Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
File:                     9EDE64DBC4098881F11B70123DF514D38F7881EE.mft (raw, json)
Hash identifier:          TomtY8vjiw1m9W4QI00CtFUcU9JlonWQaLvCjhjRLqU=
Subject key identifier:   F3:5F:88:D1:02:FD:FF:C9:E8:D7:55:F4:26:5E:CF:69:1B:96:D0:F7
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       16826B4D46D8E581083075D379E499BC5D0F10A4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
Manifest number:          04DB
Signing time:             Mon 02 Jun 2025 02:02:56 +0000
Manifest this update:     Mon 02 Jun 2025 01:57:56 +0000
Manifest next update:     Thu 05 Jun 2025 13:07:56 +0000
Files and hashes:         1: 9EDE64DBC4098881F11B70123DF514D38F7881EE.crl (hash: aq/ptEtyYPloS2WrWvaJM64O+PIoPxjYW/ecUsTCrZE=)
                          2: 3230322e37322e3139362e302f32342d3234203d3e203138313533.roa (hash: puFXisSoUi7NizeL8UnUBZSF9nSgq80apGurKcIfDx4=)
                          3: 3230322e37322e3230332e302f32342d3234203d3e203538353532.roa (hash: 6PJcLqWCmY4PRA0TAwgMqDi6RiuAs923VVMJCRqCPgo=)
                          4: 3230322e37322e3230342e302f32342d3234203d3e203538353532.roa (hash: IOVVBORu5O/pgeUVzl7VawBTg7EM0DqmgCa3hNVO+Xc=)
                          5: 3230322e37322e3139392e302f32342d3234203d3e203538353532.roa (hash: 5QPif0gj1bjrqgACnfODfusTFmrjqdVRY0shct/itK4=)
                          6: 3230322e37322e3139382e302f32342d3234203d3e203538353532.roa (hash: z35rtBPMp8YFiSMqabTLze0z5N+QVHUo3BCJ9n9BLFY=)
                          7: 3230322e37322e3139332e302f32342d3234203d3e203138313533.roa (hash: bEx2L/DI98HUxCv/5pxB9Xae6pY7P92MPJV4QBKaeJ0=)
                          8: 3230322e37322e3230342e302f32332d3233203d3e203538353532.roa (hash: GdxXTcqOs77ZDWh2maZVFcjOZNFSKj6ecuomfp+ELnY=)
                          9: 3230322e37322e3139342e302f32342d3234203d3e203538353532.roa (hash: RQlHQFKjRMocIaoJ23CKpmV6pCLM6t6aYekY3LLmG4U=)
                          10: 3230322e37322e3230322e302f32342d3234203d3e203138313533.roa (hash: Jse+7YyAFU6B19QF+EnGon6ubeg0wEMkIY6HtcfnBwc=)
                          11: 3230322e37322e3230362e302f32342d3234203d3e203138313533.roa (hash: dCgYQVEarcna28gmSfUk7VoXXuxd4x7SFqSDwv0sDbY=)
                          12: 3230322e37322e3230352e302f32342d3234203d3e203538353532.roa (hash: EZK2HW82EoviLvpddG+zTsR++pGZRfxBTBEevg15VUQ=)
                          13: 3230322e37322e3230312e302f32342d3234203d3e203138313533.roa (hash: gVVEZCabi7tKzG7WnkOcz1INBITtjz6Gg7pU/p/uLbE=)
                          14: 3230322e37322e3230372e302f32342d3234203d3e203538353532.roa (hash: Cc808Lrm8NF6mVavT8ZAe4/yAgDE2y1l1Iy2+05Vees=)
                          15: 3230322e37322e3139352e302f32342d3234203d3e203138313533.roa (hash: V8XIKsuHM3AcbKg6tSx3WP5UFaD99XoTgjHedx3ebJM=)
                          16: 3230322e37322e3139322e302f32342d3234203d3e203138313533.roa (hash: 4JRHGlgTjiQ2E4ohNDpjmFcrV1mqUH90bgY8D6I5glU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Jun 2025 13:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:82:6b:4d:46:d8:e5:81:08:30:75:d3:79:e4:99:bc:5d:0f:10:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Jun  2 01:57:56 2025 GMT
            Not After : Jun  5 13:07:56 2025 GMT
        Subject: CN=F35F88D102FDFFC9E8D755F4265ECF691B96D0F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:41:62:80:2e:d1:e4:da:b3:98:d5:25:dd:98:
                    0c:96:68:3a:f5:bf:30:cd:32:54:c8:56:13:3f:78:
                    40:6f:e0:a2:69:a7:df:40:44:ac:ef:2d:31:47:92:
                    21:d9:06:a7:7b:52:ae:64:93:48:2e:68:db:b9:9e:
                    b5:56:11:be:69:9a:f7:aa:71:f4:da:cb:fd:58:f0:
                    d6:b8:19:b6:21:2a:79:7b:a8:a1:0d:1e:8e:c1:a6:
                    8b:46:12:7a:bb:c3:98:ef:c5:a1:73:85:b4:9f:9a:
                    de:92:85:9c:89:8e:7b:c5:5a:81:15:48:bb:33:b6:
                    24:9e:ec:1a:6f:5f:5f:ab:c2:b8:3f:52:a8:1c:2e:
                    5b:82:ba:3c:93:26:2c:c2:62:06:f3:d2:c3:00:ab:
                    13:8b:4d:e7:bd:2b:f8:8c:6d:da:c9:5b:cd:83:0b:
                    7b:ad:4d:68:d2:47:b5:72:59:ab:a6:55:9f:4c:10:
                    7d:79:a4:35:2f:29:d9:c3:04:a3:c4:11:d9:7a:fb:
                    94:54:d4:11:87:92:ba:3e:98:6f:c9:b4:18:01:29:
                    49:8d:4f:09:be:38:5f:8b:9d:32:26:8a:bf:a2:72:
                    9d:f3:93:c8:45:20:4f:63:49:ce:d3:39:9f:84:ae:
                    78:4a:27:2a:c2:68:06:50:8b:a9:b7:b2:0c:6c:c3:
                    9c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5F:88:D1:02:FD:FF:C9:E8:D7:55:F4:26:5E:CF:69:1B:96:D0:F7
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:4a:a4:14:81:e0:e7:33:7d:56:8a:af:23:6e:8e:31:4e:1d:
         38:4a:41:b9:fd:44:a7:45:22:46:1d:69:4b:cd:85:2a:e5:09:
         e8:8f:cc:07:4d:e2:0e:72:15:c5:00:28:a5:07:fd:26:7a:5e:
         0e:0b:3a:54:30:dc:28:eb:32:cd:5d:fb:0a:09:58:6a:31:8d:
         5c:52:a6:86:c7:43:b1:dc:77:ed:fa:82:d2:1a:68:f4:8e:1d:
         e8:5b:09:60:33:44:10:c9:45:09:ee:5e:f9:1d:b4:4f:13:e9:
         8a:9c:1a:88:4a:3e:2c:69:73:03:78:b3:ca:78:05:8f:e6:6e:
         81:e8:d0:08:ca:3b:c0:a3:81:14:fb:fc:19:d9:8c:67:6d:83:
         a6:e8:03:0b:87:7e:59:bf:f2:20:71:b0:5e:7d:87:13:d9:9a:
         8b:40:72:1b:11:c9:50:b8:2a:77:77:1b:82:ef:5d:90:49:75:
         03:4c:73:8d:a6:4f:f1:21:f5:7e:70:74:81:83:b1:09:22:ff:
         e0:ca:4f:b3:f7:c0:6d:4b:63:fd:65:0f:51:c3:e7:79:4f:f6:
         88:36:af:23:0c:79:a0:28:ec:e0:1b:db:52:3e:36:90:86:92:
         43:51:e9:b4:75:e5:10:2a:67:6c:d8:b4:e5:9f:0a:53:6b:cb:
         ff:23:d6:ce
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFoJrTUbY5YEIMHXTeeSZvF0PEKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4
Rjc4ODFFRTAeFw0yNTA2MDIwMTU3NTZaFw0yNTA2MDUxMzA3NTZaMDMxMTAvBgNV
BAMTKEYzNUY4OEQxMDJGREZGQzlFOEQ3NTVGNDI2NUVDRjY5MUI5NkQwRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIQWKALtHk2rOY1SXdmAyWaDr1
vzDNMlTIVhM/eEBv4KJpp99ARKzvLTFHkiHZBqd7Uq5kk0guaNu5nrVWEb5pmveq
cfTay/1Y8Na4GbYhKnl7qKENHo7BpotGEnq7w5jvxaFzhbSfmt6ShZyJjnvFWoEV
SLsztiSe7BpvX1+rwrg/UqgcLluCujyTJizCYgbz0sMAqxOLTee9K/iMbdrJW82D
C3utTWjSR7VyWaumVZ9MEH15pDUvKdnDBKPEEdl6+5RU1BGHkro+mG/JtBgBKUmN
Twm+OF+LnTImir+icp3zk8hFIE9jSc7TOZ+ErnhKJyrCaAZQi6m3sgxsw5zlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU81+I0QL9/8no11X0Jl7PaRuW0PcwHwYDVR0j
BBgwFoAUnt5k28QJiIHxG3ASPfUU0494ge4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
OWFjYjRhOC03ODA0LTQ1MjYtODRkMi04NjliOTFhNjcxOWQvMC85RURFNjREQkM0
MDk4ODgxRjExQjcwMTIzREY1MTREMzhGNzg4MUVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4Rjc4
ODFFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjlhY2I0YTgtNzgwNC00NTI2LTg0
ZDItODY5YjkxYTY3MTlkLzAvOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0
RDM4Rjc4ODFFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAApKpBSB4OczfVaKryNujjFOHThKQbn9RKdF
IkYdaUvNhSrlCeiPzAdN4g5yFcUAKKUH/SZ6Xg4LOlQw3CjrMs1d+woJWGoxjVxS
pobHQ7Hcd+36gtIaaPSOHehbCWAzRBDJRQnuXvkdtE8T6YqcGohKPixpcwN4s8p4
BY/mboHo0AjKO8CjgRT7/BnZjGdtg6boAwuHflm/8iBxsF59hxPZmotAchsRyVC4
Knd3G4LvXZBJdQNMc42mT/Eh9X5wdIGDsQki/+DKT7P3wG1LY/1lD1HD53lP9og2
ryMMeaAo7OAb21I+NpCGkkNR6bR15RAqZ2zYtOWfClNry/8j1s4=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:34:45 2025 by rpki-client