Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
File:                     108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft (raw, json)
Hash identifier:          ZoCb/UtwOSYV77aToMicacZi8Qgx12sR8UVaxlZ+5UU=
Subject key identifier:   CC:E7:69:4B:42:15:1E:E1:D7:FA:3E:6A:3E:EA:7A:3C:80:73:4B:83
Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53
Certificate issuer:       /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
Certificate serial:       39CE079A28D29816848DE5AE8465E518FE0D02B4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
Manifest number:          D9
Signing time:             Wed 06 Aug 2025 13:01:35 +0000
Manifest this update:     Wed 06 Aug 2025 12:56:35 +0000
Manifest next update:     Sat 09 Aug 2025 19:06:35 +0000
Files and hashes:         1: 3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa (hash: 02uGPdQ9hFird7xTsc25uxwhcDH5++RrfPud5wB034E=)
                          2: 323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (hash: U1+UJYOPqeG7oUJWUM0ECQEyGoOhn9MsVuuE8ER7syk=)
                          3: 3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa (hash: YLUa9f9Ix42SsoAFmSGmhnlKGmYHofqL4ey07MvkUwA=)
                          4: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl (hash: xo8kNe9uPQrCbKgTyi5JHaGUZHUWWetGuNfK1cWqg20=)
                          5: 3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (hash: ZpCaLj3IjbNE+GXo6EylCwD1IX57XlXTChG6yMIUs9k=)
                          6: 3130332e34322e3235342e302f32342d3234203d3e20313333373939.roa (hash: dta96fOO5R3KY41745HRH3tf4b61/DKoGwUN3Q11U24=)
                          7: 3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa (hash: DACxlfdaRrzYV99yR/yeAhjiMh8XR4kIKAf+dkh/dOU=)
                          8: 3132332e3130382e36352e302f32342d3234203d3e20313333373939.roa (hash: 2MPbE9DHmM30NHKgthoS9sI03vGrnEvS4h+kAcqNSBY=)
                          9: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (hash: mb4RdHaLVtluUJXDmdVSpVl3zLc9LDc6xWU2Tugox0c=)
                          10: 3130332e34322e3235352e302f32342d3234203d3e20313333373939.roa (hash: wR+IWZMCxrwb5/faol2/GF6hZhc853OeCuHNs3ivUEk=)
                          11: 3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (hash: KSUbvXfR6wqgEtV1jcjWsrQSqy5TRuM5IxH97Spd5gE=)
                          12: 3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (hash: abJz0HXL4r3WKDjsYu+oZiEGGhSowngdRONlkzkes1A=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl
                          rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 19:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ce:07:9a:28:d2:98:16:84:8d:e5:ae:84:65:e5:18:fe:0d:02:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
        Validity
            Not Before: Aug  6 12:56:35 2025 GMT
            Not After : Aug  9 19:06:35 2025 GMT
        Subject: CN=CCE7694B42151EE1D7FA3E6A3EEA7A3C80734B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:24:76:a5:7d:23:7a:08:6c:a0:f6:5e:ef:
                    2c:56:73:b9:98:ec:39:20:5b:79:72:13:f7:7d:11:
                    69:69:dd:05:7e:11:07:80:ba:d8:86:17:b5:20:15:
                    f9:c8:b9:c1:91:9e:82:3c:03:c6:cc:a4:52:41:0f:
                    75:76:d6:55:ff:a0:97:c1:f7:3e:2f:9d:23:f0:65:
                    8f:38:aa:91:8a:06:c9:03:ac:7a:89:df:1d:ac:1d:
                    5a:94:54:bb:e5:ee:f2:cb:2a:38:0a:c6:63:0a:55:
                    9d:cf:df:4c:79:5f:b6:9f:26:43:23:00:28:46:06:
                    4b:8e:a4:5e:19:f2:da:29:79:9a:c6:ec:02:ad:f7:
                    7e:32:20:3c:a5:78:88:54:d0:3c:02:42:00:4a:42:
                    01:ec:57:35:f2:62:20:e7:75:da:3c:9a:36:24:be:
                    57:b2:44:09:72:d3:ce:1a:a6:77:4b:93:cb:8d:3c:
                    fb:2d:1c:d3:73:34:12:cd:df:cd:ea:b9:ae:ae:03:
                    cf:13:de:a5:e6:b5:90:05:41:49:31:34:c3:c5:a2:
                    87:a7:23:93:d3:96:b1:c5:ce:24:21:b3:05:83:c9:
                    99:33:11:08:7b:c4:65:07:ee:b9:65:19:4a:fe:97:
                    02:68:2d:f2:9d:ae:3c:49:ab:a5:3d:8c:d5:83:c0:
                    21:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E7:69:4B:42:15:1E:E1:D7:FA:3E:6A:3E:EA:7A:3C:80:73:4B:83
            X509v3 Authority Key Identifier:
                keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:ac:6f:e3:9e:8d:2a:54:00:4a:ec:39:fe:99:74:0a:cd:ec:
         61:b7:39:22:b2:ab:6b:13:6e:15:e1:da:a6:96:d8:0d:5f:bb:
         15:a1:c6:01:e9:ec:7e:27:f7:7c:63:80:a8:c1:16:43:8b:df:
         c8:06:27:6d:d3:a7:2b:6f:33:93:b2:71:44:b1:2b:2e:2b:7b:
         8f:15:27:d3:78:0a:99:66:db:bd:a9:a8:4a:ab:62:bd:58:13:
         cd:a5:06:95:c9:94:e2:27:77:e4:b4:fb:ff:b9:62:0a:18:65:
         83:e6:01:7a:02:3a:47:45:2a:53:97:78:d3:18:04:07:b5:31:
         06:59:59:49:88:14:cb:10:a8:9e:e6:1f:ba:34:ed:8e:0e:ba:
         7e:1c:0c:7e:eb:c6:54:0d:17:8d:6f:ef:97:77:6a:b1:52:6f:
         59:03:70:14:f4:a4:ee:37:f4:e6:ea:f3:0f:97:02:46:0a:c8:
         76:63:b6:52:e8:3a:fe:1a:b9:2d:11:af:a2:7e:e1:3c:6b:dd:
         e1:99:cb:a7:53:64:6c:55:0a:d0:18:22:1a:dd:e1:36:b0:44:
         78:9c:1c:0a:a9:df:db:5f:ef:f0:05:1f:23:50:55:5d:14:99:
         44:25:6e:c8:71:1a:87:6a:36:22:6e:69:17:b0:d8:0b:0e:d3:
         e6:be:f4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:10:17 2025 by rpki-client