Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
File:                     C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft (raw, json)
Hash identifier:          /ltIvPSGxXakxmgAMvVumxhoDXHf9XQNpVHAjqjW+as=
Subject key identifier:   D0:33:7D:1C:2C:BD:D5:1C:70:58:1C:ED:2E:55:A9:CA:15:F6:38:30
Authority key identifier: C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB
Certificate issuer:       /CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
Certificate serial:       6A836C1383AD95843AF0D5328F2A2C3FDAC951E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
Manifest number:          04EB
Signing time:             Mon 02 Jun 2025 02:04:36 +0000
Manifest this update:     Mon 02 Jun 2025 01:59:36 +0000
Manifest next update:     Thu 05 Jun 2025 03:34:36 +0000
Files and hashes:         1: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: mSUh/L4o3WxZWaFk4Syf4IAQb9zhHbALhTc1/MotUbk=)
                          2: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: LnfQWSkhBeT+G4FyLtKt+mDAFcmNfarKzOkWL9aGALQ=)
                          3: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: b8zDNPy2xqVlrDOAlQUUDIWMMOfRTaQ0mid2lPIB3KA=)
                          4: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: EGI9o7CM4WRok9jPW02rkd7C68LQY6lwOHLdbhuimwI=)
                          5: C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl (hash: AXzYgnmHpsf6QXUYkeBm82iWgQb+x4XJLFCDf4HmaeQ=)
                          6: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: YQVR8UOeiYmY2kyG9i2CqFsAi/62Mch9mbYUm4aJz9o=)
                          7: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: PZwOUUZx2EQHdYrYeYouuZVw5NeiiX9go4HwzvpQyZo=)
                          8: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: 5rg1EeqRUgeSLgMy7lGVLTMSo/SW/vkwy5TwRaBl/j8=)
                          9: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: 8RrRORobg42yyo6LFcje0JxeCKUFuSga1jy/CkFuTm4=)
                          10: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: N1MXVORdbt5FpdZaRMnKXk8HUDVu1M5FZBwZhaokx8M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl
                          rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Jun 2025 03:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:83:6c:13:83:ad:95:84:3a:f0:d5:32:8f:2a:2c:3f:da:c9:51:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
        Validity
            Not Before: Jun  2 01:59:36 2025 GMT
            Not After : Jun  5 03:34:36 2025 GMT
        Subject: CN=D0337D1C2CBDD51C70581CED2E55A9CA15F63830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:31:46:5b:38:d7:11:de:a2:50:e1:69:80:
                    6d:2a:3a:45:f5:20:05:69:c6:62:8f:50:8b:40:2c:
                    70:23:5f:31:c6:43:6d:09:14:4a:8e:b4:34:2c:cd:
                    89:a3:c2:fb:80:3a:cb:e1:83:cf:f2:88:03:04:9b:
                    7e:51:17:20:3d:01:4e:42:da:23:d5:3c:8f:10:de:
                    07:f2:9f:72:77:7c:3f:5b:11:f4:6a:c7:a7:ae:f4:
                    1d:52:e0:86:7d:8b:64:92:1c:0d:b6:28:fe:11:d5:
                    d7:20:26:01:b5:92:43:14:e2:63:01:f3:4a:69:15:
                    db:5c:a0:11:fd:a0:f2:0f:f7:89:0e:d2:d4:27:91:
                    cd:ad:f9:8a:cc:ca:65:46:4e:61:31:dd:a6:a1:45:
                    02:a8:1f:e5:45:bb:14:59:2f:67:2a:3f:2a:0f:e6:
                    ba:a1:b7:b0:82:cb:91:94:87:97:a3:33:5e:09:62:
                    ea:14:28:5c:34:ed:98:f7:4d:b8:63:58:8b:41:0f:
                    12:bc:c3:a9:94:0f:de:4f:c3:f6:a8:47:ef:bd:cb:
                    5a:f3:b1:ac:f7:7c:22:60:9c:ea:0d:00:c7:9e:35:
                    3d:38:76:2e:3a:39:50:6a:c4:48:eb:b9:e9:d8:b2:
                    b1:09:be:2a:03:8a:6a:77:95:01:94:15:4d:de:f0:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:33:7D:1C:2C:BD:D5:1C:70:58:1C:ED:2E:55:A9:CA:15:F6:38:30
            X509v3 Authority Key Identifier:
                keyid:C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:e6:86:53:34:f0:4a:09:76:e9:9f:99:42:01:0d:c2:b5:56:
         c7:39:da:1a:b3:70:d5:1f:f5:48:8d:61:27:29:a2:6e:e2:b2:
         6a:dd:19:23:82:d9:0e:09:0a:f0:25:3e:0f:12:d5:34:03:b3:
         68:d1:43:02:a7:40:48:24:fe:f6:49:aa:5f:73:32:44:6e:fb:
         89:2b:03:06:75:62:27:c1:cc:f1:21:91:fd:9d:30:69:70:84:
         3c:5e:65:a3:e8:15:b8:0d:8d:ba:c1:98:4a:51:84:bb:a3:4a:
         ab:35:38:05:05:13:bd:02:61:d1:c9:df:f0:63:5f:6e:43:dc:
         fd:54:2d:d5:9f:ac:c5:d4:78:7b:6d:c0:66:46:09:0d:c6:b8:
         0c:62:ee:95:67:f9:ab:fb:b1:e7:31:e0:16:65:15:8f:05:2f:
         7a:1a:ae:04:4c:3a:b0:d2:39:60:b8:ae:fd:1e:20:e6:e2:c8:
         17:bf:c7:22:65:d9:79:c2:60:76:ec:e7:c1:56:f0:c0:ad:d3:
         8a:65:11:a1:b7:b7:26:eb:4e:ac:92:50:1f:a8:05:e7:db:c3:
         81:27:25:8b:24:97:41:74:ee:a9:89:cd:7f:03:d9:a9:3b:31:
         c2:1c:81:bc:9c:9a:63:64:84:52:f9:cf:ea:36:8f:e7:3f:ed:
         f5:d0:61:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:10:24 2025 by rpki-client