Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft
File:                     FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft (raw, json)
Hash identifier:          bEHp2LrdZGLmoAkhs6+pd9DMXm7djTJlnMg7kVtjc50=
Subject key identifier:   F3:9D:A7:EC:AC:05:B8:3E:FA:38:20:80:FE:B9:D0:CA:83:C1:FD:B7
Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E
Certificate issuer:       /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
Certificate serial:       3853F51B3FEB7771E6F29CC25D941F2D52ED4476
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft
Manifest number:          04CA
Signing time:             Fri 04 Apr 2025 13:21:40 +0000
Manifest this update:     Fri 04 Apr 2025 13:16:40 +0000
Manifest next update:     Tue 08 Apr 2025 00:25:40 +0000
Files and hashes:         1: 323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa (hash: zoOph4ORgnecC4G3qubgAInEaNPWdnN5nyNNpj+Aosc=)
                          2: 3132312e3130302e302e302f32312d3234203d3e203338313538.roa (hash: 4OEVR4t4JntmWKdQ2xyPFDAR1Dn2UjqhKWyVo8OVQ9Y=)
                          3: 323430323a393830303a343031303a3a2f34382d3438203d3e20333937373633.roa (hash: MBiGxv0ZO20HmuL2lUlmVAx4s0nmUR8oNwBPTRWxbyM=)
                          4: 323430323a393830303a343030303a3a2f34382d3438203d3e20313331313137.roa (hash: KW4EEcwhlrvTNK+l1QgxB5MCIBN4X0Ahf479yXTih5s=)
                          5: 323430323a393830303a3a2f33322d3438203d3e203338313538.roa (hash: DMFpbMepgA3ovw8pgXBiILyGivq/nq/MXZA9XVMLzGo=)
                          6: 3137352e3135382e33322e302f31392d3139203d3e2034373837.roa (hash: oT2OowlAV3JFpxVJV1ObFxo2pVML588pYLgJHcYQLoE=)
                          7: 323430323a393830303a343030333a3a2f34382d3438203d3e203338353038.roa (hash: PW6vCtMOERXjYSSh2pseRhWwTwtJ4G23HHQ78zdmJm0=)
                          8: 3137352e3135382e34382e302f32302d3234203d3e20313335343738.roa (hash: jSjRAgcVxXEFSpQkNfBkeuinXTt7J0DoP/WXpR5y2NU=)
                          9: 323430323a393830303a343030353a3a2f34382d3438203d3e20313336313038.roa (hash: htIfiUj0TS/B8LHMX2Pwb2S3CMhqGS/4MvVddU2RMXs=)
                          10: 323430323a393830303a343030323a3a2f34382d3438203d3e20313331313139.roa (hash: ip/l/KBXQ9Q+oLtgt9trdsFnsGK5B7yCV8heS9Wutgk=)
                          11: 323430323a393830303a343030363a3a2f34382d3438203d3e20313338313338.roa (hash: N4zXj0n+crGxTMpLt78WSVMbvOXWTjixttF6+IX5i6g=)
                          12: FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl (hash: Z7h4pXKuHuMFhJ8ncVWGnZ5WXi+ZvcEpn04mCYdQONI=)
                          13: 3137352e3135382e33322e302f32302d3234203d3e20313335343738.roa (hash: jw8PLt91WY8Q+fATFAobnSYP9mjjSmMhBi7jnnt4vSc=)
                          14: 323430323a393830303a343030313a3a2f34382d3438203d3e20313331313138.roa (hash: WE77Xy2tazxYFCY9JWrG+2DWGpeIwOgl+o6PphGJkaA=)
                          15: 3137352e3135382e33322e302f32322d3234203d3e2034373837.roa (hash: uZQkOk+CpUIXDZqH2BmXwSFTNgck/jA2xelBBArMP0k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl
                          rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:53:f5:1b:3f:eb:77:71:e6:f2:9c:c2:5d:94:1f:2d:52:ed:44:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
        Validity
            Not Before: Apr  4 13:16:40 2025 GMT
            Not After : Apr  8 00:25:40 2025 GMT
        Subject: CN=F39DA7ECAC05B83EFA382080FEB9D0CA83C1FDB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:ef:39:77:03:52:22:8a:19:b9:3b:d9:15:
                    39:12:35:e6:63:6b:ff:4a:68:c2:3d:34:14:39:91:
                    6f:06:32:51:b2:95:c8:ff:04:8b:a0:7c:a8:f5:2a:
                    a1:de:be:a8:de:af:a5:44:4e:e9:89:c7:a3:e0:43:
                    03:5a:e8:69:12:3b:28:a9:3e:5e:a8:50:70:47:7f:
                    52:29:c3:c9:b7:62:67:43:39:4e:2f:69:3d:2f:ad:
                    69:9e:5d:c4:fe:a9:c2:05:fb:79:c1:97:0e:95:f4:
                    7e:75:bf:08:4e:a7:a0:c9:76:b5:19:58:5d:bc:31:
                    b8:27:84:a1:ad:84:cc:b5:42:01:53:a4:be:01:bc:
                    6d:35:fa:c3:a3:c2:0a:b7:a2:53:aa:db:36:ae:a4:
                    45:26:c1:b2:fb:c5:01:15:32:37:84:57:bc:3f:6f:
                    be:d5:5f:10:8c:e3:35:bc:c3:c3:09:78:e0:e4:3a:
                    14:f0:b5:d1:06:18:19:25:0f:c2:5a:1d:58:99:5f:
                    a1:e1:81:2f:c3:e3:7f:5a:3b:0c:5d:57:0f:65:a3:
                    06:0e:76:b0:b7:25:eb:a1:f6:82:42:59:d7:fe:cf:
                    5d:60:0e:52:9c:85:49:66:dd:bd:46:bc:76:88:20:
                    9b:42:c6:86:94:2c:65:a7:41:67:a3:ac:64:41:62:
                    4a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9D:A7:EC:AC:05:B8:3E:FA:38:20:80:FE:B9:D0:CA:83:C1:FD:B7
            X509v3 Authority Key Identifier:
                keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:50:08:1b:29:72:71:be:7a:de:a2:52:f1:3e:97:bb:56:56:
         0b:62:1a:7f:2b:ca:db:2c:df:cf:7a:51:ad:fc:92:f0:44:c2:
         6a:e1:f6:9d:19:57:53:c5:41:2e:fd:9b:a2:b5:d9:ee:bc:cb:
         d8:a7:b4:49:32:f0:0d:a0:c1:21:ca:ce:0e:98:c2:1c:77:02:
         0d:c9:cc:64:a6:b7:7b:36:86:e6:b4:84:04:77:85:e3:32:be:
         b8:07:1a:61:99:0f:49:e2:36:75:46:36:97:12:7c:b8:50:52:
         e8:3b:d4:d5:a8:b3:46:9c:28:a3:2f:92:aa:3c:16:a8:64:2b:
         95:94:8c:d9:17:a7:7f:80:f7:a8:29:3f:88:19:3a:d4:d9:13:
         06:8c:c1:45:ca:f7:05:44:38:12:e5:f3:66:6f:03:f3:ba:ae:
         77:9a:97:46:2a:75:70:ee:75:ef:4a:de:c1:28:e1:29:1b:7c:
         35:04:34:67:4b:4c:a0:53:9e:b8:97:b9:d2:6d:b2:e3:7e:2e:
         0f:12:41:a8:cd:cb:f5:20:33:a9:4f:1d:b8:c8:c8:05:07:93:
         5b:6a:d0:b9:f4:58:c6:3a:6e:bc:85:29:8d:f2:a4:cd:08:e1:
         6e:e2:7d:de:e7:2d:7b:2c:fc:d2:56:b6:63:32:1f:c5:53:b4:
         98:85:61:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:13 2025 by rpki-client