Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
File:                     D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft (raw, json)
Hash identifier:          HafCoBwxKvX8k6IofCpoQ7QylSnNIUxKcqyEaGM6IwI=
Subject key identifier:   0E:1B:4B:52:B1:54:E6:F5:CE:2A:23:EA:3B:0E:11:3E:74:05:0D:D0
Authority key identifier: D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B
Certificate issuer:       /CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
Certificate serial:       178FA21F431F57A0F58EFCB289DE444E25E01B61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
Manifest number:          0171
Signing time:             Fri 13 Jun 2025 22:31:44 +0000
Manifest this update:     Fri 13 Jun 2025 22:26:44 +0000
Manifest next update:     Tue 17 Jun 2025 06:39:44 +0000
Files and hashes:         1: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: Yij8hR3THKb1LJQK8YbFbQB/18X0FAtAoVyRKdcSfao=)
                          2: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: EBlmqDEWkMyCK1/XHbvpi2pPtqys0z6jD8DKxQ3Fr5M=)
                          3: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: yZ3S3VlEg8XhUnYFrYIEtsQAe3osggFJf6UwQXimraQ=)
                          4: D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl (hash: /4o91yX/e3SSn1Wpj7z6w+qgIU/BpHXIGpkkEYXCj9Y=)
                          5: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: nxP8W10E3LZDtZxP90veGMWm2rYEk3wENcKTTfAcq3U=)
                          6: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: iA2jtRPunwvVs+oxAYcMwVPx60+n92IM12/OQGz8E7Y=)
                          7: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: zfUtoWma6yrS91X836rvH56Roq4o4T2ksBJ5tvM84KA=)
                          8: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: f/arRfXAUGPd0PxBrTY92XVsLoDe3ia1QDQqr6ZPyiI=)
                          9: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: kGo5Z0dQmddNogvMWcoI94YtEIKcIPX6FTz3PKH2TGQ=)
                          10: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: /N5+2aMU3EMAmEX99W6RjuRb23GuWa2brckaj7T7NN4=)
                          11: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: LULC79bR5urCWK9LJ8T/IwclWUcY8RdpHGD/jOzeh8c=)
                          12: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: AVCQCYheS5BSoSfK63mymGbndnc3O67DIxifLxMIMRQ=)
                          13: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: YKogFc3LCv2smSbI9VS3VlSDt3/kbrsDgP8adJABQHE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl
                          rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 06:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8f:a2:1f:43:1f:57:a0:f5:8e:fc:b2:89:de:44:4e:25:e0:1b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
        Validity
            Not Before: Jun 13 22:26:44 2025 GMT
            Not After : Jun 17 06:39:44 2025 GMT
        Subject: CN=0E1B4B52B154E6F5CE2A23EA3B0E113E74050DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:9f:ca:53:ea:7e:4d:3c:fe:75:67:01:f1:
                    6b:db:10:45:3e:7b:6a:62:4d:5d:8a:91:6b:4f:e7:
                    1e:ce:40:01:72:f3:e6:d0:44:0e:3c:76:e8:55:ab:
                    ef:2c:6c:57:b0:19:d5:d6:58:9e:b2:5d:12:1c:82:
                    c4:96:d6:91:a3:b0:52:31:ef:86:f2:a0:73:eb:fd:
                    14:31:0f:61:6c:ce:de:4e:10:37:73:16:b7:69:5d:
                    42:1e:2d:06:82:91:42:8f:f9:61:89:c4:df:18:fc:
                    d5:83:e6:35:9a:c4:c0:da:03:12:fa:ff:a6:db:46:
                    dc:f4:bf:33:f7:18:1c:fd:7e:6b:dd:51:8a:76:9d:
                    9f:a7:4d:f7:ce:e4:d7:2f:6f:90:4a:3f:9c:30:e6:
                    5d:ab:da:f4:7b:92:ba:3b:73:f7:ac:b7:4a:36:c5:
                    0b:a5:7e:77:de:b8:ef:51:2a:9f:f4:80:f1:01:e7:
                    2c:c6:67:e4:7f:17:64:7c:e0:8f:fb:23:cf:1f:33:
                    28:19:cb:11:6c:8b:9a:54:ce:99:9a:9b:a5:52:f4:
                    9f:94:fc:2f:26:c0:a4:19:3a:51:6a:95:c8:52:17:
                    ef:8b:bd:cb:76:f8:98:5e:c4:5c:6b:2a:e7:41:35:
                    89:8a:71:ab:73:4f:30:fa:7d:ba:54:ee:78:95:df:
                    a1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1B:4B:52:B1:54:E6:F5:CE:2A:23:EA:3B:0E:11:3E:74:05:0D:D0
            X509v3 Authority Key Identifier:
                keyid:D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a9:85:32:d0:1c:3e:93:74:c5:7c:93:73:ab:a6:97:a7:8b:
         b1:1d:5a:79:0f:52:5d:ab:7c:35:65:91:d3:cc:04:f1:d0:65:
         28:ea:dc:85:f2:2d:fc:2a:df:95:e0:9e:b5:14:c7:41:a0:be:
         a7:00:a6:9d:ef:8f:62:53:6b:c0:af:59:23:79:2c:a1:18:ed:
         21:42:0c:27:2d:03:93:8e:89:5b:18:da:8a:59:6c:a6:2e:ec:
         47:fd:9f:50:f2:4a:59:14:21:51:57:57:e9:2a:3f:6e:bf:65:
         02:f6:bd:12:81:87:c4:fc:a6:21:53:3e:23:2e:73:14:56:62:
         4e:4a:60:0b:30:2e:ab:92:5a:b0:f0:2d:19:7c:f3:3e:64:92:
         b3:62:0f:32:66:50:95:4d:f0:4b:82:7d:cc:22:8a:b1:9e:32:
         2f:16:4e:cb:53:4f:e6:ca:40:a6:d1:a1:2c:16:cd:c7:b3:44:
         c6:ce:dd:4e:67:41:a3:56:f5:34:dc:b1:22:88:40:73:da:d3:
         02:8a:a0:bf:29:3c:04:1e:ad:1e:5b:a6:df:c2:04:52:fc:0a:
         8f:c1:ef:f4:75:34:15:11:ce:7d:52:83:30:07:74:90:37:a6:
         e9:4b:e0:c2:a2:08:ea:3b:e5:18:a3:95:72:24:11:0f:c3:50:
         f5:20:15:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:10:54 2025 by rpki-client