Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
File:                     295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json)
Hash identifier:          fvB15RajMVJtY7OsvJVAx6eoL0DLiCS/c6WSG6qqD9c=
Subject key identifier:   99:C0:52:33:E9:E2:8F:EB:4C:19:8F:5D:22:88:7A:CF:AB:5F:D0:D9
Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33
Certificate issuer:       /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
Certificate serial:       658FCD4C74C2504D19C1B76A032967EEE0EC1AF6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
Manifest number:          0437
Signing time:             Tue 21 May 2024 03:41:28 +0000
Manifest this update:     Tue 21 May 2024 03:36:28 +0000
Manifest next update:     Fri 24 May 2024 10:00:28 +0000
Files and hashes:         1: 3232332e3133302e32322e302f32332d3234203d3e2039343232.roa (hash: TqPxUMrBaso9XPGJHYZF8GTNI3LYPmDJ2M2PapwBIIA=)
                          2: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: jz9bRPv/zLjyU9FsvsRyL3PZwV3PEvUTAwe8YNTtT00=)
                          3: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: JZr0h02CfpfGKc+SXJek0NEOpoOLyyun/U/N2E0WqY4=)
                          4: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: 6n97zSsuBs9Z+/87p/dGgAxEkoACCrrHtn+ESxH5vaE=)
                          5: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: LB+inrTHl++NnxWQECwpAACSUffhvv+u+a57RRWlJlI=)
                          6: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: yaEqLrJTqxoFeILIu+UZekmvxpzcTRhQL0lCZNGA0ns=)
                          7: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: Jcrotx/J+M9isu15TPRFtjOsEL2f83lMP7ms3K9R7ag=)
                          8: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: xzGRBk99TL4T9lvDXaCnqMbedtAnRyUv7J+jeQdk9mM=)
                          9: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: wBck/8zR+tCiplmZgzgPDZAHwgGRWMbNue3rlZdihbM=)
                          10: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: RBKmP+8qRU8R2NGKr56dkUHUhcp3iiJG1FPRqESRMSk=)
                          11: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: a83xqAHnIrIROPAmgZi5ByWKOtXBG5bEUwEOTQmYf5E=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl
                          rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 07:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:8f:cd:4c:74:c2:50:4d:19:c1:b7:6a:03:29:67:ee:e0:ec:1a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
        Validity
            Not Before: May 21 03:36:28 2024 GMT
            Not After : May 24 10:00:28 2024 GMT
        Subject: CN=99C05233E9E28FEB4C198F5D22887ACFAB5FD0D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:0c:45:f5:b5:ac:92:b2:4c:f6:21:53:b6:
                    e5:2a:af:2c:0e:f2:be:0d:dc:6a:79:5b:cf:2a:46:
                    83:35:08:d0:f2:00:d4:05:1c:7a:1f:4d:08:31:f7:
                    7c:c6:71:96:9e:b5:97:ff:20:e2:09:41:55:fb:42:
                    5e:f2:16:e4:2f:4c:ea:54:e4:13:28:86:55:b3:b4:
                    a3:04:6e:d1:5a:99:8d:86:45:88:ec:13:e9:6d:3f:
                    3a:aa:0e:a1:57:e5:d7:cb:ae:1a:04:20:51:ec:24:
                    76:59:3b:77:1d:df:c5:10:55:d9:09:2d:11:cb:ea:
                    59:47:af:ae:a4:a4:e7:c5:de:d4:f0:b5:95:7f:0d:
                    35:42:64:13:ab:e0:61:f7:f7:42:c3:f0:79:64:29:
                    bc:f1:9f:fe:2b:06:0f:5d:af:a6:d4:0a:55:d7:6e:
                    f6:e6:1f:e5:76:69:07:76:b6:4e:9a:ec:83:64:1e:
                    c5:b9:eb:14:78:79:14:ee:6f:b8:5a:88:e1:46:45:
                    0c:f5:6e:44:92:85:cc:3e:eb:19:e0:30:39:3c:f7:
                    e3:4b:ed:10:7b:9b:36:6a:f8:1e:8b:52:4c:ac:63:
                    ee:f8:6b:80:9c:2d:d8:92:cd:37:ad:06:f8:1d:26:
                    ef:23:aa:d5:f2:af:36:97:3e:0a:7b:aa:46:10:29:
                    6d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C0:52:33:E9:E2:8F:EB:4C:19:8F:5D:22:88:7A:CF:AB:5F:D0:D9
            X509v3 Authority Key Identifier:
                keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c2:34:d8:1a:f6:0d:28:67:4b:17:32:c9:71:0f:9a:8a:ca:
         63:51:aa:e0:4b:f2:8b:40:6d:b4:00:2a:35:f2:00:c5:45:95:
         e3:cb:a0:86:54:6a:87:3b:db:ee:4d:e8:ac:bb:fd:ad:d1:bc:
         6d:6a:a3:b1:92:77:34:32:8a:d0:56:95:ff:ce:ae:f5:69:47:
         b1:ef:74:93:56:c1:88:6c:fa:ad:9e:e0:91:cb:6b:a6:fe:c3:
         ff:f9:d9:13:fe:5f:12:24:ae:cf:3d:2a:cc:56:cb:cd:d8:2c:
         46:07:de:c1:a1:fc:f9:cc:60:a2:1a:62:73:a6:ed:4a:d2:73:
         1a:70:e6:00:4d:a3:c5:02:e1:93:8a:f0:c2:35:cd:46:21:34:
         5e:3e:3e:48:26:cf:6b:ac:d8:43:59:11:22:37:cf:1d:b5:40:
         a5:89:f9:29:7e:ec:fc:de:1b:28:c6:95:a1:9a:25:6c:83:f6:
         3d:50:23:87:2e:1b:e2:ca:9f:79:80:17:e5:0a:5a:a3:62:01:
         d9:b5:33:af:3c:5f:a8:db:35:94:fa:db:a5:88:0e:4e:fe:c2:
         53:39:41:3d:1b:e5:88:ff:60:6f:96:fa:e5:06:c6:6a:8b:91:
         80:49:56:47:4b:a9:18:20:4f:93:b3:99:99:96:95:d1:c7:a9:
         88:01:64:69
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZY/NTHTCUE0ZwbdqAyln7uDsGvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy
NzJEMkYzMzAeFw0yNDA1MjEwMzM2MjhaFw0yNDA1MjQxMDAwMjhaMDMxMTAvBgNV
BAMTKDk5QzA1MjMzRTlFMjhGRUI0QzE5OEY1RDIyODg3QUNGQUI1RkQwRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2IAxF9bWskrJM9iFTtuUqrywO
8r4N3Gp5W88qRoM1CNDyANQFHHofTQgx93zGcZaetZf/IOIJQVX7Ql7yFuQvTOpU
5BMohlWztKMEbtFamY2GRYjsE+ltPzqqDqFX5dfLrhoEIFHsJHZZO3cd38UQVdkJ
LRHL6llHr66kpOfF3tTwtZV/DTVCZBOr4GH390LD8HlkKbzxn/4rBg9dr6bUClXX
bvbmH+V2aQd2tk6a7INkHsW56xR4eRTub7haiOFGRQz1bkSShcw+6xngMDk89+NL
7RB7mzZq+B6LUkysY+74a4CcLdiSzTetBvgdJu8jqtXyrzaXPgp7qkYQKW27AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUmcBSM+nij+tMGY9dIoh6z6tf0NkwHwYDVR0j
BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE
Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE
MkYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2
N2ItMWVkYzc0OWQwMTI4LzAvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1
NjgyNzJEMkYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACfCNNga9g0oZ0sXMslxD5qKymNRquBL8otA
bbQAKjXyAMVFlePLoIZUaoc72+5N6Ky7/a3RvG1qo7GSdzQyitBWlf/OrvVpR7Hv
dJNWwYhs+q2e4JHLa6b+w//52RP+XxIkrs89KsxWy83YLEYH3sGh/PnMYKIaYnOm
7UrScxpw5gBNo8UC4ZOK8MI1zUYhNF4+Pkgmz2us2ENZESI3zx21QKWJ+Sl+7Pze
GyjGlaGaJWyD9j1QI4cuG+LKn3mAF+UKWqNiAdm1M688X6jbNZT626WIDk7+wlM5
QT0b5Yj/YG+W+uUGxmqLkYBJVkdLqRggT5OzmZmWldHHqYgBZGk=
-----END CERTIFICATE-----
Generated at Tue May 21 04:10:24 2024 by rpki-client on console-fra.rpki-client.org