Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
File:                     F33127B2252454B491C5DC9FE3937C56F28F8066.mft (raw, json)
Hash identifier:          e8T9LHu3vwOd66XGJPMK0+uYcR+QtGGP1B9Qxf/ZqDU=
Subject key identifier:   4F:AE:78:08:33:AA:4F:FD:12:6F:AE:1F:40:39:49:3D:C7:C4:82:2C
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Certificate issuer:       /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial:       2ACDCC4AD5168A06D9CB7C75D529D6DAE23005C5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
Manifest number:          03C7
Signing time:             Sun 15 Jun 2025 16:40:56 +0000
Manifest this update:     Sun 15 Jun 2025 16:35:56 +0000
Manifest next update:     Wed 18 Jun 2025 22:36:56 +0000
Files and hashes:         1: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: N0CbxEaJ84FtSM59t7S0gaGm9kXwBwxvj0vCyUhse+Y=)
                          2: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (hash: xd0vdotwl3DI/gtzK9jd/Z1SgDoCaQpGK+EAJgcM1tI=)
                          3: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (hash: TZ45IaHiDcklYnYgaDPwrwSUbUctA3Q/NXqUbigRnzs=)
                          4: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: nPfvFxh32GtLGhwJQ/WVsbfFCUobHuoJlvZ49Ao0HyU=)
                          5: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: Xb1Bkjs5hzP5DiGreqFq1n1/N1wG2GKWoe1mJNbSKvU=)
                          6: F33127B2252454B491C5DC9FE3937C56F28F8066.crl (hash: BGAh/HbXVAyAdYYSsDjPOdd4M6Rx2R0R5amfvxGETiA=)
                          7: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: gRftjSQQEs2HA/M7jkf+ozLtCrIoawfYsZxOb3X4kBI=)
                          8: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: DcGxDHPqViJVOJR4+8wZK4plCpX0AqnB3wzHsVU0B/I=)
                          9: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: 44xJ+4HPqKcd5YyfQZtlfLdXLia/wNGmzcAqkBPsBnY=)
                          10: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: LK7y7Lgv53BZtTgHVdhNU9vAFNrTBJKQoUlDcnr1peM=)
                          11: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: BhrGTMcOlTnS9+LXizZepRTc8dUVDoSk9wrBjorwUZI=)
                          12: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: sfYpDs3jHVhySahEuUQy0V6BeSKjH1Lk7XnZpDOyCWI=)
                          13: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: m3SFMK5sTyp5JRSjSaSerEeKhJKK6aQm3Z3k3tuCZsA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
                          rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 22:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cd:cc:4a:d5:16:8a:06:d9:cb:7c:75:d5:29:d6:da:e2:30:05:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
        Validity
            Not Before: Jun 15 16:35:56 2025 GMT
            Not After : Jun 18 22:36:56 2025 GMT
        Subject: CN=4FAE780833AA4FFD126FAE1F4039493DC7C4822C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:e5:d8:a4:ac:4f:2a:99:a3:35:59:e2:64:
                    06:4e:ba:5c:63:af:34:80:68:4c:62:63:e5:70:bd:
                    2b:4f:84:ce:2e:0f:0f:67:79:4b:46:26:34:33:06:
                    46:65:be:1c:c2:82:0c:02:46:d6:f2:5a:35:23:39:
                    3f:c4:d0:b1:9a:a5:17:5f:d6:bd:d8:c6:d9:dc:2e:
                    98:47:1a:4e:be:40:46:31:ce:6b:f2:14:be:92:7b:
                    33:db:24:50:a9:31:4e:a1:08:07:9e:a1:75:9f:01:
                    e7:13:3d:d9:6e:6e:3c:82:c3:ac:d5:ac:25:9c:42:
                    87:e2:9f:b6:2a:fe:a2:5a:e1:fc:7b:f7:29:b3:ec:
                    a8:3e:59:8d:42:d1:65:94:df:50:3e:4a:90:53:69:
                    68:02:6f:c5:69:ed:af:8e:d2:09:d9:b2:f4:2e:c4:
                    c4:06:66:11:51:9d:59:1b:ac:05:a8:3c:3d:ee:e2:
                    5a:5d:7b:dc:96:64:d0:43:91:5f:8b:b6:18:97:b8:
                    7a:54:e7:0c:0d:2f:6a:57:d3:53:13:a2:bd:eb:67:
                    a5:4d:11:f1:73:58:9a:f2:e1:50:e8:99:20:8f:db:
                    11:5c:ad:5d:a0:a1:b2:ee:c6:c1:9a:7a:48:d5:91:
                    e4:3e:41:d6:b4:04:3e:af:bc:ed:9c:76:3c:33:e2:
                    1f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AE:78:08:33:AA:4F:FD:12:6F:AE:1F:40:39:49:3D:C7:C4:82:2C
            X509v3 Authority Key Identifier:
                keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7a:2f:4b:d6:3d:4a:9a:da:27:dd:97:b9:37:4e:8c:3c:63:
         80:6d:e2:a8:7f:1e:f3:05:91:bf:e1:3d:47:d2:2f:8b:b5:d4:
         e9:e1:3b:46:61:78:ed:5d:2f:f6:35:ef:3e:43:09:20:6d:24:
         5b:c1:51:90:31:a8:fa:2a:d1:62:7a:be:15:53:1b:58:81:24:
         5c:0f:da:c1:1b:d6:62:5a:d6:fa:d2:21:b2:50:e7:36:fc:64:
         bf:f3:ee:c0:80:7c:8a:d8:a9:de:a4:c4:58:34:db:a6:f6:02:
         9d:af:dd:a4:ea:9a:24:14:06:a8:d7:32:24:52:e9:60:32:ff:
         38:f4:1b:9c:d1:91:38:83:2e:9a:16:e4:32:e4:2b:99:2a:7b:
         90:22:ab:c7:69:57:57:b2:94:ab:ab:98:8a:69:7a:95:ce:c2:
         ba:f1:3f:57:6b:86:10:12:b8:c4:7b:6a:99:c5:23:60:08:dc:
         2d:95:38:63:6d:b7:d1:b5:67:a4:53:71:db:1f:a8:42:0f:95:
         96:7d:1a:3b:c9:88:d0:42:7d:97:24:51:04:2f:a9:2d:52:fd:
         0d:e0:a6:34:86:da:3b:30:51:ad:9b:5d:dd:99:7f:96:c9:14:
         bb:de:ae:2a:ab:ee:be:be:10:62:ba:93:de:89:54:64:2b:bf:
         d4:60:13:ca
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKs3MStUWigbZy3x11SnW2uIwBcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZG
MjhGODA2NjAeFw0yNTA2MTUxNjM1NTZaFw0yNTA2MTgyMjM2NTZaMDMxMTAvBgNV
BAMTKDRGQUU3ODA4MzNBQTRGRkQxMjZGQUUxRjQwMzk0OTNEQzdDNDgyMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2eXYpKxPKpmjNVniZAZOulxj
rzSAaExiY+VwvStPhM4uDw9neUtGJjQzBkZlvhzCggwCRtbyWjUjOT/E0LGapRdf
1r3YxtncLphHGk6+QEYxzmvyFL6SezPbJFCpMU6hCAeeoXWfAecTPdlubjyCw6zV
rCWcQofin7Yq/qJa4fx79ymz7Kg+WY1C0WWU31A+SpBTaWgCb8Vp7a+O0gnZsvQu
xMQGZhFRnVkbrAWoPD3u4lpde9yWZNBDkV+LthiXuHpU5wwNL2pX01MTor3rZ6VN
EfFzWJry4VDomSCP2xFcrV2gobLuxsGaekjVkeQ+Qda0BD6vvO2cdjwz4h/rAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUT654CDOqT/0Sb64fQDlJPcfEgiwwHwYDVR0j
BBgwFoAU8zEnsiUkVLSRxdyf45N8VvKPgGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMC9GMzMxMjdCMjI1
MjQ1NEI0OTFDNURDOUZFMzkzN0M1NkYyOEY4MDY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZGMjhG
ODA2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJiZmU3NzYtMDBhMy00Nzc2LWJm
M2YtNTIxMTk0NjEwMWMzLzAvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdD
NTZGMjhGODA2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABJ6L0vWPUqa2ifdl7k3Tow8Y4Bt4qh/HvMF
kb/hPUfSL4u11OnhO0ZheO1dL/Y17z5DCSBtJFvBUZAxqPoq0WJ6vhVTG1iBJFwP
2sEb1mJa1vrSIbJQ5zb8ZL/z7sCAfIrYqd6kxFg026b2Ap2v3aTqmiQUBqjXMiRS
6WAy/zj0G5zRkTiDLpoW5DLkK5kqe5Aiq8dpV1eylKurmIppepXOwrrxP1drhhAS
uMR7apnFI2AI3C2VOGNtt9G1Z6RTcdsfqEIPlZZ9GjvJiNBCfZckUQQvqS1S/Q3g
pjSG2jswUa2bXd2Zf5bJFLveriqr7r6+EGK6k96JVGQrv9RgE8o=
-----END CERTIFICATE-----
Generated at Tue Jun 17 05:47:07 2025 by rpki-client