Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
File:                     3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json)
Hash identifier:          g9BOgO5u9FUUIFBEH56qDXi3rdKjgjb58MNnAUhDfc4=
Subject key identifier:   22:55:74:31:7F:83:13:57:0D:DC:16:7B:D4:94:BA:C5:54:BE:D4:AC
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Certificate issuer:       /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial:       71BDCFE07D7168690CC95BF9DD746F11E424B278
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
Manifest number:          020A
Signing time:             Mon 16 Jun 2025 08:22:08 +0000
Manifest this update:     Mon 16 Jun 2025 08:17:08 +0000
Manifest next update:     Thu 19 Jun 2025 14:14:08 +0000
Files and hashes:         1: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: C6l6zdsNHMzfA4VroXv38wYjaYdlZyMXfkyZpHinjgQ=)
                          2: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: FWaIS2C5y+tF+eXrrfhUKvMiaO2hbKHJ6PXu+XjlFjU=)
                          3: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sYsKqli8EUEzTvSQXavM3oM1AVTdmnNeXY5Ib9nTkXk=)
                          4: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 318Q6731sMFPRMDMOoStaI6Bz5sS+OT9DxYXEQE+OOU=)
                          5: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: /v/t0LVvwP8ItAgvAEV4d3ird2OFydIuyNvk7Hjv9rU=)
                          6: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: ki4eSWsy0GThDK85L5ifj6pRkVHGDGe69NOaarv3+yM=)
                          7: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: QBM9H9rd8+lS4gn1TV/zjjSpwBwL7sSfYx4yVL1I50s=)
                          8: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 7h+0gopoSFJ2M48QEyz8CL99eJtVxfcZjzTpUAYVTZo=)
                          9: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: znbfpwqo/RqJTtKokVQJprWVfIE6ZeyWhe8h0U97wlw=)
                          10: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: oP5w04R+DVBIXz7VN32/pUudJby5Bdnn9OzpJHzqMrY=)
                          11: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: naME29BjJNXWcG5xS5OYZKvtjsmmITu0eSf0OkwWWqI=)
                          12: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: KM8HCAE941ny+NeclcPdlUg9VIqsSih6MjHoa5IqXb8=)
                          13: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: Vxu7OgcrZ32tVA4THVShJIrGxnq9jK2ER/olk1k8ato=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
                          rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 14:14:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:bd:cf:e0:7d:71:68:69:0c:c9:5b:f9:dd:74:6f:11:e4:24:b2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
        Validity
            Not Before: Jun 16 08:17:08 2025 GMT
            Not After : Jun 19 14:14:08 2025 GMT
        Subject: CN=225574317F8313570DDC167BD494BAC554BED4AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:59:84:5c:85:93:37:88:83:e4:48:66:1a:
                    c5:8f:88:95:c4:38:12:3b:77:77:7c:b1:31:02:20:
                    36:66:85:0c:f1:70:b4:95:45:52:8f:8e:94:1a:4c:
                    95:69:f5:d6:e8:f7:cd:6d:4d:63:5a:53:c3:d8:b6:
                    37:47:7e:f6:c7:bc:5d:cb:59:fa:ce:3f:76:b2:ab:
                    54:98:72:3c:88:a5:26:4e:82:f7:39:7e:2c:50:3c:
                    3a:fd:a1:c1:6d:72:c7:ad:53:79:a1:d2:1e:67:4f:
                    8b:d6:ca:36:34:7e:f2:9a:5a:72:ac:26:2d:bf:51:
                    bf:16:68:7e:02:fa:0c:c1:41:76:be:d0:d3:97:08:
                    6f:45:97:56:6c:8b:fe:bf:bd:f2:a5:5b:bd:b4:0f:
                    59:ce:be:4a:f2:c5:46:84:6c:4c:3e:59:58:d1:02:
                    4d:1a:d6:96:a6:a6:7b:9d:69:ef:e5:ce:37:bc:51:
                    44:e2:a6:a0:cc:d4:e0:b8:fa:cd:fc:b2:8b:53:d8:
                    19:41:44:88:72:e3:c3:e4:d4:6a:bd:ce:e2:db:f5:
                    25:65:02:58:81:62:0a:87:71:8d:c2:e9:5d:f8:f8:
                    76:6f:c8:57:35:5f:2f:53:00:60:b1:1a:98:d8:b4:
                    ec:1e:f5:e2:d5:46:68:be:40:ed:a5:f6:7a:73:d4:
                    ce:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:55:74:31:7F:83:13:57:0D:DC:16:7B:D4:94:BA:C5:54:BE:D4:AC
            X509v3 Authority Key Identifier:
                keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:92:54:f0:5d:1c:48:68:14:6b:c1:f2:63:35:e0:ee:54:6b:
         88:8d:b5:b2:a4:58:e1:25:c8:f7:c9:f2:b6:1c:4b:bb:f8:04:
         8c:63:c1:10:7c:66:a6:44:b5:7e:54:c1:f0:a4:14:dc:52:ce:
         14:d1:2c:b3:46:88:65:4f:dd:ce:26:21:e3:26:fa:ad:52:7e:
         0f:4b:af:0c:ab:e8:47:f2:58:6e:42:c4:74:1b:6c:89:c9:63:
         0f:67:aa:8b:89:89:1c:fc:65:15:9f:6c:79:0c:d0:5a:51:ea:
         f1:1b:12:26:4c:fb:95:b9:f6:51:b5:3c:68:49:29:99:7c:3c:
         ce:f4:94:14:7d:91:4b:4c:76:5f:d1:3d:d9:f4:13:55:1f:38:
         dd:73:3c:d7:d3:bd:85:5f:d2:25:59:91:c7:99:bc:c8:40:3a:
         75:a3:27:9d:fd:c4:95:d2:b3:e7:e7:7d:05:cf:1f:59:c1:09:
         c2:1f:19:f8:f5:36:4d:1b:d3:03:ce:f4:8a:a7:88:8b:aa:44:
         b0:67:92:b5:ed:f8:df:dc:be:9d:85:f7:22:f7:63:26:c7:05:
         53:04:cf:4c:0a:5c:97:a1:ae:37:45:51:7c:2e:7d:be:41:75:
         ad:14:68:cd:cd:74:82:f4:b1:25:80:aa:c0:30:4f:89:e3:67:
         bf:d2:4a:c9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcb3P4H1xaGkMyVv53XRvEeQksngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG
QzhBN0U5NzAeFw0yNTA2MTYwODE3MDhaFw0yNTA2MTkxNDE0MDhaMDMxMTAvBgNV
BAMTKDIyNTU3NDMxN0Y4MzEzNTcwRERDMTY3QkQ0OTRCQUM1NTRCRUQ0QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxWlmEXIWTN4iD5EhmGsWPiJXE
OBI7d3d8sTECIDZmhQzxcLSVRVKPjpQaTJVp9dbo981tTWNaU8PYtjdHfvbHvF3L
WfrOP3ayq1SYcjyIpSZOgvc5fixQPDr9ocFtcsetU3mh0h5nT4vWyjY0fvKaWnKs
Ji2/Ub8WaH4C+gzBQXa+0NOXCG9Fl1Zsi/6/vfKlW720D1nOvkryxUaEbEw+WVjR
Ak0a1pampnudae/lzje8UUTipqDM1OC4+s38sotT2BlBRIhy48Pk1Gq9zuLb9SVl
AliBYgqHcY3C6V34+HZvyFc1Xy9TAGCxGpjYtOwe9eLVRmi+QO2l9npz1M4zAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIlV0MX+DE1cN3BZ71JS6xVS+1KwwHwYDVR0j
BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF
MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB
N0U5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MTlhZWItNWM1Ni00Y2IzLTk0
YTAtMGY0MDBlYTZhMzc1LzAvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUz
QUFGQzhBN0U5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHOSVPBdHEhoFGvB8mM14O5Ua4iNtbKkWOEl
yPfJ8rYcS7v4BIxjwRB8ZqZEtX5UwfCkFNxSzhTRLLNGiGVP3c4mIeMm+q1Sfg9L
rwyr6EfyWG5CxHQbbInJYw9nqouJiRz8ZRWfbHkM0FpR6vEbEiZM+5W59lG1PGhJ
KZl8PM70lBR9kUtMdl/RPdn0E1UfON1zPNfTvYVf0iVZkceZvMhAOnWjJ539xJXS
s+fnfQXPH1nBCcIfGfj1Nk0b0wPO9IqniIuqRLBnkrXt+N/cvp2F9yL3YybHBVME
z0wKXJehrjdFUXwufb5Bda0UaM3NdIL0sSWAqsAwT4njZ7/SSsk=
-----END CERTIFICATE-----
Generated at Wed Jun 18 08:22:04 2025 by rpki-client