Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
File:                     9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft (raw, json)
Hash identifier:          mv7mL+VoQ/5gvFNLLYl/82ZMYYekT+hBzlLyi1HOWSc=
Subject key identifier:   B4:6C:A9:F1:F9:41:A4:B5:42:D1:9C:76:27:6A:78:4C:C9:D5:9C:3E
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       1E53E212A6E1366A6CE4BAD703790C2AA640C56B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
Manifest number:          0430
Signing time:             Sun 19 May 2024 11:21:32 +0000
Manifest this update:     Sun 19 May 2024 11:16:32 +0000
Manifest next update:     Wed 22 May 2024 15:47:32 +0000
Files and hashes:         1: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: 5qV3j7tzQiLSPYHtYqYzib6DB5EhPQX5/DEZocEW34w=)
                          2: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: p6mHF7b0Gb7B/naSHftcFqR9aBHa8Evz3SgLn3Ua0nU=)
                          3: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: Fpg6ojvEHW8fJUVggYSDwlCSZfr3LJaywBnVRrlorQU=)
                          4: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: TcRW2tgn6ESvh9QBjVUJhZW/0WsjJ/KQxZyMk6gY6JQ=)
                          5: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: 9yXMSW2//skvIP4I6ds8NiOr3zeBXrD6nI6SReBSSEg=)
                          6: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: OW6kjCQs/A80nC23iofLKsCJItTXKWrV2oQEAB0pMk0=)
                          7: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: qsltypP3td62g+M+/tfMZ/kVIHrrCwUh8Z2KUqhGbIY=)
                          8: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: QPZ6HvUxSM5stcBpdr9MeE9bD73wM7NLd/DoJXoc6qQ=)
                          9: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: ZOyGEZ3mD1vhdA/G2xLjnQPnFDvqjV7crVi/wqCyrdA=)
                          10: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: hTbBDTsrCM+36FDPUmGAvzk0vwyC1n0N7Zzr/gQPkMA=)
                          11: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: xJb8t1RJGvdxIUhClEcH5slyqWHTJA9fPztD9OFgl10=)
                          12: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: amuY5oytF4z/rQqgs6MoJFgjODAdAtdxDdvUxDaoYjo=)
                          13: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl (hash: YW2LUPLXwOcL+GtNP0oZR8/Y+XrRH/sD7iEunYUHjQo=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:53:e2:12:a6:e1:36:6a:6c:e4:ba:d7:03:79:0c:2a:a6:40:c5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: May 19 11:16:32 2024 GMT
            Not After : May 22 15:47:32 2024 GMT
        Subject: CN=B46CA9F1F941A4B542D19C76276A784CC9D59C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:58:d5:0f:86:31:46:7b:f6:2b:b3:da:de:
                    05:18:73:b0:63:b5:69:ad:47:00:98:d5:67:2c:cf:
                    0b:19:40:cd:29:12:5c:49:5d:45:34:5e:a3:48:cb:
                    d3:1d:df:44:8f:08:d0:b0:33:41:2a:e1:04:f9:d5:
                    39:92:8d:0b:4e:1e:8f:5d:a4:4d:42:a1:b5:37:1d:
                    6e:60:aa:d1:e7:20:d5:01:63:e9:25:7d:ee:a5:f5:
                    0d:e8:94:27:ce:bd:5a:35:3f:8c:99:ed:19:01:bb:
                    fe:1e:55:2e:0e:28:05:27:03:7d:ea:b1:65:6b:8e:
                    c7:70:1e:9d:61:74:1b:27:8d:96:d5:47:7d:84:af:
                    92:e4:13:35:e9:0b:ee:c8:cc:1d:f0:1b:45:3b:36:
                    ca:1e:49:63:d8:81:9f:25:8e:b6:bb:e7:42:37:ca:
                    2c:57:0c:78:bf:6b:ad:6b:f1:02:70:2e:d8:42:56:
                    14:2b:a3:33:b3:63:97:2a:01:e0:47:ce:a3:29:df:
                    d4:c0:56:2d:f5:71:d1:ec:d6:ed:74:43:ff:22:40:
                    f3:97:47:69:59:03:2e:af:05:d4:7b:cc:21:16:cb:
                    79:4d:21:c7:0c:db:fc:e8:44:24:7c:9b:79:b7:86:
                    da:60:24:16:1f:e2:20:45:11:5c:77:88:3c:ad:ca:
                    88:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6C:A9:F1:F9:41:A4:B5:42:D1:9C:76:27:6A:78:4C:C9:D5:9C:3E
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:4c:36:00:2c:38:f1:0a:d5:5c:bb:cf:1e:9a:bb:4d:d0:c3:
         3b:1f:1b:50:a7:09:b7:71:52:15:43:b5:68:56:4a:c4:c6:5d:
         43:42:e8:51:d6:bb:90:67:0e:51:b8:2b:9a:90:73:da:9d:fa:
         eb:8b:5d:86:6d:f3:d1:45:a3:13:f4:6f:d9:1a:95:1c:48:e6:
         91:9e:ee:da:8d:60:34:90:99:43:2f:ff:78:f3:ba:52:08:86:
         e2:49:51:35:80:a8:47:c3:5d:b7:9b:1b:6f:56:ac:3e:6e:32:
         05:2a:23:20:40:df:c6:a5:4f:c0:a2:1e:51:48:5b:08:ea:33:
         66:d1:8d:11:b6:d2:25:2b:85:b6:aa:a9:7f:6c:0e:cb:d0:2d:
         5e:40:f3:32:7d:36:d3:d6:bf:fc:fb:68:74:ac:32:7b:72:1b:
         11:ae:ea:59:69:0f:f7:27:dc:56:08:23:36:26:1b:a9:41:ff:
         e8:78:69:cf:24:2e:ee:fc:b3:16:f1:a6:72:91:fb:52:78:e7:
         9b:ca:4d:46:65:db:30:9a:3d:a4:93:5e:37:f6:42:93:27:56:
         32:c7:1e:4e:99:20:b3:7d:ac:60:50:38:0a:2c:5c:6d:61:d0:
         fa:64:49:89:28:54:75:d2:f8:2b:c9:ba:5b:b2:b8:44:59:78:
         8d:7b:a1:61
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHlPiEqbhNmps5LrXA3kMKqZAxWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1
NTQ5ODZGNDAeFw0yNDA1MTkxMTE2MzJaFw0yNDA1MjIxNTQ3MzJaMDMxMTAvBgNV
BAMTKEI0NkNBOUYxRjk0MUE0QjU0MkQxOUM3NjI3NkE3ODRDQzlENTlDM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/oVjVD4YxRnv2K7Pa3gUYc7Bj
tWmtRwCY1WcszwsZQM0pElxJXUU0XqNIy9Md30SPCNCwM0Eq4QT51TmSjQtOHo9d
pE1CobU3HW5gqtHnINUBY+klfe6l9Q3olCfOvVo1P4yZ7RkBu/4eVS4OKAUnA33q
sWVrjsdwHp1hdBsnjZbVR32Er5LkEzXpC+7IzB3wG0U7NsoeSWPYgZ8ljra750I3
yixXDHi/a61r8QJwLthCVhQrozOzY5cqAeBHzqMp39TAVi31cdHs1u10Q/8iQPOX
R2lZAy6vBdR7zCEWy3lNIccM2/zoRCR8m3m3htpgJBYf4iBFEVx3iDytyoidAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtGyp8flBpLVC0Zx2J2p4TMnVnD4wHwYDVR0j
BBgwFoAUn+slFVzxr/kK4R2gKY8WTVVJhvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YjRlMTk1ZS0xMmRlLTRjM2MtOTNlNS01MjJlZTU0MDE4ZDYvMC85RkVCMjUxNTVD
RjFBRkY5MEFFMTFEQTAyOThGMTY0RDU1NDk4NkY0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1NTQ5
ODZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI0ZTE5NWUtMTJkZS00YzNjLTkz
ZTUtNTIyZWU1NDAxOGQ2LzAvOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2
NEQ1NTQ5ODZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK5MNgAsOPEK1Vy7zx6au03QwzsfG1CnCbdx
UhVDtWhWSsTGXUNC6FHWu5BnDlG4K5qQc9qd+uuLXYZt89FFoxP0b9kalRxI5pGe
7tqNYDSQmUMv/3jzulIIhuJJUTWAqEfDXbebG29WrD5uMgUqIyBA38alT8CiHlFI
WwjqM2bRjRG20iUrhbaqqX9sDsvQLV5A8zJ9NtPWv/z7aHSsMntyGxGu6llpD/cn
3FYIIzYmG6lB/+h4ac8kLu78sxbxpnKR+1J455vKTUZl2zCaPaSTXjf2QpMnVjLH
Hk6ZILN9rGBQOAosXG1h0PpkSYkoVHXS+CvJuluyuERZeI17oWE=
-----END CERTIFICATE-----
Generated at Sun May 19 12:05:07 2024 by rpki-client on console-fra.rpki-client.org