Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
File:                     2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json)
Hash identifier:          DP+TXq3F17EOVN8DEEBykj0qA2JwJLZy3FOQCxz71yM=
Subject key identifier:   77:6D:03:B9:09:3A:A1:88:76:B1:4A:DB:AE:7B:0B:F6:5A:36:19:6C
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       545FCF77B2758EBB645AA73DA7157855488EC724
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
Manifest number:          04DD
Signing time:             Sun 15 Jun 2025 19:21:54 +0000
Manifest this update:     Sun 15 Jun 2025 19:16:54 +0000
Manifest next update:     Wed 18 Jun 2025 21:01:54 +0000
Files and hashes:         1: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: Uf3u3rlehx4nEsbD6fnvJEZM1VxriLIbEu6n+huha6U=)
                          2: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: GOw6BJn4XT5wEmOGVeX/6A1aWsswmeb6q3J3zFZr2JM=)
                          3: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: Rjbhv9edaboHxu8zehTXAVaGiJWP5SEtMWZfSRiWBmE=)
                          4: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: MNsCflRoTlLLKOy1y3qU2xpl0KIGEKY8wK60n9pU+7g=)
                          5: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: b1d2IpMrPiIjBD6MTNOx5pdXixsLXZonVO5D5NGCeqQ=)
                          6: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: O4758ltnaCnZlk7IYIR3KUuRIpNS2S4KZ7yVd+rr0y0=)
                          7: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: 3hpRgS72xqbHw/rzHvrZvr06sNkUSk2YClN/PS2G8VY=)
                          8: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: t73bJSev/MnTBxda4w51EgtY3s6q8wQKW/7viVMLk2M=)
                          9: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: 7CnLEJTxSmV5XmK1oL/nqrOB4/valIkxzWgpmSqfSL0=)
                          10: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: SpSJ2mlMQ8WdpZZy+WtaRGJCKRn7SkirsoH4mwvq2iA=)
                          11: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: oOJaEiRPwPQflN2dss15Y4scB4IK0srdXT4sQ+7Afow=)
                          12: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: bu8PQupPQERGQ/wzLVVe3ZYhIOmwELfx937WvLW0lzc=)
                          13: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: afV3DuPWJs229SMBfZ6L1zzWwdYeqEIzLl+zAnPOPc8=)
                          14: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: Pm3ejHe0iKXyhk2uLd7JZnNwWHWfKfQSqqt4OykxpQA=)
                          15: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: qU/iCVYcrH5NwRFFUnpTANC1C4dNa/LYJXSxq8pN8yQ=)
                          16: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: vVu41fldo66s3GTiO3p70Y9WjrS6PJn4ErhvMTYrL+0=)
                          17: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: 9DRtavO7TXPRRO9r4nJOU2l6z0jZDLCjiuHMpKPIfJU=)
                          18: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: impujDOUoN2BKQyTyiVBUJjqkOdpqC1eOXOcnJD1Ge8=)
                          19: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: sTkMNKXQHwGJCIGPBjMVfmb030wQu4FTAnEhwXDkkhA=)
                          20: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: Ge6toEI3GzH1rudvQNuKe4sTOqkKcImFzmaL0fB9K2A=)
                          21: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: euoMpvL4eG72VF7oEqlEoSVWhRjwaeq3y0huB9mjd6w=)
                          22: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: M1sZzZsXerpK67gBWx+pwUlEiAdZNEC8sdxke6ageOg=)
                          23: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: ktBqyZQvnsVWZJg0o8QMMym54n+sUY8BtLk1pA6WS3M=)
                          24: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: nbkYpz+Buhh+XcMqkAbLahjlkTuDcneq98AvbJE0oqQ=)
                          25: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: akxHC8MKM3EFjHhlpdlYP+/pk7TEX/1Nsq+20Bs3aRk=)
                          26: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: l7IvhWfbT+lx2dajFWFQHmgoo+JryhgkVz+DjITDf5w=)
                          27: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: DnA9pVTlc5t5JUQmGO4bpvoQrAWbOAtoPuSdy5Z19iI=)
                          28: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: iEwos51aWtJInprKu1evUCiZY2FYY6kr/E794RVuLRw=)
                          29: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: 2I4LUvDndEY+56Z45Zke7IZg+TWoP7vGoCnv2WeX4qA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 21:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5f:cf:77:b2:75:8e:bb:64:5a:a7:3d:a7:15:78:55:48:8e:c7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jun 15 19:16:54 2025 GMT
            Not After : Jun 18 21:01:54 2025 GMT
        Subject: CN=776D03B9093AA18876B14ADBAE7B0BF65A36196C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:af:a3:aa:fa:bf:a2:6b:8e:52:b3:3a:d1:
                    c6:15:0b:79:f6:bb:4a:d8:99:bf:c0:f0:5c:fd:12:
                    59:7b:0e:46:2b:30:60:e2:19:d9:34:81:93:7b:3f:
                    7c:25:55:72:99:fd:89:76:0a:b1:0c:a0:db:0e:71:
                    5f:0e:ed:de:f4:7e:48:5a:14:33:de:2b:9f:7a:be:
                    23:40:00:54:ee:20:c3:c1:42:37:5a:e1:45:25:a7:
                    ae:ef:dc:95:8c:97:07:33:51:76:2f:c6:d0:1e:9d:
                    a1:43:00:4d:30:0a:5a:94:2b:37:dd:02:72:11:4b:
                    c6:43:91:9e:68:aa:1c:ff:1e:c4:b4:68:72:6f:bf:
                    c4:76:be:31:29:f9:47:2c:29:5d:17:f7:6c:f6:45:
                    b7:f8:8c:6b:11:a5:52:f4:fc:52:dd:5e:43:88:ab:
                    e6:ec:2b:93:f5:da:fb:74:98:85:09:45:af:77:ff:
                    7b:02:2b:85:0c:50:da:cc:29:d6:bc:79:d4:aa:91:
                    1b:bd:eb:88:ec:9b:b5:7a:db:b4:50:28:31:8a:0e:
                    93:4a:1a:a3:7a:32:38:63:36:84:57:94:a1:84:fc:
                    9f:1a:41:d0:e4:35:13:2c:55:fd:a1:aa:4f:25:ae:
                    1d:df:d3:a3:3a:c1:47:95:8c:f7:f4:a1:9f:3b:0c:
                    32:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6D:03:B9:09:3A:A1:88:76:B1:4A:DB:AE:7B:0B:F6:5A:36:19:6C
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:89:5d:89:58:83:b9:b7:ac:a8:db:ce:08:fd:c6:95:e1:ed:
         2d:6d:25:ee:7d:63:1a:9b:7a:d8:1b:1f:7e:ab:f0:d0:ac:b4:
         a5:f7:d4:34:bd:c0:36:5e:e4:33:39:c4:38:6c:ca:23:9e:20:
         b0:94:f4:b8:77:a7:f5:80:24:1b:da:5b:27:e3:78:22:35:43:
         61:9c:05:8c:c2:7d:b0:02:4f:28:d2:1c:66:68:d6:30:45:7c:
         6a:48:78:cc:31:84:5d:fe:75:20:16:02:27:c2:1c:cc:bf:5f:
         89:43:00:c6:ba:5a:9a:9c:ac:dd:d5:1d:dc:ac:31:46:43:f7:
         1f:c7:cf:57:b9:3f:a4:dd:a4:ec:64:d4:72:cc:eb:fe:4b:41:
         47:56:e1:d7:07:cf:26:e8:39:fa:7f:51:6d:3a:64:e5:2b:61:
         3f:08:05:da:65:59:78:c1:19:74:d9:95:66:f9:af:18:79:fd:
         97:22:f6:41:7b:56:be:36:26:80:06:9b:3a:d4:be:33:f8:65:
         99:6f:fc:99:b3:aa:ea:25:50:6a:80:9f:18:ef:51:23:89:8f:
         73:88:6f:3e:dc:df:3a:6c:12:e6:ca:92:55:00:d7:7a:f6:2c:
         83:9b:c2:ad:8d:b9:85:d7:f5:b0:50:a0:ed:49:9b:9e:ff:5e:
         31:8a:1d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:36:15 2025 by rpki-client