Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
File:                     F38DFF094E16843854EAC1403C69FD7F77809D02.mft (raw, json)
Hash identifier:          hr/2Jm7SITur10jxxMR9JzsLZZ+sYX0rfxEHyKxid7g=
Subject key identifier:   F1:ED:B7:7E:72:01:C2:DB:09:42:E7:60:74:7E:9A:C4:99:B6:D6:1A
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       492E6DC7C21510FCC26C2EE34855DF3DB6681F32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
Manifest number:          049E
Signing time:             Fri 22 Nov 2024 09:11:36 +0000
Manifest this update:     Fri 22 Nov 2024 09:06:36 +0000
Manifest next update:     Mon 25 Nov 2024 13:37:36 +0000
Files and hashes:         1: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: XP3ySyrao4HUHe9UBVfjiEOfq3wXLWj1fW0u9drI3Y4=)
                          2: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: XrFMOSg/d33kmKXB/MC5Fm/eTuvUhnKDFAu5ejF1jA0=)
                          3: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: NCNOeK1jYrHltR7G6BT7J1s3ZTFTmFlKn4/XG+RT23s=)
                          4: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: ejl6RfD2bPpB+qMs8B5DMcsfZnxKCdOMYxEhVUIfjBY=)
                          5: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: WrruTacfBnCSWoQl+1OWOyzw7PD+Zj0YM6KALXEg6Sg=)
                          6: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: Ohky3Thlr2FDAX+o1+gxd0SqHS9uqlPNErObucNZRIk=)
                          7: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: cv1KBGnemLgcaZAxGgllsmZ1S3QTjWbciD6aB9fI3zI=)
                          8: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: rCD9Xq75hjQz3OqY77lp8zKACYDzK44l3UznAgqtWzY=)
                          9: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: IKCMqxnMEwMx7NWBV2VLtK1SYWCkf90ZSGLzksi5uy8=)
                          10: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: H9VRQ91DMFjFZEtnAx0gt0Ex0lE6j6wSUe9h+9SXaFo=)
                          11: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: m6lchRjt4SeQ5M+BlWja/H6yeHtAkCnNajmmDRQEP0M=)
                          12: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: qo03XHLdsoJ1GTEKjLBEmdW3mK459cDPmNfN/y2DZAQ=)
                          13: F38DFF094E16843854EAC1403C69FD7F77809D02.crl (hash: kcjvM7fn/zllosT9ACQY6NbQnXct8rqadXON7oHSthY=)
                          14: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: iGczu7KEorVkI68vI7K5KWJOPmTCIHosmdUzussM+So=)
                          15: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: FvMqPTk723fFiT9kQC4nzpez+O4mqMSvc+wik4E1yOU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2e:6d:c7:c2:15:10:fc:c2:6c:2e:e3:48:55:df:3d:b6:68:1f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Nov 22 09:06:36 2024 GMT
            Not After : Nov 25 13:37:36 2024 GMT
        Subject: CN=F1EDB77E7201C2DB0942E760747E9AC499B6D61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a3:4c:ae:47:84:96:0c:b2:f7:0d:6c:b2:da:
                    e0:7b:2f:0f:ae:4e:b1:cf:58:b1:d5:d7:71:c2:e5:
                    03:7a:c5:5f:43:84:72:a5:ab:6f:a6:41:1b:c0:9f:
                    a5:c5:3d:0e:4a:4b:ee:17:95:79:7e:cc:83:c9:a6:
                    ae:bc:99:df:6c:64:8e:d3:83:9c:8a:2f:da:18:b4:
                    93:66:be:36:17:91:bd:cf:79:71:7f:7f:1e:da:0f:
                    aa:d0:d2:32:79:98:d9:63:ba:fb:ba:cb:12:55:cf:
                    fc:0a:8b:6f:23:c0:6f:cc:67:1e:a7:cc:ea:27:c1:
                    02:62:3a:67:ba:0e:ca:7c:31:e7:5c:a3:fa:c4:61:
                    c5:05:e8:e2:ef:55:50:4f:1a:29:f8:f8:9a:03:df:
                    d1:b8:8f:0d:8e:a4:04:07:c0:ce:5e:08:63:d3:c7:
                    e6:fe:b1:5d:8c:f0:29:6c:43:ea:ac:97:85:c0:16:
                    0f:b8:fa:54:0f:df:ac:c3:b2:47:82:1c:88:12:8a:
                    35:40:7b:eb:bf:52:2f:6a:84:a8:ff:81:d7:22:24:
                    ec:8e:f1:06:b1:f5:e7:c1:84:a8:6b:1b:2a:fe:e6:
                    4d:db:b4:b2:e2:62:c1:aa:c1:ee:50:6e:b4:31:6c:
                    48:93:78:77:9e:74:f0:5a:60:a7:17:7c:54:b7:36:
                    e8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:ED:B7:7E:72:01:C2:DB:09:42:E7:60:74:7E:9A:C4:99:B6:D6:1A
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:16:cd:8b:2e:23:e4:8a:ee:2d:fa:67:08:4f:a4:5f:ff:7e:
         5d:6d:2e:5c:d3:3a:b0:ff:ae:21:0b:a3:b8:38:8e:00:18:98:
         7e:77:45:7d:f8:d7:b7:1c:3d:7f:ad:1d:d6:08:01:62:b1:86:
         46:26:c1:68:f8:71:44:f4:7d:7b:0d:cc:a8:27:04:96:62:d9:
         99:9d:2f:25:5f:34:00:29:4a:c9:74:0c:f2:9d:e6:5b:0c:d5:
         db:dc:92:29:b4:08:37:82:b6:19:d7:34:72:b8:3e:31:58:7d:
         37:21:ce:74:96:64:52:51:de:83:28:be:17:4b:77:89:d2:93:
         26:2d:6e:b9:2f:46:f8:36:d5:48:d3:5f:19:5a:f6:f2:24:a8:
         19:fa:51:1a:ba:5c:5a:8e:73:52:20:be:1b:35:f3:c8:d3:aa:
         19:2a:6d:88:51:ef:8d:1c:42:aa:40:f0:c6:f4:fa:c3:3f:31:
         9b:66:4c:ef:53:56:2c:86:a7:82:88:33:9e:e3:a3:19:6a:1c:
         ad:a8:b3:d3:97:68:b1:ec:5b:79:1a:be:85:c5:11:45:a2:36:
         20:20:31:39:41:0a:51:91:fa:45:55:39:2f:35:05:2f:da:43:
         8b:9c:d5:79:05:77:10:c6:34:da:02:0b:43:64:80:64:71:3e:
         3a:94:42:38
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSS5tx8IVEPzCbC7jSFXfPbZoHzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3
NzgwOUQwMjAeFw0yNDExMjIwOTA2MzZaFw0yNDExMjUxMzM3MzZaMDMxMTAvBgNV
BAMTKEYxRURCNzdFNzIwMUMyREIwOTQyRTc2MDc0N0U5QUM0OTlCNkQ2MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWo0yuR4SWDLL3DWyy2uB7Lw+u
TrHPWLHV13HC5QN6xV9DhHKlq2+mQRvAn6XFPQ5KS+4XlXl+zIPJpq68md9sZI7T
g5yKL9oYtJNmvjYXkb3PeXF/fx7aD6rQ0jJ5mNljuvu6yxJVz/wKi28jwG/MZx6n
zOonwQJiOme6Dsp8Medco/rEYcUF6OLvVVBPGin4+JoD39G4jw2OpAQHwM5eCGPT
x+b+sV2M8ClsQ+qsl4XAFg+4+lQP36zDskeCHIgSijVAe+u/Ui9qhKj/gdciJOyO
8Qax9efBhKhrGyr+5k3btLLiYsGqwe5QbrQxbEiTeHeedPBaYKcXfFS3NuhnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8e23fnIBwtsJQudgdH6axJm21howHwYDVR0j
BBgwFoAU843/CU4WhDhU6sFAPGn9f3eAnQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YWQ2ZGNjOS0xNzAwLTQ4ZWItOTA5OS02Njc4ZjkxYmY0NGUvMC9GMzhERkYwOTRF
MTY4NDM4NTRFQUMxNDAzQzY5RkQ3Rjc3ODA5RDAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3Nzgw
OUQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFkNmRjYzktMTcwMC00OGViLTkw
OTktNjY3OGY5MWJmNDRlLzAvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZE
N0Y3NzgwOUQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIMWzYsuI+SK7i36ZwhPpF//fl1tLlzTOrD/
riELo7g4jgAYmH53RX3417ccPX+tHdYIAWKxhkYmwWj4cUT0fXsNzKgnBJZi2Zmd
LyVfNAApSsl0DPKd5lsM1dvckim0CDeCthnXNHK4PjFYfTchznSWZFJR3oMovhdL
d4nSkyYtbrkvRvg21UjTXxla9vIkqBn6URq6XFqOc1Igvhs188jTqhkqbYhR740c
QqpA8Mb0+sM/MZtmTO9TViyGp4KIM57joxlqHK2os9OXaLHsW3kavoXFEUWiNiAg
MTlBClGR+kVVOS81BS/aQ4uc1XkFdxDGNNoCC0NkgGRxPjqUQjg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org