Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft
File:                     9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft (raw, json)
Hash identifier:          cm0xBufANlfVODVgUy7dQqRTwGuzPiyzUHBIXn+ESvg=
Subject key identifier:   B8:4B:A8:2E:E6:7A:1F:DC:A5:CB:0B:63:F8:A4:A8:4F:6E:B5:CE:F6
Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7
Certificate issuer:       /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7
Certificate serial:       70892B3FEAB56B7C2321982595973C394467D943
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft
Manifest number:          94
Signing time:             Wed 04 Jun 2025 19:20:06 +0000
Manifest this update:     Wed 04 Jun 2025 19:15:06 +0000
Manifest next update:     Sat 07 Jun 2025 21:09:06 +0000
Files and hashes:         1: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl (hash: r7YZu0Aov5Dk23cAMAMHH8npd5VURq1+Z2zEM3Imlos=)
                          2: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: odz+XvlU6wUZHmxANYcPfjvU3FxzONeuGBAElE5SFM8=)
                          3: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: jQnjcD09zdciZtR813IMGvy4lK93eqWOtX5t9dz1Ldg=)
                          4: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: NCa+GGSq3yT3mQagCDKq6Gw5W/C1zRiWNAtTo6ViycU=)
                          5: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: QHJuip7O3VcDdL7ndKGxilEe3owxbbSbcIiD01Visj4=)
                          6: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: rCl3Wuft1WIRGE3tw3SxP242bdORGtg1GIBI8B19PUM=)
                          7: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: xk8tVxqn5heNhUDrnWm94cOrNBZG78jygDDr9I5XxcA=)
                          8: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: Tn7TDSW+adNbJWWGJZH4AHcWPfC1aqL5ZrmZovxxV0I=)
                          9: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: l/rrbEpNeb1GQ2wJ0vFCmJ1Zty4z+52/HZ1JBvBf910=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl
                          rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 21:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:89:2b:3f:ea:b5:6b:7c:23:21:98:25:95:97:3c:39:44:67:d9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7
        Validity
            Not Before: Jun  4 19:15:06 2025 GMT
            Not After : Jun  7 21:09:06 2025 GMT
        Subject: CN=B84BA82EE67A1FDCA5CB0B63F8A4A84F6EB5CEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:99:15:50:c0:82:7c:3f:5b:fb:fa:69:8f:
                    1a:bc:92:16:08:36:a5:19:c7:7e:19:4e:5d:d9:01:
                    8c:43:33:16:b9:42:29:d8:70:56:65:33:8d:9c:aa:
                    1e:eb:a3:91:de:55:ce:ad:b3:96:d5:30:69:c3:a7:
                    3f:51:cf:a9:28:dc:c4:df:fc:d3:ec:34:56:14:e3:
                    c5:fe:9c:6f:40:7e:58:17:83:c2:09:25:00:b5:bc:
                    c7:d3:f5:53:4f:77:28:01:0d:e2:36:72:85:c0:46:
                    86:58:b4:38:ee:61:48:b2:75:7a:df:7d:47:62:8a:
                    dc:ea:de:cd:3a:50:e5:05:25:e7:f8:80:14:77:32:
                    25:17:23:01:59:1d:22:ec:b4:0a:f2:d0:ca:f1:cd:
                    d9:08:df:43:d4:82:2f:26:d0:3c:80:a6:51:e6:2e:
                    59:be:96:64:9a:2b:8b:34:5c:fc:32:01:4d:eb:de:
                    11:dc:68:0a:56:4c:82:e2:f2:36:83:8e:18:b6:26:
                    70:1e:51:f6:a9:a4:51:00:36:e6:58:ad:e6:3c:80:
                    ef:15:c9:c9:7f:07:6d:07:57:7b:4e:96:56:ec:8d:
                    f9:f9:01:e3:00:5d:89:fd:1a:9d:23:6f:ef:42:c1:
                    2d:2e:e5:7a:26:da:f7:80:0c:6c:7e:53:58:63:54:
                    1b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4B:A8:2E:E6:7A:1F:DC:A5:CB:0B:63:F8:A4:A8:4F:6E:B5:CE:F6
            X509v3 Authority Key Identifier:
                keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:79:a9:33:ee:bd:4f:dd:7a:2a:b5:d5:d4:04:57:80:bd:2f:
         a7:b7:c8:43:64:e5:7c:63:18:9f:8c:ed:b7:6c:b4:54:ec:a0:
         53:4e:81:f7:b3:63:2e:1d:39:23:30:f4:36:ac:3e:79:fe:cc:
         c0:34:65:cf:83:34:f3:84:48:c1:a1:f8:f9:aa:b5:3d:ce:22:
         e0:da:19:fa:03:f8:8d:ec:a4:df:78:bc:bb:5c:59:53:01:92:
         d6:71:b9:2e:90:d8:ec:64:55:cf:ee:6e:e6:e6:6d:b3:11:05:
         ea:fa:ab:1e:e9:eb:6c:72:38:92:97:b4:90:4c:c1:f2:7f:48:
         a0:fe:8d:43:73:f6:73:76:41:46:6a:85:16:a8:69:21:87:4c:
         9d:9a:5f:db:19:4c:61:41:89:e7:3b:58:2e:48:e0:a4:38:a0:
         f2:43:cc:00:d5:8f:80:c4:f0:0d:5a:ca:f2:4e:b8:85:d9:26:
         42:0d:05:73:80:87:f3:d9:2e:39:f8:b5:7e:66:f5:14:79:93:
         61:24:bb:33:8c:36:dc:9b:40:26:73:0b:9e:3d:ae:67:5d:36:
         c1:51:b0:a0:ac:05:3b:31:05:1b:59:b4:b1:8e:30:42:00:89:
         d5:a7:60:14:0b:a1:e3:40:91:18:df:82:71:c1:80:95:4f:c8:
         1d:5d:72:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:21:39 2025 by rpki-client