Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft
File:                     038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json)
Hash identifier:          SyiXaf6jxea3tzOR8mOEWtNXHW99q0uZLy/H64MVMsg=
Subject key identifier:   73:BD:6B:E7:D2:09:64:A2:02:44:55:B6:39:67:2C:84:86:B1:CE:96
Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4
Certificate issuer:       /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4
Certificate serial:       135D3E8F4DA484A45F5F33BFB8040DF42E24222A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft
Manifest number:          0143
Signing time:             Fri 13 Jun 2025 15:00:59 +0000
Manifest this update:     Fri 13 Jun 2025 14:55:59 +0000
Manifest next update:     Mon 16 Jun 2025 20:17:59 +0000
Files and hashes:         1: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: iFZpayjOhiD/nihPfQLVc2Bw/muiBocrb9Vl1jBbDNE=)
                          2: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: nUwZdNO7UFHze3g1pKZfkTBC8woFzbnfevgSi81kVsE=)
                          3: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: PTsTBXGsNz8ocE/IUTQsqbcgk5S4dmL+3UaKaWrcOZo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl
                          rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 20:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5d:3e:8f:4d:a4:84:a4:5f:5f:33:bf:b8:04:0d:f4:2e:24:22:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4
        Validity
            Not Before: Jun 13 14:55:59 2025 GMT
            Not After : Jun 16 20:17:59 2025 GMT
        Subject: CN=73BD6BE7D20964A2024455B639672C8486B1CE96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:22:b2:00:3d:b8:a2:ed:83:76:0e:d4:75:
                    b5:82:07:dd:c6:61:d9:a5:61:4e:a6:c2:4e:c4:f4:
                    1a:d1:68:b6:8e:10:14:53:00:a7:08:be:87:e8:c1:
                    69:0a:19:ad:2e:54:49:90:27:ed:f0:a8:fc:5f:f2:
                    7e:c7:fa:36:28:0f:ca:10:84:85:da:ba:fc:d8:64:
                    76:14:48:b6:de:01:ff:e2:70:79:ec:f2:0b:ee:4d:
                    d5:5a:4c:6e:47:5b:c5:a3:9a:57:86:90:f6:22:01:
                    96:89:38:40:7a:4f:86:12:4f:81:a7:80:9e:58:43:
                    f7:21:08:dc:41:e9:75:09:fe:78:80:eb:c5:3b:4b:
                    24:e0:b6:af:36:3b:b5:e1:3a:d5:72:bf:4f:d2:ac:
                    63:d2:44:60:ad:d1:5e:bd:a6:5d:e5:58:6f:8f:2a:
                    95:18:6d:4e:5a:55:79:fb:20:ee:07:9b:d3:85:16:
                    7e:aa:cf:40:a6:ef:e2:4f:50:e6:a8:25:f1:10:16:
                    3b:c9:11:40:a1:2c:b8:3e:8f:a5:8f:d2:7c:a3:18:
                    f7:a2:da:bc:70:55:bd:6c:63:cc:85:77:23:22:be:
                    73:ef:f9:ed:eb:48:73:72:48:01:6e:c8:f0:64:f3:
                    3d:75:04:34:5d:94:8c:83:21:62:5c:ce:d0:9e:cc:
                    99:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BD:6B:E7:D2:09:64:A2:02:44:55:B6:39:67:2C:84:86:B1:CE:96
            X509v3 Authority Key Identifier:
                keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:16:22:56:dc:db:0e:fe:59:83:ad:9e:89:6f:09:37:37:63:
         20:5e:fd:e1:56:04:51:37:10:bc:4c:3d:7a:48:a8:0a:bf:41:
         f9:cb:05:aa:c8:32:77:94:e8:46:c3:af:e7:0f:49:d3:ee:d0:
         37:7c:db:0c:11:99:97:6f:ac:11:b0:d3:00:68:9d:4e:18:59:
         59:21:e1:c8:77:63:28:0d:83:c4:94:95:eb:d7:4d:47:92:e3:
         e6:aa:c3:8d:b5:ba:f5:d1:4e:ac:13:7d:f9:15:2a:d3:9e:08:
         f0:d3:14:9d:e8:1a:6c:a3:b3:a2:aa:36:15:6a:85:a6:50:2f:
         83:bc:f3:af:47:9e:ae:50:09:c4:59:cf:8e:db:6e:40:0c:0c:
         b8:77:41:8f:07:3c:d6:c5:ba:07:67:6a:58:65:bf:0d:4b:97:
         69:a1:e9:7c:5a:5c:53:cd:93:f7:d5:fb:b7:e0:d6:20:77:d5:
         08:8a:9e:9c:b1:1c:83:95:1f:c2:65:30:a5:cb:32:cd:01:eb:
         f0:8f:1f:e8:46:35:8a:c5:55:ca:60:6e:7c:63:05:21:d0:08:
         ad:6a:3b:3e:27:2e:78:bd:41:f0:78:bf:f2:ea:3b:12:93:de:
         25:a7:06:d9:ca:09:e4:c8:b0:57:4f:eb:ca:f9:f4:29:d2:d5:
         d9:d8:f9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:26:29 2025 by rpki-client