Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
File:                     735D87BA86773AC70137CF53116358A1F3B19766.mft (raw, json)
Hash identifier:          hyzhwxc8PwopqFwJuwnUH2JIwY+og+d6H6nwPkOdVmU=
Subject key identifier:   27:DF:D6:1F:4F:DA:7C:39:69:C6:16:A1:04:73:63:2D:1C:83:A5:53
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       2F6D86673B2744DABD5B18161853D85C3428F04F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
Manifest number:          022A
Signing time:             Sat 09 Aug 2025 04:11:04 +0000
Manifest this update:     Sat 09 Aug 2025 04:06:04 +0000
Manifest next update:     Tue 12 Aug 2025 10:54:04 +0000
Files and hashes:         1: 735D87BA86773AC70137CF53116358A1F3B19766.crl (hash: x5XIt6grTRjuu67ydRW49bvdo/EDGpqhFi082EoFKpw=)
                          2: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: MNca57frzbraXQ+A5sffHCuXC7kbkp16cgNgxDCrZrE=)
                          3: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: cuW15q9SnbE27U2Jg8nnNYvxOwHbFyEv1g42R3Sx4E0=)
                          4: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: Vj9b7eOBgij03V9LOKkEMCElDrFIB3RU0Drnp1lzskU=)
                          5: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: bNf7w52cmLw3GYp+mMaw3papmg1ZcgmFTgd1v4VSUIU=)
                          6: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: hML4QQ0UsZ/MNuzlhXm7ZxAfBsEoo8p/TG6zTdeHPYA=)
                          7: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: ixUeVPdiiujjqdz2cxBs4b9W1yytwj3hYRmTEjubFdc=)
                          8: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: SoFui+6+9U4okutKDEEDEO8cNoDM72pJozwIgVHrak0=)
                          9: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: MYkgPF54ZFrZUvgyAUVZduFZA6VqGujX+c3smzb0mEg=)
                          10: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: cA/F4dRQqVseyocCpcE2agAw/XVimr3HwwnooMdskYo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 10:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:6d:86:67:3b:27:44:da:bd:5b:18:16:18:53:d8:5c:34:28:f0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Aug  9 04:06:04 2025 GMT
            Not After : Aug 12 10:54:04 2025 GMT
        Subject: CN=27DFD61F4FDA7C3969C616A10473632D1C83A553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:b3:31:ec:51:1f:d6:31:67:63:d4:54:83:
                    3f:b6:dc:e7:10:d2:a8:d2:b3:d4:dd:e1:0c:74:f9:
                    d5:4b:95:d2:cd:d2:f8:9c:db:7f:e8:eb:5a:42:eb:
                    af:3d:51:73:7b:2b:7b:ca:37:89:ed:53:bd:06:ee:
                    41:40:cd:3f:11:73:ea:75:6f:46:3a:98:2b:b4:96:
                    c8:5e:36:b5:84:31:8d:ae:67:fd:e2:d8:4c:08:59:
                    2e:f4:f3:c0:00:30:ba:29:19:ed:75:e9:b8:7b:b3:
                    44:f2:8d:39:80:7e:bb:ff:e5:7b:4e:7f:fb:8a:c6:
                    23:7b:b2:53:14:67:33:ff:47:9c:ee:d0:a7:43:65:
                    e8:60:dd:1f:28:14:55:49:8d:c9:cb:ca:51:2d:4f:
                    02:c6:af:b8:e4:00:c5:41:df:ef:d4:b2:c8:49:29:
                    f4:d7:62:65:20:66:20:7d:34:3b:2d:4e:ca:9f:42:
                    85:61:3f:a4:4c:ea:15:f9:6c:24:19:f9:e7:a4:92:
                    53:17:df:aa:d8:e1:77:df:98:22:7b:26:41:d8:ed:
                    11:5b:e3:05:4c:70:93:80:9f:cf:8a:c1:02:56:56:
                    68:b3:f2:e9:aa:44:90:2f:c8:4d:5d:68:35:0c:74:
                    82:02:5f:7c:dc:f7:70:4a:0e:b8:12:a1:f9:e3:24:
                    a1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DF:D6:1F:4F:DA:7C:39:69:C6:16:A1:04:73:63:2D:1C:83:A5:53
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:70:ad:ae:21:7d:18:f5:5b:bf:00:60:0f:d0:ef:48:72:78:
         20:4e:4e:04:e3:ac:fa:0e:4c:67:fa:1d:30:20:f3:ac:90:1a:
         16:ce:0e:d6:b2:c4:2f:1c:28:62:5f:bc:62:f8:34:6b:50:7f:
         e3:61:e0:69:0b:8f:1c:57:81:04:60:14:21:a3:86:06:0f:d2:
         72:c0:19:e9:1b:3f:84:6d:65:cc:c7:7f:f4:1a:c5:e3:36:43:
         97:28:7e:f2:b3:9f:56:c7:50:26:64:fb:fb:44:ad:82:c6:b1:
         94:99:18:ad:e6:ad:ab:44:59:73:bb:6d:b9:83:1b:bd:1c:1c:
         99:1e:33:63:05:17:a5:e1:91:3b:d2:60:2b:f6:ed:48:f1:1a:
         9b:34:0d:e7:4e:d7:5a:6f:71:e1:73:34:5d:8c:49:86:4e:af:
         22:1f:71:28:2d:57:d4:f5:c0:5f:70:e8:c9:1c:52:99:e1:c4:
         6d:7c:cd:c2:f8:c5:a6:69:3e:b2:05:3c:f7:3e:cd:0b:8a:95:
         02:0f:f8:ab:45:af:a2:c1:7e:2f:d8:f5:31:05:f2:5f:a2:a8:
         66:4e:66:e5:c6:35:03:d4:95:36:99:af:64:86:27:f3:db:52:
         19:83:91:8d:c0:07:79:ba:d3:79:fe:3b:ee:ad:81:a1:78:98:
         93:a7:27:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:27:23 2025 by rpki-client