Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
File:                     00EE953FD699788668C724460F4D8D420238194F.mft (raw, json)
Hash identifier:          A8a5OaFKI5I+D+b4GwzqpjAF5wCh5H4O4LWiAiGHMWA=
Subject key identifier:   B2:B7:BA:6A:4B:94:7F:F0:00:7C:AF:A1:99:F7:EA:AB:31:51:92:44
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Certificate issuer:       /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial:       2A2622562823824B79D1B2BFB4856C73242052A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
Manifest number:          01B3
Signing time:             Thu 13 Mar 2025 17:00:35 +0000
Manifest this update:     Thu 13 Mar 2025 16:55:35 +0000
Manifest next update:     Mon 17 Mar 2025 03:52:35 +0000
Files and hashes:         1: 00EE953FD699788668C724460F4D8D420238194F.crl (hash: 6J7Ovnfsgkpp9YDMoqn5BIza+cr/7owFneHIx4kZXXk=)
                          2: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: nVkklJpTCB1woXNIy8eL8fiFevvnvUpv5De02NYeOMM=)
                          3: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: dNSAWmxgTUWP9p8pdmyRlrOPm0IRFd6F+03Yl+DHvWA=)
                          4: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: OV+nB/EqLAsy/NezByF487GqVhpLPJ91ZyE8OUkFt2w=)
                          5: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: hfQlGpJvc95Pfy85yc6nCGSM67UcOu1jOPFHsJGwW4Q=)
                          6: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: voEBc3zsXPpEfF9maHI5JVXcZ7lLKA42b/UBehz78wE=)
                          7: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: qubI6gWPCNz5X+/Gfs0NEPDYI/K0k/cB9IVAWx8bTyg=)
                          8: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: QFd2JrU7tTRbL93RdFQ5mIITMejwRFU/WkPQT5C6r9k=)
                          9: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: sSIdllnvg4M1DGs8YGmNKZNiURvN96H1MMo+ucCRqd8=)
                          10: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: w1MVU4ekD5soTAWIJylNS3K6gk7CgDes5++mV/VpMvk=)
                          11: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: CMYmOK+8R1Hs3kHGhRx8R2555ufRrCqQtRcxPZZMVnA=)
                          12: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: 4AY/lUPsJxku79ozRfC7DzUtbuOJ6CAC0mreKuR/soE=)
                          13: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: vZOtLaOfjMhQfEcCJdIUC/qN22seOwp7tbsXKZXwRVo=)
                          14: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: Q+wUhnh29FhBJym4567snCa7z4nTeAWEhmKU24ANvCE=)
                          15: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: DRoCmPuWf7Goy6b8ay+89nX5k4OXZiMQBXfvplbhc24=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
                          rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Mar 2025 22:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:26:22:56:28:23:82:4b:79:d1:b2:bf:b4:85:6c:73:24:20:52:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
        Validity
            Not Before: Mar 13 16:55:35 2025 GMT
            Not After : Mar 17 03:52:35 2025 GMT
        Subject: CN=B2B7BA6A4B947FF0007CAFA199F7EAAB31519244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:fd:09:27:e0:dd:2c:12:05:e2:f2:b7:16:
                    36:85:1d:bf:4d:0b:67:df:fc:80:68:69:70:34:65:
                    ec:6d:5d:5e:9c:88:7c:93:f5:1f:7e:43:16:26:87:
                    cd:87:d8:5e:03:1f:38:89:a2:04:d1:f4:1a:3c:d8:
                    95:05:3b:c0:b6:4e:60:b1:0c:cb:73:eb:1e:21:cd:
                    dd:ce:20:04:c9:a9:0f:e7:43:3f:7b:a2:52:7d:25:
                    91:cb:4c:e8:a7:f7:ca:c7:8c:b9:b9:a2:a9:de:42:
                    82:dd:56:c8:7c:cb:f3:c3:2f:b0:9d:f1:6c:cb:5c:
                    5a:35:64:85:91:7f:7d:7a:f9:93:b0:e4:cf:42:f7:
                    34:e6:3b:6b:7f:94:de:09:c5:7c:7f:1e:b9:cf:0c:
                    3d:22:5c:d7:ab:1a:e6:b6:22:aa:e9:a2:61:49:f8:
                    3e:78:cf:24:fb:49:26:30:ed:8c:03:9d:6f:b9:03:
                    d6:e3:82:a8:65:0e:e2:5a:f4:f2:33:93:26:74:97:
                    b2:4a:74:ca:0c:d5:98:14:d6:ca:86:d7:40:ef:b2:
                    c2:5b:6a:f7:47:0b:bd:84:cb:8d:aa:06:62:d1:f1:
                    b6:f9:27:19:46:b9:29:f4:22:82:39:c5:3c:48:bf:
                    9f:19:f0:0a:56:36:79:c1:0f:d7:1d:52:2f:64:39:
                    ed:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B7:BA:6A:4B:94:7F:F0:00:7C:AF:A1:99:F7:EA:AB:31:51:92:44
            X509v3 Authority Key Identifier:
                keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:47:87:dc:55:0d:4d:d5:5d:4c:5c:fb:a8:00:6a:3f:54:ba:
         e1:55:a7:00:ed:fa:c9:d1:ba:e4:7d:7c:b6:5c:dd:77:95:c3:
         75:af:3e:81:49:f1:de:dd:65:f8:75:57:75:c8:07:ef:9d:a3:
         d4:08:2e:ef:d3:bb:bb:cf:74:e2:3b:e5:5b:49:ad:67:9b:da:
         60:5d:35:06:0b:ba:9b:58:e4:da:63:02:65:93:70:b3:38:64:
         2c:21:76:45:13:3d:d4:35:d2:ab:3c:87:ef:8d:34:ef:84:a5:
         f8:cf:96:12:ab:c5:16:b3:ba:17:d6:37:91:12:c2:5e:09:39:
         97:7b:b8:b4:9d:50:b3:ac:6a:79:52:7d:a9:79:ff:49:01:af:
         07:9f:9f:b4:7b:6b:db:4a:b0:9c:70:be:3a:d6:3d:e6:7b:53:
         04:e3:38:6e:63:27:81:c5:2e:1f:8f:d7:c9:cf:09:03:5b:fc:
         2c:e6:94:ad:e7:14:dc:2d:17:8c:4f:7e:68:f7:3a:41:7e:8a:
         b4:1e:35:f3:42:10:ab:c6:44:2f:c9:a4:ae:37:3d:13:63:67:
         24:aa:14:3d:8a:77:30:8e:2a:1d:13:1f:fa:e0:72:bc:3f:68:
         f9:64:7d:e0:9c:d3:62:c3:58:66:b4:f4:e8:6c:0e:84:48:93:
         2e:34:53:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:32:59 2025 by rpki-client