Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
File:                     F38DFF094E16843854EAC1403C69FD7F77809D02.mft (raw, json)
Hash identifier:          x26FD/iHdc3tHOVJYoEe/nmgInW74+55wd1pyDQ1rMA=
Subject key identifier:   E2:46:CA:F4:0C:EC:AF:95:FD:7C:31:8A:4D:2D:0C:21:0B:1A:9D:2B
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       4750A7879FBF627E7FCD3A2C4E24229238409716
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
Manifest number:          0512
Signing time:             Mon 04 Aug 2025 22:21:33 +0000
Manifest this update:     Mon 04 Aug 2025 22:16:33 +0000
Manifest next update:     Fri 08 Aug 2025 04:39:33 +0000
Files and hashes:         1: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: flGSxQD++NqarnKtTxSlBovOQhcEWH2Yg3wz5JBQPvM=)
                          2: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: 9c49vJ806rinKU2yZDXFYCFMBIoAnvTzCxv8zv5wDgg=)
                          3: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: Ukwgls6QusI0sVPeKowIBEMKKVNZ7qicjc7eWe3Bawc=)
                          4: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: h8u7SrJg5ku6Yo95VNwdkXmyCuJqQtraeAvM3Te6q9c=)
                          5: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: hceiRn1k+oO/x+5WpC4OSWhZbFgi/4V0uwvwpTc+nOA=)
                          6: F38DFF094E16843854EAC1403C69FD7F77809D02.crl (hash: 0lgzs7w3TFforrN7uSolRTBWA4b0B0ex9slTXZr3kQw=)
                          7: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: 0PzoQhjtIBIp5z3u6ZT2GigMXbei3fP0btsZYcijF1o=)
                          8: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: cv1KBGnemLgcaZAxGgllsmZ1S3QTjWbciD6aB9fI3zI=)
                          9: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: ivkwwboxp97krml3NHZ+/mc1/AhS1A0qIb6B1JYBu0M=)
                          10: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: yp7YYUGfEi7m0LLSnf3xhw/IgYSZYGNpCN1qo/q9Vug=)
                          11: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: nP5ghc/w9D/B5ENDC9cSkfzoaC33TZbwzsOf4OkDm5Q=)
                          12: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: OolbpeUpBXtFe5uwnVMRBxDj4cHLKQcUAfTTgB8M49A=)
                          13: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: C2SSV6l4PIV/2AjjXlwr1QY5lzBadYfvShLh+b2ERSY=)
                          14: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: +ULriNL1i1nU37Wxup/0FyWzsRtKq1c09nU9dI4qvF4=)
                          15: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: NCNOeK1jYrHltR7G6BT7J1s3ZTFTmFlKn4/XG+RT23s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 04:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:50:a7:87:9f:bf:62:7e:7f:cd:3a:2c:4e:24:22:92:38:40:97:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Aug  4 22:16:33 2025 GMT
            Not After : Aug  8 04:39:33 2025 GMT
        Subject: CN=E246CAF40CECAF95FD7C318A4D2D0C210B1A9D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:d6:00:c3:13:9d:c8:06:91:13:95:88:ad:
                    33:b6:22:e3:40:4a:f4:f3:5f:92:06:df:5e:d5:b1:
                    4a:95:b6:ed:99:97:54:13:bd:48:f4:de:22:c6:1b:
                    e6:46:bd:2a:77:7c:0e:3b:5f:b6:59:a3:38:46:79:
                    c8:ae:70:21:a6:a6:a8:ec:33:8b:60:8c:5b:64:48:
                    59:93:9b:12:b3:6b:88:94:ea:e1:80:22:86:62:52:
                    03:25:32:ff:2e:69:30:f3:c4:95:01:15:d1:b4:58:
                    51:c8:e8:9c:45:49:50:4b:e0:22:ca:cb:ba:1b:47:
                    85:35:6f:16:c3:9f:83:97:33:82:a2:23:82:58:21:
                    13:3a:9a:53:3d:f6:ed:77:07:2c:25:8c:52:9e:fa:
                    e9:69:1b:27:49:4f:11:5c:6e:a9:48:99:a4:a6:fe:
                    2e:7a:ec:ef:df:ae:4a:72:18:12:24:16:bc:0c:1f:
                    56:39:27:1b:fd:90:f5:75:6d:f8:0a:9d:48:ee:cb:
                    f0:84:84:fa:29:dd:47:fb:fa:9b:51:4d:90:f2:29:
                    ec:07:a1:d2:14:5c:70:3e:39:02:e8:55:a2:a7:bb:
                    46:dc:a2:48:a4:42:c5:c0:7c:d1:8a:dd:9f:e4:70:
                    e6:71:27:9f:67:63:16:82:a8:7d:0b:6e:17:81:46:
                    7e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:46:CA:F4:0C:EC:AF:95:FD:7C:31:8A:4D:2D:0C:21:0B:1A:9D:2B
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:08:f9:71:29:cf:70:57:c9:12:b8:32:84:87:f6:9f:8c:17:
         f5:68:70:b6:75:6c:55:d6:0f:b7:b0:2f:5c:f8:fd:e7:50:8f:
         2a:37:80:8a:3d:49:60:73:74:f0:db:75:5d:36:2a:ad:29:92:
         2e:de:fe:de:0f:06:b4:51:e2:f7:70:1e:95:8c:57:95:07:17:
         43:53:dd:cd:4f:c6:84:3f:cb:ab:8f:dc:66:04:04:5e:73:61:
         b3:54:a5:50:ea:f1:c5:53:e9:43:fc:ca:a4:99:6c:cb:ed:c4:
         63:a5:dc:d6:c0:73:1c:47:1a:80:f2:a4:34:d5:6a:47:14:31:
         bf:fd:fb:25:07:ce:f0:e6:ea:d6:5b:43:d6:46:9c:51:15:15:
         4a:72:85:0c:de:72:9f:d1:7c:13:91:c6:2e:4f:c4:82:0d:dc:
         c2:5f:62:b0:1d:89:36:be:a1:fe:53:5e:16:e8:dd:04:db:9f:
         be:14:21:df:67:76:52:c7:59:99:e4:e8:fc:71:74:e4:d3:f6:
         7a:28:64:f3:38:f2:e1:92:4b:15:c8:8a:33:7e:86:26:e2:4e:
         cd:60:5c:86:11:cf:a8:a1:45:8d:db:35:c0:36:75:07:1f:14:
         15:29:65:e4:ab:8a:80:22:a3:90:39:90:69:bb:e2:b7:fe:49:
         85:b2:2b:2c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUR1Cnh5+/Yn5/zTosTiQikjhAlxYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3
NzgwOUQwMjAeFw0yNTA4MDQyMjE2MzNaFw0yNTA4MDgwNDM5MzNaMDMxMTAvBgNV
BAMTKEUyNDZDQUY0MENFQ0FGOTVGRDdDMzE4QTREMkQwQzIxMEIxQTlEMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPhtYAwxOdyAaRE5WIrTO2IuNA
SvTzX5IG317VsUqVtu2Zl1QTvUj03iLGG+ZGvSp3fA47X7ZZozhGeciucCGmpqjs
M4tgjFtkSFmTmxKza4iU6uGAIoZiUgMlMv8uaTDzxJUBFdG0WFHI6JxFSVBL4CLK
y7obR4U1bxbDn4OXM4KiI4JYIRM6mlM99u13BywljFKe+ulpGydJTxFcbqlImaSm
/i567O/frkpyGBIkFrwMH1Y5Jxv9kPV1bfgKnUjuy/CEhPop3Uf7+ptRTZDyKewH
odIUXHA+OQLoVaKnu0bcokikQsXAfNGK3Z/kcOZxJ59nYxaCqH0LbheBRn4nAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4kbK9Azsr5X9fDGKTS0MIQsanSswHwYDVR0j
BBgwFoAU843/CU4WhDhU6sFAPGn9f3eAnQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YWQ2ZGNjOS0xNzAwLTQ4ZWItOTA5OS02Njc4ZjkxYmY0NGUvMC9GMzhERkYwOTRF
MTY4NDM4NTRFQUMxNDAzQzY5RkQ3Rjc3ODA5RDAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3Nzgw
OUQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFkNmRjYzktMTcwMC00OGViLTkw
OTktNjY3OGY5MWJmNDRlLzAvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZE
N0Y3NzgwOUQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAYI+XEpz3BXyRK4MoSH9p+MF/VocLZ1bFXW
D7ewL1z4/edQjyo3gIo9SWBzdPDbdV02Kq0pki7e/t4PBrRR4vdwHpWMV5UHF0NT
3c1PxoQ/y6uP3GYEBF5zYbNUpVDq8cVT6UP8yqSZbMvtxGOl3NbAcxxHGoDypDTV
akcUMb/9+yUHzvDm6tZbQ9ZGnFEVFUpyhQzecp/RfBORxi5PxIIN3MJfYrAdiTa+
of5TXhbo3QTbn74UId9ndlLHWZnk6PxxdOTT9nooZPM48uGSSxXIijN+hibiTs1g
XIYRz6ihRY3bNcA2dQcfFBUpZeSrioAio5A5kGm74rf+SYWyKyw=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:19:03 2025 by rpki-client