Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft
File:                     29BE771FE6D788CA509E787787F218ADFB43DDB2.mft (raw, json)
Hash identifier:          fZJm3js2J+8iqcbUCr/bmcOwImNZPT2e2VgAoGEwTT8=
Subject key identifier:   4B:86:22:35:A6:48:87:C0:BF:21:AA:EA:A8:EE:6A:D2:7D:44:06:0A
Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2
Certificate issuer:       /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2
Certificate serial:       7687455268F15CC3B531EF2C9A841BB981D0899E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft
Manifest number:          28
Signing time:             Mon 04 Aug 2025 22:11:00 +0000
Manifest this update:     Mon 04 Aug 2025 22:06:00 +0000
Manifest next update:     Fri 08 Aug 2025 02:18:00 +0000
Files and hashes:         1: 323430353a353163303a3a2f33322d3332203d3e20313339333933.roa (hash: xOhwGI2U+4AffMNiCyrvrejLk4Xi3+2L832MlZGbs+w=)
                          2: 3130332e3134332e3132382e302f32342d3234203d3e20313437303837.roa (hash: zdExcLPsX+gsvz8qx5ZS4VyUIFTtdq1rZbCm2g2FEBA=)
                          3: 29BE771FE6D788CA509E787787F218ADFB43DDB2.crl (hash: tezIU950LLb0AxwyDfGvA7vIvcXVtjV2FapEQhlR0TY=)
                          4: 3130332e3134332e3132392e302f32342d3234203d3e20313339333933.roa (hash: 3wetidkcCavxQpjkiXbTz/VCnjcuje+VreUWREjQdgQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl
                          rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 02:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:87:45:52:68:f1:5c:c3:b5:31:ef:2c:9a:84:1b:b9:81:d0:89:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2
        Validity
            Not Before: Aug  4 22:06:00 2025 GMT
            Not After : Aug  8 02:18:00 2025 GMT
        Subject: CN=4B862235A64887C0BF21AAEAA8EE6AD27D44060A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:32:84:5d:85:fe:35:61:ba:5b:c2:4f:56:8f:
                    02:65:b6:e5:a0:d2:f3:38:fc:5c:14:8c:c1:f4:a1:
                    d1:11:c7:77:69:a5:68:79:f1:0e:e0:ee:e3:00:b4:
                    df:95:b6:1e:6c:c4:5a:62:6a:5e:40:de:fe:93:e1:
                    f2:50:77:46:77:05:91:27:9f:fd:66:4f:0e:43:d7:
                    6d:a5:a6:c4:f4:e1:d2:cd:9b:ef:42:ef:57:9f:c1:
                    8a:34:ac:5a:c9:e4:d6:d9:85:78:ae:fe:99:0e:67:
                    bf:0b:d8:b8:44:93:60:c1:44:bd:7d:57:34:32:a1:
                    d3:90:ec:28:ea:48:1d:7f:12:7e:09:f9:4c:ee:21:
                    98:63:96:15:4f:91:49:c7:9d:7b:59:4a:27:0c:f2:
                    47:bc:e3:61:a4:15:46:1e:ca:e4:62:14:c0:7a:83:
                    b5:a7:5c:aa:55:a7:04:e0:29:11:f2:ba:d4:4a:6c:
                    d9:b8:42:7f:ea:d6:2b:22:36:16:1a:1d:f1:ab:39:
                    54:3b:95:79:f3:2d:38:64:89:5e:f4:cd:60:04:86:
                    92:f4:e2:b8:9a:fe:a6:d4:94:49:44:79:0b:a4:9c:
                    86:29:b4:de:4b:b6:ad:df:59:79:fe:57:38:bc:43:
                    4d:f1:ff:4f:17:cd:56:20:5b:9a:7a:c7:a0:29:2d:
                    d1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:86:22:35:A6:48:87:C0:BF:21:AA:EA:A8:EE:6A:D2:7D:44:06:0A
            X509v3 Authority Key Identifier:
                keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:6d:a8:d9:19:ec:46:17:79:c3:cf:65:9e:83:15:b1:c6:fc:
         aa:cc:97:d0:19:1c:bc:1b:f4:c4:65:6b:ce:6f:6e:dc:d5:18:
         f9:1b:51:1c:b4:09:33:e1:f7:5d:86:67:7c:b4:d9:25:67:82:
         50:a2:ff:1d:12:84:ca:d9:a6:30:ef:03:f9:e8:75:a8:5c:d6:
         eb:1b:52:a5:fb:61:ff:db:98:f9:22:e2:ec:3a:2d:8a:c8:2e:
         7c:7a:39:6d:f8:92:c7:8b:94:a0:f4:20:c1:c4:a5:5f:e6:16:
         29:a6:fb:28:b2:a7:ac:48:af:50:21:8d:f8:7e:cb:e4:89:1e:
         b0:00:ee:89:78:ca:c6:27:4c:23:d3:29:99:33:20:25:d4:12:
         47:f9:a0:ea:e7:35:fe:01:b0:e8:87:58:24:0a:f0:1c:32:54:
         4c:22:a0:73:34:95:56:26:d9:fe:ba:9e:ed:e7:17:7a:eb:5c:
         dc:66:0f:be:a3:7d:44:af:e8:de:7b:44:84:09:ad:cb:a6:f5:
         f7:67:eb:db:df:10:66:ff:d7:a4:d1:8c:07:85:38:ef:98:ea:
         0a:66:68:26:c0:3e:a8:dc:ab:4a:78:24:bc:3c:df:73:1e:ca:
         11:26:93:ed:c7:f7:26:d1:78:f8:dd:92:06:38:fc:18:5e:df:
         b1:7e:03:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:30:21 2025 by rpki-client