Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
File:                     8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json)
Hash identifier:          AxLKwori4lfoGPuKM9CCbZB9aw4krpp3UeAjOcfqxP4=
Subject key identifier:   B4:C2:B5:F4:A7:B6:0A:08:15:75:97:B7:3F:0C:15:6D:AD:4C:72:A7
Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA
Certificate issuer:       /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA
Certificate serial:       2320E1804CBF1BDEB5D4DB3896340C69F1EE444D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
Manifest number:          04E4
Signing time:             Wed 04 Jun 2025 07:32:16 +0000
Manifest this update:     Wed 04 Jun 2025 07:27:16 +0000
Manifest next update:     Sat 07 Jun 2025 16:07:16 +0000
Files and hashes:         1: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: Myo0yUY2zYBlmDu7ifkTtwfEDTywRzZJiBzIgMz4kyk=)
                          2: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: HFx27am61y/dC1xdTadXPgOw5A9a+PEjL0futSZShAU=)
                          3: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: Wfn3mViCtbYcO116Nit8juuVUmxE7iFy1wIgqkeF8m8=)
                          4: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: i3HQaU7A5T+hugQmUCoVWplcF5RYtJ+OjDq/WGotyFM=)
                          5: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: eYJSZ6BNvJdcwOjXxyxNY4HDMCsMbaLoRNn+0CbiAds=)
                          6: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: S/OMnq3mzKpMFKqt0j94a6xcwtCzbumgWbVbw03Y6tw=)
                          7: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: sNKZ6WZZPmaHtUNz7hBbPBr4Atod59achVTbvqZWhGg=)
                          8: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: Qcbh+h2883zUwr0S+SUXilwq/cneroJBnZ3iaMjWnuk=)
                          9: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: Q4FCJx2xdQyXWuG/Mkdlbm+EYQuJWHSMRXEQhaDwxBc=)
                          10: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: rYe6DYVvEMVS+k+SjVX0fK2moli9sRVF9OmCPyWl2fc=)
                          11: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: XWtNBehkXOlikMKWmDfAFFb/WHd7lr9UmM7MPjl2atY=)
                          12: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: MYJNrU0VoWxeODSQuazQKu3caT32XeuZxRTUvcHHTN0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl
                          rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:20:e1:80:4c:bf:1b:de:b5:d4:db:38:96:34:0c:69:f1:ee:44:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA
        Validity
            Not Before: Jun  4 07:27:16 2025 GMT
            Not After : Jun  7 16:07:16 2025 GMT
        Subject: CN=B4C2B5F4A7B60A08157597B73F0C156DAD4C72A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5d:73:b7:20:76:dd:c8:c7:6e:96:ce:d4:8d:
                    59:e3:7d:84:4f:fe:75:8b:94:c6:c6:e6:31:c0:d9:
                    45:83:9b:94:eb:2b:35:43:73:06:e3:58:d0:06:4d:
                    da:77:52:31:7e:15:c0:fa:b7:f4:6f:aa:29:02:5b:
                    97:74:33:ba:47:cf:2d:1a:71:46:16:94:37:e2:57:
                    a2:f6:a1:0c:23:75:64:34:89:e5:5a:cd:97:ed:72:
                    93:1e:a4:ad:3d:c7:6f:a4:09:59:cd:7e:14:dc:8d:
                    38:11:d0:be:53:66:02:64:f8:87:47:a8:4c:68:a9:
                    df:80:8e:1c:68:51:67:71:cf:c3:7b:b6:28:20:af:
                    2b:63:8a:2d:48:27:08:29:7b:49:f8:8f:27:81:72:
                    c1:44:33:1d:80:63:f4:24:c3:43:6d:f2:b7:7c:fd:
                    cc:05:f5:01:5e:7d:c6:5e:ae:a4:f7:96:75:fe:02:
                    b2:8e:e4:d2:4d:8c:24:bf:eb:73:2b:34:3d:a0:52:
                    4d:bd:50:dc:0a:99:d2:bd:2c:b1:52:73:9f:aa:7e:
                    0e:c2:a0:76:e7:17:11:bc:1d:10:45:00:a7:98:dd:
                    5b:b5:18:4f:29:3e:fa:88:9e:76:ea:c8:7e:9b:59:
                    c0:df:6f:0c:3b:28:28:57:3f:9a:81:c8:d3:da:7b:
                    83:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C2:B5:F4:A7:B6:0A:08:15:75:97:B7:3F:0C:15:6D:AD:4C:72:A7
            X509v3 Authority Key Identifier:
                keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c6:48:c4:95:e9:e3:6f:27:a7:93:18:1f:2c:16:b2:d5:cd:
         24:87:6d:71:42:e0:41:ae:c4:f8:ba:64:22:bf:1d:6b:d0:17:
         89:b7:8c:a9:a7:99:46:6b:19:bf:f8:8e:01:aa:7e:ae:26:73:
         e9:06:a8:07:6b:4a:fa:f9:f7:da:73:ba:87:b4:e8:f3:63:10:
         fa:95:61:7a:84:f2:57:87:5a:dd:92:fd:78:8a:37:39:21:3d:
         d0:c6:c2:d8:f0:a2:ef:2e:89:08:8f:a1:f7:2f:1a:c4:ac:6f:
         31:58:33:43:e6:e0:96:c9:0e:3c:3d:0b:ba:bf:57:65:a9:be:
         0d:9d:d9:79:16:66:1f:e7:15:29:3e:e7:60:d7:8b:7b:0f:85:
         bd:b7:a3:6a:83:33:e9:3f:cd:a8:fc:43:58:44:29:f4:43:39:
         5f:37:bf:fb:fe:78:e4:b2:b2:ac:16:ce:b0:e8:3e:df:57:c4:
         e5:fa:23:52:fd:22:6d:fe:26:e9:0b:e0:ed:ed:23:4e:45:c5:
         15:93:2c:b6:ce:48:a6:bd:79:dc:98:af:97:46:90:bf:8e:1a:
         58:d2:6e:a9:6f:99:c7:a4:60:0e:af:06:92:27:de:62:cd:cf:
         6c:94:ef:eb:a0:64:59:fc:ff:5b:18:b6:ad:01:86:74:4f:0b:
         38:5d:52:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:11:11 2025 by rpki-client