Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
File:                     FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft (raw, json)
Hash identifier:          NChmWYGJQcfFLefXO+sAZ8PvtixP1m2ChOxwPdclgtE=
Subject key identifier:   B5:9B:6D:AA:62:E9:50:F2:3B:4E:E8:C4:FC:D2:8D:51:4C:48:89:2A
Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
Certificate issuer:       /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Certificate serial:       443CE84792B15E9B9CEDB5D2E7AC71EB8D11C84E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
Manifest number:          02A3
Signing time:             Mon 16 Jun 2025 03:50:54 +0000
Manifest this update:     Mon 16 Jun 2025 03:45:54 +0000
Manifest next update:     Thu 19 Jun 2025 06:03:54 +0000
Files and hashes:         1: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: AwyhgoC9SnkiONSyyarxojN2GzihXUBvalkihTTc9zE=)
                          2: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: LZiLGSJdIHDnXMLX3SUdSUGcn99p7H2DzXggJdnkwkE=)
                          3: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: f/PfUh13qwQbqBOuR7Y1xgR/xJQ98pR+42yK2Mrg59s=)
                          4: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: Z1gDiN/X+uv2C5f6v1h8WInw2+lPzjHj0oFTtpIP6pA=)
                          5: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: bs0ZMOoWFJzZsSzRHXIPfE50E27zzOl01UAYg6gx044=)
                          6: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: vUtKxLKXTfruRLMlOvpg8rz9eUIDHFfVkTATVb94ii4=)
                          7: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: 50O5uNlbOkY1l/rUhqCb/dq0Q5p/vt2WkECQ0oSMMmU=)
                          8: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: 0yw7rRpcNLCQkltZhjGJL1siB8HST2OMsTJXjD26O8w=)
                          9: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: ZZpQllrHWfXo8o8D2sCJ3pB5jUWAf/wTgvoQBwbAr+E=)
                          10: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: bjLKcE6uyYPhJZ29YifTXHBYInxuCRJ71wvo0zdxJPg=)
                          11: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: saNY2uHlV/XnejqjSZTyfzI/prOYKq0PQeW13/pFt9k=)
                          12: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: LNeaS083UOlp4LUdDeQ2gGXYYeK9bcYJQvzUhUQt9Vs=)
                          13: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 34GAz6FSvQ986oiy73pgO3Nl806HiynZyDh81QhYAtI=)
                          14: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: lzNm0/0IA9d3peGzozwFKwjutuLSs05RevbSqRZ75Wc=)
                          15: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: /nt77PAEWl7VykddnVbcJDci8AanpKq8RsOk21Gx/Ns=)
                          16: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl (hash: nJZkRtnQYFRVzJntu4i71pAFTderLYDrg6hKGb+LcGE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
                          rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 06:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3c:e8:47:92:b1:5e:9b:9c:ed:b5:d2:e7:ac:71:eb:8d:11:c8:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
        Validity
            Not Before: Jun 16 03:45:54 2025 GMT
            Not After : Jun 19 06:03:54 2025 GMT
        Subject: CN=B59B6DAA62E950F23B4EE8C4FCD28D514C48892A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ae:da:32:99:5b:98:61:bc:48:06:da:aa:78:
                    6e:72:6b:d1:2d:66:9a:34:bd:9b:28:d3:12:06:70:
                    69:b2:e0:47:b2:2f:d0:44:63:bb:d7:f1:ab:41:5e:
                    b9:01:d6:3d:b3:ba:ad:c4:d0:83:0a:cd:f0:64:31:
                    6c:14:e4:67:44:fe:39:c8:60:49:97:1a:06:e0:d9:
                    92:58:0c:ce:18:80:71:97:fc:0a:b5:c3:02:09:21:
                    95:8f:7e:a0:c9:7b:29:5b:2f:15:cc:bd:b6:5c:84:
                    0a:d9:a7:a7:64:2e:34:e8:e6:cb:4d:99:bd:30:aa:
                    ae:3b:ae:e1:00:e6:81:c2:10:7a:c6:71:6c:56:77:
                    11:be:3b:a7:35:aa:3a:42:88:d3:77:a6:31:2e:6b:
                    a5:63:1b:00:54:49:b0:85:6a:a3:c2:b1:8b:de:a4:
                    3f:39:c7:54:1e:67:24:9b:12:40:2a:cc:4d:86:8f:
                    66:2c:10:02:b5:b4:84:d8:43:c2:4f:f6:ef:5c:3c:
                    ef:12:4d:50:9b:91:71:50:dc:bb:9c:b3:70:b7:97:
                    c6:fa:b0:c1:7e:76:41:01:55:58:a4:e2:dd:0b:66:
                    7e:40:0c:f8:be:46:ee:aa:d5:03:ea:25:ad:f6:af:
                    60:85:c0:6d:ee:2c:0d:18:b1:66:f0:bc:5c:c6:e6:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9B:6D:AA:62:E9:50:F2:3B:4E:E8:C4:FC:D2:8D:51:4C:48:89:2A
            X509v3 Authority Key Identifier:
                keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ea:bb:c0:f3:f4:13:fb:78:3a:33:2c:3d:b6:36:df:8c:c5:
         a2:10:ea:2f:32:d1:3f:d4:06:72:08:56:01:d3:0c:e0:7e:ee:
         aa:33:ee:2e:64:55:84:8b:62:3b:70:33:c6:48:93:9a:e7:a6:
         2a:d0:0e:60:59:d9:fb:92:70:7f:9c:56:b9:7e:ee:d1:e4:2f:
         02:34:e1:5c:70:c6:82:9e:b1:51:04:7c:68:4f:1f:2a:07:7b:
         8b:44:65:57:8a:a7:d2:2c:2e:5e:66:23:9e:85:74:b1:aa:d8:
         35:5d:77:40:7d:ae:95:9f:41:37:b7:ee:4f:d7:86:de:73:09:
         bc:d7:be:68:1a:01:91:71:11:3c:db:3b:22:4d:e5:25:e9:a4:
         35:66:ab:49:b0:95:09:cc:a8:47:2f:25:c1:11:46:72:0c:d1:
         41:ef:7e:69:76:4b:82:0e:07:88:78:a2:6a:22:17:05:f5:ec:
         bc:75:48:86:9d:b3:a4:7a:02:91:ef:cb:03:7f:bc:83:b5:67:
         8b:6d:54:ee:1d:fb:b1:5e:9b:59:30:d8:3a:d7:73:91:d7:ca:
         e3:8f:b7:22:cc:c9:7f:0f:ef:20:c7:c7:4f:7d:3b:3c:4c:9e:
         70:5b:87:c8:fa:35:c8:c4:80:f5:e6:67:e9:7e:20:45:81:0f:
         44:d6:aa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:10:55 2025 by rpki-client