Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
File:                     10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json)
Hash identifier:          Wv5HfrDZqR/jKjhzwZPYEBUQIBjqxKvPRVI99qVMIsI=
Subject key identifier:   22:64:2C:93:9D:3B:FF:99:49:49:D4:57:A6:A2:38:B7:E2:4A:E3:2E
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       3B8B81742FD27B933F79D453697C036509564627
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
Manifest number:          0503
Signing time:             Tue 05 Aug 2025 06:12:01 +0000
Manifest this update:     Tue 05 Aug 2025 06:07:01 +0000
Manifest next update:     Fri 08 Aug 2025 11:22:01 +0000
Files and hashes:         1: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: noUPhk/lMic4mWf4jKWj6yuqbnoenZnLHoMy6mHYvdE=)
                          2: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: uDN60ejcwmufdw9lRATsCm8TNe8pbZTXPxEDJDFJrtI=)
                          3: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: nIo8hwuirVHnHkmWMKJHXedLZK1IsiVp+gI1eB5wIWM=)
                          4: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: 85lx2+O0c1Tye1V/YF4G0HFNwN1FRAy3MZlTA2YttNs=)
                          5: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: R5DcBcZsZ/tVTFJsSzzQGY3wUUyH7B2253S6p3vidZI=)
                          6: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: YJQzg1U9jA4AWFaUYLdryvvEck232YTbH13zq010OFw=)
                          7: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: wPrR/CuGOoimfu2ESRqwKfIX+XXz6lk/Ile4WLcqwSQ=)
                          8: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: NQhanJjaDTGlHqgVpp7WZk1oBiHC9a8024nRDhFHB5U=)
                          9: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=)
                          10: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: rAFjuW4Ob+s+8+VX602W+l2HlUbwposeuUvXP5ZI5FU=)
                          11: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: lrGsnHWNUUeWw86IHGDadF3wESv1aEvqYzkKNtLSTYI=)
                          12: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: C8WKEDh35WX/j3rJi1+NJXVLBziYbBALI4qujCiFsgQ=)
                          13: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: SjzDmLz46qIS/nJ0zn3gr3kiE+RR+H/5PGnqBHKVams=)
                          14: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: Oqj6PoE4F8AznRA3O47Q/vammp0q4o8hLusJKPdYYNc=)
                          15: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: Htx/fOPObPi6ATUBVsfJbs0qEhGzdpd2T6aHa8E9uiQ=)
                          16: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +XotVkUYpiJ83hc89EWoIGxGRhhZu0xl8ZYTUA6r/r8=)
                          17: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: 8yEyL4RD7Qa35m9yx8L60c6viJWD8aIwuREP+x+PT4o=)
                          18: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: u7HIVNgPT8nOMxVXRQicLF9a4KID/8Fh81X51PzO+cY=)
                          19: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: wXhkK7uiuOpjHC2A0NMyoBCjpeit4b5RIwLk/h9wbpQ=)
                          20: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: qwxYNTh6xKdp2uATuIFR5O42e+8ng5z76v1e121JSWc=)
                          21: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: jQaUGbMnprmPG29gShaOC88VLFUYJfQ53uR+ITg6jLM=)
                          22: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: UmYtyoPy4ZvZZv42ISGmkzTMakpIhylvPVTLu1TKOwE=)
                          23: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: lzHltwXPVvcKEnJGSRDGax+l2iGR3TAzIL9/7V290ns=)
                          24: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: TkM6f8/8bl8VJM/y37L1BIkGsrEx/IcZC/SKW3F/E78=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 11:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8b:81:74:2f:d2:7b:93:3f:79:d4:53:69:7c:03:65:09:56:46:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Aug  5 06:07:01 2025 GMT
            Not After : Aug  8 11:22:01 2025 GMT
        Subject: CN=22642C939D3BFF994949D457A6A238B7E24AE32E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:35:99:1e:d6:c7:a9:22:a6:03:87:3d:be:32:
                    21:bd:ef:76:89:14:64:c1:01:96:d5:fd:16:04:52:
                    2c:dc:da:3d:17:94:07:a6:eb:71:75:b2:78:ad:6e:
                    80:83:9b:eb:b2:ba:85:09:8b:99:73:c4:68:a3:83:
                    6c:27:0f:5e:39:c4:7f:6a:95:18:12:08:76:e6:b2:
                    5a:bb:84:38:1c:1d:b4:ae:62:61:16:2e:cb:e4:89:
                    0a:06:e0:be:5f:6e:9a:e4:a5:f7:5f:d4:1b:5a:44:
                    13:cc:64:ea:fa:e5:fb:4c:b8:80:36:c1:62:b5:04:
                    4d:cc:b3:d5:69:99:33:d9:61:36:84:bf:8a:41:99:
                    f2:da:81:7c:37:ac:d6:db:d7:33:d8:47:76:d0:2e:
                    bf:58:78:13:29:a4:d7:43:d2:d9:a1:0b:4c:01:69:
                    ba:56:39:10:7f:4a:92:6d:a7:52:a8:ec:20:9e:c9:
                    89:60:a0:3b:cd:0e:68:57:76:94:d2:05:ad:bc:66:
                    12:3e:fe:ce:0f:bb:aa:78:f8:5a:e1:bb:47:aa:7a:
                    62:7d:ce:a8:b3:cb:c4:38:ef:e2:57:f2:b5:1f:bd:
                    4d:d7:c7:37:ed:8f:b3:05:be:80:db:5b:61:d1:a7:
                    d8:3f:d1:ca:ca:65:86:e2:bb:d6:a2:f7:5a:aa:99:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:64:2C:93:9D:3B:FF:99:49:49:D4:57:A6:A2:38:B7:E2:4A:E3:2E
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e5:2f:8a:b9:d5:8d:27:47:b5:e9:91:19:6a:86:52:5b:52:
         59:df:36:a5:c6:db:53:21:11:4d:e3:aa:9c:a4:e3:c6:f1:1f:
         6a:08:99:ea:6b:85:ea:4f:a8:49:7a:31:87:66:52:c3:9e:e7:
         6c:eb:94:bd:5b:cc:cf:aa:54:74:ba:97:36:e9:a6:72:58:89:
         a0:5d:9c:59:aa:6c:a9:63:e5:15:d5:ac:9a:e9:ef:25:9a:49:
         37:6b:35:1e:4f:e2:57:87:ae:36:d1:4a:b9:d6:ba:9c:8f:08:
         77:9d:0f:f6:83:27:ce:b9:74:25:f5:3a:50:5f:10:a3:80:df:
         bd:a5:1c:51:d1:e1:8a:b0:6e:e6:4d:87:13:3f:bd:b7:75:5c:
         1d:d4:ab:d9:3e:1c:02:e2:2d:d6:68:58:2d:cf:be:9a:af:34:
         73:ce:7d:fd:bc:75:a0:ff:a2:91:a4:dc:6c:ee:ff:a4:57:82:
         d1:4e:d1:b8:71:b4:7a:2e:22:83:ff:88:cb:d7:95:18:81:cf:
         03:47:4a:7f:a0:64:c2:1f:de:68:16:6e:53:2b:9f:94:10:36:
         f4:aa:51:e9:43:54:40:e9:e8:2b:d4:5f:61:c0:63:44:a5:03:
         57:e6:6d:3f:71:1f:3b:df:07:44:6f:4f:d2:5a:71:b5:f6:d4:
         86:bc:e8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:16:57 2025 by rpki-client