Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
File:                     00EE953FD699788668C724460F4D8D420238194F.mft (raw, json)
Hash identifier:          bB00Tos+9O2NkaHo6xNRxdTFMZpYaLF8ORfjYyghICk=
Subject key identifier:   48:9B:40:DF:96:C5:EA:B9:BA:3E:B2:B6:B6:CA:D3:59:BC:D9:86:64
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Certificate issuer:       /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial:       6EBB7090D84A1402CA261D0F2359788228F9631E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
Manifest number:          01DE
Signing time:             Mon 16 Jun 2025 03:10:38 +0000
Manifest this update:     Mon 16 Jun 2025 03:05:38 +0000
Manifest next update:     Thu 19 Jun 2025 03:10:38 +0000
Files and hashes:         1: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: bvNupIpWmDhaL8rFDaTnVFDhI5fuAg0k+27/VGkzYJs=)
                          2: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: sSIdllnvg4M1DGs8YGmNKZNiURvN96H1MMo+ucCRqd8=)
                          3: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: Q+wUhnh29FhBJym4567snCa7z4nTeAWEhmKU24ANvCE=)
                          4: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: P5LJ10k2BHWyFCmNYnH84ZTaEVA9KJ8Poi0f/ODMh70=)
                          5: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: ebM/F6KIH60LQhN77naN07o0NG2yDX1tXydmaED/mYQ=)
                          6: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: CMYmOK+8R1Hs3kHGhRx8R2555ufRrCqQtRcxPZZMVnA=)
                          7: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: /6F+dCYfhj8nILz7NzSN2rSqER4M9P3bFQ45j14GuDI=)
                          8: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: +0IYJt+ldEx6hRx5/LkWzdAnyMowfs90g5flb4WhwNI=)
                          9: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: YWPfLwfnjAzwyRdQ8HMatujMpctNGsrqPWB+mJd3o7c=)
                          10: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: jtfCyTfV0URchGl+wzEZEXq1ZK6wyh3Rdim0gK9JxbY=)
                          11: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: DRoCmPuWf7Goy6b8ay+89nX5k4OXZiMQBXfvplbhc24=)
                          12: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: FgOjY7TNj+vVOTY+T0f+/7XZ2PEhUJFN/481ZR8iBC4=)
                          13: 00EE953FD699788668C724460F4D8D420238194F.crl (hash: snuKhs3hHcrsVud8XoOagdAXVAw14YK21tNyqm0UDYA=)
                          14: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: vZOtLaOfjMhQfEcCJdIUC/qN22seOwp7tbsXKZXwRVo=)
                          15: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: sAwAc9IZ0DLVOhouh4zmTpqaxK9YADxytwY1+gNq8u0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
                          rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 03:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:bb:70:90:d8:4a:14:02:ca:26:1d:0f:23:59:78:82:28:f9:63:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
        Validity
            Not Before: Jun 16 03:05:38 2025 GMT
            Not After : Jun 19 03:10:38 2025 GMT
        Subject: CN=489B40DF96C5EAB9BA3EB2B6B6CAD359BCD98664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:36:05:a1:54:ed:71:b3:de:de:2c:c6:db:
                    21:da:6a:56:65:28:2e:8a:75:0c:3f:77:6b:c4:c1:
                    6b:ec:6f:ab:23:62:32:5e:d2:4c:3f:db:a3:68:c4:
                    f0:c0:34:91:c4:f8:0a:d5:6f:82:15:1e:51:f4:e9:
                    c7:94:01:24:f5:71:c6:a1:23:2b:2b:d3:35:35:2b:
                    68:dd:08:9d:d8:2b:1b:1f:5a:ab:20:42:24:16:e6:
                    66:b0:14:d7:3f:ff:e4:6e:5b:2f:aa:75:c2:5b:d0:
                    d5:b4:9a:e0:64:d8:7a:87:ee:06:1d:e4:49:57:1f:
                    c5:7e:07:e7:8d:e0:78:6a:de:10:57:cf:5f:ad:10:
                    9f:92:e2:cf:6c:8c:13:fc:1a:6c:63:b1:9f:4f:ff:
                    28:08:89:66:cd:c6:3b:0a:8b:f3:42:9c:9f:1d:1b:
                    c2:a8:c7:fc:8c:b4:e9:02:50:77:3c:9f:a0:bc:aa:
                    94:36:9c:33:4c:20:6a:46:37:f0:d2:1a:6f:42:c6:
                    09:a0:ba:3e:b9:6f:f0:7d:b0:54:7e:cb:d6:e6:53:
                    6f:b8:03:bb:7a:23:26:12:45:92:1a:88:8f:50:d3:
                    32:0e:09:9e:e8:26:38:4b:ef:a4:62:a3:a8:b8:a0:
                    32:f7:8f:1b:2b:e0:83:73:58:f6:ef:17:a5:36:36:
                    59:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9B:40:DF:96:C5:EA:B9:BA:3E:B2:B6:B6:CA:D3:59:BC:D9:86:64
            X509v3 Authority Key Identifier:
                keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:79:4b:78:45:24:0d:2d:6a:1a:07:9c:f5:b7:0a:10:5b:22:
         11:49:f2:22:16:0b:78:a8:45:be:c0:4e:07:fb:1d:93:c0:d7:
         cd:62:b7:c2:06:67:5a:f8:24:da:2e:f4:44:aa:6d:b4:23:ea:
         2d:bb:37:57:18:86:55:d2:85:63:12:a4:81:49:e2:a0:64:07:
         c6:b8:91:ff:c8:66:41:29:56:67:1e:96:ab:af:6a:03:a0:8f:
         55:bd:49:57:d1:91:d7:94:29:dd:91:37:3e:f7:68:42:41:90:
         62:87:e5:d0:cf:3d:ba:f8:31:a8:5b:aa:89:59:f1:c2:bf:b4:
         36:8e:ed:2e:d6:cb:50:13:b5:1b:6e:32:ea:62:11:59:70:f3:
         6e:3e:ef:3e:34:66:be:40:20:4d:f3:9a:b5:55:96:12:cc:68:
         56:40:ed:a6:fe:82:94:07:10:97:50:fe:51:c7:71:5a:44:c4:
         4d:6a:a2:ea:0f:0d:7f:5b:01:3f:ad:87:3f:6d:35:07:2f:76:
         27:25:3b:f7:fd:43:8d:15:d4:5c:a0:15:c4:bd:59:74:d3:39:
         ee:fb:0c:4b:92:89:95:ea:7f:43:51:08:f6:f6:7d:d8:54:79:
         4b:5c:8e:c4:f9:56:82:a5:3c:0a:93:05:62:a5:12:f5:be:c5:
         b3:81:c2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:54:36 2025 by rpki-client