Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
File:                     42042E672B688C3072FD4743B3E7DD81EC7CA306.mft (raw, json)
Hash identifier:          GrHFtTB0sLyTuAQDQHd2k1IcHDege0VSw6S7jqtVMfI=
Subject key identifier:   F8:F9:1B:63:43:F2:93:A5:55:4E:3E:82:4D:EF:D6:CB:40:7B:52:08
Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
Certificate issuer:       /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Certificate serial:       797988AE60CF6BF5CF636DAB126ABE43D86EB5CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
Manifest number:          02FF
Signing time:             Sun 15 Jun 2025 16:50:42 +0000
Manifest this update:     Sun 15 Jun 2025 16:45:42 +0000
Manifest next update:     Thu 19 Jun 2025 00:15:42 +0000
Files and hashes:         1: 3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (hash: QrpNEb5PRm1Jpg26cGbSFaXMRcE+4W0Mz6xgeDqvQoQ=)
                          2: 3230322e3138302e302e302f32342d3234203d3e2037353837.roa (hash: Bcr2gJkRvvkdTqMf2vLF/rNqMWBoYpR0xUN/hf52EWg=)
                          3: 323030313a6436383a3a2f34382d3438203d3e2037353837.roa (hash: i3mVHxINJY1wBocmEZCE7W5aPr3/40jKREEXnt4p3Fs=)
                          4: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (hash: fnQpNPynGuCKS8FnFu7qzmtG5in3paL7Kssdk35/qNE=)
                          5: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (hash: eWJNrd7oOSiXTA9n1wU9sNOkZqpaejw7YWXovGeNvp0=)
                          6: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (hash: qenZ7hej3sLS1vY58+4t3Rt4+88XfTNSKQnd32cXHbk=)
                          7: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (hash: BVmkRiww9s2iXGLUik9+KRKIjYQtkiMniXRMBaIOF5I=)
                          8: 323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (hash: euuIBeIdUT8lgSpCE7TrdJvmyGVkzTEq7+WYT3qs0gs=)
                          9: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (hash: c+jQs0ElIWSpEW/65Zb1JJymOpSsqz3QthadpLqsPEw=)
                          10: 323030313a6436383a31333a3a2f34382d3438203d3e203338373539.roa (hash: By1dWAPEg46DXVByabCVytyBi07eAG8jEBvCh+FGMCE=)
                          11: 323030313a6436383a373a3a2f34382d3438203d3e203338373539.roa (hash: xT7ihnYBd4rPeXcE6bxebb3PZ9+Wox5KB2ZBowr8kH4=)
                          12: 323030313a6436383a31323a3a2f34382d3438203d3e203338373539.roa (hash: cQcs51oIH/qBT9LzGohp+beoJ2Lt/+q2Z6ImGL0wSDI=)
                          13: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (hash: oi7ul2eHrpJm6nKOP1YTFPaOySaj28haxt3SYYHzFYk=)
                          14: 3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (hash: 5IwAvBGpI+/LKg0jES5bmNJP2+g1hJrlMzWxKjmGjok=)
                          15: 42042E672B688C3072FD4743B3E7DD81EC7CA306.crl (hash: 8Vij9/6G0OnFerqliQfTshw4OeYc8fOdo29p40CeC9I=)
                          16: 3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (hash: GC2XCJMI5v5mCoLtw49+VhrJ6pQtmY4PlIeJRLvKDDg=)
                          17: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (hash: fHTsVCG7K78xsYdQYrXe0iF193572ZNYm2zJxFOLSIo=)
                          18: 3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (hash: bXRD5DYpUOHeCiXubU6nJTSoa02/Z8k3WnCQ8nyGZyc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl
                          rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 00:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:79:88:ae:60:cf:6b:f5:cf:63:6d:ab:12:6a:be:43:d8:6e:b5:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
        Validity
            Not Before: Jun 15 16:45:42 2025 GMT
            Not After : Jun 19 00:15:42 2025 GMT
        Subject: CN=F8F91B6343F293A5554E3E824DEFD6CB407B5208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:5c:91:64:ca:69:29:92:b7:11:81:da:76:
                    0c:09:f3:9d:57:4b:88:f9:55:84:c9:62:21:fd:83:
                    99:93:8a:0b:2f:5e:05:a3:ad:43:dd:f7:44:82:b6:
                    64:c4:42:11:eb:02:c9:0b:b2:16:5e:71:cf:e6:eb:
                    46:62:84:c1:a7:0c:18:c1:e9:c7:e9:ca:ca:da:09:
                    aa:33:01:56:c7:7c:2c:59:62:b3:19:09:07:17:d5:
                    03:06:55:a6:62:23:74:31:b8:af:96:de:e2:8d:39:
                    dc:5c:57:71:5b:fe:fe:3d:c9:c4:d9:0f:68:b7:06:
                    c6:38:48:c4:93:f5:57:27:10:44:73:b0:1c:c5:ef:
                    dc:de:d2:8d:a1:78:8f:5c:b2:e2:ba:32:9e:6f:8d:
                    dc:fd:19:b3:3f:01:cc:50:13:9f:ae:a2:bb:d7:27:
                    6f:4d:fc:f2:2d:18:e2:95:07:92:b1:87:e6:b9:bb:
                    23:2f:ac:7a:21:91:7c:c4:f2:0f:0b:31:ea:42:cf:
                    b8:3d:91:de:4a:4d:7a:e0:fb:20:ed:dd:ac:f8:aa:
                    03:d3:c2:64:01:af:e9:f1:1a:3e:ff:56:9c:bb:00:
                    ec:ca:65:7c:cd:46:f9:37:fe:b7:49:f5:ff:fc:56:
                    57:a5:2d:41:17:b1:27:b5:eb:59:c0:c1:af:77:75:
                    9b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F9:1B:63:43:F2:93:A5:55:4E:3E:82:4D:EF:D6:CB:40:7B:52:08
            X509v3 Authority Key Identifier:
                keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:df:8a:92:e2:e8:a3:0c:49:14:8d:b1:8e:4c:42:53:cd:
         04:d8:bb:67:37:f9:0c:60:ea:97:63:e6:af:2f:c1:d9:f7:a5:
         b4:12:ae:bf:4c:fd:77:b0:da:f1:eb:2e:3a:31:92:58:5d:79:
         98:d7:5f:15:a4:05:c8:fd:05:e4:d5:10:c3:b1:14:49:4f:78:
         46:a8:c5:56:70:4a:f0:be:61:89:12:be:d4:d8:a5:3c:05:33:
         e8:51:a2:43:19:38:0d:13:1e:64:fd:7c:3d:46:44:5c:d1:8a:
         59:c7:de:1f:25:b9:5f:54:d0:79:86:b7:82:01:75:a9:fb:c7:
         a4:5e:15:0d:5f:d0:a5:9d:97:2e:b8:80:62:26:0f:fb:be:35:
         0d:31:9a:5a:1a:ed:75:71:cb:f1:36:1e:33:22:d2:df:39:02:
         4c:39:ce:a2:a2:dd:c9:e8:da:c1:d0:03:d1:00:28:66:81:0a:
         0e:b4:6a:22:4e:32:4f:b8:81:b6:56:7f:ed:0e:4c:65:7d:ad:
         eb:f5:b3:c5:ee:e4:28:17:ff:1c:cc:5f:2e:28:63:41:1f:21:
         0a:74:85:ff:1f:60:4c:c4:f7:f3:8d:24:41:65:9f:7c:95:6b:
         b3:ab:e9:7a:89:70:67:e6:f3:85:f5:50:e1:26:0d:6a:a5:34:
         18:48:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:45 2025 by rpki-client