Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
File:                     9EDE64DBC4098881F11B70123DF514D38F7881EE.mft (raw, json)
Hash identifier:          j1KRSREV6lmeJT6mwmHMZ7INJnvipW5EyOadJBFAAbs=
Subject key identifier:   28:DD:7A:CC:BF:53:A2:D6:BB:02:00:E6:87:D0:BB:A6:D6:75:9E:D2
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       59FAF94535F3B529366D2E9764584A5336600582
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
Manifest number:          0428
Signing time:             Sat 27 Apr 2024 12:31:48 +0000
Manifest this update:     Sat 27 Apr 2024 12:26:48 +0000
Manifest next update:     Wed 01 May 2024 00:01:48 +0000
Files and hashes:         1: 3230322e37322e3139322e302f32342d3234203d3e203138313533.roa (hash: +mC4B/A6ig0FE9X6Nf9AjPZFL2CaawuhmzlhFQxGaUA=)
                          2: 3230322e37322e3230342e302f32332d3233203d3e203538353532.roa (hash: NV2R9tjnAwSLXAm/0nVa4ldIa/N8tbmqV7skLZ2t3Bc=)
                          3: 3230322e37322e3230342e302f32342d3234203d3e203538353532.roa (hash: c+ESOeiTUHpwv1cs5v3PVXF9s1w+zWvQV/lFUvsfDpg=)
                          4: 3230322e37322e3139342e302f32342d3234203d3e203538353532.roa (hash: /z9DoOR68bMWCTkoccQn2MachRQ/SIIqba8C10IJH9g=)
                          5: 3230322e37322e3139332e302f32342d3234203d3e203138313533.roa (hash: hN2t7weLf+o/ENYi7A1cc3Uy0CwFIk3m1qbqJu8mFms=)
                          6: 3230322e37322e3230312e302f32342d3234203d3e203138313533.roa (hash: OwJtj/x9oFx/Z+wLs0WAoenVsDhXM5w5XJVKrcgRCTg=)
                          7: 3230322e37322e3230352e302f32342d3234203d3e203538353532.roa (hash: M+bBROG9spgh/cciNmaRNeUXBJ3LiO1g1PbQUkHUIU0=)
                          8: 3230322e37322e3230332e302f32342d3234203d3e203538353532.roa (hash: 5nHttwljCkgbZvT5Gd5yPlqYbfCXiuFL0MROzp1WkJQ=)
                          9: 3230322e37322e3139382e302f32342d3234203d3e203538353532.roa (hash: 6uCI7L6akhK07by26Q09iYhwHV+lHYCtb6jAIsgAih0=)
                          10: 3230322e37322e3139362e302f32342d3234203d3e203138313533.roa (hash: 6wWduIgrKtKg9fBSVUvGXVG60Z0X5QPkBQ0d0bIySVw=)
                          11: 3230322e37322e3230362e302f32342d3234203d3e203138313533.roa (hash: g4X6JhQ3/zH9bBTs1xEnxTNuPx54wyKhTu43h7vR2xo=)
                          12: 9EDE64DBC4098881F11B70123DF514D38F7881EE.crl (hash: sYjrxL3A3byNmlwbKQ1QUCn4vDlTSznuMa4g183Qh2I=)
                          13: 3230322e37322e3230322e302f32342d3234203d3e203138313533.roa (hash: RUM5SHI4/SMDK4iwL5sC8857lmFTJWLjT98zmMkSIyE=)
                          14: 3230322e37322e3139352e302f32342d3234203d3e203138313533.roa (hash: k2b/oUfgY6lKTkY1tLWFpNrQkUG1OX0icWzO+8NnCfQ=)
                          15: 3230322e37322e3139392e302f32342d3234203d3e203538353532.roa (hash: fcb8/YKfmfdhT3GrEntZXwOGco7mlETfHO4Em6hjJNo=)
                          16: 3230322e37322e3230372e302f32342d3234203d3e203538353532.roa (hash: uyIjSJ02EBUfJPK823k0pEnH2ebIGuk/9JOpL8wbv7Q=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 20:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fa:f9:45:35:f3:b5:29:36:6d:2e:97:64:58:4a:53:36:60:05:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Apr 27 12:26:48 2024 GMT
            Not After : May  1 00:01:48 2024 GMT
        Subject: CN=28DD7ACCBF53A2D6BB0200E687D0BBA6D6759ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:e1:ad:f0:5d:6a:31:52:62:63:fd:05:59:
                    71:3d:92:05:98:10:f1:e3:c6:ab:fd:a9:c9:b1:5f:
                    62:b1:fc:82:29:44:6b:d3:1d:ca:5c:fb:c3:0f:95:
                    c6:7d:3d:fd:28:45:95:96:06:35:fd:db:fb:48:d0:
                    05:de:bb:a7:9d:54:7f:c3:98:5f:c6:e5:16:78:93:
                    91:03:28:f0:e1:eb:48:5a:99:62:f6:47:5b:a4:ea:
                    b9:09:ff:2e:9d:d0:ec:0d:88:6a:84:70:0e:a4:1b:
                    66:fb:1e:6b:9f:90:f8:f7:ec:49:78:26:0f:27:be:
                    7a:4e:ff:04:52:71:d4:8f:f6:5b:9d:9a:76:74:f7:
                    4d:98:60:70:3a:41:62:ab:e8:e9:85:b7:8c:e3:6c:
                    0a:8a:95:1c:b6:56:84:08:8e:bc:42:77:8f:d9:27:
                    d0:c2:61:c9:29:5b:bb:dc:8a:8d:3c:6d:d2:80:36:
                    01:45:4f:1f:88:e4:52:f2:27:66:f0:bc:df:5e:37:
                    28:e0:53:a3:ba:92:c7:eb:e0:91:7f:e1:10:d1:fb:
                    19:cb:cd:32:1e:bd:d3:4f:a9:06:c3:88:69:06:28:
                    82:65:2c:f2:38:f2:f7:28:87:89:e3:46:6e:09:76:
                    2e:6d:42:11:ee:f1:15:e1:66:bb:96:94:ad:ef:76:
                    39:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DD:7A:CC:BF:53:A2:D6:BB:02:00:E6:87:D0:BB:A6:D6:75:9E:D2
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:4b:30:96:d7:ef:8f:16:9f:2d:0f:e7:6a:10:2a:ea:de:f4:
         bb:99:ca:d0:57:9f:da:8c:fd:72:17:f7:6e:4d:1d:ba:5a:3b:
         f9:44:01:df:8a:88:13:3e:3b:58:49:e9:77:15:07:b8:0a:d8:
         3d:87:dc:8a:be:01:da:af:4f:ce:fe:10:21:b8:2a:6b:03:05:
         d9:91:4d:37:6c:95:02:4d:67:53:10:7d:a4:77:1b:e6:9b:aa:
         0a:6e:f8:d1:ed:2b:51:f6:9e:b5:f9:e6:93:5a:00:23:fd:54:
         5a:8c:b1:2e:60:02:39:96:c8:13:87:40:b9:90:68:5f:f2:c0:
         85:18:38:67:5d:16:7f:f1:0f:aa:a5:bb:97:15:4a:49:91:79:
         ab:9a:1a:1f:72:3c:f5:b9:ea:f3:9c:51:7e:18:20:bf:bc:52:
         36:60:1b:8e:a6:f1:cd:c6:1d:a9:ea:7e:40:b5:4c:c0:0f:c2:
         02:a7:37:2b:da:07:4d:d0:44:b3:7e:8e:20:08:07:12:28:84:
         cd:c6:29:cd:6c:26:89:60:66:53:86:ca:db:89:a6:1e:ae:9b:
         b0:03:75:cf:df:f9:5f:ec:6e:00:ad:f3:34:04:81:8a:d3:72:
         9d:a4:b8:64:12:d0:5e:4c:25:8e:71:7f:e3:e7:44:fa:bd:e6:
         67:61:e5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:32:23 2024 by rpki-client on console-ams.rpki-client.org