Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft
File:                     D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft (raw, json)
Hash identifier:          pNVyq7i6CobpYCGa1M8TVdm7yZi2DxTCzW4dHghNRqw=
Subject key identifier:   C7:62:35:33:F2:FC:B2:25:92:B4:EB:94:6A:2D:D7:74:99:5A:1A:48
Authority key identifier: D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40
Certificate issuer:       /CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40
Certificate serial:       0EDD824E948FB8750B0691D8C7720634AF7A7AF6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft
Manifest number:          57
Signing time:             Sat 14 Jun 2025 04:10:50 +0000
Manifest this update:     Sat 14 Jun 2025 04:05:50 +0000
Manifest next update:     Tue 17 Jun 2025 09:16:50 +0000
Files and hashes:         1: 3230322e3133332e362e302f32342d3234203d3e203234323030.roa (hash: PwrwjwU7TfjmAzlVIhNNq7JmiMiE2zPrnJS6Vjw4fpA=)
                          2: 3230322e3133332e312e302f32342d3234203d3e203234323030.roa (hash: +WQDDpOr7BIkoO1ou9EO6AdPk7I9sWGQQ0uBCTy/cyM=)
                          3: 3230322e3133332e342e302f32342d3234203d3e203234323030.roa (hash: aPtODejZ83CWdVDiKww6DVNDrHJed0ktroNcqSgEID0=)
                          4: D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl (hash: tpAeJiVrwrULAeEH8lx09PhWIMubejUCI1UcTy3Tggw=)
                          5: 3230322e3133332e372e302f32342d3234203d3e203234323030.roa (hash: sHrERPT1Gki4rCwtxWJOl3kaPuH5N8410kKwTEyBzNs=)
                          6: 3230322e3133332e302e302f32342d3234203d3e203234323030.roa (hash: Pppa12U1FBCWUbrjFLtimpCCb2f/w2y+Q5IjM+b5DpI=)
                          7: 3230322e3133332e302e302f32312d3231203d3e203234323030.roa (hash: TfiqH+4JRlzCqMd+ohke3uaa5qrL5wiizfc5eyZU4Bw=)
                          8: 3230322e3133332e332e302f32342d3234203d3e203234323030.roa (hash: KBjjsWsKQFuN1REWppuBIRLZLM4xHEbHMPv7NBToWH4=)
                          9: 3230322e3133332e352e302f32342d3234203d3e203234323030.roa (hash: fpRL8Fma9ykhIZFDzSC08kbZM+itPsUgTlUHNfip6cw=)
                          10: 3230322e3133332e322e302f32342d3234203d3e203234323030.roa (hash: bz45Mn7ZgKZreN1WmgS7I4+teMbA4Do/dtC0u8jELGY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl
                          rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 09:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:dd:82:4e:94:8f:b8:75:0b:06:91:d8:c7:72:06:34:af:7a:7a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40
        Validity
            Not Before: Jun 14 04:05:50 2025 GMT
            Not After : Jun 17 09:16:50 2025 GMT
        Subject: CN=C7623533F2FCB22592B4EB946A2DD774995A1A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7b:3a:60:57:46:5d:6b:60:97:62:49:58:e3:
                    fe:24:ff:d1:74:18:93:99:b2:d9:24:8f:aa:b9:fa:
                    9c:72:13:ce:3a:a6:d4:13:53:07:f1:a0:bd:d7:58:
                    d3:8b:06:2c:93:37:90:ff:ca:24:ad:4b:3a:e7:85:
                    ae:3e:bc:f8:a3:47:5b:58:06:82:76:ef:e5:6f:0e:
                    ef:6e:a0:ef:23:22:56:c8:3d:32:d7:ea:26:f8:7e:
                    81:25:25:aa:5b:9e:0c:38:a1:a6:fc:8c:47:be:88:
                    11:61:4e:da:b0:76:70:e6:5a:47:5f:f8:f4:d9:4d:
                    05:fb:95:65:ed:44:b3:d0:a1:e3:89:a6:49:6a:d4:
                    ed:38:13:01:a1:fa:62:e0:7a:fb:b4:1b:bb:f3:84:
                    dd:2f:30:d5:50:7a:09:b2:7b:2c:e6:47:05:38:09:
                    d5:73:7f:24:95:0f:d0:ba:a8:1b:00:e8:86:fa:aa:
                    6d:b2:dd:c6:77:58:31:43:ec:f2:24:98:ad:4e:63:
                    0c:f7:ab:96:04:5b:97:11:de:10:81:5d:7c:31:44:
                    bc:b2:c9:56:d7:63:1f:5c:40:f5:b6:47:58:28:38:
                    58:f3:2d:ca:3b:35:18:ed:bb:0a:8b:77:5b:e4:dc:
                    9f:06:31:09:9c:82:37:f3:19:5d:66:6a:cf:0f:1d:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:62:35:33:F2:FC:B2:25:92:B4:EB:94:6A:2D:D7:74:99:5A:1A:48
            X509v3 Authority Key Identifier:
                keyid:D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:33:ee:09:0c:00:42:e0:2c:6e:f7:2d:42:61:54:a7:50:e7:
         49:cb:ef:4e:88:31:0d:28:0a:03:ef:76:ed:ef:7a:c9:f4:36:
         14:52:19:7e:1c:f4:65:63:ba:93:a5:3c:3e:a5:05:57:78:6b:
         d1:c3:9a:54:9c:51:ab:b1:06:49:64:80:b5:9c:10:a1:fc:72:
         5d:a1:e0:be:97:45:cb:0d:d6:8e:c4:43:d3:93:58:9f:fd:6d:
         5a:6d:01:27:f1:00:bf:f7:e2:22:6e:c3:a4:58:57:10:81:bb:
         a6:37:62:0c:a7:00:18:ad:81:c9:dc:ba:7c:f7:f2:ca:2b:65:
         03:11:5d:b9:f1:c2:b9:6c:9b:49:c4:c5:5e:6e:11:a7:7f:6b:
         80:57:ac:11:02:4e:8d:1e:26:a8:e3:7c:23:51:12:57:38:47:
         cd:3a:bc:12:5a:b3:f8:32:53:b6:6d:f1:bc:c8:3a:72:31:83:
         35:48:ba:bc:9c:e5:23:9a:2b:30:53:e8:e5:ef:c2:a9:60:35:
         c3:7d:59:13:1c:4c:bb:75:19:22:5f:9c:ec:e2:4e:cc:9a:a7:
         96:a3:a7:34:d6:c8:d5:42:66:ab:5c:a2:39:3b:dd:df:7e:7a:
         1e:ab:8a:be:38:93:c6:9e:7f:f1:2a:d0:a5:6e:29:99:2c:98:
         65:1a:1d:af
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDt2CTpSPuHULBpHYx3IGNK96evYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4
QkE3QkU0MDAeFw0yNTA2MTQwNDA1NTBaFw0yNTA2MTcwOTE2NTBaMDMxMTAvBgNV
BAMTKEM3NjIzNTMzRjJGQ0IyMjU5MkI0RUI5NDZBMkRENzc0OTk1QTFBNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjezpgV0Zda2CXYklY4/4k/9F0
GJOZstkkj6q5+pxyE846ptQTUwfxoL3XWNOLBiyTN5D/yiStSzrnha4+vPijR1tY
BoJ27+VvDu9uoO8jIlbIPTLX6ib4foElJapbngw4oab8jEe+iBFhTtqwdnDmWkdf
+PTZTQX7lWXtRLPQoeOJpklq1O04EwGh+mLgevu0G7vzhN0vMNVQegmyeyzmRwU4
CdVzfySVD9C6qBsA6Ib6qm2y3cZ3WDFD7PIkmK1OYwz3q5YEW5cR3hCBXXwxRLyy
yVbXYx9cQPW2R1goOFjzLco7NRjtuwqLd1vk3J8GMQmcgjfzGV1mas8PHYkvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUx2I1M/L8siWStOuUai3XdJlaGkgwHwYDVR0j
BBgwFoAU0MbXXDw0fVsnx4kR9ixfq4unvkAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MzY2OWVhNC1lODJmLTQ2YzMtOGRkMy0yZTk4ODE1OWIyMDIvMC9EMEM2RDc1QzND
MzQ3RDVCMjdDNzg5MTFGNjJDNUZBQjhCQTdCRTQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4QkE3
QkU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2NjllYTQtZTgyZi00NmMzLThk
ZDMtMmU5ODgxNTliMjAyLzAvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVG
QUI4QkE3QkU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADYz7gkMAELgLG73LUJhVKdQ50nL706IMQ0o
CgPvdu3vesn0NhRSGX4c9GVjupOlPD6lBVd4a9HDmlScUauxBklkgLWcEKH8cl2h
4L6XRcsN1o7EQ9OTWJ/9bVptASfxAL/34iJuw6RYVxCBu6Y3YgynABitgcncunz3
8sorZQMRXbnxwrlsm0nExV5uEad/a4BXrBECTo0eJqjjfCNRElc4R806vBJas/gy
U7Zt8bzIOnIxgzVIuryc5SOaKzBT6OXvwqlgNcN9WRMcTLt1GSJfnOziTsyap5aj
pzTWyNVCZqtcojk73d9+eh6rir44k8aef/Eq0KVuKZksmGUaHa8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:23:26 2025 by rpki-client