Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
File:                     7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft (raw, json)
Hash identifier:          5LKzBSEpWOS85nFPadWM5agZTppRZAmk3Y6MCi+m72w=
Subject key identifier:   FE:F5:96:CB:86:21:62:5D:30:39:93:A8:88:54:81:AF:9A:BA:C5:10
Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
Certificate issuer:       /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Certificate serial:       68C1B213655B741D97BA865DB88FA34602EA2700
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
Manifest number:          0510
Signing time:             Wed 06 Aug 2025 07:42:07 +0000
Manifest this update:     Wed 06 Aug 2025 07:37:07 +0000
Manifest next update:     Sat 09 Aug 2025 17:05:07 +0000
Files and hashes:         1: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: J/jPlTXp+kWKv5LyWjv+I0N1cAy55yAD17Rj2NwYkPM=)
                          2: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: vPo4xg80UOtB6VJUwA4UWFKXU9vTxzV/7Yqjm3eG2dU=)
                          3: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: BQTtvc745IuKZaE72oqsQIokxS6D/NEUcrmFIac+agM=)
                          4: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: 7qX9WcxP/RC8tMcJg/P60OwjJ/UboqeJrbX2Ange7f0=)
                          5: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: UkRWHYHFSXJQvTnbIud8PmlndW+kHrowErEkvw8GIIU=)
                          6: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: H7BZrybLTpX0NJFsDuTjqzH8VF1huH+0BD/mvn2lSto=)
                          7: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: IDS7wT53F/9d+GGxnBDomzis7H+va5MBv/3bGTQques=)
                          8: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: NEhivRqvBCnBURZf09iLRn6F9NwBbv/MNUQSDs4qTsQ=)
                          9: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: 0fYEP8T/Nnelfp7GTy05C/LwRW0usrD9PvaWq6iCxUk=)
                          10: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: N0fiZGpp7G4AcyGQiECW3/6Q5p0a7A1fAhfbX9FH1ms=)
                          11: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl (hash: TGI3E6/liAQKlcwC/I4jegUcVEMY7ODvrDsr60ENrj0=)
                          12: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: KTTSzhJyEe2+3+LNGtWkObwsWEdVtFCSQXuEdew12yU=)
                          13: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: 56yoy1pZXhES0/QXKkOUvjrn9k9A+/MhvPggVyF266U=)
                          14: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: qQ/OJJBLuknzR6dOBM+bTowxaxIwEUGdeh8g4k+xMHc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
                          rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 17:05:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c1:b2:13:65:5b:74:1d:97:ba:86:5d:b8:8f:a3:46:02:ea:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
        Validity
            Not Before: Aug  6 07:37:07 2025 GMT
            Not After : Aug  9 17:05:07 2025 GMT
        Subject: CN=FEF596CB8621625D303993A8885481AF9ABAC510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8b:47:7c:f5:4d:1e:a8:00:82:92:60:17:32:
                    07:60:68:ec:9b:31:f6:1a:57:14:eb:c3:9e:9f:58:
                    00:45:57:fa:3f:b6:ab:05:3b:dc:bd:93:25:fc:82:
                    01:4b:ab:fb:f6:ac:56:f4:40:a3:59:aa:ce:af:0d:
                    f4:5b:78:1b:83:b1:f8:ee:ab:af:06:6e:26:d3:f9:
                    be:f5:1a:e4:48:40:d2:d4:0e:60:b3:15:c9:81:01:
                    23:05:21:cc:0e:cc:b6:e6:60:8c:fc:51:d6:b1:78:
                    f6:00:4d:8a:db:4a:7e:19:66:a2:f4:a5:c5:0f:4d:
                    71:79:43:84:ec:b7:c8:b8:6d:0b:db:bc:e0:4e:3a:
                    ac:10:67:c0:95:a1:39:47:21:5f:66:7c:a5:9b:63:
                    37:25:0a:7e:30:65:fc:d8:d6:97:be:14:89:bc:64:
                    52:ea:5d:9b:21:61:da:44:65:1d:93:22:e3:ff:89:
                    9d:c0:b5:7b:a3:61:fd:07:db:a3:f8:ef:9d:c4:89:
                    f7:f0:67:0e:1f:50:ec:0a:01:93:9b:91:7c:de:64:
                    09:f1:e0:a4:21:4a:bc:0b:53:aa:70:a8:7a:89:fa:
                    8a:85:e8:46:aa:d5:c6:f1:6b:d2:78:86:e6:55:46:
                    99:b1:2a:51:ab:1a:38:86:42:fe:fb:04:47:01:18:
                    e0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F5:96:CB:86:21:62:5D:30:39:93:A8:88:54:81:AF:9A:BA:C5:10
            X509v3 Authority Key Identifier:
                keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:a2:cf:46:8c:9d:76:91:14:af:14:a5:d0:38:e7:b9:dd:31:
         ea:f2:b5:3f:bc:44:1b:da:7c:4c:3b:6c:36:3b:82:d0:3b:fa:
         59:44:e7:bd:11:0f:4c:4d:cd:4e:18:02:dc:1c:df:fb:d8:dd:
         67:c1:05:f0:6a:05:a3:58:da:2b:f8:20:2d:34:0e:45:57:01:
         03:c3:21:d3:13:b5:23:cd:5f:85:c2:29:c7:a5:5b:6b:ae:0f:
         4c:42:64:99:8e:e6:36:59:b5:8d:1e:f3:f9:8f:b7:53:16:f5:
         e3:e5:81:62:cf:7c:5a:76:f1:08:1b:e4:b6:fa:ea:4a:9f:9a:
         b6:ed:c9:9b:83:40:30:5b:db:04:41:4a:4a:44:d7:11:5f:f4:
         6e:50:00:4d:71:99:6d:c0:e3:34:44:0b:15:90:93:51:53:83:
         64:e5:c2:fc:e7:1d:16:d0:4a:df:b1:ac:77:78:37:f3:59:94:
         56:12:ac:26:ec:4c:2a:49:af:a8:56:ae:d8:91:41:99:2a:e0:
         bf:f0:ef:47:2e:86:73:15:03:34:c0:5e:1f:72:ce:51:4b:9e:
         81:8a:3c:85:ee:62:b1:2c:f1:fd:9c:24:63:61:10:61:bc:a6:
         0c:41:43:a2:44:15:7a:47:e4:53:50:54:83:03:a4:f0:dd:4a:
         76:16:08:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:16:22 2025 by rpki-client