Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft
File:                     26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft (raw, json)
Hash identifier:          /9nx+gM7DQLxMnGhXOw3naQ6r5YcP7qjFFpXXM3MAII=
Subject key identifier:   BB:31:FD:56:8F:26:8B:21:E7:37:10:D3:82:0E:65:72:7B:3D:62:E9
Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
Certificate issuer:       /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Certificate serial:       17A520BC073FE9AC18CAFC0B3EEC1D56968D584D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft
Manifest number:          01CF
Signing time:             Sat 05 Apr 2025 10:12:08 +0000
Manifest this update:     Sat 05 Apr 2025 10:07:08 +0000
Manifest next update:     Tue 08 Apr 2025 18:25:08 +0000
Files and hashes:         1: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (hash: lNbPUGA/82mjhGneJ7g/W99enSkyu+j5sTgsqJn2Sk0=)
                          2: 26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl (hash: iGXGvsDtZbg0vMVWz+KTTqgsvLqPJInf0WTvAZQno7A=)
                          3: 3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (hash: YBHxbYHxR/hSQ3Ps+0/EW/rc2w51A1/t52HAOxGc93Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl
                          rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a5:20:bc:07:3f:e9:ac:18:ca:fc:0b:3e:ec:1d:56:96:8d:58:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
        Validity
            Not Before: Apr  5 10:07:08 2025 GMT
            Not After : Apr  8 18:25:08 2025 GMT
        Subject: CN=BB31FD568F268B21E73710D3820E65727B3D62E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:16:1d:c8:b4:ed:f0:ed:26:9a:47:4e:92:c7:
                    de:d5:ec:7b:22:f8:e4:db:ad:e9:ce:a6:51:38:bd:
                    65:9d:1e:02:e7:05:c9:39:45:51:20:9d:57:26:54:
                    14:53:2a:2b:6b:81:ef:a0:3f:60:70:9c:6d:4d:58:
                    34:a7:ad:6d:1c:aa:a8:4a:38:d7:d0:0b:f8:f3:1b:
                    30:b4:43:93:08:80:5a:6a:4a:b7:8b:1b:8a:de:9f:
                    ed:f4:56:46:38:da:5d:c4:c1:8c:8a:fd:57:f1:f9:
                    cb:34:d1:77:27:45:79:ec:e9:08:40:b8:16:61:20:
                    79:15:92:f6:4f:58:51:35:92:cf:ad:fc:62:0d:33:
                    f9:73:30:3b:06:bf:03:81:87:a2:c3:7d:6b:c2:dc:
                    3e:d8:64:34:5a:8c:e8:20:4d:ea:82:9a:6d:a5:99:
                    eb:71:8e:09:f0:3a:78:a3:1e:e5:04:e1:07:52:5c:
                    06:8b:28:ec:5b:38:07:ac:b1:95:18:50:27:aa:95:
                    42:7f:45:66:69:7d:64:f8:a8:82:36:2f:57:dd:4e:
                    33:83:16:a6:2d:10:11:33:f1:87:d7:51:fe:57:68:
                    a3:0a:07:7d:ad:b6:0a:6c:ae:fc:13:b8:61:b2:f8:
                    ee:b9:dd:75:3a:8b:e6:97:9e:51:e1:da:3e:13:37:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:31:FD:56:8F:26:8B:21:E7:37:10:D3:82:0E:65:72:7B:3D:62:E9
            X509v3 Authority Key Identifier:
                keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:92:a1:14:30:1a:fe:a5:81:9b:d8:b2:63:56:83:88:57:d0:
         fe:a8:0a:fc:aa:e3:46:ea:54:57:b8:dc:ce:51:be:bb:43:22:
         54:bd:7a:58:6d:03:ec:22:45:0e:61:d6:14:69:fc:7b:69:79:
         06:ac:ef:e8:d0:82:24:29:5b:9f:06:db:a3:a6:42:58:c1:27:
         46:1c:76:a5:1a:d8:7b:1f:b2:88:6a:a9:2e:6d:16:41:0a:33:
         6e:ba:13:d5:84:87:83:77:e5:40:d8:47:58:04:b7:23:6e:55:
         d3:bb:2e:6d:40:bc:01:d6:89:b6:c5:9b:7a:ac:3c:44:77:1e:
         b5:4c:47:10:99:c4:9a:4c:5f:fe:27:89:92:ce:37:d8:04:53:
         1e:fd:b7:f0:67:04:6d:96:b3:a5:59:26:dd:fc:9a:50:35:dd:
         91:6d:4d:33:c8:05:2d:52:c5:75:4e:b0:40:f5:b8:95:c9:1e:
         63:e0:dc:3f:65:f2:dc:47:60:82:0d:98:fe:51:b9:16:fa:60:
         a3:b3:02:2b:dd:09:3f:67:93:16:84:5a:18:9f:20:35:f6:77:
         95:cf:6c:52:52:aa:99:78:58:7a:d7:f7:31:23:d6:df:ca:53:
         e1:72:3e:f4:5e:4a:86:38:e7:a2:3d:ba:ae:a9:f0:b4:42:85:
         de:ba:41:f5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUF6UgvAc/6awYyvwLPuwdVpaNWE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4NjM0
RkY3QTQ4QjAeFw0yNTA0MDUxMDA3MDhaFw0yNTA0MDgxODI1MDhaMDMxMTAvBgNV
BAMTKEJCMzFGRDU2OEYyNjhCMjFFNzM3MTBEMzgyMEU2NTcyN0IzRDYyRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFh3ItO3w7SaaR06Sx97V7Hsi
+OTbrenOplE4vWWdHgLnBck5RVEgnVcmVBRTKitrge+gP2BwnG1NWDSnrW0cqqhK
ONfQC/jzGzC0Q5MIgFpqSreLG4ren+30VkY42l3EwYyK/Vfx+cs00XcnRXns6QhA
uBZhIHkVkvZPWFE1ks+t/GINM/lzMDsGvwOBh6LDfWvC3D7YZDRajOggTeqCmm2l
metxjgnwOnijHuUE4QdSXAaLKOxbOAessZUYUCeqlUJ/RWZpfWT4qII2L1fdTjOD
FqYtEBEz8YfXUf5XaKMKB32ttgpsrvwTuGGy+O653XU6i+aXnlHh2j4TN/CJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuzH9Vo8miyHnNxDTgg5lcns9YukwHwYDVR0j
BBgwFoAUJtXAY761gLOPKPPMFrlYY0/3pIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
OWE3NGFjOS04ZmE1LTQzOWItOGYyMS0wOGYyODQ2NzdhYTMvMC8yNkQ1QzA2M0JF
QjU4MEIzOEYyOEYzQ0MxNkI5NTg2MzRGRjdBNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4NjM0RkY3
QTQ4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhNzRhYzktOGZhNS00MzliLThm
MjEtMDhmMjg0Njc3YWEzLzAvMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4
NjM0RkY3QTQ4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJKSoRQwGv6lgZvYsmNWg4hX0P6oCvyq40bq
VFe43M5RvrtDIlS9elhtA+wiRQ5h1hRp/HtpeQas7+jQgiQpW58G26OmQljBJ0Yc
dqUa2HsfsohqqS5tFkEKM266E9WEh4N35UDYR1gEtyNuVdO7Lm1AvAHWibbFm3qs
PER3HrVMRxCZxJpMX/4niZLON9gEUx79t/BnBG2Ws6VZJt38mlA13ZFtTTPIBS1S
xXVOsED1uJXJHmPg3D9l8txHYIINmP5RuRb6YKOzAivdCT9nkxaEWhifIDX2d5XP
bFJSqpl4WHrX9zEj1t/KU+FyPvReSoY456I9uq6p8LRChd66QfU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:04 2025 by rpki-client