Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
File:                     639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json)
Hash identifier:          JdMll1nrZKpSk0JbWdZzGYcl6Pv/X14zoXv2b9ja6ns=
Subject key identifier:   BB:90:82:E5:84:53:9D:6D:DB:A6:72:C6:2C:77:E7:E7:AA:BD:51:31
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       29A6B2500454CF86FF34FFC0F3F8C3D7F8C5DFCD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
Manifest number:          0D3A
Signing time:             Tue 05 Aug 2025 23:51:51 +0000
Manifest this update:     Tue 05 Aug 2025 23:46:51 +0000
Manifest next update:     Sat 09 Aug 2025 00:06:51 +0000
Files and hashes:         1: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw=)
                          2: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: kkZ5080z9oUs+jW8iHX1Tzr1MG5R0/keiimPL4Y7DMk=)
                          3: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: XZ4OJKWgYbKu4ak8HWaN9bEJfkYQKh79GGoEWm0kS2Q=)
                          4: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M=)
                          5: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4gtV8ZXJhBLgP6alnZmazQL9Du+oKvqI/MvatS0Bbyw=)
                          6: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg=)
                          7: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: u5dDjhuBvBzcqNjKEeW7vizdTx58v6wY4rfkMiHiI5I=)
                          8: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: qLkIroWnbqSVivBGqvgi5oF8E8eNhXgrJocCdlawdNk=)
                          9: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: mgdd33inbho0w/YafQxmlb4mn2645LWgbd4GjzvqC5g=)
                          10: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: /8HKOKl3PxMMPopAmXJsDfZHfFoo7wkQ81V5TqWB1uE=)
                          11: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: QsDPs2mlZqyMZXfjf6Zh+NWMXGWy1j4R+YaYRxdbecQ=)
                          12: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: 0AzZnlQLCCzpiwYH8VB91hQfBqmdrJ+ok40Qb8sCeko=)
                          13: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: esxHqUt3Xq6PKKXsfFgfUEYi1fJUgVnC6F8M6sDPUJM=)
                          14: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: JPYapDBTyTePbdwtE88+heXxGhufXE50JBbJ2fq7FKo=)
                          15: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=)
                          16: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: H083JkyoQznDxvBWYreCLv0/P4eSwvlo9nhixLMZ2mk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
                          rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a6:b2:50:04:54:cf:86:ff:34:ff:c0:f3:f8:c3:d7:f8:c5:df:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Aug  5 23:46:51 2025 GMT
            Not After : Aug  9 00:06:51 2025 GMT
        Subject: CN=BB9082E584539D6DDBA672C62C77E7E7AABD5131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:7c:e1:78:89:63:af:54:24:8e:18:e0:ae:
                    98:96:a1:89:0d:d1:10:92:06:a5:e4:0f:d7:08:97:
                    44:ae:ce:9d:7f:d5:9f:d0:21:57:e1:34:cb:bd:e2:
                    ce:e6:ac:e4:b6:2e:1c:f2:5c:27:c3:9e:08:ab:f2:
                    90:04:82:19:d3:8c:fc:29:3f:e0:fa:e2:74:ca:ee:
                    12:ab:a7:20:74:b4:4a:1b:07:ad:90:f1:2c:b3:a8:
                    e9:de:1a:55:12:87:5d:5e:53:76:60:47:aa:e6:eb:
                    7c:0a:1b:de:ed:58:71:a1:ea:f5:68:16:eb:39:30:
                    6d:63:c8:db:41:fd:30:83:3e:57:36:88:b0:55:56:
                    8b:94:1f:6d:82:0c:ed:cc:56:dd:5f:1b:c1:ff:a5:
                    75:00:74:14:bb:dc:48:e4:4c:5d:13:3e:3b:38:42:
                    61:27:67:fa:7c:36:0c:e6:84:46:66:19:48:34:68:
                    7d:fb:35:ad:a5:80:5a:39:5e:58:cd:60:34:d8:b5:
                    1f:4c:de:d8:0e:83:34:3b:78:44:9a:23:56:40:01:
                    ab:7c:04:b8:c4:cb:c6:26:b7:61:1c:c0:61:b5:a8:
                    21:5a:61:17:34:fd:81:db:93:6d:8c:2b:b3:f4:b8:
                    31:8f:9d:20:76:5e:92:ff:2c:3d:15:7c:9c:7b:ac:
                    e0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:90:82:E5:84:53:9D:6D:DB:A6:72:C6:2C:77:E7:E7:AA:BD:51:31
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:cd:e0:fd:c3:d9:f1:c5:c7:34:72:63:86:4f:99:27:00:de:
         53:cb:6b:9f:0a:3e:1f:96:5f:ec:7d:36:de:76:8c:b6:3f:b5:
         c0:f9:e3:23:d3:93:ed:88:77:da:d5:6b:80:d8:b8:08:61:97:
         80:a3:d0:6b:59:e0:3c:76:28:38:72:32:a9:d9:c5:53:e8:73:
         39:e5:66:36:7d:bb:a8:84:5d:46:b8:ae:4d:4f:8d:36:ce:ab:
         10:cc:34:dd:ec:2f:d3:00:26:8c:00:e7:ef:d4:1b:29:c4:2c:
         dd:6f:1f:0f:12:12:2c:cf:a8:d3:10:35:8b:35:a5:73:a3:9a:
         79:1a:3b:40:2f:a3:31:ef:f5:94:59:27:b5:36:16:10:d7:bb:
         f1:50:e2:be:4c:45:5d:29:00:92:50:66:2f:25:c7:46:99:00:
         45:78:24:0f:a1:cb:39:93:5e:e7:a7:18:be:f3:cb:5a:0e:de:
         bb:31:a1:c1:05:a7:0f:41:2d:ac:57:e8:51:d2:ab:b4:47:22:
         77:1f:72:63:c8:78:c8:d5:e6:6b:d6:a9:ee:60:d7:75:1b:64:
         09:96:dd:ed:e3:09:56:4a:80:5c:4b:aa:fb:28:2a:01:7e:a1:
         31:d2:64:6b:38:6d:9a:65:b3:bf:2e:3a:41:a1:93:23:e2:ae:
         04:ce:82:67
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKaayUARUz4b/NP/A8/jD1/jF380wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yNTA4MDUyMzQ2NTFaFw0yNTA4MDkwMDA2NTFaMDMxMTAvBgNV
BAMTKEJCOTA4MkU1ODQ1MzlENkREQkE2NzJDNjJDNzdFN0U3QUFCRDUxMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROnzheIljr1QkjhjgrpiWoYkN
0RCSBqXkD9cIl0Suzp1/1Z/QIVfhNMu94s7mrOS2LhzyXCfDngir8pAEghnTjPwp
P+D64nTK7hKrpyB0tEobB62Q8SyzqOneGlUSh11eU3ZgR6rm63wKG97tWHGh6vVo
Fus5MG1jyNtB/TCDPlc2iLBVVouUH22CDO3MVt1fG8H/pXUAdBS73EjkTF0TPjs4
QmEnZ/p8NgzmhEZmGUg0aH37Na2lgFo5XljNYDTYtR9M3tgOgzQ7eESaI1ZAAat8
BLjEy8Ymt2EcwGG1qCFaYRc0/YHbk22MK7P0uDGPnSB2XpL/LD0VfJx7rOBhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUu5CC5YRTnW3bpnLGLHfn56q9UTEwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg0NjRhNWItMmZjZS00N2RhLTgw
NDctNjhkMmJkNjNjOWMzLzAvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0
NjJGMDBFNzFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAInN4P3D2fHFxzRyY4ZPmScA3lPLa58KPh+W
X+x9Nt52jLY/tcD54yPTk+2Id9rVa4DYuAhhl4Cj0GtZ4Dx2KDhyMqnZxVPocznl
ZjZ9u6iEXUa4rk1PjTbOqxDMNN3sL9MAJowA5+/UGynELN1vHw8SEizPqNMQNYs1
pXOjmnkaO0AvozHv9ZRZJ7U2FhDXu/FQ4r5MRV0pAJJQZi8lx0aZAEV4JA+hyzmT
XuenGL7zy1oO3rsxocEFpw9BLaxX6FHSq7RHIncfcmPIeMjV5mvWqe5g13UbZAmW
3e3jCVZKgFxLqvsoKgF+oTHSZGs4bZpls78uOkGhkyPirgTOgmc=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:16:19 2025 by rpki-client