Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
File:                     108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft (raw, json)
Hash identifier:          q5unOoUgVGH8MWT32cBbaap3OHV2D++R7+/LXUEPBzI=
Subject key identifier:   D0:60:B3:B0:F3:09:F5:54:44:39:51:1C:C6:29:8C:3F:97:23:1D:0C
Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53
Certificate issuer:       /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
Certificate serial:       3F353FE7E48F91BC370EF36DA05577816D1CF2C1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
Manifest number:          0100
Signing time:             Mon 03 Nov 2025 02:11:34 +0000
Manifest this update:     Mon 03 Nov 2025 02:06:34 +0000
Manifest next update:     Thu 06 Nov 2025 09:34:34 +0000
Files and hashes:         1: 3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (hash: ZpCaLj3IjbNE+GXo6EylCwD1IX57XlXTChG6yMIUs9k=)
                          2: 3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa (hash: YLUa9f9Ix42SsoAFmSGmhnlKGmYHofqL4ey07MvkUwA=)
                          3: 3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (hash: abJz0HXL4r3WKDjsYu+oZiEGGhSowngdRONlkzkes1A=)
                          4: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl (hash: MGdnHsOTMGrBDIMBX0KCAY2bUAyVuTBXewsIZENFK/w=)
                          5: 3130332e34322e3235342e302f32342d3234203d3e20313333373939.roa (hash: dta96fOO5R3KY41745HRH3tf4b61/DKoGwUN3Q11U24=)
                          6: 3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa (hash: DACxlfdaRrzYV99yR/yeAhjiMh8XR4kIKAf+dkh/dOU=)
                          7: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (hash: mb4RdHaLVtluUJXDmdVSpVl3zLc9LDc6xWU2Tugox0c=)
                          8: 3130332e34322e3235352e302f32342d3234203d3e20313333373939.roa (hash: wR+IWZMCxrwb5/faol2/GF6hZhc853OeCuHNs3ivUEk=)
                          9: 323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (hash: U1+UJYOPqeG7oUJWUM0ECQEyGoOhn9MsVuuE8ER7syk=)
                          10: 3132332e3130382e36352e302f32342d3234203d3e20313333373939.roa (hash: 2MPbE9DHmM30NHKgthoS9sI03vGrnEvS4h+kAcqNSBY=)
                          11: 3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa (hash: 02uGPdQ9hFird7xTsc25uxwhcDH5++RrfPud5wB034E=)
                          12: 3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (hash: KSUbvXfR6wqgEtV1jcjWsrQSqy5TRuM5IxH97Spd5gE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl
                          rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 09:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:35:3f:e7:e4:8f:91:bc:37:0e:f3:6d:a0:55:77:81:6d:1c:f2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
        Validity
            Not Before: Nov  3 02:06:34 2025 GMT
            Not After : Nov  6 09:34:34 2025 GMT
        Subject: CN=D060B3B0F309F5544439511CC6298C3F97231D0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3c:07:54:59:eb:9f:a5:ea:ed:f2:57:64:20:
                    18:63:a6:80:05:66:5d:31:6a:c1:99:91:fd:c8:89:
                    13:5c:68:98:b6:33:7b:a0:1f:b3:70:f7:87:b7:d5:
                    20:69:2d:86:5d:78:86:9c:74:fc:90:72:b2:2a:c7:
                    8a:95:b8:82:48:27:2f:6f:30:02:6e:52:95:af:57:
                    69:ed:42:0a:ff:1c:60:da:0f:b1:f5:bc:42:5f:23:
                    49:68:90:a4:68:44:64:9e:a8:f9:f0:e9:8e:23:0b:
                    2a:29:e2:ed:f7:17:3f:fc:2b:01:f5:e7:ed:25:0d:
                    be:7f:39:19:dc:08:5f:f5:55:c9:b9:f2:a2:f4:06:
                    84:82:40:fb:b4:9f:1c:ac:1a:d1:96:58:3c:58:13:
                    97:a0:d1:02:cf:47:3f:f7:57:f4:90:99:a4:af:16:
                    7d:24:f0:af:67:b6:1d:22:87:8d:1a:9f:28:0e:d5:
                    37:01:24:17:c0:0b:de:05:25:1f:25:e2:96:43:1c:
                    cb:0f:8b:27:2b:99:33:3f:23:0f:ed:7a:dc:aa:62:
                    08:d6:a5:54:b2:6d:de:54:73:48:b5:5c:96:ad:28:
                    3c:5e:c2:70:dd:58:a6:6d:13:00:00:83:0a:fc:f2:
                    6f:69:b5:65:91:a4:7b:21:be:1e:99:7c:d7:41:37:
                    d1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:60:B3:B0:F3:09:F5:54:44:39:51:1C:C6:29:8C:3F:97:23:1D:0C
            X509v3 Authority Key Identifier:
                keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:49:01:55:32:ed:2a:8b:cb:e6:4b:d4:85:41:89:bc:36:bb:
         e0:18:4e:ef:40:f2:38:f6:b0:4f:19:f6:ce:d9:40:d4:3e:6c:
         4e:db:ae:2f:86:de:88:b5:0e:b2:0c:a0:2c:c6:e8:ae:95:4a:
         a2:c0:02:c2:cc:bb:50:f3:f5:3e:e7:85:1e:de:7e:d1:cb:e8:
         dd:bd:5e:f1:dd:04:02:24:71:30:c2:e3:a0:24:60:f9:79:97:
         11:a9:e2:f5:22:0b:40:2d:75:57:83:92:67:e2:5f:9d:96:33:
         c4:13:d3:8b:b4:75:96:2a:dd:6a:6e:85:b0:9c:ad:9c:a9:6e:
         78:c7:44:7a:e7:ee:b6:97:d6:3c:5c:bd:35:0e:27:0a:f9:96:
         d3:07:91:68:5c:60:42:04:2c:ea:55:14:d8:29:cf:c8:b2:16:
         86:ed:b9:f2:7f:ee:e0:36:cf:6b:cc:84:9d:d3:ff:99:7f:9d:
         6f:29:81:07:23:63:5e:3e:14:43:36:e8:b1:72:2f:64:0b:e7:
         70:c1:a9:7e:b0:01:4c:bc:79:34:8e:c9:dd:65:a0:eb:ec:6c:
         63:a2:5a:2b:cd:ba:21:a0:84:45:88:c7:59:ea:eb:4a:5b:63:
         9e:65:1b:0a:b2:1b:fe:4b:cc:72:14:21:d6:04:b0:60:f0:9e:
         6f:c9:9e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:24:47 2025 by rpki-client