Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
File:                     4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json)
Hash identifier:          Awhepvpptz8F9INbZolR4l84tcJlgUBEdCCCoOCm4mw=
Subject key identifier:   1A:3D:F9:12:BE:8A:26:37:30:76:C7:89:81:D7:12:75:54:F2:42:BA
Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
Certificate issuer:       /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Certificate serial:       28726F0E2A66AC206A64BC18E0A465FC149C6CBE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
Manifest number:          04D4
Signing time:             Wed 16 Apr 2025 14:50:54 +0000
Manifest this update:     Wed 16 Apr 2025 14:45:54 +0000
Manifest next update:     Sun 20 Apr 2025 00:45:54 +0000
Files and hashes:         1: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: 5Yjn1xzYUyXHAIu8ieYmhhXRGkoBPybJZRq7aWT18y0=)
                          2: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: rQ2xNw89yhpwHO5jZvmI1Wp3WGofg/If0CCnpqfZrfM=)
                          3: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: WxWgRGgAM+ftAg8EQMmcnBlvtc8N+Cba7x40/kmtm2I=)
                          4: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d7TlxPMnZWo9NiIWBhiGrIW1xBkbQUYDXZcwgsom8Dk=)
                          5: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: 9ox32o2qvbcsND5fYvTWnO2uJ4CVwur4EBGsHFdJw7Q=)
                          6: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: EiOpEEWve4ItYjwbIDlrPYKQ63msR1gGrgu6w5qOw4A=)
                          7: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: ZqT27QjOP9C+x+HxEBPLWbwm+mlgqdclma4hL/DLOAM=)
                          8: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: lQOtdNJdvntWhCn4oNxG5S3GH9Dk0Cvh7IK+W2/tjTY=)
                          9: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: /cOSCLURwMnYRY1LEPKn/FGjfHtiEkHQU6Af0iOYRl4=)
                          10: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: DrBIeEQt6yULPW0r6792EagtEDf0ZZCsQyk/153rumY=)
                          11: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: JizELHWBc29vv6ZjehlmiLNECzxh6hYttD2vQ3zzH1A=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl
                          rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Apr 2025 00:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:72:6f:0e:2a:66:ac:20:6a:64:bc:18:e0:a4:65:fc:14:9c:6c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
        Validity
            Not Before: Apr 16 14:45:54 2025 GMT
            Not After : Apr 20 00:45:54 2025 GMT
        Subject: CN=1A3DF912BE8A26373076C78981D7127554F242BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:6d:8a:54:4d:7e:31:d6:90:b5:17:cf:1f:
                    69:95:0e:a3:20:ce:4f:15:8d:5d:3d:77:36:2f:f9:
                    7c:f9:75:4c:2a:cd:21:ad:56:24:46:72:e4:52:6d:
                    49:5a:02:26:bd:e5:30:1d:f0:8a:9c:dc:56:c0:a3:
                    a6:53:22:4b:99:5e:09:ae:b4:db:03:9c:7d:d7:49:
                    64:c4:d7:46:92:cd:ee:b2:62:6d:2f:5a:20:a6:aa:
                    30:8e:e2:68:35:64:9a:7b:1c:53:d1:bf:3b:53:d2:
                    7b:60:6d:b8:2b:7e:48:f7:6f:1c:ad:97:47:6e:4a:
                    af:4a:3e:a8:14:79:86:39:44:1b:e2:77:92:62:88:
                    b6:65:a2:02:b4:d3:9a:43:71:3f:bd:14:72:bb:1f:
                    ff:3c:56:8e:7e:7b:e2:ef:dd:ed:e6:d7:1f:ce:c2:
                    76:c6:61:1c:53:0b:46:c4:11:18:a8:7b:fa:c4:1a:
                    5f:f1:97:28:ca:f0:76:54:a7:0e:99:bd:82:27:c3:
                    0a:11:81:0d:83:04:e9:21:24:ab:42:60:b3:53:e7:
                    14:be:da:c5:59:49:fd:90:11:07:2f:81:28:58:9e:
                    7a:91:5f:e4:8e:9f:25:e5:18:f4:79:42:bd:30:19:
                    c6:ae:1f:d9:57:be:99:ea:17:0f:91:4d:4a:bb:5b:
                    2d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3D:F9:12:BE:8A:26:37:30:76:C7:89:81:D7:12:75:54:F2:42:BA
            X509v3 Authority Key Identifier:
                keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7a:19:e2:24:ec:24:bf:f5:5f:28:db:0d:66:37:c7:5e:62:
         d2:56:73:22:71:d5:e1:08:71:45:17:2a:69:e2:c3:02:77:07:
         2a:37:e8:17:50:cf:21:db:b2:ee:f4:a6:17:0b:21:b1:b3:e6:
         c8:74:23:d2:87:2f:c7:1d:3c:f1:38:89:ce:00:c2:68:fc:3f:
         60:7c:ec:16:14:8e:f1:90:f0:a2:99:90:49:75:51:8b:bc:06:
         33:08:12:29:67:16:54:e4:4f:df:b6:78:cf:da:a8:ec:b5:7e:
         fa:d5:cd:eb:60:ee:65:2c:bb:16:55:f2:40:f0:22:dc:98:b7:
         28:87:fb:d6:b9:3d:e1:4a:22:84:c0:41:ae:ff:3a:73:29:07:
         03:ec:55:7c:3b:2e:4a:f7:aa:43:90:71:5d:f1:68:5c:39:69:
         c6:29:31:68:d4:e2:e4:b2:3a:57:c0:7b:47:cc:ba:6e:06:61:
         b2:1c:e1:e0:57:2a:fa:3a:53:3a:5e:9b:85:15:68:b5:cf:8d:
         d3:f3:7f:3b:f6:56:21:ea:ef:eb:49:08:65:39:d9:70:aa:9e:
         6b:6d:e1:14:d2:a3:aa:16:b7:8f:e3:20:7e:cd:86:09:5e:d6:
         6d:e6:32:2a:99:f7:05:f4:75:46:75:74:e2:f0:e0:38:07:6e:
         37:08:c1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:13:37 2025 by rpki-client