Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
File:                     38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json)
Hash identifier:          Eep4BhGaGEoiiCg4Jj37ClQ5EBvDN95J71fqMalMWb4=
Subject key identifier:   DE:91:88:36:D0:31:E6:F4:7B:6F:12:3F:E6:6A:AB:66:E7:89:8F:0E
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Certificate issuer:       /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial:       3A9F834DB19E9D5411ACA07CBFF604F8062BD0DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
Manifest number:          0171
Signing time:             Wed 06 Aug 2025 06:40:56 +0000
Manifest this update:     Wed 06 Aug 2025 06:35:56 +0000
Manifest next update:     Sat 09 Aug 2025 13:32:56 +0000
Files and hashes:         1: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: 5VR19FAskyM3aEbieWyWmbLUPoPYftMh/gaMP6t7liE=)
                          2: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: hPWPE86ID8N/pDjOig5ZnAROXRyFprGMRItIMoptWSY=)
                          3: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: cC0bspkR4GLKr9LN2JfncBaT2JjHlS3Wp16ygdKgQmU=)
                          4: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: XgIzc0IbUT3BWzqPVrjaBsZEWwMYT+TR7O6PzuuQ5e4=)
                          5: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: ZVjcgaXDQ3D4zS6Ow7WrzE6JOTbumwvNfFh1MEq4Yks=)
                          6: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=)
                          7: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=)
                          8: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=)
                          9: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=)
                          10: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=)
                          11: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
                          rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 13:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9f:83:4d:b1:9e:9d:54:11:ac:a0:7c:bf:f6:04:f8:06:2b:d0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
        Validity
            Not Before: Aug  6 06:35:56 2025 GMT
            Not After : Aug  9 13:32:56 2025 GMT
        Subject: CN=DE918836D031E6F47B6F123FE66AAB66E7898F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fd:33:9d:fd:8f:f3:a9:b5:cd:0d:14:3e:16:
                    d4:39:06:1b:7a:e5:15:e1:77:0c:67:5c:6a:49:ed:
                    e3:a2:39:9d:56:70:5b:b8:0b:6d:d0:61:be:a8:aa:
                    f8:bb:d8:21:00:2d:8d:b0:e5:2c:1d:18:93:4a:98:
                    ee:20:2f:e6:0a:1a:d1:a1:0c:bf:5e:05:0c:f1:a6:
                    07:4d:9d:d2:0d:8f:b3:cc:e8:51:25:be:d1:d0:95:
                    39:5a:09:e5:fe:de:ae:89:79:60:49:c2:31:35:0d:
                    11:21:05:2a:ad:10:2a:04:1b:ab:c8:40:79:de:c2:
                    a8:c9:7c:6a:b2:42:cb:47:0d:f2:49:b1:38:a0:31:
                    93:24:a8:4d:8c:d5:57:3f:98:5d:e1:ca:2f:fe:35:
                    31:a8:3e:0c:e0:23:c2:e8:e8:09:9d:df:b3:ba:3b:
                    2f:30:24:5d:d7:dc:70:ff:c3:ff:54:55:cc:33:80:
                    10:71:46:78:f7:46:a4:4a:99:45:c9:f6:d4:bf:3f:
                    87:4d:c8:16:01:c4:fa:4f:8d:81:9a:b5:1d:7e:3c:
                    e8:d8:70:f9:4a:b4:3d:ac:55:9e:20:b7:e1:66:be:
                    de:3c:15:1d:1a:26:e9:45:8c:58:5b:37:59:3a:58:
                    4e:cb:c8:3e:7b:82:57:e9:57:c7:cc:75:15:e7:1c:
                    02:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:91:88:36:D0:31:E6:F4:7B:6F:12:3F:E6:6A:AB:66:E7:89:8F:0E
            X509v3 Authority Key Identifier:
                keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:19:0d:0d:56:29:32:68:8c:03:d0:41:e1:01:0d:60:62:71:
         03:01:78:d3:fb:75:7a:e2:37:51:5c:eb:18:02:6c:8e:8f:9f:
         47:2e:30:96:71:2c:40:65:b7:bc:12:09:e3:ed:17:fc:9a:c9:
         99:e1:23:3b:94:87:d2:79:6d:fe:e0:55:e1:0c:a3:dd:9c:d6:
         17:af:d5:3c:d3:ea:09:92:e0:1b:aa:57:98:e6:05:0e:03:26:
         c0:1f:33:1f:63:99:8a:1a:a8:77:bc:42:d1:9e:d3:d2:2a:bb:
         fb:7d:e5:b2:f2:33:94:b9:8c:f9:60:13:b6:c9:be:11:6b:d5:
         e1:17:ee:90:0b:12:1f:8e:be:94:86:0b:51:93:92:a9:7f:33:
         c1:df:10:7c:05:8f:c5:30:d3:16:dc:bd:d9:66:c1:4e:67:94:
         2f:9d:b1:57:69:8e:82:20:31:c4:bb:39:f6:d9:61:56:c9:d3:
         4e:94:d2:e9:d0:12:d1:89:a7:55:1d:5e:c4:7c:f9:ed:16:de:
         89:a5:e0:71:b0:f2:e0:4c:ef:ad:36:28:2f:06:07:8f:5c:13:
         14:10:87:1b:9a:7e:b1:c0:d3:4a:31:a2:e9:2e:0c:7c:f0:af:
         27:89:79:56:f5:9e:58:b6:83:bd:75:a0:af:f9:5e:e1:1b:54:
         3e:c7:d2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:38:09 2025 by rpki-client