Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
File:                     F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json)
Hash identifier:          RWAKPV3H3udzslii5dOw/aJ+KeBSHVTRq7CzypOkGZk=
Subject key identifier:   27:91:D0:70:12:F6:82:AD:93:B2:8D:3B:4D:F7:10:11:F2:C5:99:EC
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Certificate issuer:       /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial:       32212650FD64E5846CB5413C40CB451086DDE816
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
Manifest number:          0503
Signing time:             Tue 05 Aug 2025 22:41:07 +0000
Manifest this update:     Tue 05 Aug 2025 22:36:07 +0000
Manifest next update:     Sat 09 Aug 2025 10:31:07 +0000
Files and hashes:         1: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: 6tYZRHS1gp6lxrRLkcMQOZpyzT7UZqMxo9oLwoeh2Kk=)
                          2: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: X871KmxDisPDxaQpNaNmNV8uKTNCiB9DC630xRuhDpo=)
                          3: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: addoLGX7l1qN9yrFfHEwbDZZ1vggnAx8LkSg4qCXPoA=)
                          4: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: ThbbDvKhsxoAnPUKtdbY/FsPIfXpLzxzoe4gZ4SwG7I=)
                          5: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: I9Xm1cEngTYg6WB2t4U5k+twc9OnUGEq5Opc/dfrZDc=)
                          6: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: rEgIPgrk+DS47tvTK2+eEPfHUVseXsnwTUUBVtEyooc=)
                          7: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: qZ2majG5cGcPiPcNAPu4jGy/H5NlD9ILAfwhNapK3KI=)
                          8: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: VSjVNeF6CQhhuIMP9VzYdgPpAyYTICUyURNkkRPZvf0=)
                          9: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: YN/2s31112uMwq4KT5YT8EMIK9P8Spv9BQ+gu6aYN4g=)
                          10: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: yvTVsKwfMbm9/tZX55oqWjXKQNBRGzzlj+jV8XkeY/A=)
                          11: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: JCVw1Bajlnm/uEsYr4iOy+46bO4H3WulU9sfLT/8HoM=)
                          12: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: lsw9Lj4TdivwiY9urFVLBPCnaQDyjQIHv9L2rFNGJcY=)
                          13: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: KXtJmDO4hKKtckmp6/OjWqYrbZ7ZmK12D4CTr8FodJE=)
                          14: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: yzByHbO6Frok5mfNqGJAnbHUvCHTDaMTJ6hmg53mLQI=)
                          15: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: +kWoeqncIsg2yG08LA8FNhnez+6IikrA0zXpF5e1dxk=)
                          16: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: PAUNyFLoTuXnyzJaaygCGIoZ2kkR7s3iDrCXWwkOWpM=)
                          17: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: dn2LxIR2i9f98oBHTTzMm7c0l11yZxH5BdOjGXs/ET8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
                          rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 10:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:21:26:50:fd:64:e5:84:6c:b5:41:3c:40:cb:45:10:86:dd:e8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
        Validity
            Not Before: Aug  5 22:36:07 2025 GMT
            Not After : Aug  9 10:31:07 2025 GMT
        Subject: CN=2791D07012F682AD93B28D3B4DF71011F2C599EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:c0:8b:4c:70:f3:d9:85:95:1f:3b:b2:54:
                    8d:e3:e5:37:11:a2:d6:ff:cf:a4:44:58:ff:2d:e4:
                    f8:74:ef:42:d9:93:79:da:11:38:51:ed:7b:0a:2c:
                    94:f8:0d:36:f4:35:3b:d8:1d:a5:39:ad:b9:b8:5c:
                    1b:13:e6:24:40:f5:72:8f:2c:5f:cc:93:18:6b:59:
                    6e:be:b3:46:cb:5d:f8:40:7e:30:bd:40:0e:a6:fa:
                    74:83:f8:03:93:63:57:f9:d3:cc:a9:e7:83:07:3f:
                    0b:ba:54:5c:7d:e1:09:77:1f:72:7f:7c:50:77:04:
                    f3:91:6c:cf:b3:cb:e1:27:30:4c:1e:13:67:1e:ce:
                    c0:cd:c4:49:b0:d9:33:7d:1f:19:e4:3b:a8:d0:52:
                    f8:fb:5b:15:87:a2:d0:77:50:e7:7d:e2:9b:cf:95:
                    86:21:65:3c:82:c7:74:37:4e:52:d4:4c:e0:5c:c2:
                    86:41:fd:6c:bf:5f:4f:d4:22:dd:bb:0b:e0:4a:23:
                    89:06:1c:cc:b4:9f:23:e9:ba:64:c7:7c:ce:ed:16:
                    81:6a:03:6b:44:9b:5f:2a:6c:3a:b0:29:65:13:8f:
                    7f:49:cc:f2:85:33:52:67:26:c1:b3:c1:b8:9a:3b:
                    78:65:8d:37:a8:e0:c5:d3:d9:35:65:e2:9d:83:1b:
                    1b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:91:D0:70:12:F6:82:AD:93:B2:8D:3B:4D:F7:10:11:F2:C5:99:EC
            X509v3 Authority Key Identifier:
                keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:3d:9f:8e:75:37:b5:ee:0d:27:e7:1f:9e:e8:a4:e5:8a:e1:
         90:58:57:a1:da:4c:fd:e5:69:a3:f2:6e:56:8d:13:cf:62:9d:
         92:6d:5b:64:11:89:c4:77:55:1f:e6:2a:02:1d:26:91:62:b0:
         77:ea:25:cf:d9:96:16:e0:8f:00:29:df:ba:40:6e:3b:95:ca:
         94:56:ed:3c:53:0c:b9:c0:bc:c9:4b:19:28:56:f4:91:7e:7d:
         d9:94:e1:c4:08:44:17:19:ff:68:8d:2a:9a:3e:2c:c5:c5:db:
         79:47:63:01:1a:d1:d6:eb:e7:57:b6:47:38:97:ba:c2:41:f5:
         a4:30:07:53:da:7e:61:8c:64:5f:73:4b:74:fa:3b:33:0f:87:
         95:df:82:85:f6:a8:b1:5d:01:d1:fa:e3:a8:b6:76:95:f1:8d:
         85:04:46:07:e6:7c:93:0a:8c:ab:f1:92:ce:1a:96:54:f4:c3:
         d2:fe:83:60:af:a3:05:41:3f:c8:d8:8d:5b:1d:c5:7d:a6:c6:
         fc:eb:5b:03:d6:0f:5a:f8:54:14:70:17:4e:10:92:41:c7:ce:
         7d:a6:be:78:e5:48:4c:47:b0:17:f5:1e:3d:1e:28:4e:1f:c5:
         d8:2a:09:38:c0:76:50:c1:a4:f2:1b:16:33:27:31:8e:e5:ea:
         53:d9:78:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:32:56 2025 by rpki-client