Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft
File:                     5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft (raw, json)
Hash identifier:          NhXdhVYPfKsZvsAtbZH0JcinAeDUD1vjYKlwp8lbVVE=
Subject key identifier:   04:23:A0:C6:7E:D2:E9:2E:19:4C:71:99:6F:4A:A5:20:35:AE:5C:D6
Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
Certificate issuer:       /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Certificate serial:       3AF25CCDB10E94ED169CE3A40B23FEEA14D0816A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft
Manifest number:          04F8
Signing time:             Sun 15 Jun 2025 01:01:03 +0000
Manifest this update:     Sun 15 Jun 2025 00:56:03 +0000
Manifest next update:     Wed 18 Jun 2025 11:40:03 +0000
Files and hashes:         1: 323430353a613534303a313030313a3a2f34382d3438203d3e203338313536.roa (hash: 6OPQcqqoDFu04WFG0tl/52GBkSLHi5KILZE8ppoIeI0=)
                          2: 323430353a613534303a313030343a3a2f34382d3438203d3e203338313536.roa (hash: QqMw0UvXxyRwZ3MN+nbLgt5zHCX+tRWBYTkzZR9lqRM=)
                          3: 323430353a613534303a313030653a3a2f34382d3438203d3e203338313536.roa (hash: tYVxzh8jsEZMpHZSsff3a6rSYcQCpSYfG+11M37Ujh0=)
                          4: 323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa (hash: TqEWwFlOrk5l3fkQ8+zmSzxZo3hgufYaEWkW7G3NnE8=)
                          5: 3230332e3139302e3131342e302f32342d3234203d3e203338313536.roa (hash: ts5aXBOr0VsU9/DQ5WThD9RASrOOk/xmS9YcgNyN+QQ=)
                          6: 323430353a613534303a313030383a3a2f34382d3438203d3e203338313536.roa (hash: POX2163QBlsvMZA7yZmQCMmyrzPUEJRThAzkDfYbpbA=)
                          7: 323430353a613534303a313030333a3a2f34382d3438203d3e203338313536.roa (hash: IXmQd0MCMak0xkNiWabzoq4oSB1t4BkIeQNR0butMAg=)
                          8: 3230332e3139302e3131332e302f32342d3234203d3e203338313536.roa (hash: jh2VcZkZ1Js0SlE5To/S6wp+fTe6izuj1q8Rf8qNV5g=)
                          9: 323430353a613534303a3a2f33322d3332203d3e203338313536.roa (hash: Qus3Mmu52ldaC8yHNX/lLMOybvxdC/KiaabMYmXY5VE=)
                          10: 323430353a613534303a313030613a3a2f34382d3438203d3e203338313536.roa (hash: BTD2Xf6BT0ausi55SDfb+RV+pnFyb0R2cyAoJs9Sr6Q=)
                          11: 323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa (hash: y8JF5waQBjaGi7j132v2K9wcfS1ggVxFjuJzjO1PKh8=)
                          12: 323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa (hash: Lh8GyhmgK8taX5pJnhVtBGQaNHkcHNTcBBhgnCLEf2U=)
                          13: 323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa (hash: D9z0XyRnIBxyuVCQSHNxCZWuB4tf7WpTkC318+YEGM0=)
                          14: 3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa (hash: wozT3BtLztl/pX/DwKeiln5tMM/ZHi6uy+DBeORRK8w=)
                          15: 5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl (hash: BJnyUW7ZC3KUbR3lZu/oKnog39BSTYjLLs2gm/uz1R0=)
                          16: 323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa (hash: 2rYoQf2XiLcQ0PD1TcVzDi2GO9pmV8h/I19htBqCTIo=)
                          17: 323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa (hash: 8LsVHahdUoPleu20C45yeBI8EhbUp30pYf/Ev3LanrU=)
                          18: 323430353a613534303a313031303a3a2f34382d3438203d3e203338313536.roa (hash: 52hdkWivOU/ysCfbDrmZ4ZdVCws3AK1+NpaeOpApRrY=)
                          19: 3230332e3139302e3131372e302f32342d3234203d3e203338313536.roa (hash: fmYV59g2MMTraXzEsrTfyQqiYjtK4JJ3htQL7ef1pm4=)
                          20: 323430353a613534303a313030623a3a2f34382d3438203d3e203338313536.roa (hash: YEFSplsOqeVdDOYXc0+clRNdjTbRwAtVaQbnNunANsc=)
                          21: 323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa (hash: kXrrNx9/mNAL0Kgif9atwK9B5iPerOxUre2PbL/f9yI=)
                          22: 3230332e3139302e3131322e302f32342d3234203d3e203338313536.roa (hash: eQtfqFg2eFurpnUZ/vFUaWKCMnlTQOx32ie2ceCliAI=)
                          23: 3230332e3139302e3131322e302f32312d3231203d3e203338313536.roa (hash: e3oSAdRMgOXXxhA6I/kQXLafsImIBuivGpBHTCOFn98=)
                          24: 323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa (hash: rc1mokxPbd+8BXU2Xt+KGVT8so7qqif99EY1tkQxcSU=)
                          25: 323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa (hash: i7d8QzKEgDao+iaPNANckDpDhevpkRgWSoO2vIY9k00=)
                          26: 3230332e3139302e3131392e302f32342d3234203d3e203338313536.roa (hash: iPDWPUdV3RLO9JdOJttPvMJGjmUf5P6oe2o5V7/J66o=)
                          27: 3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa (hash: +qtp+CFAtWov+tk0R+jWXsOpaspLBuir0Q0r1VgigbU=)
                          28: 3230332e3139302e3131352e302f32342d3234203d3e203338313536.roa (hash: mAgDMMZwqHZBOF+F/jxzzqLAxZsjHi/FZlxZPFOCIX0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl
                          rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 11:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f2:5c:cd:b1:0e:94:ed:16:9c:e3:a4:0b:23:fe:ea:14:d0:81:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
        Validity
            Not Before: Jun 15 00:56:03 2025 GMT
            Not After : Jun 18 11:40:03 2025 GMT
        Subject: CN=0423A0C67ED2E92E194C71996F4AA52035AE5CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ab:aa:cd:ca:16:8b:1e:2a:44:1d:b3:5e:76:
                    32:74:09:91:8f:66:33:10:87:a0:69:e2:c4:09:d2:
                    62:68:ef:ee:0b:54:0c:62:37:b8:26:39:a7:4d:c0:
                    4b:32:68:57:d6:ca:db:8c:98:2f:55:63:2a:e9:b3:
                    52:9b:fe:20:a4:7d:b0:19:c7:93:56:95:76:46:65:
                    f9:77:e3:57:c8:fc:e9:8a:36:c2:43:76:d6:3e:0b:
                    1c:fb:6b:ca:34:be:48:54:aa:a0:ba:84:b7:71:6b:
                    9c:28:ec:d7:d5:80:46:e4:d9:f0:ac:1e:12:b9:2c:
                    2a:91:6e:a0:3c:ee:b9:cd:0a:fa:7f:65:b8:ee:a1:
                    e8:33:e9:65:8d:a2:1a:ea:86:9d:05:3c:1b:34:98:
                    77:bb:74:4c:15:ca:cb:00:33:a4:1a:74:28:29:8a:
                    6a:d0:01:7f:fa:88:9d:f5:89:ee:28:a7:e1:4c:13:
                    a4:e4:0b:72:82:91:ca:b7:5a:bf:f7:81:8f:e4:c8:
                    15:f8:30:85:85:f5:0e:7d:5e:3a:8d:d0:16:e0:a5:
                    ec:3c:bc:2e:72:80:e1:5f:f4:4d:99:0b:de:ae:49:
                    26:0f:63:29:1a:c9:4f:24:bd:cc:40:93:3d:26:3e:
                    ea:c8:33:00:97:eb:fb:e9:ce:d0:98:33:83:bf:08:
                    19:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:23:A0:C6:7E:D2:E9:2E:19:4C:71:99:6F:4A:A5:20:35:AE:5C:D6
            X509v3 Authority Key Identifier:
                keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:83:b1:8d:a7:c4:50:41:b4:96:ed:62:bd:71:5c:d8:55:dc:
         7b:9f:a4:61:11:ac:e4:11:94:18:be:3d:5f:10:ae:35:de:38:
         25:1f:75:3e:d2:a3:cf:1b:a6:7a:fc:29:80:7c:0f:41:f2:d0:
         6f:10:09:88:8f:68:7e:f7:fb:cf:04:7c:92:9b:16:b4:02:62:
         5d:dc:19:60:85:75:85:f7:82:cc:bd:00:e5:d6:7f:c2:ce:00:
         99:d8:fe:05:ea:5c:cc:3c:c9:58:f1:87:88:88:58:c9:f3:a9:
         ee:04:10:0c:5e:57:1e:a7:4f:a9:23:9d:8a:38:6b:20:0d:5a:
         a5:be:68:fd:34:c3:00:ba:f1:ac:df:da:39:a5:1b:90:99:b1:
         4d:3a:a7:5b:ab:52:6e:2e:4b:46:79:95:c7:2c:b2:53:38:61:
         15:50:59:1e:f8:fd:6f:ab:e5:51:d3:a8:26:e1:63:3c:3b:45:
         4f:aa:77:93:c7:f6:9c:c9:e5:63:51:b9:9e:1e:e4:38:e4:7d:
         50:fb:28:11:82:46:e8:f4:81:3a:00:4c:b8:5a:da:2f:57:d7:
         61:c8:d8:d0:10:40:45:0e:3e:0b:7d:00:3d:0c:8e:ac:e3:ee:
         34:b9:da:30:5c:23:dd:e2:58:fe:0a:f4:39:0d:88:89:10:a6:
         32:a0:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:17:21 2025 by rpki-client