Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft
File:                     394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft (raw, json)
Hash identifier:          9QPWt9SVlugu61a0vlOWz6yd4wSXCnOJKjFzizuZmIs=
Subject key identifier:   9C:3E:BF:0F:8B:11:32:81:DB:A4:2B:74:90:B8:42:13:BC:80:55:74
Authority key identifier: 39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88
Certificate issuer:       /CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88
Certificate serial:       11BC1C92B442E0E1D42A1F1DB553C076C8F76369
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft
Manifest number:          A7
Signing time:             Fri 06 Jun 2025 15:30:48 +0000
Manifest this update:     Fri 06 Jun 2025 15:25:48 +0000
Manifest next update:     Tue 10 Jun 2025 00:47:48 +0000
Files and hashes:         1: 3135372e36362e3139302e302f32342d3234203d3e20313532373533.roa (hash: 5Tt3RRAons/MpLAKdI+nVYdG1EV4O6aC9q3gMfZTySg=)
                          2: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl (hash: TBhqSUbMDIB5KC8wAIDKD4Jc2A16wIFwFCQSwkUxp6E=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl
                          rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 00:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:bc:1c:92:b4:42:e0:e1:d4:2a:1f:1d:b5:53:c0:76:c8:f7:63:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88
        Validity
            Not Before: Jun  6 15:25:48 2025 GMT
            Not After : Jun 10 00:47:48 2025 GMT
        Subject: CN=9C3EBF0F8B113281DBA42B7490B84213BC805574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c6:f8:8a:5e:42:08:6b:42:39:7e:e3:56:58:
                    9d:1e:69:16:0d:21:b8:a2:6d:51:69:16:f8:4e:54:
                    1f:35:95:3a:4f:94:ba:d1:d5:4f:53:4c:ce:01:4c:
                    ed:9b:d2:e8:3f:88:94:7f:59:0d:5a:b9:67:78:46:
                    09:31:f8:7c:dd:1b:3b:26:b3:78:f7:fd:1c:22:3a:
                    60:77:5a:0b:9b:a9:06:02:9e:28:6f:7b:e0:7a:91:
                    3a:6f:fc:1d:db:0c:8f:0e:02:71:24:e5:d0:2f:a3:
                    fe:6e:bb:bf:1c:9a:a3:d4:30:90:38:47:87:80:cc:
                    02:e8:24:a2:5a:c8:87:52:7d:46:b5:f5:44:cb:83:
                    68:e8:cf:b2:5d:88:41:42:b0:49:c1:e6:88:28:f6:
                    00:8f:21:6c:52:47:ab:cc:0a:4d:6f:e1:2e:d5:b7:
                    ac:32:5e:2f:f2:8f:fc:d5:1b:26:fc:b4:d7:19:de:
                    5a:24:c4:93:37:66:b2:78:37:df:b4:5d:4e:40:21:
                    f2:94:f1:e3:9a:7c:3e:73:14:54:ea:1a:9b:0d:1b:
                    75:d7:87:4a:be:85:0b:9c:1c:3a:8d:d9:de:0d:fc:
                    73:f8:9f:1c:32:b8:9e:c8:e6:8c:a3:24:c7:53:cd:
                    77:9b:ff:30:a4:30:a3:67:22:48:6d:c6:d9:ee:8e:
                    f3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3E:BF:0F:8B:11:32:81:DB:A4:2B:74:90:B8:42:13:BC:80:55:74
            X509v3 Authority Key Identifier:
                keyid:39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ae:99:c1:9b:90:7f:af:53:45:8f:7e:27:1c:ad:be:43:96:
         75:06:4b:07:0e:14:9e:b1:bc:97:f0:96:d5:61:3f:23:54:d6:
         e6:36:2d:33:53:6b:c3:2c:66:a1:8f:32:45:ea:af:3c:ac:f7:
         e3:c3:d2:ca:1b:1c:cd:70:38:9e:f5:80:09:66:41:7f:91:96:
         20:04:df:ae:20:fc:a6:00:71:9e:8b:4d:80:7d:ef:f7:b2:f9:
         f2:ff:d2:d4:06:9f:de:b7:63:a7:86:ee:79:81:95:a5:fd:43:
         85:11:2a:fa:ef:62:36:83:ef:7a:e8:ba:e7:cd:bf:3f:ea:f9:
         73:03:0b:61:aa:81:aa:e0:ae:27:6b:f1:0d:c3:b5:08:96:7d:
         e9:8c:02:ad:9b:fe:d4:7e:6f:8d:7b:08:52:d0:f9:05:41:c3:
         a0:5a:40:21:e7:5e:76:18:2d:79:0a:55:fa:9e:e3:5b:a5:6a:
         03:97:e7:58:30:a1:55:9b:bd:23:d2:9a:32:cd:2e:dc:d6:70:
         c4:88:b9:a8:d5:ba:0c:48:d9:17:c4:cc:f2:53:18:33:e1:21:
         db:da:8c:cc:d2:43:93:36:bf:35:48:11:ff:56:10:26:fa:33:
         a2:5b:b9:c8:c0:cc:de:56:fe:2c:65:71:14:1b:39:f2:37:2a:
         ef:75:cc:15
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEbwckrRC4OHUKh8dtVPAdsj3Y2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZE
QjQyMUQ4ODAeFw0yNTA2MDYxNTI1NDhaFw0yNTA2MTAwMDQ3NDhaMDMxMTAvBgNV
BAMTKDlDM0VCRjBGOEIxMTMyODFEQkE0MkI3NDkwQjg0MjEzQkM4MDU1NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdxviKXkIIa0I5fuNWWJ0eaRYN
IbiibVFpFvhOVB81lTpPlLrR1U9TTM4BTO2b0ug/iJR/WQ1auWd4Rgkx+HzdGzsm
s3j3/RwiOmB3WgubqQYCnihve+B6kTpv/B3bDI8OAnEk5dAvo/5uu78cmqPUMJA4
R4eAzALoJKJayIdSfUa19UTLg2joz7JdiEFCsEnB5ogo9gCPIWxSR6vMCk1v4S7V
t6wyXi/yj/zVGyb8tNcZ3lokxJM3ZrJ4N9+0XU5AIfKU8eOafD5zFFTqGpsNG3XX
h0q+hQucHDqN2d4N/HP4nxwyuJ7I5oyjJMdTzXeb/zCkMKNnIkhtxtnujvONAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnD6/D4sRMoHbpCt0kLhCE7yAVXQwHwYDVR0j
BBgwFoAUOUvMXAMQ2wEX3cHcGhdgJttCHYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NzEzNGYxOC0xMWUxLTQxYWUtYmIwNS05ZmJmNDgyMTJiN2QvMC8zOTRCQ0M1QzAz
MTBEQjAxMTdEREMxREMxQTE3NjAyNkRCNDIxRDg4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZEQjQy
MUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTcxMzRmMTgtMTFlMS00MWFlLWJi
MDUtOWZiZjQ4MjEyYjdkLzAvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYw
MjZEQjQyMUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJaumcGbkH+vU0WPficcrb5DlnUGSwcOFJ6x
vJfwltVhPyNU1uY2LTNTa8MsZqGPMkXqrzys9+PD0sobHM1wOJ71gAlmQX+RliAE
364g/KYAcZ6LTYB97/ey+fL/0tQGn963Y6eG7nmBlaX9Q4URKvrvYjaD73rouufN
vz/q+XMDC2Gqgargridr8Q3DtQiWfemMAq2b/tR+b417CFLQ+QVBw6BaQCHnXnYY
LXkKVfqe41ulagOX51gwoVWbvSPSmjLNLtzWcMSIuajVugxI2RfEzPJTGDPhIdva
jMzSQ5M2vzVIEf9WECb6M6JbucjAzN5W/ixlcRQbOfI3Ku91zBU=
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:18:42 2025 by rpki-client