Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
File:                     08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json)
Hash identifier:          FAyPTpSVGPlGRBqbgqb4X7xsm+/pEp5qsq+4Nmr8j6I=
Subject key identifier:   14:C1:FB:35:C8:03:FA:99:59:37:46:02:93:8D:29:91:48:50:C8:F6
Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43
Certificate issuer:       /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43
Certificate serial:       42CEF3768D50818405A890438176272786CA0873
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
Manifest number:          04E6
Signing time:             Sun 15 Jun 2025 16:51:32 +0000
Manifest this update:     Sun 15 Jun 2025 16:46:32 +0000
Manifest next update:     Wed 18 Jun 2025 17:22:32 +0000
Files and hashes:         1: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: e4K70c+l6o1H0jUf9NfNvizUU4LNYZwwkZ1VlRNX2oM=)
                          2: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=)
                          3: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: 7SJMGKYIqywZq1oxStI1Ck+o92Gvb6NwaNA8HcKMaAA=)
                          4: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: +Qpxa5tuXUbGmdEMTheVpHvWYbCADJoAx1XIiJ6kkyQ=)
                          5: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=)
                          6: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: u+IsKabmMYSShcM0febXZudxfSET/Z8cSb2vWwMgZg0=)
                          7: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: W0H9HDrVApNe3HWG7kzRwsgZpewrgw+OQsIBd3Xl334=)
                          8: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: p+o3Rxwi7Ep9QzNDO0C3gsAoxTUv16nFtXGsCyIZiVs=)
                          9: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: 4IPSllJPKCbe7aQKXRkaaNgX/oYCfpS1iXyW/h8vCFE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl
                          rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 17:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ce:f3:76:8d:50:81:84:05:a8:90:43:81:76:27:27:86:ca:08:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43
        Validity
            Not Before: Jun 15 16:46:32 2025 GMT
            Not After : Jun 18 17:22:32 2025 GMT
        Subject: CN=14C1FB35C803FA9959374602938D29914850C8F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:04:95:bd:dc:74:80:f7:4a:12:6e:1f:54:b9:
                    e1:73:2d:40:4d:70:4c:b1:3a:0c:b1:3c:41:73:d9:
                    c6:21:c2:c4:64:f9:34:04:2d:93:67:cc:43:2d:d0:
                    1f:89:c2:4d:7d:15:59:2f:45:71:6c:41:61:5f:47:
                    e9:70:6c:76:21:b8:7d:89:15:72:41:cf:c3:5c:f6:
                    bc:6c:aa:1a:39:79:3c:c1:83:08:64:a3:69:df:63:
                    22:c8:0a:10:33:84:a7:f2:e8:17:2e:77:44:ea:33:
                    47:17:c4:b0:c4:9b:42:df:4a:f2:ca:29:af:64:71:
                    77:1d:6e:f2:97:29:23:ec:08:55:26:6e:62:62:0d:
                    d6:96:47:02:17:07:3e:bb:24:67:db:f3:69:5a:69:
                    10:8b:89:4b:11:48:bd:24:d1:6c:11:e4:1f:5a:0b:
                    cb:00:88:84:55:6d:fb:48:0f:88:1f:65:a2:b0:a4:
                    24:ff:86:4f:8e:63:f4:4e:a2:b9:6d:4d:30:db:be:
                    b9:bb:23:2e:1b:7f:4a:a5:12:0d:b5:61:37:fb:58:
                    c5:eb:4d:8b:fa:6c:b5:47:6d:cf:8e:42:13:64:e5:
                    c5:f8:22:0b:2f:8d:34:63:3b:98:5a:7f:5d:85:db:
                    32:20:1c:f1:8f:e2:22:5d:76:99:20:2d:b4:f3:eb:
                    5b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C1:FB:35:C8:03:FA:99:59:37:46:02:93:8D:29:91:48:50:C8:F6
            X509v3 Authority Key Identifier:
                keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:71:a1:5e:a1:14:9a:03:d9:4b:a3:2b:df:d8:60:ad:49:24:
         34:b4:11:12:da:d6:35:72:3e:6e:13:2e:79:ad:01:67:ae:78:
         ae:58:5a:02:0c:61:f0:d2:24:d2:02:00:c2:89:52:35:5c:46:
         dd:34:3a:82:61:fe:e2:c0:01:36:6c:75:16:4a:1e:58:cb:c8:
         ce:6b:f8:4d:7b:2c:95:84:e7:83:25:9b:97:7b:ff:c8:b7:8e:
         b0:76:49:cc:3d:18:fe:c3:9e:b8:d2:14:c7:7b:b7:19:86:f4:
         70:16:b9:55:41:ae:ae:fc:b1:1e:98:3e:16:74:e4:36:67:ee:
         18:d5:dc:ca:13:0f:4b:27:dc:58:72:f4:14:94:89:67:7b:1c:
         b8:f2:f4:75:e1:73:bd:f8:b9:7b:eb:e8:89:3e:e4:6b:c7:fe:
         92:7a:58:76:4a:20:5b:d6:f3:80:c4:7e:17:1e:e0:ee:48:7a:
         1b:73:5b:bc:4b:ff:f6:fd:18:23:bb:13:b8:79:9d:ce:5e:d3:
         dc:3a:a6:af:45:ab:72:13:c5:b0:a1:e4:c3:0b:b1:6f:25:74:
         7d:8f:04:2d:f5:e0:4c:10:df:e6:fb:2a:4b:a6:90:c3:2f:aa:
         1b:38:8e:42:03:a9:7d:08:57:48:31:f5:1a:6f:4b:43:ca:51:
         0b:b2:4b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:13:49 2025 by rpki-client