Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
File:                     C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft (raw, json)
Hash identifier:          EMksCkaVfCO1le/IsFsLARJB37hMmRwOGs92Og5rJAo=
Subject key identifier:   0C:52:84:97:F7:71:8A:92:1C:12:BF:53:7D:5A:16:85:58:62:FD:AF
Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
Certificate issuer:       /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Certificate serial:       790CB300B4E8CC6F848B132B611CFF888E6AC071
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
Manifest number:          04C6
Signing time:             Wed 20 Nov 2024 22:22:30 +0000
Manifest this update:     Wed 20 Nov 2024 22:17:29 +0000
Manifest next update:     Sun 24 Nov 2024 02:37:29 +0000
Files and hashes:         1: 3130332e32322e3234382e302f32342d3234203d3e20313331313131.roa (hash: UglidYzWL9eS8oE1XCeltWq1Gx4CbpWjqajlpSG2VPk=)
                          2: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl (hash: 1faM6KixnCHPzmKiK3c5jFB8rBivWretWNwcgVdw4dw=)
                          3: 3130332e32322e3235312e302f32342d3234203d3e20313331313131.roa (hash: mQRUGYXvQjD7oHJLxS9GSY4ylvqD7VOa3/v0SzsSs78=)
                          4: 3230332e3137362e3138302e302f32322d3234203d3e20313331313131.roa (hash: k6UnQMLMIDRIqHuNGMjMihPo3OZCXnSVr0QRCcG/GmE=)
                          5: 3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa (hash: ABn4EeP/70yx9BuoqJ+te+eRTp86nUPy2fJ0XrEtsyY=)
                          6: 32372e35302e31362e302f32302d3234203d3e20313331313131.roa (hash: iX1X0MRIbAaMrNb65vnsVU9YLyVWkPnpJ151a+516bg=)
                          7: 3130332e32322e3234392e302f32342d3234203d3e20313331313131.roa (hash: l/4DE/0WRKpXXPlYh3wvldMo2X4meWMGqYE3EExh40A=)
                          8: 3230322e34332e3137362e302f32302d3234203d3e20313331313131.roa (hash: u1khOUZzr0zzvk3rZ9h9PNyXL8p82sTJkKped49f6Qc=)
                          9: 3230322e34332e3137362e302f32322d3234203d3e20313331313131.roa (hash: Q58jNeHuBpsq7hQ+ne3lDnrWtDgs8Ludakwk4hsrb6E=)
                          10: 3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa (hash: jjxSeOv5ZZK3KDWri7oH/M/kN4C20PSLZBGyiP0hV3s=)
                          11: 34332e3234332e3134302e302f32322d3234203d3e20313331313131.roa (hash: Kr/Ffh87lyk2yI98uCludkSzupa5CSckPMurEC5ByLU=)
                          12: 3130332e32322e3234382e302f32322d3234203d3e20313331313131.roa (hash: t0vWx3i7cD0IWfrHymKFi6iS+XLTpt8CRzLa0PdDNW4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
                          rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0c:b3:00:b4:e8:cc:6f:84:8b:13:2b:61:1c:ff:88:8e:6a:c0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
        Validity
            Not Before: Nov 20 22:17:29 2024 GMT
            Not After : Nov 24 02:37:29 2024 GMT
        Subject: CN=0C528497F7718A921C12BF537D5A16855862FDAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:d5:d4:20:9b:a7:48:a3:48:40:07:da:0e:
                    95:34:48:58:db:44:f2:7c:af:12:11:8e:6d:d8:55:
                    11:6e:07:51:3f:25:69:35:6d:06:df:f5:df:4f:21:
                    52:e6:76:e5:34:d0:19:f1:c7:1a:fd:19:a3:a5:47:
                    d2:5a:b1:44:10:f7:c0:54:cf:d6:25:0b:ff:54:30:
                    e0:6a:e1:79:a6:a3:2f:66:fd:29:94:a8:26:c7:87:
                    86:0c:0f:69:bc:c9:5b:4a:1e:59:7f:12:bc:d4:3e:
                    65:1c:41:6e:65:56:86:19:56:8b:ae:87:c7:44:79:
                    ed:8e:51:19:e1:ea:0a:0e:42:fe:72:11:76:b2:6e:
                    53:9e:ce:b0:60:c3:89:a4:60:8a:35:c7:79:7a:13:
                    37:23:32:e9:0d:91:96:6a:12:c0:3e:69:36:42:b1:
                    3f:96:d1:5f:ab:0b:17:75:0e:d4:6a:9c:32:fb:79:
                    cb:d8:45:aa:e4:0f:0f:c0:f9:76:24:b0:05:b9:03:
                    ce:98:8a:a4:fb:f3:f5:b0:81:ae:63:5b:16:f7:cf:
                    81:9c:4a:94:f0:ef:c6:5c:7c:22:c9:c8:7d:e8:ec:
                    a8:e9:3f:78:69:74:e7:e2:dd:35:36:d1:db:ad:be:
                    5b:c2:f3:83:72:a7:5e:1e:1f:8d:aa:bd:03:e7:e2:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:52:84:97:F7:71:8A:92:1C:12:BF:53:7D:5A:16:85:58:62:FD:AF
            X509v3 Authority Key Identifier:
                keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:86:83:80:8a:6c:db:2e:6b:f8:33:5b:f4:8e:07:33:67:21:
         c4:e3:3a:d8:51:0b:b3:80:44:a4:7b:66:0a:ae:3f:2b:21:72:
         73:1f:47:15:f9:31:d0:8d:9e:59:7e:da:8e:04:eb:12:c0:0c:
         90:58:34:01:67:b2:22:3f:e5:62:54:2a:00:90:b0:d4:cc:75:
         7b:ce:72:68:57:39:8f:6b:5a:3f:84:d5:0e:9e:e2:16:01:c0:
         a3:fd:c3:c3:f7:c3:3c:07:91:3a:38:a4:43:c3:c6:af:45:72:
         34:a7:4d:78:4c:e8:ad:1e:7d:2c:dd:8c:67:5f:59:13:94:74:
         a2:77:8d:5f:8b:f1:87:f1:c7:bc:ad:b5:ee:2d:0b:5e:d2:e3:
         15:cb:00:7b:87:5b:78:d7:f0:6b:c5:d2:b6:c6:1d:8d:e2:c4:
         d5:0b:f7:67:1e:90:44:1b:51:b6:01:8e:83:7a:a4:74:46:27:
         e4:45:41:89:11:dd:ac:b1:2f:c1:47:7a:2f:9b:02:be:05:02:
         79:9b:fb:37:0d:17:dd:a4:dd:9a:09:3e:af:e6:ed:fe:68:89:
         a9:43:88:a0:a5:b2:f3:7f:67:be:d6:2d:02:bf:65:7c:ae:00:
         0c:35:93:7c:f9:c0:88:37:76:35:4a:b4:9e:cd:d4:b2:27:72:
         d0:c9:04:f0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeQyzALTozG+EixMrYRz/iI5qwHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4
NzE2REMyRjAeFw0yNDExMjAyMjE3MjlaFw0yNDExMjQwMjM3MjlaMDMxMTAvBgNV
BAMTKDBDNTI4NDk3Rjc3MThBOTIxQzEyQkY1MzdENUExNjg1NTg2MkZEQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzstXUIJunSKNIQAfaDpU0SFjb
RPJ8rxIRjm3YVRFuB1E/JWk1bQbf9d9PIVLmduU00Bnxxxr9GaOlR9JasUQQ98BU
z9YlC/9UMOBq4Xmmoy9m/SmUqCbHh4YMD2m8yVtKHll/ErzUPmUcQW5lVoYZVouu
h8dEee2OURnh6goOQv5yEXayblOezrBgw4mkYIo1x3l6EzcjMukNkZZqEsA+aTZC
sT+W0V+rCxd1DtRqnDL7ecvYRarkDw/A+XYksAW5A86YiqT78/Wwga5jWxb3z4Gc
SpTw78ZcfCLJyH3o7KjpP3hpdOfi3TU20dutvlvC84Nyp14eH42qvQPn4v9NAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDFKEl/dxipIcEr9TfVoWhVhi/a8wHwYDVR0j
BBgwFoAUwa+MmZ6dBtrevDh9eLMFq4cW3C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
OTIwNWU3Yy1hODgxLTQ4NzMtOTE4OC1lNTIxYjZhZjUyOWMvMC9DMUFGOEM5OTlF
OUQwNkRBREVCQzM4N0Q3OEIzMDVBQjg3MTZEQzJGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4NzE2
REMyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTkyMDVlN2MtYTg4MS00ODczLTkx
ODgtZTUyMWI2YWY1MjljLzAvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1
QUI4NzE2REMyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ6Gg4CKbNsua/gzW/SOBzNnIcTjOthRC7OA
RKR7ZgquPyshcnMfRxX5MdCNnll+2o4E6xLADJBYNAFnsiI/5WJUKgCQsNTMdXvO
cmhXOY9rWj+E1Q6e4hYBwKP9w8P3wzwHkTo4pEPDxq9FcjSnTXhM6K0efSzdjGdf
WROUdKJ3jV+L8Yfxx7ytte4tC17S4xXLAHuHW3jX8GvF0rbGHY3ixNUL92cekEQb
UbYBjoN6pHRGJ+RFQYkR3ayxL8FHei+bAr4FAnmb+zcNF92k3ZoJPq/m7f5oialD
iKClsvN/Z77WLQK/ZXyuAAw1k3z5wIg3djVKtJ7N1LInctDJBPA=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:17 2024 by rpki-client on console-fra.rpki-client.org