Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
File:                     2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json)
Hash identifier:          gZrb5eAaL2fZ2T2f1yQHhdznbpCCysV0Pdo+96J020c=
Subject key identifier:   60:53:95:C1:B8:96:80:9C:CB:84:22:20:AF:E3:BE:41:CC:5F:71:A5
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       6F703715640D4DC0BDA6D7FB73E18CFEC8C1DAAD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
Manifest number:          051C
Signing time:             Mon 03 Nov 2025 00:51:51 +0000
Manifest this update:     Mon 03 Nov 2025 00:46:51 +0000
Manifest next update:     Thu 06 Nov 2025 06:04:51 +0000
Files and hashes:         1: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: impujDOUoN2BKQyTyiVBUJjqkOdpqC1eOXOcnJD1Ge8=)
                          2: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: bu8PQupPQERGQ/wzLVVe3ZYhIOmwELfx937WvLW0lzc=)
                          3: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: t73bJSev/MnTBxda4w51EgtY3s6q8wQKW/7viVMLk2M=)
                          4: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: euoMpvL4eG72VF7oEqlEoSVWhRjwaeq3y0huB9mjd6w=)
                          5: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: 9DRtavO7TXPRRO9r4nJOU2l6z0jZDLCjiuHMpKPIfJU=)
                          6: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: M1sZzZsXerpK67gBWx+pwUlEiAdZNEC8sdxke6ageOg=)
                          7: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: 3hpRgS72xqbHw/rzHvrZvr06sNkUSk2YClN/PS2G8VY=)
                          8: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: nbkYpz+Buhh+XcMqkAbLahjlkTuDcneq98AvbJE0oqQ=)
                          9: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: vVu41fldo66s3GTiO3p70Y9WjrS6PJn4ErhvMTYrL+0=)
                          10: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: oOJaEiRPwPQflN2dss15Y4scB4IK0srdXT4sQ+7Afow=)
                          11: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: 2I4LUvDndEY+56Z45Zke7IZg+TWoP7vGoCnv2WeX4qA=)
                          12: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: qU/iCVYcrH5NwRFFUnpTANC1C4dNa/LYJXSxq8pN8yQ=)
                          13: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: ktBqyZQvnsVWZJg0o8QMMym54n+sUY8BtLk1pA6WS3M=)
                          14: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: O4758ltnaCnZlk7IYIR3KUuRIpNS2S4KZ7yVd+rr0y0=)
                          15: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: SpSJ2mlMQ8WdpZZy+WtaRGJCKRn7SkirsoH4mwvq2iA=)
                          16: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: sTkMNKXQHwGJCIGPBjMVfmb030wQu4FTAnEhwXDkkhA=)
                          17: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: jH3sTy3iBpVMxPGKrlYqH9OboCHDs8kfhu1z2U5AhDY=)
                          18: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: 7CnLEJTxSmV5XmK1oL/nqrOB4/valIkxzWgpmSqfSL0=)
                          19: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: oVmfGlTp0DWOtWPGyWCK/51mm8QlFMAOkDDm7W0JfnE=)
                          20: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: GOw6BJn4XT5wEmOGVeX/6A1aWsswmeb6q3J3zFZr2JM=)
                          21: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: l7IvhWfbT+lx2dajFWFQHmgoo+JryhgkVz+DjITDf5w=)
                          22: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: b1d2IpMrPiIjBD6MTNOx5pdXixsLXZonVO5D5NGCeqQ=)
                          23: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: afV3DuPWJs229SMBfZ6L1zzWwdYeqEIzLl+zAnPOPc8=)
                          24: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: Rjbhv9edaboHxu8zehTXAVaGiJWP5SEtMWZfSRiWBmE=)
                          25: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: Pm3ejHe0iKXyhk2uLd7JZnNwWHWfKfQSqqt4OykxpQA=)
                          26: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: DnA9pVTlc5t5JUQmGO4bpvoQrAWbOAtoPuSdy5Z19iI=)
                          27: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: akxHC8MKM3EFjHhlpdlYP+/pk7TEX/1Nsq+20Bs3aRk=)
                          28: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: iEwos51aWtJInprKu1evUCiZY2FYY6kr/E794RVuLRw=)
                          29: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: Ge6toEI3GzH1rudvQNuKe4sTOqkKcImFzmaL0fB9K2A=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 06:04:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:70:37:15:64:0d:4d:c0:bd:a6:d7:fb:73:e1:8c:fe:c8:c1:da:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Nov  3 00:46:51 2025 GMT
            Not After : Nov  6 06:04:51 2025 GMT
        Subject: CN=605395C1B896809CCB842220AFE3BE41CC5F71A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:28:03:56:d9:3e:d2:13:1a:7f:43:3c:81:
                    88:59:9f:77:40:f0:fb:97:45:75:df:f6:61:c5:9c:
                    2a:52:bc:d0:5a:d5:b8:9e:74:e4:c1:c9:e7:f8:78:
                    5c:e4:f0:6f:af:a2:02:26:0b:3f:d1:1e:e5:1b:a8:
                    4c:f5:9b:bc:45:ef:57:bc:98:d1:c6:6f:5c:d9:29:
                    64:3b:0d:15:af:96:a0:09:7a:b1:0b:0d:08:45:92:
                    19:c0:8a:32:7f:84:ca:75:e0:50:96:cb:37:7f:42:
                    0a:90:12:da:d0:e8:73:6b:f7:7d:40:66:dd:ee:ad:
                    6f:b6:b0:61:73:68:84:56:78:04:ba:a1:e9:7e:a2:
                    04:7b:93:8f:4b:f6:d3:1b:0e:4e:82:25:b4:25:c5:
                    6a:2e:03:78:60:85:20:25:65:dd:21:02:fc:9d:93:
                    95:b4:53:f9:ac:94:9f:e9:40:83:d4:4e:a2:23:87:
                    a3:4a:94:a9:a1:1a:b6:f3:43:eb:df:89:9d:69:03:
                    61:fc:11:06:b1:00:f9:ea:b3:a8:26:81:c8:1d:5a:
                    72:42:ea:c0:9d:21:d6:ab:9a:55:55:fc:e0:c9:3e:
                    8b:bf:85:01:43:2e:6e:96:e3:87:cf:16:ba:09:9d:
                    06:78:2f:31:5d:f2:ff:c3:94:31:e8:04:b7:da:11:
                    7f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:53:95:C1:B8:96:80:9C:CB:84:22:20:AF:E3:BE:41:CC:5F:71:A5
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:47:9d:0a:cc:dc:81:c5:ca:22:79:93:30:21:5e:be:c5:6e:
         6b:a4:65:38:13:74:49:cd:77:c7:17:3b:03:84:38:d2:02:80:
         96:f1:67:7c:a2:73:4c:37:91:d5:50:3b:f9:85:aa:15:97:39:
         37:b9:0a:6f:aa:08:d1:2a:72:d3:17:11:a1:a5:a4:8a:39:8b:
         72:e8:b2:39:f3:ca:60:c0:14:af:a8:a8:6a:ba:83:81:f5:d4:
         68:83:a3:71:f2:96:ef:83:11:a9:66:e6:85:83:bb:c7:07:ab:
         d6:38:d3:a1:b7:20:1d:84:96:04:80:fd:70:f5:79:b5:96:89:
         c1:bd:98:34:9e:c6:2d:7a:56:02:6e:76:98:56:53:2e:a5:bc:
         8a:cb:d8:d1:f4:12:18:9f:48:d7:4b:7f:81:0a:25:a1:16:80:
         c1:5e:44:ab:62:9a:ec:76:e9:8c:77:d5:dd:61:5e:1a:ed:b0:
         e9:be:bc:b3:1b:92:ad:47:f7:26:99:ad:51:bf:e3:9e:c9:61:
         67:54:7c:56:e0:6a:f8:a0:33:30:76:c2:7d:3a:66:bb:5b:83:
         19:cb:b9:cb:1a:e8:ac:53:1c:e5:5d:bd:5c:bb:24:33:48:9f:
         eb:5f:1c:44:c8:f9:18:69:dc:79:98:94:ee:c0:9f:72:dc:aa:
         13:6a:d2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:43:30 2025 by rpki-client