Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
File:                     D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft (raw, json)
Hash identifier:          0BpP98X6l8hnAw4NL2Zi/Kg6m10BDc4qMMR5RTmU7no=
Subject key identifier:   59:BC:9B:AE:FE:0C:E8:DE:A7:EA:A6:53:BA:EA:E0:A7:7A:FF:73:84
Authority key identifier: D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B
Certificate issuer:       /CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
Certificate serial:       6A2AC88BB1933C137FC345C89525C1ECD98EE47B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
Manifest number:          0189
Signing time:             Wed 06 Aug 2025 14:41:48 +0000
Manifest this update:     Wed 06 Aug 2025 14:36:48 +0000
Manifest next update:     Sat 09 Aug 2025 18:10:48 +0000
Files and hashes:         1: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: s4bQxfKSzhThJnV2s35QtgCBE4otyhr6xeMzoqnFm8Y=)
                          2: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: AVCQCYheS5BSoSfK63mymGbndnc3O67DIxifLxMIMRQ=)
                          3: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: yZ3S3VlEg8XhUnYFrYIEtsQAe3osggFJf6UwQXimraQ=)
                          4: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: /N5+2aMU3EMAmEX99W6RjuRb23GuWa2brckaj7T7NN4=)
                          5: D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl (hash: 9uO8eIlGAdaS6RL8KQM7oZp+Xx42Lx+3ZPF8YDQj+5M=)
                          6: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: zfUtoWma6yrS91X836rvH56Roq4o4T2ksBJ5tvM84KA=)
                          7: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: nxP8W10E3LZDtZxP90veGMWm2rYEk3wENcKTTfAcq3U=)
                          8: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: EBlmqDEWkMyCK1/XHbvpi2pPtqys0z6jD8DKxQ3Fr5M=)
                          9: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: iA2jtRPunwvVs+oxAYcMwVPx60+n92IM12/OQGz8E7Y=)
                          10: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: kGo5Z0dQmddNogvMWcoI94YtEIKcIPX6FTz3PKH2TGQ=)
                          11: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: Yij8hR3THKb1LJQK8YbFbQB/18X0FAtAoVyRKdcSfao=)
                          12: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: LULC79bR5urCWK9LJ8T/IwclWUcY8RdpHGD/jOzeh8c=)
                          13: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: YKogFc3LCv2smSbI9VS3VlSDt3/kbrsDgP8adJABQHE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl
                          rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 18:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2a:c8:8b:b1:93:3c:13:7f:c3:45:c8:95:25:c1:ec:d9:8e:e4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
        Validity
            Not Before: Aug  6 14:36:48 2025 GMT
            Not After : Aug  9 18:10:48 2025 GMT
        Subject: CN=59BC9BAEFE0CE8DEA7EAA653BAEAE0A77AFF7384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:de:11:56:b1:f8:27:1b:2b:03:fb:d4:f7:
                    c7:fa:b8:c2:46:20:b3:50:15:a8:14:66:aa:66:a8:
                    3e:7f:28:19:be:29:56:d1:53:48:c1:35:85:09:1a:
                    ff:9f:ac:8d:75:3f:76:7b:ad:c7:4f:33:99:f9:c1:
                    ae:12:02:86:5d:64:9b:d8:27:34:af:19:7e:4b:dd:
                    c5:13:aa:dc:ff:b4:cf:1d:f8:11:58:c0:65:0a:b4:
                    0e:ac:34:65:bd:f4:2c:11:8c:f1:c9:bb:f1:16:9c:
                    93:1b:fa:bc:a4:ba:01:e4:07:ec:55:21:f2:53:37:
                    90:45:55:da:c4:e6:93:92:3f:b3:5a:f7:87:46:98:
                    17:db:79:be:38:28:a9:e0:95:0b:63:92:50:13:04:
                    57:fd:77:59:7d:c8:13:71:5a:83:21:8a:9c:0c:3c:
                    97:fa:50:29:d2:20:3b:53:1a:d7:33:b6:be:e2:b2:
                    a6:3c:b3:c0:02:7a:62:e7:e5:df:9f:b3:ce:b0:05:
                    f6:87:dc:d9:98:bc:67:6c:2a:d7:a0:ed:ca:e8:f6:
                    72:41:45:14:5d:9b:2b:47:5f:6a:be:0b:bc:80:90:
                    7f:79:03:d4:0b:bc:1f:ed:18:2e:b4:b4:2f:f3:48:
                    14:ef:80:a5:9b:0c:8c:e0:2e:59:1c:b9:9a:de:aa:
                    94:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BC:9B:AE:FE:0C:E8:DE:A7:EA:A6:53:BA:EA:E0:A7:7A:FF:73:84
            X509v3 Authority Key Identifier:
                keyid:D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f6:0e:a9:6b:4f:fc:99:cd:4a:c2:18:fe:b5:29:a5:eb:9a:
         48:e4:7f:70:78:14:1a:96:2a:50:db:17:dc:41:1e:4f:19:ba:
         e0:73:d9:e1:c7:df:a5:c7:44:a7:71:d2:d3:d3:bf:ee:3a:05:
         b2:26:6d:59:4f:54:b6:60:99:bd:1f:6a:3e:f2:27:9a:d4:56:
         31:28:72:ab:8f:ff:a6:a7:22:61:bc:60:98:e4:1e:38:29:24:
         e8:5d:2b:b4:37:38:6a:d6:72:7b:cb:a6:c3:b8:f4:88:bb:da:
         ae:ee:2d:a2:09:c3:7d:02:71:06:6a:9d:9a:56:08:23:e0:76:
         15:ce:4f:f2:8c:9c:8c:4a:97:9a:53:eb:0f:3a:89:86:63:09:
         ca:29:08:13:40:f9:a9:9b:e3:33:39:11:59:c6:51:7e:7a:75:
         67:cd:68:6a:4f:71:76:d1:54:77:9f:ad:68:04:a4:81:c0:fe:
         3c:b1:72:f0:77:db:c7:26:c1:fd:ee:c6:eb:7c:41:fd:50:ad:
         ff:1d:0c:ba:73:f5:0c:73:63:1b:2a:11:65:06:e1:24:66:7c:
         9a:76:45:f6:6e:c9:8f:3d:21:88:1a:cb:c4:f0:41:d1:f2:b5:
         8a:39:11:65:7b:9b:5c:10:14:96:66:b0:8e:16:22:85:42:3e:
         80:04:df:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:58:03 2025 by rpki-client