Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft
File:                     5509BA3B36B8E5C809C09949749272FEF605F530.mft (raw, json)
Hash identifier:          McVV3fGEdW/LIQNHZth8vy7B6ajlvzd4rKrhfVO/Nbk=
Subject key identifier:   83:03:CD:9C:6B:2E:3B:F2:B0:22:9E:FF:47:C0:69:C6:C6:0A:12:50
Authority key identifier: 55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30
Certificate issuer:       /CN=5509BA3B36B8E5C809C09949749272FEF605F530
Certificate serial:       08C74AF666582D9E32164AB9F734CF53422ED333
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft
Manifest number:          0199
Signing time:             Thu 07 Aug 2025 03:21:17 +0000
Manifest this update:     Thu 07 Aug 2025 03:16:17 +0000
Manifest next update:     Sun 10 Aug 2025 12:48:17 +0000
Files and hashes:         1: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: S0UelN4KVkqU3QsrPYjGFbixGaR+dwxcUsc+/2UXzCs=)
                          2: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: dShjUK+1B9xhLAsugTMDbSpNCwLh0hAVCcSuJIUamwo=)
                          3: 5509BA3B36B8E5C809C09949749272FEF605F530.crl (hash: 2j2Bm2L7+mPe4CvxFl9Q/xeH1C+havbElrx8UeyscC8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl
                          rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 12:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c7:4a:f6:66:58:2d:9e:32:16:4a:b9:f7:34:cf:53:42:2e:d3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5509BA3B36B8E5C809C09949749272FEF605F530
        Validity
            Not Before: Aug  7 03:16:17 2025 GMT
            Not After : Aug 10 12:48:17 2025 GMT
        Subject: CN=8303CD9C6B2E3BF2B0229EFF47C069C6C60A1250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:9a:2f:e1:84:9e:d9:df:6c:5e:3d:92:e9:
                    e7:4f:51:a6:fc:82:6f:9b:46:8e:be:77:03:ce:45:
                    36:38:06:4e:b1:6d:f0:7d:d1:8d:c3:d6:ed:6e:29:
                    86:e4:df:61:1f:1e:96:6b:2b:62:0a:31:e2:5f:a2:
                    7f:62:d8:89:a1:d9:2e:8c:62:5d:00:09:cd:7c:70:
                    f4:b6:43:0a:cb:ef:7b:3e:b1:17:fe:ee:72:b2:9e:
                    4a:13:0f:e5:ca:0a:16:d4:40:61:26:8b:26:a8:58:
                    dd:4a:80:df:49:68:e2:52:b6:fc:b9:6e:8b:69:68:
                    61:eb:d5:c8:89:84:4e:89:8e:88:0b:8d:6d:fe:53:
                    c0:e3:22:0f:e9:95:13:c7:65:d4:13:d7:11:e9:15:
                    01:09:a8:f5:b0:ef:07:2d:d3:f4:3e:bf:2a:14:0a:
                    24:3c:3b:73:c2:2d:98:a4:a0:44:35:f8:52:2a:f1:
                    1e:0e:ab:73:fb:dc:1a:44:92:d7:a0:ce:88:de:02:
                    7f:c7:19:9a:c3:2d:c5:7c:1b:82:61:54:c0:bb:4d:
                    2c:95:5b:49:fe:55:da:cc:d7:a5:9f:6d:8c:ce:53:
                    be:bf:18:70:05:a3:94:68:ca:3a:7e:b1:8f:92:9c:
                    87:c1:58:91:47:09:a5:49:df:4b:21:1f:27:a1:12:
                    bf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:03:CD:9C:6B:2E:3B:F2:B0:22:9E:FF:47:C0:69:C6:C6:0A:12:50
            X509v3 Authority Key Identifier:
                keyid:55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:4f:70:54:fe:03:98:6d:93:81:40:60:8e:02:a8:d9:1c:6f:
         81:04:af:22:92:df:dd:6f:36:9e:6a:5e:5e:eb:42:a4:a2:bd:
         ad:09:f0:f6:6c:9b:f6:0b:eb:ff:6f:df:30:62:c9:cf:f2:72:
         d3:6c:e7:8d:75:d3:4a:fc:70:22:eb:b3:06:13:7f:66:62:13:
         cd:53:27:6c:40:2a:ec:2a:76:8f:bf:5c:f3:b4:1b:9e:e0:d3:
         ec:6f:b4:24:e4:f0:c7:dd:23:f7:ae:3c:27:f4:5c:8c:ae:c0:
         cf:47:17:30:c3:5b:7e:08:f7:e3:34:6b:9d:07:85:d9:76:54:
         0f:8d:ec:33:80:ef:6b:2c:70:34:00:68:f8:9c:17:e3:c8:e1:
         7f:d9:3f:fc:31:79:00:f6:ab:48:36:3e:c6:10:2d:97:d6:0c:
         c2:a0:36:02:50:2b:5b:1a:f2:16:89:1a:ea:d2:50:76:53:fc:
         17:50:95:54:72:32:62:01:d3:ba:39:c9:e7:98:6d:07:7b:2f:
         87:be:dd:77:4f:3b:ce:8a:8f:38:bb:cd:da:ee:5c:06:e1:ab:
         dd:43:1c:53:9b:ed:b1:7d:fc:d3:01:8d:4e:2f:89:0b:04:a8:
         aa:cb:0a:50:7d:0e:9f:5c:91:99:21:1a:bf:c4:88:bd:01:9f:
         c7:15:71:e9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCMdK9mZYLZ4yFkq59zTPU0Iu0zMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUwOUJBM0IzNkI4RTVDODA5QzA5OTQ5NzQ5MjcyRkVG
NjA1RjUzMDAeFw0yNTA4MDcwMzE2MTdaFw0yNTA4MTAxMjQ4MTdaMDMxMTAvBgNV
BAMTKDgzMDNDRDlDNkIyRTNCRjJCMDIyOUVGRjQ3QzA2OUM2QzYwQTEyNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyiZov4YSe2d9sXj2S6edPUab8
gm+bRo6+dwPORTY4Bk6xbfB90Y3D1u1uKYbk32EfHpZrK2IKMeJfon9i2Imh2S6M
Yl0ACc18cPS2QwrL73s+sRf+7nKynkoTD+XKChbUQGEmiyaoWN1KgN9JaOJStvy5
botpaGHr1ciJhE6JjogLjW3+U8DjIg/plRPHZdQT1xHpFQEJqPWw7wct0/Q+vyoU
CiQ8O3PCLZikoEQ1+FIq8R4Oq3P73BpEktegzojeAn/HGZrDLcV8G4JhVMC7TSyV
W0n+VdrM16WfbYzOU76/GHAFo5Royjp+sY+SnIfBWJFHCaVJ30shHyehEr+xAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgwPNnGsuO/KwIp7/R8BpxsYKElAwHwYDVR0j
BBgwFoAUVQm6Oza45cgJwJlJdJJy/vYF9TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MGEzOTJkYy0yZTRlLTQ3NzAtOGY2OC1iYzYxZjgwYjc0YTcvMC81NTA5QkEzQjM2
QjhFNUM4MDlDMDk5NDk3NDkyNzJGRUY2MDVGNTMwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTUwOUJBM0IzNkI4RTVDODA5QzA5OTQ5NzQ5MjcyRkVGNjA1
RjUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzBhMzkyZGMtMmU0ZS00NzcwLThm
NjgtYmM2MWY4MGI3NGE3LzAvNTUwOUJBM0IzNkI4RTVDODA5QzA5OTQ5NzQ5Mjcy
RkVGNjA1RjUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKtPcFT+A5htk4FAYI4CqNkcb4EEryKS391v
Np5qXl7rQqSiva0J8PZsm/YL6/9v3zBiyc/yctNs541100r8cCLrswYTf2ZiE81T
J2xAKuwqdo+/XPO0G57g0+xvtCTk8MfdI/euPCf0XIyuwM9HFzDDW34I9+M0a50H
hdl2VA+N7DOA72sscDQAaPicF+PI4X/ZP/wxeQD2q0g2PsYQLZfWDMKgNgJQK1sa
8haJGurSUHZT/BdQlVRyMmIB07o5yeeYbQd7L4e+3XdPO86Kjzi7zdruXAbhq91D
HFOb7bF9/NMBjU4viQsEqKrLClB9Dp9ckZkhGr/EiL0Bn8cVcek=
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:23 2025 by rpki-client