37:4c:00:54:4b:ca:75:0b:25:43:
                    21:13:af:eb:71:e2:14:40:f6:37:07:17:49:d3:b9:
                    8f:43:d0:53:d5:67:7a:d6:90:8d:65:07:e4:ea:f6:
                    48:50:09:78:cc:b6:98:5b:88:c5:64:25:50:7b:59:
                    cc:4d:9c:72:40:ea:2c:c7:78:d3:07:da:65:d7:53:
                    9d:6b:63:c5:7d:8b:a0:94:b1:1b:4f:b3:1a:36:08:
                    9b:78:bb:de:64:b9:ef:18:f6:26:01:0f:38:b1:da:
                    cb:c4:46:fc:68:55:21:a4:d8:3e:99:c2:85:0c:d7:
                    93:68:a7:07:52:d5:e1:39:e3:47:e3:63:66:58:14:
                    b7:8a:91:6f:09:96:59:64:97:33:d7:f7:9e:3e:b8:
                    bd:38:fd:17:f5:5b:91:26:fc:e7:52:ab:92:fd:fc:
                    06:0e:85:5f:cc:c7:69:d4:d4:78:42:a8:69:99:35:
                    70:ac:8c:d7:3b:f6:9a:01:9d:7c:3a:95:3a:d3:49:
                    80:23:0c:46:1b:a5:8b:ff:31:b5:6b:64:26:2a:2a:
                    00:8b:c9:02:61:f0:86:5d:c6:84:04:83:87:34:f1:
                    45:45:12:e4:ed:2a:49:9e:4b:dc:be:3f:8a:64:89:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:16:D8:EF:92:AF:69:2B:54:2E:0E:A0:4A:C3:6A:E3:EC:4B:9B:52
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b5:13:a6:0f:0e:af:82:9c:12:ac:3d:b2:f9:ae:8f:41:f3:
         61:fc:de:53:66:4d:2c:13:f2:15:a0:44:b3:39:b9:c4:ef:25:
         00:ed:06:96:df:6c:a6:ae:39:bc:ec:44:7a:95:e0:84:0d:a2:
         df:0e:35:32:66:35:ef:a4:21:a2:eb:d6:e9:52:b5:3b:53:47:
         2d:68:94:c7:c6:86:6e:32:2a:75:b0:50:97:1d:89:74:51:1a:
         3e:0d:6d:43:22:74:8d:6a:40:ff:e3:fc:53:31:8a:02:dd:f8:
         7d:5c:7e:19:88:0f:5b:f7:59:6c:0a:42:a4:ec:c2:08:f9:59:
         3a:c4:8a:a0:e0:cb:0a:49:7d:37:fd:a1:2c:ef:74:b4:8f:b1:
         de:73:46:61:28:3d:54:4c:ef:49:b8:50:4c:10:a1:a8:d6:44:
         e4:fd:4d:19:fb:75:18:b0:9f:aa:8a:6b:b6:90:b7:6f:86:2e:
         f0:3c:82:8e:a9:a0:d2:94:42:a6:7c:ed:1f:7c:8b:7c:c8:6d:
         3f:9a:a2:1f:61:a5:7a:53:71:70:f7:a1:9d:f9:b9:a5:b4:d3:
         e1:99:d2:d6:8e:24:b9:f4:5f:04:58:39:b1:f6:f2:dd:0b:92:
         fb:c5:5d:12:d4:fd:39:aa:52:c0:2c:b3:07:10:0b:16:f0:65:
         5c:fb:a4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:57:56 2025 by rpki-client