Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft
File:                     0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft (raw, json)
Hash identifier:          yuNik1k1DL69SlN/6qZd3GEB0bxz7VdUXxsxGcdpfJU=
Subject key identifier:   2C:59:2E:EE:09:81:6A:47:B1:38:12:B0:52:28:9A:23:51:69:9E:1E
Authority key identifier: 0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9
Certificate issuer:       /CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9
Certificate serial:       2DC5DE8A7F35388B0E9336B0CEC5AEC16C4EFF62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft
Manifest number:          040D
Signing time:             Thu 30 May 2024 06:30:53 +0000
Manifest this update:     Thu 30 May 2024 06:25:53 +0000
Manifest next update:     Sun 02 Jun 2024 07:09:53 +0000
Files and hashes:         1: 3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa (hash: AglyA1DngZS4Q5LDQ3yAyYo5wy5f1Q4zEa6gOTLnrfQ=)
                          2: 3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa (hash: b+fBv8Vi/Qq8KV+932HCu9LD7nfkq3vuO696B4Wc88Q=)
                          3: 0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl (hash: iee63lHGvvkQ6dd4GjH2bJxWnTaYBQgFG3J3V9Yc8GU=)
                          4: 3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa (hash: 4MVvRRl+AyiuS8uIPosr60imrjCCvFi4SxYxXsiWnP8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl
                          rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 07:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c5:de:8a:7f:35:38:8b:0e:93:36:b0:ce:c5:ae:c1:6c:4e:ff:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9
        Validity
            Not Before: May 30 06:25:53 2024 GMT
            Not After : Jun  2 07:09:53 2024 GMT
        Subject: CN=2C592EEE09816A47B13812B052289A2351699E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a6:31:63:4c:e8:14:be:d0:7c:53:75:38:6c:
                    74:29:4a:f5:8f:1c:9a:96:8c:b2:77:00:d7:eb:18:
                    36:24:9f:23:bb:0e:51:bb:da:65:be:99:87:d0:d8:
                    c7:a1:92:b8:8d:e1:aa:40:73:fc:73:4e:03:11:61:
                    6f:a5:aa:94:c8:a3:1a:24:a7:23:8d:7f:15:c0:58:
                    c5:87:67:37:72:5b:39:7e:8d:29:f2:90:98:20:4d:
                    0f:e4:57:da:46:15:2f:61:e5:7a:6f:ee:52:2d:fa:
                    04:4d:ec:1d:cf:69:c0:e9:dd:1d:b3:bc:ef:b3:15:
                    1d:65:8b:bd:1a:3d:2f:47:eb:d2:f5:91:a0:d2:ce:
                    15:62:32:1f:1e:be:96:c9:e4:92:8d:c4:0b:60:0c:
                    aa:ba:d0:f9:40:b8:69:50:2b:8d:4d:e8:5d:1b:05:
                    cb:03:df:f8:71:43:ed:96:12:9e:9f:c2:a5:c0:40:
                    00:9c:99:22:2a:f9:cd:e7:80:f7:7c:6c:3d:40:00:
                    07:36:03:91:98:e9:0c:24:52:50:28:9a:ff:b1:5b:
                    e4:d1:a7:e1:ae:f1:8a:aa:eb:a4:1b:c7:ba:7d:a5:
                    d0:63:e7:3a:84:ec:1a:7a:5f:10:36:00:72:4e:53:
                    6f:d2:cb:d1:db:87:1f:3a:d4:73:61:7b:96:ea:48:
                    ba:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:59:2E:EE:09:81:6A:47:B1:38:12:B0:52:28:9A:23:51:69:9E:1E
            X509v3 Authority Key Identifier:
                keyid:0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:44:9b:14:a6:3c:86:a9:45:f5:24:5f:fd:40:1b:cf:b9:47:
         83:e9:46:0d:88:3c:51:b8:20:93:77:f0:78:00:1e:d4:9e:93:
         da:81:47:ef:87:ec:17:f4:a4:5b:80:b4:8a:d4:8d:f8:a7:ff:
         34:42:2a:cc:b6:96:62:96:19:30:df:0d:55:98:0b:04:a2:82:
         58:61:c6:4f:03:14:73:94:b8:f9:34:53:d7:0f:ab:b1:1a:42:
         85:89:dc:ce:fc:47:bb:c7:a2:7c:9f:ea:f8:7a:32:71:70:1a:
         42:82:eb:b7:d0:51:c2:da:a1:ad:b0:ad:97:1d:16:91:38:e3:
         25:f7:04:a2:b2:e8:14:23:95:d0:78:84:a6:ef:55:d5:39:93:
         d5:88:44:77:52:36:2d:98:f9:51:07:9a:16:6f:fc:32:e5:46:
         ea:f9:4d:a1:99:e5:f2:57:d8:10:a0:c2:91:17:c8:35:4c:be:
         33:41:f1:32:1c:f1:6a:33:30:40:65:64:15:93:eb:8f:4a:09:
         9c:1f:c7:ad:86:0c:94:8a:0c:30:e7:62:cd:4b:a8:25:b3:9a:
         7f:9b:85:2c:fe:e7:79:03:cd:ff:3b:e1:ae:6a:8c:6c:e8:e5:
         ad:1a:ca:09:02:ba:3a:b8:d1:2d:d0:c8:51:b2:3d:71:2a:fc:
         1b:fa:ac:e8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULcXein81OIsOkzawzsWuwWxO/2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMxRDQy
OUZDMTNBOTAeFw0yNDA1MzAwNjI1NTNaFw0yNDA2MDIwNzA5NTNaMDMxMTAvBgNV
BAMTKDJDNTkyRUVFMDk4MTZBNDdCMTM4MTJCMDUyMjg5QTIzNTE2OTlFMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdpjFjTOgUvtB8U3U4bHQpSvWP
HJqWjLJ3ANfrGDYknyO7DlG72mW+mYfQ2MehkriN4apAc/xzTgMRYW+lqpTIoxok
pyONfxXAWMWHZzdyWzl+jSnykJggTQ/kV9pGFS9h5Xpv7lIt+gRN7B3PacDp3R2z
vO+zFR1li70aPS9H69L1kaDSzhViMh8evpbJ5JKNxAtgDKq60PlAuGlQK41N6F0b
BcsD3/hxQ+2WEp6fwqXAQACcmSIq+c3ngPd8bD1AAAc2A5GY6QwkUlAomv+xW+TR
p+Gu8Yqq66Qbx7p9pdBj5zqE7Bp6XxA2AHJOU2/Sy9Hbhx861HNhe5bqSLotAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULFku7gmBakexOBKwUiiaI1Fpnh4wHwYDVR0j
BBgwFoAUDTkmrftHMU8efVuSdpEx1Cn8E6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MmRhYTk1Zi0yZjU5LTQzOWEtODM0Zi1hNzIxYzM3MmE3NGMvMC8wRDM5MjZBREZC
NDczMTRGMUU3RDVCOTI3NjkxMzFENDI5RkMxM0E5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMxRDQyOUZD
MTNBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJkYWE5NWYtMmY1OS00MzlhLTgz
NGYtYTcyMWMzNzJhNzRjLzAvMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMx
RDQyOUZDMTNBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFBEmxSmPIapRfUkX/1AG8+5R4PpRg2IPFG4
IJN38HgAHtSek9qBR++H7Bf0pFuAtIrUjfin/zRCKsy2lmKWGTDfDVWYCwSiglhh
xk8DFHOUuPk0U9cPq7EaQoWJ3M78R7vHonyf6vh6MnFwGkKC67fQUcLaoa2wrZcd
FpE44yX3BKKy6BQjldB4hKbvVdU5k9WIRHdSNi2Y+VEHmhZv/DLlRur5TaGZ5fJX
2BCgwpEXyDVMvjNB8TIc8WozMEBlZBWT649KCZwfx62GDJSKDDDnYs1LqCWzmn+b
hSz+53kDzf874a5qjGzo5a0aygkCujq40S3QyFGyPXEq/Bv6rOg=
-----END CERTIFICATE-----
Generated at Thu May 30 07:28:02 2024 by rpki-client on console-fra.rpki-client.org