Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
File:                     2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json)
Hash identifier:          SsM+PYHUSaG6rcHF+ce0PTe1fAM1VLq7ZBOjIRHP2eI=
Subject key identifier:   F8:6F:78:E0:F0:29:93:16:56:CF:A5:9C:68:D0:D3:CC:67:42:42:E4
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       60BCDB4E975DE7A21AB9478E248803C61E31809F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
Manifest number:          04BC
Signing time:             Thu 03 Apr 2025 23:31:49 +0000
Manifest this update:     Thu 03 Apr 2025 23:26:49 +0000
Manifest next update:     Mon 07 Apr 2025 01:20:49 +0000
Files and hashes:         1: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: DLxQo0gdb9JVW6MFJYL4swYph24mURb/ELIJzCfK7Kk=)
                          2: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: 2nesNt4oWdAkHyQxEw62xi3ZAjzFaGioInIZZXdKjCk=)
                          3: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: MCayY48jaokp/UrLHAPKrxV+i3KtaHJo7UcYRQc0U04=)
                          4: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: f/2H82Qaid5o3IMXt4khgRJ2TNCnkFt1IS90BtFG4io=)
                          5: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: ny1yGnHbBejhv6vr1eZqYtkbGIWNTtnBZ/7ODF69CVs=)
                          6: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: uMyrrNvQSHXCaIKeb7YHUJzsiyYMgIhzsvfO2xxvbt8=)
                          7: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: NfXkvyJjdz3lMbP2RK80QjI1Az4nVDj8tmiqN24vkXc=)
                          8: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: 7C0ttE6xJHFXHlt01hfguYWVbxCg3eeWOQXvO+jJ2oM=)
                          9: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: pSMqZyq3tofIqbVs5e+fl67udIcuxiGW/jxUt5sa3SU=)
                          10: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: t94nbHda1ZlB5Svw5eATejFXQCzX8y8ZKvAurl4HFgc=)
                          11: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: VGkd3qyb5RgrQP18pdu6ONcUZAOkXXeZJwZvx9Z15f0=)
                          12: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: MPKCsRZDZNYsOLsUI2cCtDDIcaytMV4pMvYW85eFW6g=)
                          13: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: YzITjDQsLZYdV9iPbkoBc0BV/7hfCBo8LKPdZNMO5zk=)
                          14: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: KgjDRBaTzfFY7ynerTEb+2VCWhn64do32R4bwf4i4r4=)
                          15: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: rWMJzCml+x1f4kxh43cBQCSbawN5JhE1k0v3Pybh1Bw=)
                          16: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: Qol8+JNrvQvm3P/r8gMV8qivGzVQrg5+cD0Ai4x07CE=)
                          17: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: AaYY+4X7oz0aflYSKjFBAuNR5h1WiPnSw/fVuiThbtI=)
                          18: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: MNsCflRoTlLLKOy1y3qU2xpl0KIGEKY8wK60n9pU+7g=)
                          19: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: 1RKwgHPp3AyIEd8oV5JkBCpBzxMgTDMCTLGzRDTdkec=)
                          20: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: dVyXyeitdxkWoIb0JFvBz6herhcN9vKQBLdnntu/3Os=)
                          21: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: qL0wIERL/FZVPFJyexaf4LbHX3ijAAg3bydjjAMgQFk=)
                          22: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: 8A/BY747A8tcSGdw0kTUxTjlElKl9Fd3VYE57A9ejPU=)
                          23: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: 86LEq8VXDYdpyuZGjiApApkS8W4DXo5k1//8mltFNGU=)
                          24: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: kTFbI48ADj1NCd9+X2nm988kpUAUJ4nuOUWfrmLXPzY=)
                          25: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: C1gcqSO0oBdwp9BpXOWFzZg2s6goQaazqVUj4XoKSkc=)
                          26: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: w+MxiQGbDB18Rg5VSNV+eDaLzxTuL21IeMT2XF0iFag=)
                          27: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: Wtm1w2LUkfHMAUBMo8NjVJYbQmXKg5zGneLmy036pZw=)
                          28: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: YGt+3ApTgn/LWTxT6WNpkphV9VxIGygYqSnpvA8kmgQ=)
                          29: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: /l1tDvX0eINixyD193hNPS/nyzynVbnxaZxIsWWnUIs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 01:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bc:db:4e:97:5d:e7:a2:1a:b9:47:8e:24:88:03:c6:1e:31:80:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Apr  3 23:26:49 2025 GMT
            Not After : Apr  7 01:20:49 2025 GMT
        Subject: CN=F86F78E0F029931656CFA59C68D0D3CC674242E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:61:74:26:97:81:8a:4e:d7:3f:95:59:7b:
                    0e:ca:19:3c:e6:6b:9a:d4:cb:97:3d:5a:b1:94:43:
                    6c:e7:54:81:c7:0b:78:69:5d:97:97:11:f8:11:cb:
                    78:c7:eb:6c:d9:76:d6:48:81:d7:c3:11:cd:dc:43:
                    26:9e:e9:54:20:e8:94:3a:da:87:ae:45:df:9f:4c:
                    21:a8:22:c6:49:d0:69:02:2d:c6:87:d3:90:66:90:
                    69:24:c4:92:97:29:6e:65:79:b7:96:e8:87:ee:59:
                    b3:65:58:0f:14:3d:18:2a:e1:f0:04:70:cd:e7:62:
                    fd:c9:37:03:eb:9b:ab:05:b6:cb:5a:7c:f0:2f:6f:
                    3c:9e:5a:9e:ee:8d:24:62:aa:ca:a4:07:b5:dd:bb:
                    e5:53:3d:44:c4:a6:6a:a7:da:76:4e:b6:7e:26:cd:
                    2f:6c:73:07:9a:39:0d:ea:26:81:86:03:32:dc:99:
                    0d:e0:74:ac:aa:55:d6:9a:a8:e9:83:70:8f:2e:4b:
                    4c:73:69:f3:2d:6c:02:89:bd:f3:e8:62:a8:f1:a9:
                    91:c2:f3:dd:bc:d1:d7:60:88:ee:1e:08:bc:86:f4:
                    30:31:86:ab:ae:7b:de:f6:48:bd:a4:7d:6f:77:87:
                    ad:cc:b7:d5:93:d0:de:6a:25:a5:dc:94:26:6e:f2:
                    09:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6F:78:E0:F0:29:93:16:56:CF:A5:9C:68:D0:D3:CC:67:42:42:E4
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:bf:8f:a5:d9:f4:73:b5:65:f8:98:0d:3d:84:46:10:26:e7:
         8b:c3:b2:d7:24:51:1e:6e:c9:ed:06:fe:05:75:27:a0:10:b6:
         41:45:00:57:16:b9:b6:57:a6:79:34:ad:2a:9a:45:01:92:a4:
         44:7b:ec:d4:02:0c:a7:79:5e:bc:79:3a:4d:e6:87:a7:89:fb:
         8b:d4:7f:dd:19:11:2f:a1:35:14:31:c6:14:8a:95:9f:0d:57:
         1b:0f:ab:ad:9a:a5:fd:9f:35:81:c7:5a:f7:94:32:44:90:82:
         a1:71:64:8f:65:79:48:c4:23:de:de:a9:44:f5:e5:f2:cd:d5:
         d7:70:57:12:15:1c:fc:4d:f8:6d:1f:b3:87:0c:da:e2:ae:77:
         7a:a3:b0:7a:2b:e4:53:ee:10:d7:7f:1b:21:a5:d0:14:b7:2e:
         f0:62:b8:17:a9:2e:c2:f6:f3:f0:e1:39:96:2c:d3:d2:9a:f3:
         bd:8f:cb:d0:ae:a3:1b:0a:5b:1b:14:77:c6:06:4a:db:28:f5:
         e8:5c:26:a4:7d:42:6b:f9:41:85:3c:5f:14:7b:0b:72:09:4e:
         c7:23:5e:fa:ea:25:6a:92:82:40:28:9a:47:3c:a1:5a:df:4f:
         31:38:0d:7c:a1:b4:37:44:e5:4a:54:c9:0e:8a:42:65:02:cc:
         83:a3:19:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:37 2025 by rpki-client