Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
File:                     9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft (raw, json)
Hash identifier:          TA0LD2bHJTo/aTguc00MVxF63I5V1u6HauBLt0TEKAw=
Subject key identifier:   A0:2E:6C:88:D4:89:7C:47:EF:22:F4:18:6D:1F:F6:63:A9:06:A7:A8
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       0F2C929C47C580F72958C1F0CD53AA07263AD62B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
Manifest number:          04B3
Signing time:             Tue 11 Mar 2025 18:01:42 +0000
Manifest this update:     Tue 11 Mar 2025 17:56:42 +0000
Manifest next update:     Sat 15 Mar 2025 01:48:42 +0000
Files and hashes:         1: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: RTIwq7shR7bXdamWXaTuuLysxlJ3zoLqtpVO/z6TjXA=)
                          2: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: ZDywncesSAjMu6O/tvcMI1s4FDR1nuIEwpOi5m0PtTE=)
                          3: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: Ljte3plUxakf1AvmLvyn5ZBd+3DR/9Jpvk/gL8v2UXA=)
                          4: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl (hash: v+td8g2FUt69O0+tmnD1sl43YLdasCOblqyinQE4Phs=)
                          5: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: EK6IOQrf2rr4CozcXpyHn0lnKDzMTXzhLY1ojyQBefA=)
                          6: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: ZwR9FjboZAZDVU/wKbYd21qYjHtnOrshCk3dUigmn3Y=)
                          7: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: J9LMzNjTfq8117LmMgk4XK1mYRtXVZzkGAU9iFEulaM=)
                          8: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: p56aDnFiB/sHhi4D9oPCP6BupyFFvyZDIPu2wfqqfRI=)
                          9: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: 5lHQNRH9ZyHtRlqVq3mhv2CF0AIKUXgULtiM3hQL6BM=)
                          10: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: f3iCk3LjLjEMoJPF3LFNtbgYp3UzsumaaaJ0MXf+xdI=)
                          11: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: 4fgr8pnAQyhzmUnk9mguo5zm84SrVO1dIjnC4wxY3dM=)
                          12: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: DPT2KnFo+j/wGnEOe0FeHMRN87ddzlG5/+viaBnBaYY=)
                          13: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: qkSNUdJkDxdqKObXFqJ7YGM+qaLs/AFZbanOaV69gsQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Mar 2025 01:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2c:92:9c:47:c5:80:f7:29:58:c1:f0:cd:53:aa:07:26:3a:d6:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Mar 11 17:56:42 2025 GMT
            Not After : Mar 15 01:48:42 2025 GMT
        Subject: CN=A02E6C88D4897C47EF22F4186D1FF663A906A7A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bc:a9:d8:55:01:88:9c:2c:6b:79:c9:e9:78:
                    55:41:67:43:87:72:05:b6:5d:df:be:9f:84:d0:aa:
                    56:3e:3b:8d:51:00:04:ab:67:3c:db:2f:d2:68:fa:
                    71:36:0c:d3:ce:a8:1f:b0:f5:74:79:08:27:cf:2c:
                    cd:37:0d:60:1c:f8:23:cb:c8:d7:eb:1b:ba:11:8f:
                    8e:85:4c:48:83:33:c4:e5:1d:dc:17:4d:aa:e0:15:
                    0c:bb:6d:d4:a5:34:11:fe:91:4c:5b:2f:eb:01:17:
                    a3:8c:03:91:d5:0d:d3:e4:6e:42:8d:4e:40:ea:0b:
                    c1:cb:32:46:ae:5f:37:a0:34:75:e9:b2:82:9d:da:
                    c2:a5:72:5a:0c:ca:cd:8c:5f:b1:c0:a7:c8:cf:83:
                    df:e1:08:cd:c4:26:ce:23:6f:bc:4e:4d:e0:28:67:
                    bd:87:a4:21:34:46:06:98:a8:c7:05:c9:56:cc:e5:
                    02:67:25:d3:81:f4:30:d9:e0:2f:66:7a:7c:19:0f:
                    3d:6c:7f:24:61:d3:dd:8a:ce:7c:7a:c3:da:49:cc:
                    fc:64:03:d6:1e:c4:4a:c2:1f:3a:a2:09:df:6b:a0:
                    b9:65:64:95:02:1b:28:90:69:8b:49:24:74:f7:bd:
                    dd:12:68:b0:d7:b0:34:0b:37:bc:e7:3d:18:ae:97:
                    10:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2E:6C:88:D4:89:7C:47:EF:22:F4:18:6D:1F:F6:63:A9:06:A7:A8
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:16:3b:7f:f6:f5:a4:97:1d:2b:2f:7a:e9:dd:40:7a:29:37:
         1e:eb:4f:2c:c4:ba:96:ca:ad:36:63:89:83:00:52:48:d6:d5:
         be:1b:8d:5f:64:44:d4:28:f3:8e:1e:a4:37:10:04:74:da:23:
         8e:4c:f5:ba:66:79:54:99:ab:f0:3c:96:50:3b:70:ea:de:a4:
         be:df:2c:67:aa:15:64:6c:a8:14:1c:72:4d:e2:58:81:98:09:
         48:7c:fc:4e:39:3c:c5:79:4f:94:57:49:6f:a0:ed:18:38:27:
         44:e6:20:24:9d:d2:3f:12:ed:26:3a:e8:4a:77:f9:c4:40:67:
         c4:b6:f5:7b:0d:ac:93:aa:b0:4e:e5:6a:09:84:19:e6:27:fb:
         cb:b5:4b:6d:b3:42:bd:62:a2:42:ea:9d:a1:39:d4:d5:04:36:
         dd:97:1d:b0:34:13:0c:12:58:0f:6d:80:5f:b0:14:50:b8:a3:
         a7:b9:bf:5b:6f:ff:d0:66:82:67:4b:00:3d:41:8e:dd:a5:96:
         65:0e:7c:b6:2c:03:6e:bb:9c:bd:7b:c4:b6:6d:6f:43:5f:6c:
         ae:57:dd:f7:81:69:8d:40:29:47:33:83:93:fb:c0:de:72:e1:
         ac:d3:30:ee:37:f4:cc:41:a4:8c:67:e3:89:cd:c6:c6:7f:b1:
         ff:b1:f0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:31:35 2025 by rpki-client