Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
File:                     405E466852C38FD4CD20BA6115840947D5D24F5D.mft (raw, json)
Hash identifier:          tmRjs1ZImjyDPmH4Q+WsqTVLgOAoHmwaV0Q3utwnIcQ=
Subject key identifier:   83:3E:BD:04:61:A4:BC:14:91:67:AE:1A:AA:E2:F9:A4:6C:FA:A9:7A
Authority key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D
Certificate issuer:       /CN=405E466852C38FD4CD20BA6115840947D5D24F5D
Certificate serial:       547DE70328E05B63E6C6C765FFFEBD74B997890C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
Manifest number:          6C
Signing time:             Wed 09 Apr 2025 04:31:07 +0000
Manifest this update:     Wed 09 Apr 2025 04:26:07 +0000
Manifest next update:     Sat 12 Apr 2025 11:58:07 +0000
Files and hashes:         1: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: hOlyHuu2wphYhBJDocKFWHEZrEGEanCNnjs4wR5XHPw=)
                          2: 405E466852C38FD4CD20BA6115840947D5D24F5D.crl (hash: yEKAI2Qm6olDaYLEpgw7sr1qXX9nObkDCQW2tzUrP1w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl
                          rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 11:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7d:e7:03:28:e0:5b:63:e6:c6:c7:65:ff:fe:bd:74:b9:97:89:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405E466852C38FD4CD20BA6115840947D5D24F5D
        Validity
            Not Before: Apr  9 04:26:07 2025 GMT
            Not After : Apr 12 11:58:07 2025 GMT
        Subject: CN=833EBD0461A4BC149167AE1AAAE2F9A46CFAA97A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:70:6e:11:d5:8c:82:7b:72:e8:aa:6b:62:
                    e7:9a:4a:fc:04:df:5f:d2:e0:9c:06:24:70:a6:56:
                    ab:5c:65:5c:a3:26:19:09:df:8c:a6:10:fd:be:6f:
                    a4:95:ea:55:5d:30:ed:32:0e:29:59:d2:6e:28:7a:
                    ba:60:ab:11:4d:ce:e0:ef:d6:e0:92:30:42:91:cb:
                    2e:17:6e:8a:8e:ba:28:cc:e9:f3:7b:51:8e:f1:66:
                    43:cc:c8:6b:ef:55:43:6b:1a:0c:5d:8c:77:89:6b:
                    1c:74:ac:4e:98:7d:53:61:ff:ca:2b:ec:6b:bf:8e:
                    4f:f8:7d:e9:48:12:73:75:1f:32:3b:54:d5:12:61:
                    d6:ca:f2:0b:17:29:c9:74:5a:61:1b:de:e0:47:fd:
                    6b:16:61:9e:8d:a5:0f:94:0f:c8:61:99:99:6c:17:
                    fb:0a:3c:8f:1e:82:78:3c:8c:d1:b2:9a:b2:66:de:
                    81:f5:5b:cd:7e:d9:e0:92:17:5b:11:0c:72:cc:57:
                    9e:af:89:78:0d:ec:2c:5a:78:73:f9:13:e5:a5:da:
                    8f:54:0e:94:5f:8c:d6:42:06:d3:53:9f:31:3b:49:
                    17:4c:b7:ed:8f:6e:cf:8a:d7:66:7d:e6:90:76:2f:
                    2d:89:9b:58:bf:72:a3:c2:92:4c:6d:bf:8f:a2:e6:
                    e7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3E:BD:04:61:A4:BC:14:91:67:AE:1A:AA:E2:F9:A4:6C:FA:A9:7A
            X509v3 Authority Key Identifier:
                keyid:40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:df:d8:32:c2:26:c6:ba:92:9e:6f:ea:eb:ec:97:48:77:6b:
         82:1f:8b:f6:b8:87:6e:10:2a:7c:e2:25:5e:5e:8d:66:60:a5:
         1f:dc:a7:4f:54:02:93:15:a9:a4:4e:e4:d1:70:0e:06:cb:3e:
         bd:57:ae:17:53:91:b3:09:71:5f:13:14:f9:72:3f:e4:47:0e:
         b3:6f:76:b5:09:cb:aa:12:bb:a1:e4:74:be:47:1d:ee:02:93:
         6e:71:b6:5e:ac:e5:0e:72:e1:0b:50:3a:ef:3d:01:54:4c:73:
         e4:51:77:ff:34:ca:c2:ba:5f:4c:d6:50:aa:18:da:b0:62:a1:
         97:6a:6b:ed:0b:06:aa:8b:23:17:93:b8:c3:f4:10:aa:6b:2c:
         98:ed:60:a9:0d:02:d2:34:71:99:39:80:99:bb:a2:3b:a6:be:
         58:d4:f5:b2:29:aa:95:6c:e8:fa:d0:f4:63:4a:df:34:67:f5:
         a6:a5:1d:ba:17:2a:f0:c6:14:1c:0f:c1:a0:94:2c:f1:23:99:
         ed:e6:7a:c8:90:ad:0f:a0:b4:7e:04:4a:64:b9:a5:93:84:5d:
         25:a6:c5:d3:8c:35:64:15:a0:a1:04:8b:58:ae:b8:df:72:f9:
         8c:0d:a8:3c:7a:4d:74:84:95:72:34:23:3b:0c:b6:ab:b8:04:
         74:5d:c0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:41:06 2025 by rpki-client