Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft
File:                     9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft (raw, json)
Hash identifier:          YGLBjrx3KGszEw8hS2pIKkGynYlHe4mqhmBIFg2Zy9U=
Subject key identifier:   38:81:AF:5D:A4:24:F6:7E:F9:66:BB:FD:12:DA:8D:B9:AA:59:FA:C2
Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0
Certificate issuer:       /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
Certificate serial:       5B3D63BBE0764376A4EDAB96E8B9B5F0A3A3AB6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft
Manifest number:          0354
Signing time:             Thu 13 Mar 2025 13:52:20 +0000
Manifest this update:     Thu 13 Mar 2025 13:47:20 +0000
Manifest next update:     Sun 16 Mar 2025 20:46:20 +0000
Files and hashes:         1: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl (hash: BbGb9bl/+Sm8KWgnsO3m080BkC7aNz4k4hwGw5gXgLE=)
                          2: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: VgauIJib/5YKcXTJMY5O4GwqNEjl+20ATgstQ4kaGk4=)
                          3: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: PLxyzNMHDwWhigbWK1elnj9wmeVoOxOWWNDLZHzEEUc=)
                          4: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: LDlAmIkfBI44itLAHSw+oCtaKYJxkyaV9N6k7QGrffc=)
                          5: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: MR0vuOK83eKQgL1Fy5JS8qbLGHJrbQXLpQoCt2clqOs=)
                          6: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: Ssv2eZbvx9q2HF9yBmPHiXg5F7RXJ5IV1vipTWA9H6o=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl
                          rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Mar 2025 20:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3d:63:bb:e0:76:43:76:a4:ed:ab:96:e8:b9:b5:f0:a3:a3:ab:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
        Validity
            Not Before: Mar 13 13:47:20 2025 GMT
            Not After : Mar 16 20:46:20 2025 GMT
        Subject: CN=3881AF5DA424F67EF966BBFD12DA8DB9AA59FAC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e9:d6:d2:c1:3a:a6:1b:e2:ba:8e:db:94:68:
                    bc:24:68:3a:35:ef:f9:b3:8c:70:05:6c:d0:b2:47:
                    22:9a:ed:27:ad:31:70:5c:3c:f8:78:5c:0a:8c:38:
                    b7:e6:9a:e0:55:b4:c7:90:ba:6e:b6:f9:54:a4:60:
                    54:67:a9:93:22:05:1b:e0:e0:16:23:90:0f:85:fc:
                    23:45:58:05:6a:15:03:7e:88:4a:0d:15:88:b6:fa:
                    80:b2:48:a4:b1:d7:81:8e:99:0e:63:05:66:72:29:
                    93:c6:07:41:14:99:07:b8:c9:f5:6e:ed:48:4c:03:
                    51:9c:23:8f:ee:f2:0d:47:99:a5:36:f1:ae:d7:c2:
                    77:f2:20:56:fd:df:1f:5e:f8:5c:5a:cf:3b:d1:ed:
                    b3:83:b0:ff:b5:d9:6d:b0:95:d6:ce:de:ea:11:f5:
                    d7:89:85:f0:86:29:23:6b:11:74:9a:fd:59:59:ba:
                    bf:7a:9e:87:e3:36:26:84:9c:25:f5:0b:70:7d:db:
                    6f:78:b9:1e:07:29:c9:34:29:d1:1b:98:77:72:d3:
                    1f:35:82:4d:57:29:85:12:26:60:3f:de:4a:1a:f3:
                    e1:25:93:9d:f6:14:27:97:30:c0:11:ad:c1:50:20:
                    1d:33:ed:4c:09:cf:6a:3b:df:1b:4e:92:a2:10:da:
                    08:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:81:AF:5D:A4:24:F6:7E:F9:66:BB:FD:12:DA:8D:B9:AA:59:FA:C2
            X509v3 Authority Key Identifier:
                keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c8:2e:4e:17:6c:e9:70:b4:f8:9a:a7:69:0d:fd:32:3b:fa:
         a1:c5:7e:c1:a5:a0:9a:5c:80:f9:c0:39:94:e4:a2:64:94:2f:
         87:4c:e4:08:ea:fe:43:17:2c:9d:38:e0:1d:c1:e1:d6:d4:c8:
         66:2b:4e:4b:e1:2f:85:f0:b8:46:6d:9e:82:00:a3:51:5a:ce:
         2d:68:2b:f2:83:89:27:0d:34:15:3f:27:bc:33:85:3f:b6:34:
         98:e5:fc:47:8a:66:f8:0f:d7:54:c5:01:8b:84:5f:bd:57:8c:
         e9:3f:82:f9:bb:18:1f:8e:d2:c3:52:2f:90:b0:e6:ed:00:f5:
         e2:b6:82:87:78:3f:b3:79:7f:9b:d2:54:de:27:9d:ab:74:6d:
         31:78:9f:ba:52:2e:29:5d:77:eb:b4:46:5f:a0:3c:37:c3:95:
         85:69:9e:a9:7b:b1:0e:88:2e:7a:38:76:b5:57:31:b3:6e:d6:
         2a:ab:b0:f6:6e:3c:9c:0f:b0:1a:bd:0b:91:28:6b:1e:4d:2e:
         2b:ea:dd:21:d1:09:df:fe:1c:9b:33:38:8a:2c:e2:10:4a:cb:
         d5:04:a9:01:c4:5a:74:d4:fc:29:c4:0f:cc:89:ec:52:e7:8b:
         b1:bd:40:68:c6:3a:62:a0:5a:90:50:50:68:ee:ab:e5:d5:bb:
         aa:cb:8c:43
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWz1ju+B2Q3ak7auW6Lm18KOjq2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcx
QUI0MjBBMDAeFw0yNTAzMTMxMzQ3MjBaFw0yNTAzMTYyMDQ2MjBaMDMxMTAvBgNV
BAMTKDM4ODFBRjVEQTQyNEY2N0VGOTY2QkJGRDEyREE4REI5QUE1OUZBQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD66dbSwTqmG+K6jtuUaLwkaDo1
7/mzjHAFbNCyRyKa7SetMXBcPPh4XAqMOLfmmuBVtMeQum62+VSkYFRnqZMiBRvg
4BYjkA+F/CNFWAVqFQN+iEoNFYi2+oCySKSx14GOmQ5jBWZyKZPGB0EUmQe4yfVu
7UhMA1GcI4/u8g1HmaU28a7XwnfyIFb93x9e+FxazzvR7bODsP+12W2wldbO3uoR
9deJhfCGKSNrEXSa/VlZur96nofjNiaEnCX1C3B92294uR4HKck0KdEbmHdy0x81
gk1XKYUSJmA/3koa8+Elk532FCeXMMARrcFQIB0z7UwJz2o73xtOkqIQ2gihAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUOIGvXaQk9n75Zrv9EtqNuapZ+sIwHwYDVR0j
BBgwFoAUnmpn1bnXJcH0Can7O/NaBxq0IKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OTRlNmIyZC0zZGRiLTQ2ZWItODNlZi1jOTliMjAwMzc4M2YvMC85RTZBNjdENUI5
RDcyNUMxRjQwOUE5RkIzQkYzNUEwNzFBQjQyMEEwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcxQUI0
MjBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz
ZWYtYzk5YjIwMDM3ODNmLzAvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVB
MDcxQUI0MjBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACTILk4XbOlwtPiap2kN/TI7+qHFfsGloJpc
gPnAOZTkomSUL4dM5Ajq/kMXLJ044B3B4dbUyGYrTkvhL4XwuEZtnoIAo1Fazi1o
K/KDiScNNBU/J7wzhT+2NJjl/EeKZvgP11TFAYuEX71XjOk/gvm7GB+O0sNSL5Cw
5u0A9eK2god4P7N5f5vSVN4nnat0bTF4n7pSLildd+u0Rl+gPDfDlYVpnql7sQ6I
Lno4drVXMbNu1iqrsPZuPJwPsBq9C5Eoax5NLivq3SHRCd/+HJszOIos4hBKy9UE
qQHEWnTU/CnED8yJ7FLni7G9QGjGOmKgWpBQUGjuq+XVu6rLjEM=
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:30:45 2025 by rpki-client