Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
File:                     8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json)
Hash identifier:          K3bhBXNZZ05ItMcyvrSMyFqSXeMfvPshegOcHjZEMJY=
Subject key identifier:   A6:29:34:0B:02:AB:32:0E:48:E6:34:0F:3B:C9:E0:11:19:B3:E2:A5
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Certificate issuer:       /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial:       0AC10590CE6A23F731E496E189469C8CF098A90D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
Manifest number:          04ED
Signing time:             Mon 02 Jun 2025 02:02:39 +0000
Manifest this update:     Mon 02 Jun 2025 01:57:39 +0000
Manifest next update:     Thu 05 Jun 2025 04:35:39 +0000
Files and hashes:         1: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: DLEEWRg8CzNEC40bkoq+06vWx/pLLLcKvRY7UIZLKcs=)
                          2: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=)
                          3: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=)
                          4: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=)
                          5: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=)
                          6: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: U6xSGmiUc18qi9PUYh6h60KPkVA7FqshGvei3TMrARw=)
                          7: 3231302e3234372e3234322e302f32342d3234203d3e20313430343035.roa (hash: dw24NIap+hZJ4wq3Y9e+7pPi7wiN8EZO2tINonm4ebY=)
                          8: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=)
                          9: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=)
                          10: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: gD3qH0CL5kDWzLn1NnDdXaxbwmPWUV8Kvspy5PDfTJA=)
                          11: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=)
                          12: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: gnvURXZkhn/FEj22B4ytqTMsZk8ZLC9E8Tq6VbTdHlg=)
                          13: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=)
                          14: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: q5exjX9sipnlgCr446gNBKp3hcZ5p+bSP3uX63/NcUU=)
                          15: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=)
                          16: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: lYozuS7H8g71TmDAhlsE7Z+j/6P9Ega8nsca+NA9iZs=)
                          17: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: yw3K/bp/LPi1I2OAb+IKkUT9fIWUEaXPoYhzWvShryU=)
                          18: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=)
                          19: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: +h2OIV45k9IMNmhDrlIF5o27fKX07HhXCAJxexuPVfw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
                          rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Jun 2025 04:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c1:05:90:ce:6a:23:f7:31:e4:96:e1:89:46:9c:8c:f0:98:a9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
        Validity
            Not Before: Jun  2 01:57:39 2025 GMT
            Not After : Jun  5 04:35:39 2025 GMT
        Subject: CN=A629340B02AB320E48E6340F3BC9E01119B3E2A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c3:0b:66:0f:c7:e2:ba:e4:1c:18:39:a6:b5:
                    09:e1:47:d8:56:c3:a3:16:39:78:08:9f:30:98:d7:
                    9d:bd:0c:a5:31:64:64:c4:25:e1:4b:7f:d0:f6:d1:
                    db:8d:55:2b:73:ed:f8:62:88:9e:55:69:05:9d:18:
                    8f:d8:99:a2:54:06:dc:4c:88:48:31:57:71:e5:e7:
                    37:6c:e2:fe:c2:d2:a7:47:12:b9:6e:92:1d:ae:c8:
                    68:bd:98:49:2c:b3:68:3b:e1:fd:5a:b3:41:8c:af:
                    ab:63:b2:f3:0c:e9:fa:9d:d2:74:48:3e:73:a2:1f:
                    c2:20:c0:3c:ca:a4:05:a2:df:88:ff:3a:57:e4:e1:
                    d3:5e:c4:a7:f3:1b:ec:c3:26:3e:75:7c:12:bb:16:
                    87:22:b9:cb:92:49:70:4b:4f:04:79:1f:74:39:10:
                    3b:62:73:2b:e1:e0:44:24:3e:09:ba:78:a2:9b:a8:
                    37:78:3d:de:56:fd:5e:ca:b1:47:0d:cf:e2:9d:b6:
                    98:a5:79:fc:73:49:c6:8d:28:61:45:5c:cc:cb:38:
                    e7:9c:e4:e8:d2:9d:5d:76:24:62:fa:df:c7:6f:57:
                    2c:f9:de:d4:d0:8f:4f:ac:46:e3:d3:f5:24:db:0f:
                    99:05:f7:83:69:67:7a:56:1c:50:81:52:92:60:e8:
                    f9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:29:34:0B:02:AB:32:0E:48:E6:34:0F:3B:C9:E0:11:19:B3:E2:A5
            X509v3 Authority Key Identifier:
                keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3e:36:05:53:a7:a1:38:98:6c:20:7f:ad:9c:67:10:e2:5d:
         23:a8:94:9e:fe:7a:e1:88:18:84:ec:5b:8e:62:08:1d:5c:5b:
         41:a6:71:a0:66:2e:1b:92:5d:29:aa:e3:39:b8:45:cf:4a:7e:
         45:5f:b1:5c:c4:49:d6:f3:c7:3e:17:29:9b:f2:5a:a2:01:b9:
         1a:da:ca:84:f3:12:15:e3:8e:16:21:d0:7a:8c:37:e1:f1:f4:
         f4:94:e5:24:4a:1d:86:01:7f:77:db:52:6c:7a:b9:5e:9b:99:
         2d:e0:51:35:99:71:81:42:0e:79:07:f4:5b:32:78:76:88:b0:
         0e:f6:a9:07:4f:59:ab:07:31:e4:03:3f:fa:fc:7b:20:70:ae:
         5a:d3:30:9b:71:4d:29:75:b2:54:d0:15:3b:dd:a1:d1:71:3f:
         0f:2d:a2:e7:3e:a7:56:ef:de:b4:77:96:ed:4b:2d:8b:65:38:
         4e:9f:55:94:0f:ba:b9:fa:c8:e7:1f:5a:e9:5a:b7:f7:bb:26:
         57:0a:58:38:ec:ac:0a:1a:1b:37:7a:89:85:51:e7:c6:dc:fe:
         93:72:61:9b:53:d4:ec:fe:f2:63:9c:5c:f6:b3:51:87:35:82:
         85:e4:2b:e7:09:c6:72:e8:b8:2b:54:e5:71:98:34:3e:f9:f5:
         27:2d:43:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:16:38 2025 by rpki-client