Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
File:                     F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft (raw, json)
Hash identifier:          CBunc3iSNc2i2yH7ckEKRUMpRFe/lmX4nDMRXopkL5Q=
Subject key identifier:   FB:70:67:5C:64:7A:DE:30:CF:DB:45:0F:BA:66:EE:CE:79:11:55:5D
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       D2AC59F1F27BC918EDCF20F68780E9901F40E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
Manifest number:          028D
Signing time:             Sun 15 Jun 2025 05:22:14 +0000
Manifest this update:     Sun 15 Jun 2025 05:17:14 +0000
Manifest next update:     Wed 18 Jun 2025 11:47:14 +0000
Files and hashes:         1: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: z29/6B1kOK/eMjCWZtmvPZLgk+HLmYp/VefCqYrAsKY=)
                          2: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: nC9Vz/V7n91DCoxvdGVxW+GzAM9lX59dn3xendBCsjg=)
                          3: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: W4a/cfhB9oac3lsy90TNAMFErRsxFA2KdB5prppjaDo=)
                          4: F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl (hash: 5riczf5rJg6Pdta/gsAOn5oY2DZJmgP//jee530IDQs=)
                          5: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: Yi662bRsVhQynKfcqy7qXGygDZ5R6XwwA4ioPRSjZss=)
                          6: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: d6Eei0Mi3Z0MIL/gTjyKioJhC1+Xma/Y2mDdx7nO/5M=)
                          7: 3130332e33392e31322e302f32332d3233203d3e203633383237.roa (hash: ESipPGaWYxRGOLDa3lXlGJb3f8FCnj+2d4bGvhqlgIk=)
                          8: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: VwTNigUnV52ERl4JC5acU3ZlKRaYwPoaUPZcexI3ywI=)
                          9: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: ZffeIBEtnLg/Ujj93wFNolRHO6kiysPo5MQ8XNigO0w=)
                          10: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: lYQCgluKRMLdqhxTINGi3YwkFcOJwrOABEOfRjK/jF8=)
                          11: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: RgKgrskhhkjPJ/Dk8nbIAuuLnQfC2xLVHfdXQzj2BLI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 11:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d2:ac:59:f1:f2:7b:c9:18:ed:cf:20:f6:87:80:e9:90:1f:40:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Jun 15 05:17:14 2025 GMT
            Not After : Jun 18 11:47:14 2025 GMT
        Subject: CN=FB70675C647ADE30CFDB450FBA66EECE7911555D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:02:5f:0b:39:d9:f2:26:0f:70:69:b2:cd:d0:
                    04:7c:04:73:e2:13:46:f0:fc:52:c2:f8:2e:c5:a0:
                    f6:1a:9a:f6:88:e2:0e:4b:be:38:0b:bc:70:86:f0:
                    6c:d5:31:f7:6b:d3:61:e5:c6:13:cf:e0:15:a7:be:
                    aa:a0:9c:30:27:35:4a:78:93:6f:db:27:9c:c5:77:
                    0f:06:7a:ae:4a:3a:2b:05:f4:4d:94:44:53:20:6f:
                    b9:f8:4d:f0:22:5d:b1:1d:66:af:44:70:d3:35:c0:
                    60:98:3d:c1:64:71:53:cd:2c:fe:9c:c8:e3:02:22:
                    9a:e1:9e:af:c4:51:cc:b6:58:82:8e:0a:7d:09:f2:
                    01:48:11:e5:2a:f6:66:b8:02:9b:72:7c:85:07:3b:
                    c7:ec:85:16:71:e6:d6:dd:c1:da:85:67:9d:8b:fb:
                    1f:e2:76:f4:7b:fb:6f:51:df:82:d1:04:61:bb:60:
                    e6:c3:a7:ad:5c:b1:d8:82:31:bf:7a:23:62:1c:d9:
                    6f:ce:22:b3:d0:20:ce:fb:89:ac:4a:32:a1:bf:e8:
                    f2:b8:f6:e7:4d:bf:d2:6e:91:56:86:65:68:dc:ac:
                    ab:26:61:10:9f:a1:da:c3:d2:44:96:50:89:1a:bc:
                    d8:73:74:0f:db:c3:08:a8:71:d1:b2:38:74:98:d7:
                    12:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:70:67:5C:64:7A:DE:30:CF:DB:45:0F:BA:66:EE:CE:79:11:55:5D
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:4f:fb:0d:cc:3d:1b:8c:f8:aa:1a:83:a9:c2:28:34:c6:07:
         3d:9e:d6:32:b4:e4:1a:2a:30:0d:d6:56:c2:26:2e:bb:73:84:
         40:88:f8:9b:e0:fa:5f:d1:30:9b:69:21:5d:7c:97:0b:c2:89:
         3c:61:08:c0:72:23:b3:e7:7b:27:49:c2:21:c4:72:54:e5:96:
         06:cb:92:63:ee:21:95:91:2a:02:da:a4:9c:6c:af:1c:40:62:
         28:c0:96:87:8e:2c:20:83:cd:7e:1e:2b:cd:70:a4:c9:95:6c:
         40:55:13:2c:00:78:23:a9:2d:16:59:0c:92:fe:64:8e:ef:80:
         b7:5f:0a:e7:bc:cc:7a:6d:6c:53:81:c1:67:bf:70:a0:13:f2:
         b0:04:72:4e:0d:bf:b7:e3:f3:16:55:af:b7:bf:2b:a6:09:31:
         6c:73:70:b6:6a:9b:a3:70:09:1f:ed:7e:5f:cc:cc:34:13:ce:
         d5:62:7b:cd:eb:5d:43:86:bf:68:f8:f5:18:9f:5d:5c:8e:95:
         93:9f:92:59:9f:43:14:13:7b:e9:65:21:de:8b:f5:a5:46:03:
         bd:2e:20:ed:cf:1c:a0:66:c5:54:96:73:62:af:40:e9:39:13:
         8d:db:20:6a:7a:58:0f:f2:21:32:0d:2e:b8:db:3a:84:a5:33:
         ae:8a:69:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:10:24 2025 by rpki-client