Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft
File:                     52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft (raw, json)
Hash identifier:          zFgD4q9knLm3Pta2YhpwC13ae7cPAIPB2ZPMY7FrWPM=
Subject key identifier:   2C:BC:33:BA:4E:5E:EB:ED:C5:8C:04:F8:01:37:1F:A3:9F:AE:E4:75
Authority key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B
Certificate issuer:       /CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B
Certificate serial:       329A615D06A53058CD7FBDD26A7CFE68A32B9D3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft
Manifest number:          9D
Signing time:             Sat 14 Jun 2025 22:52:09 +0000
Manifest this update:     Sat 14 Jun 2025 22:47:09 +0000
Manifest next update:     Wed 18 Jun 2025 03:54:09 +0000
Files and hashes:         1: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: cxNzmi6v2p99HHhR+ggQ6n1CG/x3GBlPxyYmKXCdmXo=)
                          2: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl (hash: TtL/eByozc/gjxpWUZ0XCLrxX/25ZypSTlqIrJgFPlM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl
                          rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 03:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9a:61:5d:06:a5:30:58:cd:7f:bd:d2:6a:7c:fe:68:a3:2b:9d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B
        Validity
            Not Before: Jun 14 22:47:09 2025 GMT
            Not After : Jun 18 03:54:09 2025 GMT
        Subject: CN=2CBC33BA4E5EEBEDC58C04F801371FA39FAEE475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:93:a8:22:ac:e9:ad:30:eb:96:80:09:fd:
                    ae:b9:ef:d9:2c:8c:7c:3b:3c:75:71:77:73:53:a2:
                    cb:54:c5:52:8f:3a:42:91:58:cf:8d:99:7e:e8:00:
                    71:2d:70:e9:4a:06:7d:8a:48:76:e3:32:f1:fc:a5:
                    da:89:bc:d3:5f:f5:ef:e3:9c:97:d3:91:b1:94:c7:
                    89:28:3e:3b:09:7f:7d:77:19:b1:59:00:3c:29:ad:
                    ae:66:76:c9:91:31:b7:94:e0:f3:14:d5:2a:51:b7:
                    ee:61:a6:2f:e3:3e:0b:29:a7:5a:9a:38:8f:98:1b:
                    02:1c:95:6f:da:e4:27:e8:86:13:c8:5d:48:aa:18:
                    ee:a2:99:b7:3b:d1:af:bc:8a:43:bc:6a:24:2f:43:
                    55:d2:11:36:aa:35:ef:d6:07:87:ef:1d:e3:76:ce:
                    e3:7c:5d:f8:0c:25:e7:1b:25:38:41:6d:1d:6c:dc:
                    51:19:48:2f:b0:24:97:78:fe:79:7b:ff:6f:81:4f:
                    25:94:1f:2c:11:aa:c0:74:b4:c5:1b:bf:11:78:11:
                    fe:37:e0:78:4f:10:a0:59:ab:dc:cf:8a:92:d2:aa:
                    45:57:7d:58:99:49:35:8a:15:7e:c1:91:5a:d4:20:
                    f6:ca:68:8f:5e:83:63:f4:fd:3a:49:97:82:c6:61:
                    6e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BC:33:BA:4E:5E:EB:ED:C5:8C:04:F8:01:37:1F:A3:9F:AE:E4:75
            X509v3 Authority Key Identifier:
                keyid:52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:60:65:be:b4:32:d4:09:30:84:ad:03:31:91:7e:9f:c4:2b:
         d0:fe:d4:c4:b2:63:c1:53:87:d2:c7:0d:3d:40:62:a2:b0:44:
         5a:a3:de:f7:77:bd:51:c5:64:57:2e:21:a2:26:59:51:e3:ba:
         d3:ec:94:c9:45:fa:01:97:78:e6:d6:ad:e1:f7:ef:ca:f8:f6:
         3c:e6:59:30:89:1c:0c:79:59:10:9c:47:73:cf:42:8c:df:35:
         e8:c5:0c:99:fc:ef:82:79:fb:34:96:44:f3:89:d0:d1:12:5a:
         cb:0a:87:24:c4:9e:1f:e5:02:be:45:c3:dd:e9:5f:e2:a7:a4:
         3e:e0:5f:3f:2d:cc:68:37:90:cb:1f:54:2f:00:15:fd:93:2f:
         7a:aa:1a:16:ec:d8:85:25:9e:b6:dd:a5:66:cd:af:8e:f8:1c:
         a7:35:61:8a:b6:73:54:3c:89:b1:14:74:f2:79:e3:c3:32:6e:
         97:fa:f8:83:7e:84:97:09:ba:41:97:66:f9:c7:eb:4f:d9:bd:
         db:7e:fb:fa:5c:cb:32:a7:37:38:15:24:57:51:6a:79:15:9a:
         b7:1b:ab:eb:79:de:d5:8f:01:db:8b:5a:21:b3:bf:35:bd:75:
         77:9f:d4:b9:8c:10:ce:7a:41:33:bb:24:64:8a:15:5f:bc:06:
         21:8e:e0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:29:10 2025 by rpki-client