Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
File:                     0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json)
Hash identifier:          KL+v/vELB/wp+Kzq9txy+fz2EWKv8XvqoPTN7XQuZ08=
Subject key identifier:   47:39:2D:DC:C8:CE:0F:1E:FE:1C:E7:CF:51:62:60:3C:99:FD:D0:AD
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       54AB2869AB7D396F77F8393784BAFE2F37D50D8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
Manifest number:          0506
Signing time:             Sun 15 Jun 2025 02:50:51 +0000
Manifest this update:     Sun 15 Jun 2025 02:45:51 +0000
Manifest next update:     Wed 18 Jun 2025 13:55:51 +0000
Files and hashes:         1: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: zHFuXcJsHRS8oU5g73vyR9ezkdJAc6jv+r1NZhBGTU4=)
                          2: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: bxCtL+E+aj/N4Kalq1Y8KoLLuOYGNYcJYSylGSM4Ndw=)
                          3: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: /Pgqw6Rs+ajT828waAS0R/dEt8fu2pWuzGj9i8zT3Rk=)
                          4: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: +6pVD67UjeVGjTszHXfeH5DOs+PMEo+OZcwkbcYuJKY=)
                          5: 3131302e37362e3134382e302f32332d3234203d3e20313333383330.roa (hash: hJMSnRVsi5t20DGIdOobYby7Tk1CLRDO/LphhBQDrQ8=)
                          6: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: eUGLFIbBQXUlbrF2iA2Xszdo9Zh7AGLGsZzJrRkvT6k=)
                          7: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: nj7nwkg4jEji5skSyGq127SyeIEToj2AxAchD/5z7y0=)
                          8: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: ymwaUvhXT8JXSJrNzjbP7gt7yXJ53LxTJX8Voq/f/74=)
                          9: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: wSzeEeUlQ9dVeDBBx0XlYcJDAiPM7sQsbdx5J/YQ+rE=)
                          10: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: KoEPh6lpEMSvfnV/vjmbsJ0wLOTaFFj1PpSDlGO5Ls8=)
                          11: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: 6L28DKU2IWYtA3lRV3VTpPyJ/UkW+g97L32zaXfZ124=)
                          12: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: 8rPJ4nXTJ70Up3y89jTvrnK5p5EQ4mjAGK2p65JUucA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 13:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ab:28:69:ab:7d:39:6f:77:f8:39:37:84:ba:fe:2f:37:d5:0d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: Jun 15 02:45:51 2025 GMT
            Not After : Jun 18 13:55:51 2025 GMT
        Subject: CN=47392DDCC8CE0F1EFE1CE7CF5162603C99FDD0AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:37:07:2f:1b:7f:33:9b:0d:9b:77:b7:79:
                    db:97:86:92:9c:20:9a:7b:b3:42:5f:e9:ea:d1:4a:
                    a5:54:c5:16:9f:30:bf:17:91:ca:da:32:33:d1:f6:
                    64:4b:ac:f3:b9:f7:1d:4c:6f:6e:23:a2:9f:38:79:
                    40:f0:12:e6:f4:3c:f8:e2:32:51:eb:66:5d:73:f7:
                    bd:1d:b7:4c:1d:08:0d:a0:ad:e2:10:1a:9f:97:83:
                    c6:9c:c1:c9:91:81:6e:36:04:e4:cc:44:b6:27:a2:
                    ac:c1:c8:ec:28:35:40:05:c5:58:eb:65:c3:f5:f7:
                    60:3c:1a:a4:a1:65:c3:32:bd:b2:b3:30:49:62:55:
                    03:22:e2:6e:74:88:3f:4a:00:29:3a:55:0f:b0:7d:
                    b1:80:93:27:87:8b:22:d3:5c:b3:60:5a:7e:f1:67:
                    f0:45:e3:46:3b:81:ad:7f:13:04:5d:be:89:ac:88:
                    9f:b5:aa:6d:22:57:28:6c:bc:59:21:b9:f4:07:6e:
                    34:38:ec:0d:b7:db:7d:44:ce:9f:fd:4f:34:2a:38:
                    eb:89:1b:51:35:ad:40:4c:e1:e1:40:7b:29:72:5e:
                    31:56:20:56:77:b8:3c:e7:fd:00:db:40:9d:27:67:
                    ec:0a:c3:8d:ff:78:80:e5:1f:7b:cc:ea:c4:e5:96:
                    81:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:39:2D:DC:C8:CE:0F:1E:FE:1C:E7:CF:51:62:60:3C:99:FD:D0:AD
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1b:40:0a:df:3e:09:b2:00:43:4e:e7:57:61:7a:f4:b7:11:
         40:08:d2:f1:45:aa:54:74:0e:f0:b6:0a:1a:38:1d:40:38:21:
         fa:c6:ca:7a:cd:f7:b9:77:dd:c4:b3:1e:60:3f:95:b5:b8:e1:
         fc:54:33:6d:fc:0b:ba:c1:f8:68:83:4b:b9:c6:23:96:a8:ea:
         fd:21:f4:1c:8d:44:88:d3:53:21:a6:04:94:66:fa:7a:ac:80:
         53:48:6b:72:a4:57:62:0f:65:f6:ba:e8:ff:83:be:9d:dd:4a:
         73:c1:8f:7b:5b:71:ee:81:b0:77:f3:0a:49:56:18:ab:cf:29:
         e5:57:16:5b:4b:78:dc:c4:7d:21:c4:46:9a:e1:27:f7:ed:1f:
         ae:e1:2d:aa:07:57:8e:e4:0d:85:c4:f7:3b:32:d5:f5:cd:f8:
         ac:be:15:af:71:05:f2:bc:7f:a9:8b:8e:ce:4f:53:16:a8:46:
         eb:79:8f:23:4f:39:06:00:3d:58:ca:b6:61:5e:25:f4:cc:33:
         99:0b:1e:6b:c2:9c:b9:62:a3:c4:27:d9:7b:3c:b3:f0:fa:61:
         ab:5b:df:d5:fc:26:a5:2a:27:4e:c6:ae:a6:b5:9d:96:ff:f6:
         21:10:9c:f7:30:c8:f3:53:30:42:d3:c9:95:bf:19:d7:7d:4e:
         11:06:23:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:26:55 2025 by rpki-client