Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
File:                     4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json)
Hash identifier:          6odAOeAUq0g7bsCgoOGWVF89w+L41cwfVR3ytbR5fNk=
Subject key identifier:   AE:46:14:2D:CD:1A:08:19:CD:8A:DE:A3:03:AB:AF:57:A0:CD:64:BD
Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
Certificate issuer:       /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Certificate serial:       3F501CCB1BE80B671013AC5897B3D219219105CC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
Manifest number:          0507
Signing time:             Wed 06 Aug 2025 10:20:58 +0000
Manifest this update:     Wed 06 Aug 2025 10:15:58 +0000
Manifest next update:     Sat 09 Aug 2025 17:15:58 +0000
Files and hashes:         1: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: S8lyObQBOuPDRueBj8YjzK0Yqke0dcnMl7Vcc48vuVs=)
                          2: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: Qjv/mGfQRB5AB46dWcHhxxNcs3aS1PJFtKLeGoBkxi0=)
                          3: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: ZqT27QjOP9C+x+HxEBPLWbwm+mlgqdclma4hL/DLOAM=)
                          4: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: 8gu4g1bdcjin/i0TEIycNgxzwZksIdfr4ERNzQVV1jI=)
                          5: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: moNwAWlPkj0rtokbSnZwVDheKPDbut9HTHNYooRQM7Q=)
                          6: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: d3eM98YfiQHd35IoK+KK/VXjFcXTY4k6PTjZu1TQR90=)
                          7: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: M0kpoiMJz2nqcDHM4+IDiv36zcCScNRzFBsHOs/3AR8=)
                          8: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: DrBIeEQt6yULPW0r6792EagtEDf0ZZCsQyk/153rumY=)
                          9: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d7TlxPMnZWo9NiIWBhiGrIW1xBkbQUYDXZcwgsom8Dk=)
                          10: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: 5Yjn1xzYUyXHAIu8ieYmhhXRGkoBPybJZRq7aWT18y0=)
                          11: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: kXwkhbJ+oGBQpIPdrmdbXU4UMfG2qJFbyPtaW45RBFo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl
                          rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 17:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:50:1c:cb:1b:e8:0b:67:10:13:ac:58:97:b3:d2:19:21:91:05:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
        Validity
            Not Before: Aug  6 10:15:58 2025 GMT
            Not After : Aug  9 17:15:58 2025 GMT
        Subject: CN=AE46142DCD1A0819CD8ADEA303ABAF57A0CD64BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:ab:f9:15:82:55:16:cf:4e:fa:c0:f9:d3:
                    eb:a1:50:e2:49:b6:d9:0e:5d:b2:08:0b:f3:e2:d7:
                    d7:0a:25:15:75:e9:ab:e4:49:68:81:e8:20:fa:ec:
                    fd:26:1e:b0:50:83:0f:0f:fa:07:0d:83:9b:09:8a:
                    dc:89:40:ac:66:cb:cc:fd:23:1a:41:06:2f:e9:17:
                    82:20:48:86:ef:b0:ae:bc:61:8b:19:59:8f:a3:0f:
                    d2:bb:e2:16:f8:e1:72:28:3a:e2:64:43:e8:0a:7f:
                    6d:0b:dd:3f:5d:89:b1:96:77:f4:49:fd:a0:24:9b:
                    c6:8b:8f:e7:9b:f1:bd:ed:6e:b3:87:48:f8:ba:59:
                    7d:25:a2:45:ca:7e:eb:12:45:17:9d:21:2e:7d:a6:
                    36:b1:8f:c3:d3:d5:d6:98:27:6b:e1:d2:a6:2e:19:
                    00:12:67:25:a9:3b:af:69:2e:3a:09:dc:3c:81:43:
                    25:20:d7:ce:8b:52:58:c9:88:8e:47:b6:56:4c:3b:
                    01:71:10:cf:f2:95:da:6f:19:5e:f8:04:ad:19:55:
                    e0:b6:28:35:fd:b8:65:11:56:2e:b4:4b:a7:4c:e9:
                    e9:08:2d:61:7e:4b:62:be:08:d4:e3:b7:be:34:63:
                    0a:e8:00:40:d8:57:8e:b0:21:fd:e7:f2:17:ea:24:
                    10:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:46:14:2D:CD:1A:08:19:CD:8A:DE:A3:03:AB:AF:57:A0:CD:64:BD
            X509v3 Authority Key Identifier:
                keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:30:48:f2:61:f5:3d:68:d3:08:e9:9a:4a:f8:e3:80:51:ed:
         91:68:b7:00:8f:a1:3f:79:81:36:ef:18:57:6b:c6:d8:54:3b:
         b1:2f:61:5a:5f:7a:b1:09:75:59:67:0b:52:58:27:27:27:b4:
         a6:01:73:61:b0:10:b0:8d:61:b3:d1:50:63:af:fc:6e:1b:1c:
         23:c2:fa:db:9b:46:f2:bb:92:8a:d5:a8:8b:d1:de:b4:78:56:
         b7:1f:97:8e:85:3b:51:10:8b:22:c5:ed:47:5b:57:9f:53:e1:
         c3:a1:6c:22:15:22:cd:76:91:ec:96:bc:bd:77:af:60:10:9f:
         d8:d0:c3:b3:fa:02:02:f5:0b:5b:d8:d6:06:70:67:ca:3d:47:
         64:cd:7c:a2:77:26:7f:24:2d:69:9a:fe:e5:50:f3:ee:95:dd:
         23:d6:29:59:03:67:26:76:2b:d7:49:d6:e4:a5:68:c6:8b:21:
         d5:2d:63:e2:ff:ff:9b:2f:e7:14:58:15:ea:88:c8:c2:f2:87:
         06:30:2d:05:83:43:ce:b2:1c:ce:a6:43:cc:1c:dd:94:25:ec:
         7a:46:32:77:a8:c0:3c:60:cb:e4:c2:5a:ce:f2:69:90:b9:e7:
         ad:49:18:ad:70:f4:5b:47:13:ac:3a:39:9a:9c:30:b9:e3:85:
         c0:55:68:92
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUP1AcyxvoC2cQE6xYl7PSGSGRBcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3
RkMzODc4NzAeFw0yNTA4MDYxMDE1NThaFw0yNTA4MDkxNzE1NThaMDMxMTAvBgNV
BAMTKEFFNDYxNDJEQ0QxQTA4MTlDRDhBREVBMzAzQUJBRjU3QTBDRDY0QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC21av5FYJVFs9O+sD50+uhUOJJ
ttkOXbIIC/Pi19cKJRV16avkSWiB6CD67P0mHrBQgw8P+gcNg5sJityJQKxmy8z9
IxpBBi/pF4IgSIbvsK68YYsZWY+jD9K74hb44XIoOuJkQ+gKf20L3T9dibGWd/RJ
/aAkm8aLj+eb8b3tbrOHSPi6WX0lokXKfusSRRedIS59pjaxj8PT1daYJ2vh0qYu
GQASZyWpO69pLjoJ3DyBQyUg186LUljJiI5HtlZMOwFxEM/yldpvGV74BK0ZVeC2
KDX9uGURVi60S6dM6ekILWF+S2K+CNTjt740YwroAEDYV46wIf3n8hfqJBC1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrkYULc0aCBnNit6jA6uvV6DNZL0wHwYDVR0j
BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD
QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz
ODc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm
N2YtMjlmODkxMjUyM2QwLzAvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMz
Mzk3RkMzODc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFIwSPJh9T1o0wjpmkr444BR7ZFotwCPoT95
gTbvGFdrxthUO7EvYVpferEJdVlnC1JYJycntKYBc2GwELCNYbPRUGOv/G4bHCPC
+tubRvK7korVqIvR3rR4Vrcfl46FO1EQiyLF7UdbV59T4cOhbCIVIs12keyWvL13
r2AQn9jQw7P6AgL1C1vY1gZwZ8o9R2TNfKJ3Jn8kLWma/uVQ8+6V3SPWKVkDZyZ2
K9dJ1uSlaMaLIdUtY+L//5sv5xRYFeqIyMLyhwYwLQWDQ86yHM6mQ8wc3ZQl7HpG
MneowDxgy+TCWs7yaZC5561JGK1w9FtHE6w6OZqcMLnjhcBVaJI=
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:25:15 2025 by rpki-client