Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
File:                     26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json)
Hash identifier:          AMq7REvS64xxoOurKKF7Qam88DIOt5OchmMeMcDE6tA=
Subject key identifier:   7E:06:61:04:C5:E7:B6:B7:D7:E0:9D:D3:2F:D3:30:60:ED:21:D7:55
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Certificate issuer:       /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial:       3D89CA0E5FEAC92956FB8EECB696EB07178D9DB1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
Manifest number:          04F7
Signing time:             Thu 07 Aug 2025 15:10:01 +0000
Manifest this update:     Thu 07 Aug 2025 15:05:01 +0000
Manifest next update:     Mon 11 Aug 2025 02:04:01 +0000
Files and hashes:         1: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: Hb5P0TDeMBn1cOFH2oq3loUzifYWvfep94RtX5Q9BTY=)
                          2: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: pPJorPhtoURcHfFuZaHPY1347QHf/vc9r8CP1wzserg=)
                          3: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: sSjIG0LDeS5saZQ8C2CVyK81s+5ejD72CH0is00YDY4=)
                          4: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Lu9azehLR4chvFlJHbgACl9g/2sKz1G6TYe/wHO70OY=)
                          5: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: JNMmXBJmRLeZ0v7hbRMvuNCKgvK7sZzrdM1QwWkvKok=)
                          6: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: 2gs3NYnJ+LfJ3VdvV7N7bEvAtM69nGcWJZW6OKyWlH0=)
                          7: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: FphOhbOvD7rhQc2k+v+l+2rQkAehuLUzPlPUYQrzCzw=)
                          8: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OH7ZCJTwnLCxXMNsgmtlP1c6T2EBORCMxpBSErbjzUQ=)
                          9: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: N6AEmETFQ4NGMx3FYjWNV2pifT99NOMKn0cAzmtwEPs=)
                          10: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: GllxH/PgbP6S2bfFvEpAEeVFKqOz04XhxUteJc/lpd0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
                          rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 02:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:89:ca:0e:5f:ea:c9:29:56:fb:8e:ec:b6:96:eb:07:17:8d:9d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
        Validity
            Not Before: Aug  7 15:05:01 2025 GMT
            Not After : Aug 11 02:04:01 2025 GMT
        Subject: CN=7E066104C5E7B6B7D7E09DD32FD33060ED21D755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c7:d8:28:c6:49:61:a9:19:98:85:50:e0:46:
                    39:d8:e8:37:f4:c4:5a:f3:cc:ce:0a:a2:a1:1d:8a:
                    1c:0d:07:63:20:e6:e0:63:48:d2:f8:44:67:4d:7a:
                    45:8a:f2:04:78:dd:9a:b5:b7:74:52:9a:bb:1a:cc:
                    f1:d3:d9:9a:05:e8:b5:5c:99:08:78:35:17:4a:d5:
                    27:b5:8c:65:02:03:0f:1b:d5:e1:05:4e:16:19:3d:
                    17:c7:d1:5e:6f:36:01:e4:22:8e:aa:23:d3:18:3f:
                    7c:14:33:ff:c2:31:cd:0c:ee:a7:47:7d:84:39:0b:
                    65:94:56:36:22:9e:07:2d:6f:cd:5f:60:30:18:6c:
                    ac:5c:38:4f:42:c9:37:51:71:ad:3c:46:d7:df:22:
                    e9:c4:61:2e:be:e9:d2:69:2d:8a:61:84:45:77:c8:
                    15:3e:65:ac:18:70:d0:89:de:a7:51:8c:9d:c0:76:
                    56:58:42:cf:42:3b:4f:ef:dd:df:11:1d:d9:dc:c9:
                    47:1b:44:2d:da:1b:8b:b0:4b:21:e7:23:7e:d4:34:
                    0d:df:24:6c:1d:4c:b7:70:36:fb:27:c9:0c:39:66:
                    61:3b:23:73:8a:7d:c3:3f:cb:4d:ec:5c:61:4f:dd:
                    cd:8d:c3:df:91:6d:0a:f6:88:5e:52:5c:f3:0b:4f:
                    21:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:06:61:04:C5:E7:B6:B7:D7:E0:9D:D3:2F:D3:30:60:ED:21:D7:55
            X509v3 Authority Key Identifier:
                keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:7f:a9:ea:8a:06:a4:9c:bd:60:ac:7a:38:16:a7:d2:98:68:
         3c:5d:47:15:6d:f3:7c:1a:75:ec:96:00:43:e9:95:89:c9:76:
         57:8c:3b:d1:33:1e:cf:4c:45:7f:2c:84:20:a1:12:e9:60:7f:
         c2:82:cf:c8:42:ad:af:ae:4d:aa:4d:6c:e2:b5:e1:fe:6e:91:
         0a:7e:d5:05:01:23:f4:eb:12:c3:11:f1:ca:2b:c7:c4:e3:ce:
         4c:d7:3a:80:48:4c:f9:4e:f0:74:76:c0:5b:4e:e0:44:53:12:
         21:dc:f5:d7:25:12:97:be:19:49:70:e4:d8:5e:9c:0f:51:a7:
         a9:0e:e8:23:57:4f:0e:0a:3f:a9:2a:8e:9d:09:69:02:1a:60:
         b6:8d:4b:df:50:b9:60:96:94:10:5a:dd:0b:2f:c9:5e:d4:aa:
         77:3f:4c:04:64:be:b1:1e:75:db:bb:8e:5b:dd:1e:0d:fe:87:
         f1:f2:dd:e9:0a:a5:84:d1:28:bd:6f:c2:c1:7a:71:19:2d:e1:
         85:6a:87:98:28:aa:d0:48:27:1f:03:f3:3d:57:e0:38:57:9d:
         dc:13:2c:9e:35:9b:da:4a:23:9e:9d:fe:ff:3d:70:47:1c:c5:
         13:d2:f4:fd:b0:13:22:42:f3:24:af:44:3c:8b:8a:0c:40:5f:
         b5:ac:e1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:45 2025 by rpki-client