Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
File:                     8469874AE268E2CD4E9A137EDD5599C748530E9E.mft (raw, json)
Hash identifier:          4N79P82YrM6b9g6c5ptgUpGY7ATRbqSDaAObtylVO4o=
Subject key identifier:   CE:C2:41:72:F3:54:5E:12:AB:0B:6A:CE:D9:DF:DB:93:98:6B:3B:71
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Certificate issuer:       /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial:       12B1DF3F059F7328FBBF62B46B91D4B0657ACE53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
Manifest number:          04E2
Signing time:             Wed 16 Apr 2025 06:32:04 +0000
Manifest this update:     Wed 16 Apr 2025 06:27:04 +0000
Manifest next update:     Sat 19 Apr 2025 10:37:04 +0000
Files and hashes:         1: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: 1wEjJgzGmGFQx1qLaHwF1vXvoQd7g22cQT5tuVMpCSs=)
                          2: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: LN+YrVCzUblkTbFghEN9RcfZWB+oIkio+9woygN18Nk=)
                          3: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: 6BZFe33/a07P77heVgE/RRa/s7Eo4pTfBbM0ftWFlFs=)
                          4: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: t5dSILf0M9LETh0ONTCtPeHbE5Gq+eulQJzX449lTa8=)
                          5: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: zqqM4+D0YvV3kzADDLg9UoTtA+fv3LSZ59niExdp6h4=)
                          6: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: q6gnQ689gbyPRWkFyTqwu7clrVFZi6YA0qntQoU052Y=)
                          7: 8469874AE268E2CD4E9A137EDD5599C748530E9E.crl (hash: MLt9/YfkasNAZbjpeAotQ/9u30hJWxPqK9UT2X+IFuc=)
                          8: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: 8kcmZ4RG24jB44cBv71IJKv0c+Dtp9Ygk9nrjPzZQxo=)
                          9: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: lejxupJB/ypozilIjk9IOKEOtlHup4PnPlCfI+BqLVI=)
                          10: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: w3mgpqsf+QCQ0IESSJ7u/cpRjR0jksdX+ZR9wNYh8rI=)
                          11: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: 0on0Zr09JZO2uwExsn4al/aKrzhro4Rbk1hM7yfdFaI=)
                          12: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: nBHgJ9scpxnDLh4WsmH3WPakx6Rx02RsuPBuZbUxKAs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
                          rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 10:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b1:df:3f:05:9f:73:28:fb:bf:62:b4:6b:91:d4:b0:65:7a:ce:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
        Validity
            Not Before: Apr 16 06:27:04 2025 GMT
            Not After : Apr 19 10:37:04 2025 GMT
        Subject: CN=CEC24172F3545E12AB0B6ACED9DFDB93986B3B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:a0:6c:e2:71:a9:7a:53:7a:4b:dd:85:25:
                    5d:46:cf:2e:3f:16:3b:6c:ff:fd:1b:81:19:db:c6:
                    1f:d8:20:1e:05:ee:7c:97:94:4c:dd:cd:1e:a6:99:
                    5a:bc:b7:1f:16:5f:bc:c5:5a:41:8a:24:b8:0d:fd:
                    b5:3f:9c:5f:e1:0a:8c:ad:9a:ae:1d:8b:40:85:17:
                    2b:90:40:e5:06:80:e2:fe:a8:95:1c:21:d0:de:d0:
                    ff:19:1f:16:fe:18:47:e4:29:61:1e:17:00:1a:2c:
                    56:68:cb:80:a1:82:99:eb:52:b5:18:b9:9e:6f:4b:
                    2b:a0:67:5d:d3:74:4f:3c:20:16:61:c6:67:b5:2a:
                    c8:27:41:a6:7e:ed:aa:a5:bf:0d:a6:d0:26:d3:f5:
                    34:c2:07:c1:9d:6c:13:a6:d4:9c:28:1f:9a:5a:2b:
                    71:9a:b0:d8:23:7a:f7:88:7a:5a:9c:38:db:48:5d:
                    4d:ef:ef:7f:01:51:5d:9c:e9:b3:70:0e:89:03:d7:
                    4e:77:de:50:01:9c:50:64:3a:62:e3:4e:3c:7d:f0:
                    b9:76:e7:d0:db:bb:f1:29:f6:86:9b:19:2e:b7:75:
                    08:b5:f3:4f:3c:d0:a9:30:84:6c:ac:f4:58:be:ca:
                    f8:16:87:3d:57:70:19:66:17:4b:02:4e:7e:a0:d3:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C2:41:72:F3:54:5E:12:AB:0B:6A:CE:D9:DF:DB:93:98:6B:3B:71
            X509v3 Authority Key Identifier:
                keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b8:71:33:55:06:5f:a2:3a:21:49:c7:76:57:35:9f:3e:cc:
         6f:cd:46:19:82:9d:9a:37:14:9d:2e:f0:32:87:26:83:78:b5:
         16:73:7e:37:40:cc:ac:01:93:f8:e1:d1:a6:67:9f:9a:09:4e:
         8e:26:89:d0:33:4b:34:f1:a9:ac:cf:34:9c:0a:0e:29:b7:11:
         e0:7c:c0:52:df:a2:e9:95:ae:7b:ff:2a:66:63:dd:b9:07:9a:
         1a:67:ad:dc:b2:0d:d0:e1:0d:6c:a2:cc:cd:51:4b:41:73:73:
         b4:65:cf:81:a1:7b:e9:58:89:98:9c:ee:9f:c2:5d:8c:e2:f8:
         ec:b4:d5:e3:99:06:b2:02:79:1a:28:d6:93:39:43:65:97:a1:
         d0:69:bf:f4:b0:e1:5b:56:60:9e:ba:3b:39:6c:80:da:aa:1b:
         f2:42:f0:4d:6b:ad:cb:e9:ed:20:5a:f5:da:d2:58:aa:f0:8e:
         12:9c:71:4c:19:7d:8d:b0:38:1f:bd:cd:8b:68:be:07:0b:a8:
         5b:21:08:41:2e:d7:e2:73:41:29:ee:51:ac:dd:cb:c2:13:39:
         c2:1c:88:8f:6c:a1:66:0a:98:21:36:d6:a2:3d:54:96:91:e4:
         4a:3f:f9:90:ed:d1:91:32:c1:0e:e9:17:5d:cf:11:6f:51:8e:
         64:5f:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:59:35 2025 by rpki-client