Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
File:                     F38DFF094E16843854EAC1403C69FD7F77809D02.mft (raw, json)
Hash identifier:          eoFbE72FaSisOk/xAvRr8ZW/TePC9dZRvPC9pf85skE=
Subject key identifier:   EF:05:19:63:A1:C5:6C:8C:FB:8D:B0:75:F5:F6:D8:97:18:94:38:D1
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       5D6FAF7F1104B645D63730D9C1DADC4089506850
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
Manifest number:          043E
Signing time:             Fri 26 Apr 2024 16:31:18 +0000
Manifest this update:     Fri 26 Apr 2024 16:26:18 +0000
Manifest next update:     Tue 30 Apr 2024 04:19:18 +0000
Files and hashes:         1: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: yny4n8n1rYjn3ZILS+ERkwyoGJm0YQrNG87QKfOiYTM=)
                          2: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: K+WgD3t8pzON78rwybN5hXw7h94J7l8KbhbevSWnliY=)
                          3: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: H9VRQ91DMFjFZEtnAx0gt0Ex0lE6j6wSUe9h+9SXaFo=)
                          4: 323430323a623234303a3a2f33322d3438203d3e203234313938.roa (hash: gKJL/u4Oym0TDB2/ReYA3EQ0pyNk0zlegbrcFF32QG4=)
                          5: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: rDBdN1OCOAfHTAkLxafIkrvg1BYmtcYWWbVt4cZ3Ahg=)
                          6: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: w4wNKXBaokqAYeLvjnBdCI2cxuEtHXR9myt9DmZL5RI=)
                          7: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: Bvc/Y1AH5MXOE/f+v2ryElkCn66PX98FEt8wdHqvoOQ=)
                          8: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: KWqNCP23Av7I5KZzN9unrr0dQ84AuQNXdG0Zngd6CZw=)
                          9: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: G2bv3qpu58XEL4oDUx53AmRP5ZhF/h9Qe4Z0uPbcjrE=)
                          10: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: sxE+C62FubyRYa/N4KULH9HlfD6fKFrC6kOkzr+/0Dg=)
                          11: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: P1xOtDQhxWVv3b3q6iKa4zV1ePD95j5Pm/uXOZJSF6E=)
                          12: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: wgZfSvP5pfCN6o7o23v/2GaIT0c6e4WPLykL8hoU5ww=)
                          13: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: bZ2V+P7VWHiROvvyEviMeLsUf03USNSMZyYWX6E0jgg=)
                          14: F38DFF094E16843854EAC1403C69FD7F77809D02.crl (hash: mjUqJTX1+1JUJ4YIMHCWUniLKfzXQh/Flj20V1tyvjc=)
                          15: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: s3bcWkpIEP3zFPUPYESLsbe8Eu7vzRA19oSyRorT+9E=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 02:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6f:af:7f:11:04:b6:45:d6:37:30:d9:c1:da:dc:40:89:50:68:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Apr 26 16:26:18 2024 GMT
            Not After : Apr 30 04:19:18 2024 GMT
        Subject: CN=EF051963A1C56C8CFB8DB075F5F6D897189438D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:64:16:57:44:03:12:ca:d8:8e:67:2e:45:e7:
                    0d:0d:2c:cf:ec:a1:76:e4:44:04:aa:9e:f3:57:4b:
                    41:21:c8:f4:96:a0:d0:0c:bb:97:44:42:9f:06:0b:
                    35:47:aa:e5:6f:de:55:9d:ab:59:22:d9:91:48:8d:
                    0e:bc:01:72:1f:bf:6a:4b:21:e7:b1:93:33:8b:18:
                    df:f6:b6:bc:bd:98:43:b6:43:79:d3:7f:b2:7b:84:
                    76:2e:f4:a7:cf:15:d4:67:d9:85:9b:2d:a9:f1:c3:
                    2e:03:d8:dc:92:8c:68:e2:31:1e:90:02:f7:ac:c7:
                    99:25:53:19:2a:fd:de:1c:58:3c:c5:04:ba:87:cd:
                    76:2c:03:32:c4:2b:9f:1a:45:ed:d8:79:dd:89:e1:
                    29:d1:50:e8:80:dd:13:73:10:e0:13:f4:7b:d3:25:
                    66:5d:95:0f:20:6b:2f:c3:50:48:8e:73:e2:e2:73:
                    1e:32:c6:b4:28:43:24:26:99:0d:82:cc:70:0d:07:
                    22:bb:5d:a9:8f:d6:14:d3:2a:b0:3b:60:55:ad:5e:
                    7b:8e:46:ba:7d:6c:34:ef:e3:bb:35:59:6b:71:7d:
                    2e:1c:e5:bd:0c:cf:aa:91:e6:d2:0e:55:72:34:d7:
                    54:ba:fd:14:fe:d6:a9:bd:cf:0c:c3:36:48:23:4b:
                    e0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:05:19:63:A1:C5:6C:8C:FB:8D:B0:75:F5:F6:D8:97:18:94:38:D1
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:55:e7:9b:d1:97:73:21:06:9b:f0:d6:2e:d1:12:6d:ce:29:
         9b:8d:9a:7c:03:66:5f:a2:e1:35:b3:58:b4:2c:40:71:32:50:
         7f:ea:64:19:d9:9f:ca:c3:9d:5b:18:97:1d:17:db:c6:f1:a2:
         11:2c:e1:5b:cb:e1:ae:d7:03:d0:14:92:9c:48:82:36:64:9c:
         00:8c:af:64:a2:22:be:df:4d:b3:bf:f3:f3:f6:a3:5f:b5:b9:
         2c:c5:ff:6d:2e:e1:f7:82:0a:c5:7d:4d:d8:83:d8:81:cc:c8:
         3b:e5:c4:83:b4:5f:9e:3f:a5:e4:8a:df:0c:dc:d0:08:6b:dd:
         09:6f:90:4a:b7:7f:0a:fd:66:51:55:43:31:c8:f8:6f:33:0c:
         18:4b:da:70:f2:dd:b9:e1:1c:55:5c:27:c4:43:88:e4:fc:c8:
         76:f5:dc:60:eb:45:10:33:41:4f:2b:70:25:ea:56:8d:05:1b:
         61:4c:2a:e5:d8:ff:79:b4:7b:e6:76:ee:f5:04:4f:d2:90:62:
         2d:ac:72:85:b8:4a:f1:e4:05:30:ec:15:b6:7e:33:3c:d7:8c:
         53:76:1b:38:e7:9d:7a:aa:2f:4e:65:d9:c4:d5:78:64:98:cd:
         c6:af:27:ae:7c:3d:f1:79:bb:9c:93:4a:3b:5b:70:f8:1c:ea:
         1c:03:b4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:12:45 2024 by rpki-client on console-ams.rpki-client.org