Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
File:                     5058CBC5AF21280546887DEF6CFA4341A8F99150.mft (raw, json)
Hash identifier:          6CFXSG9T/Z3sXgyHxDfKe4GZ2DCwlIFrwUsO51Gtv4I=
Subject key identifier:   AA:B4:27:C4:74:67:52:E5:CE:DD:B6:FC:F4:55:9F:FE:AD:A7:98:F1
Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
Certificate issuer:       /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Certificate serial:       0135FE04C6CD459CBDA91210B50C96E785702BFE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
Manifest number:          CD
Signing time:             Tue 05 Aug 2025 20:32:09 +0000
Manifest this update:     Tue 05 Aug 2025 20:27:09 +0000
Manifest next update:     Sat 09 Aug 2025 02:59:09 +0000
Files and hashes:         1: 3130332e332e3231342e302f32342d3234203d3e203338313439.roa (hash: P0Fuek0y0r48VX6ZLm6FM/n0b+U4fqsoqHFff5P/ei4=)
                          2: 3135302e3132392e3139302e302f32342d3234203d3e203338313439.roa (hash: soAwPvCdYcwmFfsMg2PYs5yDwL281IOTU4Q1pXeIS3M=)
                          3: 3230322e3135322e3230342e302f32342d3234203d3e203633383539.roa (hash: Axn8ERr+dCmvsiqqyuPKnJfBVVJriYKk4K22F1CTADk=)
                          4: 3130332e332e3231322e302f32342d3234203d3e203338313439.roa (hash: /U2DsLQr7uA8EIwbodsYQetUO3Ny7lYL3Uha8uDkG/c=)
                          5: 3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa (hash: 08dE8+5h5VM8IAQN0ml1YiJAjJEdE4Qbpafz+/inBuI=)
                          6: 3230322e3135322e3139352e302f32342d3234203d3e203633383539.roa (hash: xIwOhaK9F8GaMLO+48a1gHgLSh8/QXMa+ox/aPfD8ZE=)
                          7: 3230322e3135322e3139322e302f32302d3230203d3e203633383539.roa (hash: f8b8ZEBPlEImYkbnkpmvkas1RzOl3JK/cPP6s/pxu7I=)
                          8: 5058CBC5AF21280546887DEF6CFA4341A8F99150.crl (hash: w5r6tS2sZoSNrECefv5TiwL71T7vtLZ30EmSr99YLgE=)
                          9: 3230322e3135322e3139322e302f32342d3234203d3e203633383539.roa (hash: sueljug0A0cLELzQ10q3SYM/qivmbpI6TdGOwm3lCaU=)
                          10: 3135302e3132392e3138382e302f32322d3232203d3e203338313439.roa (hash: fMOvsTBxwwympgzVUMuVuCFirt9aVVF5URPsGLYzYTw=)
                          11: 3135302e3132392e3139312e302f32342d3234203d3e203338313439.roa (hash: tDTZ/suZi8WZKxIsg3/UkPfyYPayY1nRFDPkKF6bSng=)
                          12: 3230322e3135322e3230302e302f32342d3234203d3e203633383539.roa (hash: U7zsrHiqdt1Qo1B6xfxOyIpSIT6Eg44KAPPrNmLrIG4=)
                          13: 3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa (hash: inPl6XZ2YHidAUYkG6K1Xa0/KfzuKUU82DOCwt66GWE=)
                          14: 3230322e3135322e3230312e302f32342d3234203d3e203633383539.roa (hash: VB7muXOs/KUgbeY56FO085YD+k7/KBG+CVGoqwGS/LQ=)
                          15: 3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa (hash: /r/8FbAnrRY9+Q4m/2LANGmYkN67339eqGM2Pr09v38=)
                          16: 3230322e3135322e3139362e302f32342d3234203d3e203633383539.roa (hash: q9iza0H2rtEt+ACiqvHrrsVLjS6bvi7IjiExCl+Gt50=)
                          17: 3230322e3135322e3230332e302f32342d3234203d3e203633383539.roa (hash: +yojSrIhe0qfYYoNaS+bjIGGRqdco9vP3EvqLvXSniA=)
                          18: 3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa (hash: qykkhhxHnO0ydNs5JBAQOA0f9BAZyPwR6KhTyOO68q8=)
                          19: 3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa (hash: NITrN6jD7nr5oOwLkcfYoDWIPHvMh97xHgy4U3OmoE8=)
                          20: 3130332e332e3231352e302f32342d3234203d3e203338313439.roa (hash: DxWNHvPmwZOs/Z3yfLBc9ND/xVuA6iVWOBlnfvBRMXw=)
                          21: 3230322e3135322e3230352e302f32342d3234203d3e203633383539.roa (hash: vVq7LUx06+oQEtVvYge1Q2+hkKlr27bVyXKL74EChRk=)
                          22: 3130332e332e3231322e302f32322d3232203d3e203338313439.roa (hash: 8H951OFYlZkzuvTNcIe0++EeO0XA156uuF4G5IFxI6E=)
                          23: 3230322e3135322e3139332e302f32342d3234203d3e203633383539.roa (hash: aHFMnyhh47UaoLaj5P570D9nqN6nQjfKB0KyJ10Bqlo=)
                          24: 3230322e3135322e3139372e302f32342d3234203d3e203633383539.roa (hash: oYNKTwfcxqyIB1OXRbrwMgJ3fSYv5LQtaFy8X3lU6Gg=)
                          25: 3130332e332e3231332e302f32342d3234203d3e203338313439.roa (hash: Pd21/yG0jbFVNaEuOcRJLrkcCGUa6hGTvZoLAS1lgpw=)
                          26: 3230322e3135322e3230372e302f32342d3234203d3e203633383539.roa (hash: Eh7tmqkuq57xlfobk4M7FLmYqi5AfrKI1DM6fiC6my0=)
                          27: 3230322e3135322e3139392e302f32342d3234203d3e203633383539.roa (hash: hEA8tWNHo/TIh0zdljEtCOyHV35vtVjy/xEF9Jp2eSk=)
                          28: 3135302e3132392e3138382e302f32342d3234203d3e203338313439.roa (hash: OvyvdheJuMzbru6Ky1R20fFBCIcjoCjs3UJ3tnNrBeA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
                          rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 02:59:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:35:fe:04:c6:cd:45:9c:bd:a9:12:10:b5:0c:96:e7:85:70:2b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
        Validity
            Not Before: Aug  5 20:27:09 2025 GMT
            Not After : Aug  9 02:59:09 2025 GMT
        Subject: CN=AAB427C4746752E5CEDDB6FCF4559FFEADA798F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:0d:5b:83:a9:0e:09:bc:4e:9a:73:02:cf:
                    ea:55:0b:15:bc:3d:36:5c:d1:65:1a:95:fd:3c:31:
                    89:30:02:0f:5c:9f:15:c0:39:c6:0b:e1:06:47:fb:
                    5c:a9:2a:b9:ed:31:d4:30:14:87:b2:ae:c5:ec:82:
                    9a:d2:bc:b9:cf:11:2f:3c:0a:bd:2e:8a:9e:e6:a9:
                    94:5b:10:e6:06:ca:72:47:ce:af:16:96:db:bd:e6:
                    ea:34:92:ae:5d:61:f8:60:6c:f9:14:29:83:da:4f:
                    91:a7:ef:3d:9d:6c:bb:34:ea:42:c7:64:50:99:7f:
                    06:48:b2:ca:63:8d:fe:f1:6f:38:1d:ef:8a:a7:74:
                    58:8e:5a:25:ad:ad:04:4a:b6:c5:af:5c:63:f5:4d:
                    6c:1d:6d:95:5e:6b:ee:6d:cb:0d:89:1f:66:8a:c5:
                    95:1b:96:0f:b8:22:f1:cb:9f:f9:9c:0a:55:3e:6f:
                    0c:ee:3c:d2:16:f7:3a:89:fc:2a:f8:0c:2c:43:09:
                    e6:38:8d:94:e9:7e:1a:9e:4f:f6:0e:38:5e:bc:51:
                    3c:3b:a9:fd:4e:99:00:44:c1:79:d4:31:c0:f1:c0:
                    f7:22:ee:f6:99:7c:6e:e8:3e:80:54:76:01:79:93:
                    e3:2c:75:27:b5:22:77:42:11:45:30:19:f7:ab:25:
                    14:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B4:27:C4:74:67:52:E5:CE:DD:B6:FC:F4:55:9F:FE:AD:A7:98:F1
            X509v3 Authority Key Identifier:
                keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:06:67:42:fc:f1:16:1f:97:85:1c:e7:51:82:11:a9:24:67:
         53:d3:f2:ba:91:b8:8d:cf:41:20:18:0e:f3:37:87:53:06:f0:
         18:76:df:5e:0c:0e:4a:32:df:02:28:ea:ed:f0:01:8d:7d:a1:
         fc:ac:9a:72:8d:62:0d:08:a6:70:ae:5c:bd:c4:7c:6c:1f:b3:
         55:ce:e5:33:6a:d6:79:34:11:67:aa:bb:54:32:10:e1:0a:8f:
         db:ba:b9:a4:2c:57:f7:61:f8:5e:64:64:6c:d9:04:ef:39:4f:
         bc:22:3f:e9:85:01:a3:95:7b:35:2c:71:ff:2e:c2:10:ef:fb:
         db:b0:35:1f:83:86:f2:22:88:36:c4:2d:c2:31:03:a5:b6:68:
         8b:b9:c8:34:d7:af:44:ed:7b:ed:a9:9f:8c:3e:cc:de:64:af:
         47:09:b2:52:60:e6:5b:de:e1:de:35:78:27:08:60:0f:ff:c2:
         cc:35:be:d2:21:49:15:46:36:42:ca:04:fc:65:34:49:12:b8:
         aa:c7:f8:58:7b:44:7c:4f:27:ce:ea:1c:30:fd:22:90:31:d9:
         5a:59:d5:b5:32:ff:19:81:bd:ab:47:1a:6d:9c:ef:5d:0b:c3:
         57:10:80:e9:dd:6c:78:92:ce:61:01:31:45:2c:35:ba:08:3f:
         46:94:53:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:27:16 2025 by rpki-client