Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
File:                     F38DFF094E16843854EAC1403C69FD7F77809D02.mft (raw, json)
Hash identifier:          UmUVnfHuHlbQdw6HUHkrp0VEC8ZqnerUBpXGetYz3DQ=
Subject key identifier:   03:66:0F:57:DB:B9:BB:04:B4:5D:95:2C:C7:C7:9B:6A:B9:3E:9E:31
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       21519F301C4327B7F7531E70EBDDE3AE34A0A935
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
Manifest number:          04DA
Signing time:             Fri 04 Apr 2025 04:01:45 +0000
Manifest this update:     Fri 04 Apr 2025 03:56:45 +0000
Manifest next update:     Mon 07 Apr 2025 13:22:45 +0000
Files and hashes:         1: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: iGczu7KEorVkI68vI7K5KWJOPmTCIHosmdUzussM+So=)
                          2: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: NCNOeK1jYrHltR7G6BT7J1s3ZTFTmFlKn4/XG+RT23s=)
                          3: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: XrFMOSg/d33kmKXB/MC5Fm/eTuvUhnKDFAu5ejF1jA0=)
                          4: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: Ukwgls6QusI0sVPeKowIBEMKKVNZ7qicjc7eWe3Bawc=)
                          5: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: C2SSV6l4PIV/2AjjXlwr1QY5lzBadYfvShLh+b2ERSY=)
                          6: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: OolbpeUpBXtFe5uwnVMRBxDj4cHLKQcUAfTTgB8M49A=)
                          7: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: m6lchRjt4SeQ5M+BlWja/H6yeHtAkCnNajmmDRQEP0M=)
                          8: F38DFF094E16843854EAC1403C69FD7F77809D02.crl (hash: JRfR+T8ooJWCVx9+eO0BIHr/nOEO3/tBf3P5D6b1VoA=)
                          9: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: IKCMqxnMEwMx7NWBV2VLtK1SYWCkf90ZSGLzksi5uy8=)
                          10: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: FvMqPTk723fFiT9kQC4nzpez+O4mqMSvc+wik4E1yOU=)
                          11: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: XP3ySyrao4HUHe9UBVfjiEOfq3wXLWj1fW0u9drI3Y4=)
                          12: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: 0PzoQhjtIBIp5z3u6ZT2GigMXbei3fP0btsZYcijF1o=)
                          13: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: cv1KBGnemLgcaZAxGgllsmZ1S3QTjWbciD6aB9fI3zI=)
                          14: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: ejl6RfD2bPpB+qMs8B5DMcsfZnxKCdOMYxEhVUIfjBY=)
                          15: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: rCD9Xq75hjQz3OqY77lp8zKACYDzK44l3UznAgqtWzY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 13:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:51:9f:30:1c:43:27:b7:f7:53:1e:70:eb:dd:e3:ae:34:a0:a9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Apr  4 03:56:45 2025 GMT
            Not After : Apr  7 13:22:45 2025 GMT
        Subject: CN=03660F57DBB9BB04B45D952CC7C79B6AB93E9E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:62:8b:a1:f0:59:34:07:7a:d6:8e:ae:53:f3:
                    1c:7d:38:6a:3d:ed:7e:67:b2:22:fc:8e:26:0a:4c:
                    b6:fd:d3:4e:da:a1:f1:bf:34:55:b5:4c:c2:05:7e:
                    c2:14:1f:f3:00:ce:5d:51:dc:a1:3e:76:2c:a6:aa:
                    71:98:15:3f:66:7d:44:59:e4:19:3b:4c:f5:81:45:
                    cc:c4:93:6d:01:71:c7:66:6c:c8:cf:6d:c2:7c:0c:
                    23:da:04:09:9c:48:9d:45:b8:a3:f9:d0:67:0d:12:
                    71:a3:67:49:5f:47:f0:20:c2:29:ec:64:1d:61:67:
                    9f:bc:c2:15:27:91:39:5f:ea:f4:f4:f8:52:67:ac:
                    89:f2:fe:e4:b5:7f:e4:af:4c:65:a4:8b:2d:95:10:
                    19:fc:09:15:b0:6e:80:ed:12:70:21:f6:12:fc:01:
                    c6:74:ce:15:9f:09:44:cd:67:f3:a5:f4:30:1b:95:
                    55:34:a8:2f:69:43:3c:2d:27:d1:90:d7:eb:43:5e:
                    af:96:f8:f5:31:7d:d8:ce:61:e8:ef:d6:77:0d:62:
                    05:89:a7:12:86:a9:9d:48:e3:ea:5c:0d:40:2e:a7:
                    70:b4:99:76:56:80:29:0a:50:44:47:e6:31:13:5e:
                    d9:a3:3c:5e:ce:9d:1b:c1:c3:79:f1:e4:51:70:85:
                    4e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:66:0F:57:DB:B9:BB:04:B4:5D:95:2C:C7:C7:9B:6A:B9:3E:9E:31
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:42:56:33:0a:6a:7b:58:17:49:c8:df:9f:95:63:16:20:21:
         07:08:a3:7b:01:25:f8:ee:d8:b7:71:86:d3:05:d6:5a:88:01:
         a4:d1:27:7d:c6:9b:4e:fb:1b:87:58:24:34:90:b5:11:33:dd:
         ea:ee:5d:ff:ca:ce:e1:42:b1:b3:11:e5:b3:a6:a4:bc:13:48:
         3d:ab:12:2c:41:91:59:64:91:bf:52:15:50:e9:f8:d4:4d:78:
         72:97:65:4e:5e:3b:43:1c:fb:6e:b8:c9:29:9c:f5:39:a1:68:
         bd:0e:65:0e:31:d6:70:c4:41:4e:05:9d:09:0b:fb:e6:31:41:
         8f:88:29:8e:fe:c6:10:21:11:e9:39:56:49:d6:c2:92:c7:d5:
         63:ff:30:92:e5:51:e6:4d:ef:e2:24:ad:ec:61:8b:56:c8:aa:
         9f:f6:1d:bf:18:42:0b:29:be:fd:f6:90:42:82:f0:04:46:c7:
         25:e1:58:e4:d6:32:e7:82:ec:3f:e2:d7:9c:ac:63:9e:76:70:
         bc:c9:f9:2b:25:89:ec:61:8e:51:8f:b2:12:31:2a:b3:37:0e:
         fe:15:60:c5:f3:b4:10:23:0c:fb:19:7e:e1:62:61:ed:94:57:
         6b:43:00:68:d3:55:74:a9:fd:54:bf:a8:61:f6:f6:b6:80:ed:
         5d:bb:ec:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:51 2025 by rpki-client