Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
File:                     4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json)
Hash identifier:          LcxmIaYUi0sx1M+HkqUiVe2FROKu0D7/ldGfmVXzZ/w=
Subject key identifier:   E5:5D:FF:F2:90:01:6B:39:A3:F2:ED:B4:52:2D:68:89:6D:1A:2E:1C
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Certificate issuer:       /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial:       56D063FCDD18A435379F9692518B678AFFAEAB3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
Manifest number:          B1
Signing time:             Tue 17 Jun 2025 00:01:27 +0000
Manifest this update:     Mon 16 Jun 2025 23:56:27 +0000
Manifest next update:     Fri 20 Jun 2025 04:30:27 +0000
Files and hashes:         1: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: FCPjRuILimc1y3AzWysntAW1lv6bPjvpNuCAb/4Y8KY=)
                          2: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: /Nnh6j9dQCYcuoIKmMpFeUVi7V4lhYfyFAMUQ8KcTyY=)
                          3: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: hfVgYmT+s3T/gP2ZWIlWtZU/K6JQ3MvR1bPnXxp9XLc=)
                          4: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: opmintFf7rKX4t8MJAAA/SPs3kIqRtIjgx+RStmQ20g=)
                          5: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: BcmLy7eGAXxwcAZfEvgQEqwzVahjl/LS8t/7DNQb3O0=)
                          6: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: Rd+MYgkYtI8Em6b7VkPxEFn2gv60uz4eRZ5jfkklOME=)
                          7: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9hl66Fb3ZZtaq9RTVyzyMYKvn9CeIA27uiDhLsoWI3A=)
                          8: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: Z2kUGl4d2/nWr+hivZqHD1txvHpg/IJVAL0dy1bjHtc=)
                          9: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: Bl8et0Mlyf6ZYnTvWuIKqU4JlwQ6T2XddFzLaEyTluY=)
                          10: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: 2dvpZD7SkLIO8Bb1a+NTuA+XOzdWGBmc4e1hLBWS+aY=)
                          11: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: /RbGQNrG5f2b5xUZmbLZIUIJCT8zlW48+GUxpa/P1BY=)
                          12: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: mdadZ+r3nk3ljg8TD8Qk3FJTWop4VzOG0q1+8q98qdQ=)
                          13: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: +efjUKkfN7wyOn1gEZ4iK+HOgdi5kSwgmzRJxOnk92c=)
                          14: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: vJHjXSNbN+nrHshiQZVlbnAzNovBDlJVOtnmhWeep78=)
                          15: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 2kWw72G7y9+iu7Oj2LdzHrFFqPrgZYlByeJlEDz3xGE=)
                          16: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: bZomEerwTckK0uovhCRCPeCKuhMrW+Qy9Lz5ot1+QLM=)
                          17: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: 12eKUXGhIz6FHVGhhjWlfvlhTiivVo5sPJpz1GDHaMw=)
                          18: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: jSQKKM5t1FotHl9IvmmOV1bpO2Bm+Ktc/PrlSfNtDhw=)
                          19: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: CExyw62yhaULfuFNwHgJQzvOaDneumlJpO9PSL24k5c=)
                          20: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sw0SlIxt+FA7pZy4rkUInlCn0uAcgR4nYJ5Re3N9oxc=)
                          21: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: DUx1uGcFaMxSBQpP1ITofuirpaclZNzBSNRp/I11LcM=)
                          22: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: Wdn8WLm/z70TbHCfvi7cPeFpinXRYOP3acHf9F2yoZI=)
                          23: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: VrqEqcYe4ew7uni6W9u41N7qHk2GgBXWkfjAlNiKflw=)
                          24: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: balnJcNONLw8SBYvt7tVe9VLlUUBAlIKjs8CUCdy5n0=)
                          25: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: amybII68a8VE28x622WWbP3X6DorgNErjKJn51v04hU=)
                          26: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: PWcu8n1GQVYIbIpIIeTmS8WPhGjRtUMxtKVHKNkmcLA=)
                          27: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: NVdbP46U9HcnF9BcVuhppXenoJ+oGsK6bpcGbNkhYrY=)
                          28: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: Lk2DgYj+QODfg+053uFba0kcIHOb5Vr+/MafHCR41Bo=)
                          29: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: T8cBlOmjcetrSbtW+daV9YtXlBHJ/TgUuSP0ZRu08us=)
                          30: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: IUWcIIvw/5B79/1vlmhpjp2xq/bxBr1gvBDlm1MJkEE=)
                          31: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 62idZGQxlSWM3llZuSqKAdjwW6hLve0VhfHgcV849wU=)
                          32: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: v0m70RT7TsMBD2CfWXOxviOzxM9VbD9adOYfqtuzcmg=)
                          33: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: cFUzi273SYArAUsUFdIqNgQFTFMOnTlJq02/dC40bZE=)
                          34: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lc21YQEjyBtBR3cEzA2MpTAYh2Z++8zZog+Taujf5EA=)
                          35: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: htvHw1UId6QYt8Zem0GwkkJ79UHzGuY9MeNMUAYecR4=)
                          36: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: f+QA2MdOH3pD5wnFB0dGm2Zrsg4T8gtTfRmGOdNWdhQ=)
                          37: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: CswFvDupWqQkmZpyiNQV19oxsV8YOajNmUapEbDiz6Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
                          rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 04:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d0:63:fc:dd:18:a4:35:37:9f:96:92:51:8b:67:8a:ff:ae:ab:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
        Validity
            Not Before: Jun 16 23:56:27 2025 GMT
            Not After : Jun 20 04:30:27 2025 GMT
        Subject: CN=E55DFFF290016B39A3F2EDB4522D68896D1A2E1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:31:5f:df:db:c7:e3:65:ed:95:0b:41:b3:2b:
                    1e:8e:01:1d:dd:54:f8:e5:6b:2f:8f:76:98:7e:90:
                    01:d5:5c:be:10:d9:46:b8:da:46:57:30:94:cc:9b:
                    3e:62:93:6a:94:03:d5:ae:ac:7f:a0:4a:f4:a0:64:
                    13:2b:4b:f1:66:47:19:8f:20:f9:25:3b:b6:4a:2a:
                    22:f0:c3:f1:57:6f:48:f6:a5:36:c3:38:7a:79:28:
                    ce:5c:05:48:e9:df:f8:b9:cc:e6:80:4d:0f:29:45:
                    d0:66:92:fb:91:d4:8c:6c:28:6e:36:71:69:1a:e5:
                    2d:bf:2d:63:66:e5:2b:f2:24:d7:39:04:bb:b3:01:
                    9b:c7:ca:34:77:95:41:05:1f:a5:8d:5e:db:52:62:
                    6b:da:55:97:b9:8c:fb:5c:fd:85:b7:33:fe:33:ca:
                    08:bc:78:37:a4:ca:d8:61:8e:81:4e:88:36:1d:d4:
                    7b:ae:ed:91:39:6c:c3:35:c4:07:a8:d1:6c:0f:01:
                    37:17:09:82:80:7a:cb:23:4d:10:53:f4:11:84:14:
                    13:33:15:e6:29:d3:4b:8f:23:d7:ee:80:7d:46:fe:
                    5e:ec:b0:4f:bb:08:3e:a7:34:a8:13:d1:e2:2c:de:
                    59:a0:78:42:7c:41:78:a8:05:16:b6:21:bf:24:f1:
                    6f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5D:FF:F2:90:01:6B:39:A3:F2:ED:B4:52:2D:68:89:6D:1A:2E:1C
            X509v3 Authority Key Identifier:
                keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:52:14:2f:a5:a1:44:8f:d7:8a:4d:7e:75:6a:ba:21:31:15:
         ac:df:09:2e:ef:dc:74:4b:a1:09:33:b2:d4:7d:dc:d4:4f:02:
         28:7c:07:29:76:91:a5:c1:e5:92:b8:4d:dd:e3:4f:e4:76:6d:
         91:04:82:de:2a:a5:57:d2:70:66:12:da:3c:bf:75:73:de:f1:
         ca:0a:25:83:87:77:66:56:2e:a7:b4:57:86:bc:72:32:87:14:
         ac:68:df:7d:43:04:d6:19:55:60:17:65:d4:98:b1:a7:b1:55:
         b8:b8:84:df:68:b9:23:fc:67:d0:88:91:36:40:a7:22:d4:7d:
         f6:11:f3:99:d0:38:16:04:dd:e2:3c:bf:fd:5a:c1:bd:ef:be:
         35:ef:d0:f2:b6:ae:1f:a0:b0:8d:5c:0d:cf:aa:79:df:68:ca:
         70:f4:ce:c3:d9:b7:1f:3c:96:c2:a9:46:08:88:49:c1:f2:da:
         00:9b:75:e5:d7:07:e0:e3:d4:1e:e5:3d:a0:52:ec:e2:94:9e:
         5b:99:5d:1f:6e:cc:10:da:b6:39:41:ae:aa:41:1c:a7:9e:17:
         19:af:ea:6c:1d:81:60:1a:e3:f9:16:53:75:60:fe:a5:79:f9:
         d5:31:b2:f3:65:dc:5b:7d:d0:4f:c0:4d:df:ed:77:c2:f6:50:
         06:cd:f7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:12:12 2025 by rpki-client