Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
File:                     1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json)
Hash identifier:          zI3SjWveK/JLGnR9s+AEwVHru2ifcszYe5dANVCsWIc=
Subject key identifier:   F7:BB:E9:B9:D3:A4:18:DF:3D:6E:EE:F3:A5:40:AF:49:8C:5D:2D:77
Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
Certificate issuer:       /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Certificate serial:       354E0E737FEBFA25B9ACF5B77BDB25BE93599CF1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
Manifest number:          0135
Signing time:             Fri 04 Apr 2025 06:11:03 +0000
Manifest this update:     Fri 04 Apr 2025 06:06:03 +0000
Manifest next update:     Mon 07 Apr 2025 06:46:03 +0000
Files and hashes:         1: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: znSniW+lPXCPGxomzmN2hrx17CR9++zAKICSSEuO9Vw=)
                          2: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: wop0enhk31jLHWhccpcZJr0EKUzHvqhNyLW2a5pNj2w=)
                          3: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: Z7MZGS10toSXvLmV5iBfghuNSI8n4mTpT95+VkC6QfE=)
                          4: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: Iff17R7Y2PXgGNzQ48JwVBTPT+2Nxu79I9ZwquKjbxE=)
                          5: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: bOBZGkzqysQJJCz7648wZEJREONFUo+QtRyxjh2BRFw=)
                          6: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: K2sXmSDY1Q0Ib91bp7Ej+rMz+bv5TkPCX1Vm42UKq2g=)
                          7: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: Pipia0jUKsl0Bb0PnrXMjgVZSeCbzEQGM99k0tRnt6U=)
                          8: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: sSdx6bfz/Cb6HZkpzLLwduFVNFn1g0FyFXb3VTTUPws=)
                          9: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: GcXNkBAv1340rwM/Oan5xv5UHgMfOa0RbbyoNs7Mx0I=)
                          10: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: fcQPwUouCVaeNmPsgU50oUU5piCrvcz7X4WUkw36Gi0=)
                          11: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: c+RRYwbLJTT7i2chOOl9H9EcS9Dw3d508cgKPK/GMQQ=)
                          12: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: kHlmhNS5gQ6WL5MaK2adKxGIlTTXW61wpUfSl5HlAJc=)
                          13: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: BgrpAYav/pUESxArt2NS1teCYs0lWmtbdh6n4DVdjLM=)
                          14: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: VqDDvUOu35p9WF+KpeR5rVDXBEuyr/t255Gs6Jfv+fI=)
                          15: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: BbLwPxFe+tWzZ8sOAXoZbHTuvfXUw6/yE4h7IQcYxzA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
                          rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 06:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4e:0e:73:7f:eb:fa:25:b9:ac:f5:b7:7b:db:25:be:93:59:9c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
        Validity
            Not Before: Apr  4 06:06:03 2025 GMT
            Not After : Apr  7 06:46:03 2025 GMT
        Subject: CN=F7BBE9B9D3A418DF3D6EEEF3A540AF498C5D2D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:83:a1:e9:c0:13:7d:13:54:09:83:81:ca:
                    73:47:93:9a:b1:21:81:f3:2b:e0:b6:9a:a1:eb:1d:
                    df:48:b3:f8:09:22:61:d2:4f:9e:9b:fd:8e:6c:76:
                    8d:5e:3c:9d:40:e7:b6:64:01:89:0f:01:42:26:bb:
                    b6:91:b3:64:73:e1:7e:12:9c:0f:ff:51:b3:53:53:
                    76:e7:60:59:e8:ee:dc:43:6b:1e:19:81:e4:f4:6f:
                    de:3a:87:7c:5f:a1:cf:9a:3d:0f:38:a4:a1:8f:c4:
                    7b:97:a3:bf:4c:f5:88:60:ba:32:d8:10:a0:e0:08:
                    1b:01:5f:5f:d9:28:2e:39:ab:a7:a7:3c:03:ec:cd:
                    17:0f:bd:60:dd:cf:b1:2f:d1:2f:17:46:59:40:a2:
                    86:a2:d0:8b:ce:ac:6a:6e:ff:cd:df:3d:04:8b:6f:
                    eb:d8:27:f3:6f:25:93:4d:56:bb:57:c3:d1:cf:bd:
                    3d:b4:68:38:ec:1f:37:ee:10:44:c3:4e:a7:2d:12:
                    e1:df:a5:a6:fc:80:d0:c9:aa:8c:9d:9d:6f:38:27:
                    b4:f8:1e:64:16:8b:cf:1d:b5:f5:08:ba:bd:da:9b:
                    8f:2c:6e:bb:97:2a:c9:a5:7d:bc:ea:ac:26:d4:de:
                    55:29:04:c4:65:81:43:44:14:66:83:37:f0:1f:08:
                    24:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BB:E9:B9:D3:A4:18:DF:3D:6E:EE:F3:A5:40:AF:49:8C:5D:2D:77
            X509v3 Authority Key Identifier:
                keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:4f:45:61:1d:91:e5:62:bf:cd:32:c7:ed:85:72:85:77:22:
         aa:f2:b9:9d:ee:7b:56:3a:06:ec:65:66:9f:02:9d:40:cd:70:
         6c:ce:ce:b6:2e:3b:8e:30:04:a0:46:90:45:f7:dd:d1:01:e5:
         13:ef:a7:52:58:34:5f:c6:5e:0b:64:14:2c:f2:59:fb:9b:80:
         58:d6:0f:18:eb:dc:13:d5:50:8e:23:55:d0:14:58:d2:04:da:
         9b:67:a6:28:37:e1:1c:f2:dd:c7:00:f1:58:26:42:d1:78:9d:
         4c:24:65:47:d1:a9:8c:1f:8f:5d:9f:0c:40:ef:75:c2:fe:af:
         00:33:f9:5c:a0:e1:b3:35:be:7f:fb:30:b9:0e:35:db:a1:c2:
         eb:8d:70:ff:67:e4:b3:a0:03:07:00:e1:3a:09:ed:83:c4:4e:
         02:31:11:7f:97:ec:49:e3:10:b0:bc:0e:22:1e:76:56:ba:ff:
         19:20:b2:1b:43:66:1f:50:11:94:16:63:1f:41:3c:6a:c7:8e:
         3a:f4:16:af:8e:4c:5a:b6:10:bb:cf:46:87:6f:df:0f:68:43:
         68:fc:2c:f2:7e:6e:7c:33:ab:77:76:bd:32:64:12:e6:ed:97:
         de:6a:6f:09:ea:50:c0:2e:6f:d4:db:a3:81:5d:12:81:20:a8:
         b3:51:79:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:54 2025 by rpki-client