Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
File:                     7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft (raw, json)
Hash identifier:          SaCvYMRc7zMZkuzjU0tiAJDLNE1sF5gskjD0h7pXqb8=
Subject key identifier:   BD:AB:CC:1A:37:F4:7F:19:5C:06:A9:25:4C:E3:C9:29:92:F6:33:32
Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
Certificate issuer:       /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Certificate serial:       20E72FE7B37062A13182C18880FBB22B47622C26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
Manifest number:          04F9
Signing time:             Sun 15 Jun 2025 12:32:01 +0000
Manifest this update:     Sun 15 Jun 2025 12:27:01 +0000
Manifest next update:     Wed 18 Jun 2025 21:34:01 +0000
Files and hashes:         1: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: N0fiZGpp7G4AcyGQiECW3/6Q5p0a7A1fAhfbX9FH1ms=)
                          2: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: J/jPlTXp+kWKv5LyWjv+I0N1cAy55yAD17Rj2NwYkPM=)
                          3: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: 7qX9WcxP/RC8tMcJg/P60OwjJ/UboqeJrbX2Ange7f0=)
                          4: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: NEhivRqvBCnBURZf09iLRn6F9NwBbv/MNUQSDs4qTsQ=)
                          5: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: BQTtvc745IuKZaE72oqsQIokxS6D/NEUcrmFIac+agM=)
                          6: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: KTTSzhJyEe2+3+LNGtWkObwsWEdVtFCSQXuEdew12yU=)
                          7: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: qQ/OJJBLuknzR6dOBM+bTowxaxIwEUGdeh8g4k+xMHc=)
                          8: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: 0fYEP8T/Nnelfp7GTy05C/LwRW0usrD9PvaWq6iCxUk=)
                          9: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: vPo4xg80UOtB6VJUwA4UWFKXU9vTxzV/7Yqjm3eG2dU=)
                          10: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: UkRWHYHFSXJQvTnbIud8PmlndW+kHrowErEkvw8GIIU=)
                          11: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl (hash: RKtxuFAedpFn2G8Sxga0eB/e4EZyZTbmbcGGKqf69aQ=)
                          12: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: 56yoy1pZXhES0/QXKkOUvjrn9k9A+/MhvPggVyF266U=)
                          13: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: H7BZrybLTpX0NJFsDuTjqzH8VF1huH+0BD/mvn2lSto=)
                          14: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: IDS7wT53F/9d+GGxnBDomzis7H+va5MBv/3bGTQques=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
                          rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 21:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e7:2f:e7:b3:70:62:a1:31:82:c1:88:80:fb:b2:2b:47:62:2c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
        Validity
            Not Before: Jun 15 12:27:01 2025 GMT
            Not After : Jun 18 21:34:01 2025 GMT
        Subject: CN=BDABCC1A37F47F195C06A9254CE3C92992F63332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a1:ef:85:82:aa:f5:74:9d:bb:57:d7:17:58:
                    5b:15:50:2a:e6:d5:88:4e:04:66:4a:ee:a3:28:b0:
                    40:13:2f:7b:aa:02:b4:30:36:8c:e4:58:f5:1b:33:
                    59:d9:6f:86:ac:a9:ac:08:29:90:fe:de:39:95:2a:
                    c3:a5:c6:7b:71:c8:3c:6a:5d:4f:ec:b3:51:ac:3e:
                    70:ff:4d:22:a8:e5:d6:98:8b:66:07:3a:9a:07:b2:
                    40:bb:19:ed:e9:0e:37:f8:3e:0b:3b:46:9a:b7:91:
                    95:44:74:1f:d8:46:aa:eb:89:ee:64:ad:44:32:6f:
                    53:4f:c5:a3:5f:15:e9:1f:50:51:89:08:25:37:2a:
                    88:46:aa:ee:df:a6:23:6c:1e:9c:ab:cc:bc:d5:f3:
                    96:fa:05:92:e3:27:6b:5a:ed:84:9f:45:d7:3b:c7:
                    ea:6d:c5:ca:cb:34:79:b1:5c:67:c7:ff:40:e9:5e:
                    7e:6a:6a:47:90:0a:33:76:19:ae:ab:fb:86:84:fa:
                    23:77:75:6d:be:bb:e1:74:bc:f2:a7:76:b8:34:ea:
                    4f:90:0c:12:3a:98:cd:19:34:fc:7d:6a:19:59:25:
                    bb:e9:7b:36:de:d6:d3:b0:0b:86:d8:2b:ec:48:be:
                    fb:a4:ba:7b:0b:2f:b4:ac:fb:35:cc:bf:17:52:03:
                    dd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AB:CC:1A:37:F4:7F:19:5C:06:A9:25:4C:E3:C9:29:92:F6:33:32
            X509v3 Authority Key Identifier:
                keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:00:7f:c9:bd:9c:58:fa:30:b2:43:b4:78:03:4f:16:81:57:
         11:13:57:a8:4e:88:6e:b5:f5:69:7f:aa:1f:fd:c1:cf:50:09:
         81:9a:ae:6c:3a:7a:05:3c:4b:f7:bf:c5:6c:98:34:ac:9a:9b:
         3a:a8:81:99:8b:82:5d:5f:cb:9b:2d:a4:38:76:0c:12:ec:64:
         28:c6:b9:53:96:47:6a:a9:6f:5e:c0:13:ff:6b:83:73:59:73:
         58:25:f2:a0:5a:c3:b5:fe:06:df:d9:72:f6:c7:97:2e:06:1b:
         ce:5d:b1:f8:52:c3:49:e4:f6:c3:aa:f0:77:4f:6d:5e:51:db:
         7c:38:75:ee:03:86:bb:7c:03:f4:bb:b8:e4:fe:aa:0f:f0:b8:
         a1:e9:a9:6b:63:a4:7b:d9:16:8f:9e:e7:54:85:17:d6:4b:e2:
         db:ac:f5:a8:ce:56:84:28:22:0d:2e:03:93:eb:73:46:1c:19:
         9e:6f:83:d8:cc:75:f0:71:c0:43:73:d5:e3:f8:a5:8d:cd:93:
         89:08:d2:bb:29:aa:99:71:23:bc:5f:25:61:fd:fb:6f:ec:0e:
         b6:7a:54:f7:2e:56:41:d0:63:90:d6:77:28:bd:1a:c4:bd:10:
         1f:09:02:1f:93:74:57:53:fe:0b:06:78:14:a0:14:5c:9c:78:
         02:56:d2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:15:57 2025 by rpki-client