Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft
File:                     342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft (raw, json)
Hash identifier:          4GFKb/VTK1ROBTfjDXpOt6C63n3399NWqQjrSIz3J/c=
Subject key identifier:   AC:B3:03:E8:C8:9A:3E:75:99:49:11:44:59:5A:57:0C:55:A8:3D:12
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Certificate issuer:       /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial:       02FE6784798AE782DC34E846066660BC15B1AB88
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft
Manifest number:          01DE
Signing time:             Sun 20 Apr 2025 14:21:12 +0000
Manifest this update:     Sun 20 Apr 2025 14:16:12 +0000
Manifest next update:     Wed 23 Apr 2025 14:31:12 +0000
Files and hashes:         1: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (hash: zVab73uYL3wcGqKb3SN5yTP95BDjc662xSHQ6Rg5+bs=)
                          2: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (hash: z3oujUIzdkfwfVAu7GxNc2o8SfOMUyinAWnvZ5gqzec=)
                          3: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (hash: uMkcQnGtyVMYiNc8KGtl9eYsTQiYYDMAsGIQyzCExBA=)
                          4: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (hash: 5n0MfrsDSDNA1GTVQvTToVZ/ib62p26YcRfnOLr417I=)
                          5: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (hash: vV8Q1dygg3mIzpggTw3uT83wvTaPGh3tWNju3VLRvqU=)
                          6: 3230322e3136392e3234312e302f32342d3234203d3e203338313433.roa (hash: LsZQ/GwSeStmvITZ5Or+AQOb5lrx958EUozywHBUCa0=)
                          7: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (hash: qCRdptVpMmdMqqtxJXdx1zB/jqR/u92GaANeBeT682g=)
                          8: 3230322e3136392e3234382e302f32322d3234203d3e203338313433.roa (hash: ieREG17z1FJf5c79pcGMihrLYDZDNWROdZ7WxWoG+es=)
                          9: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl (hash: 0zSKWSsJB6GMqGxR9/I6PcAATzbPWfkLJ3ntVOB0/mo=)
                          10: 3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (hash: pK9Jj30fFXgP6E+Qz1Q3JlAiamInZsL4/2RLtJVAJJQ=)
                          11: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (hash: 888GDWDIHFeRviy5k7bjtw5YUz607gjeJMQiwdn3CAA=)
                          12: 3230322e3136392e3234392e302f32342d3234203d3e203338313433.roa (hash: FIRVFZc1UU9Hchzd1z8+PKGISur2+CyfQSCwWhe0oGk=)
                          13: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (hash: OMTCmYHshbNaVCDEBEaeY9ZV9u0M9thihudjhmPVOZg=)
                          14: 3230322e3136392e3235312e302f32342d3234203d3e203338313433.roa (hash: 78D1hoR1QXfxYgsB/1BdOMQKWXMHIZ8SWcauYm4VB1k=)
                          15: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (hash: mE6kEoR1wh3AG4hRTva/brmRFhBxuMD3bh+iWtvMgVA=)
                          16: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (hash: LpfpsRHdtzDbS8mVC806nMN0DKSFJFJPb+lmJ69PmFM=)
                          17: 3230322e3136392e3234382e302f32342d3234203d3e203338313433.roa (hash: L6pEG9OhAzYEAGOerzX9Qn4ANwT+1ekx5/wMVBDoACE=)
                          18: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (hash: b64BAb1ucftC1ZfZFvWsOzCH54GJAXothlLarWzTZ7U=)
                          19: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (hash: xmqgEc9Y78ysCW1dJk+xQvIWa6B1Rx9otxL55GBap/A=)
                          20: 3230322e3136392e3235352e302f32342d3234203d3e203338313433.roa (hash: t1evpHl6PIJgH7imBaMLuvcB1G24zNoEPdmCXtsm9LE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
                          rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Apr 2025 14:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fe:67:84:79:8a:e7:82:dc:34:e8:46:06:66:60:bc:15:b1:ab:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
        Validity
            Not Before: Apr 20 14:16:12 2025 GMT
            Not After : Apr 23 14:31:12 2025 GMT
        Subject: CN=ACB303E8C89A3E7599491144595A570C55A83D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:18:9f:70:b2:aa:92:d4:40:90:3c:70:d3:
                    5f:0a:01:ed:41:bf:2b:2b:f4:72:6e:53:2e:30:ac:
                    f5:cf:c5:1d:91:e4:ae:36:91:d4:06:4e:a1:2b:03:
                    64:27:15:64:de:23:59:ba:f6:4c:0a:73:bc:89:14:
                    56:6e:89:6e:9d:72:6d:4b:e6:ee:00:5b:f9:23:2e:
                    7a:59:9f:2f:23:8c:62:09:be:d7:64:48:0a:86:59:
                    91:f7:11:82:b4:c8:ff:93:47:41:42:76:8a:20:6a:
                    77:e5:0d:69:0d:9c:0a:4a:63:bb:c8:a7:54:2c:79:
                    27:85:6e:88:41:31:0e:c9:07:fa:f5:7b:82:f5:71:
                    2c:5f:7f:ec:1b:eb:44:44:f4:d6:ef:85:7d:3d:b7:
                    f8:e1:d0:3d:b4:fa:e8:b7:73:cb:6e:bf:6d:82:8c:
                    96:1d:26:8b:fb:2c:9b:ae:86:aa:06:d7:1a:2e:4c:
                    e8:be:71:6a:ae:23:ef:51:48:94:7c:a2:bb:b9:1c:
                    3e:23:3b:49:cd:b0:7f:ef:1a:14:5a:ae:9e:46:2f:
                    25:20:fd:b7:0f:72:79:16:1c:f6:19:cc:bb:19:20:
                    c5:d6:6c:4c:2a:67:f1:23:cd:25:3a:9e:ea:57:21:
                    18:ab:0f:ca:44:80:55:c6:33:8f:42:f1:03:7a:eb:
                    6f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B3:03:E8:C8:9A:3E:75:99:49:11:44:59:5A:57:0C:55:A8:3D:12
            X509v3 Authority Key Identifier:
                keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:51:16:69:e1:51:7a:0f:1e:78:83:dd:b1:63:33:77:67:c3:
         92:ba:1a:27:96:aa:68:7f:bb:57:d0:d4:da:e3:e9:2a:94:cb:
         87:3b:99:db:84:81:0f:ed:16:f0:09:16:94:4e:37:10:c7:04:
         fc:35:fc:9a:5b:7f:0c:1e:cc:f9:67:04:6d:89:d7:bc:4e:df:
         b6:c1:53:cf:16:01:d9:f1:bf:ec:b8:90:73:21:4e:f3:e9:7b:
         f2:6d:89:0b:f3:56:3a:3a:bd:ad:e6:4d:25:8e:2a:5f:31:0c:
         f7:54:af:d5:76:48:88:17:cc:7d:c4:55:86:1c:5f:98:1d:fe:
         c9:7b:a7:ae:0f:d4:50:0c:54:99:ff:31:c4:fd:49:82:69:eb:
         f9:44:37:2b:bb:15:47:22:82:16:df:e0:fa:3b:f5:5f:c8:07:
         b1:9b:c9:de:d6:b5:8d:f9:86:69:3a:b6:d8:d7:b5:be:e3:9f:
         65:34:22:03:7b:26:f7:6a:69:c1:88:d0:ca:4e:a9:c2:21:d7:
         69:aa:59:77:e3:9b:6a:5e:e5:0b:e8:bc:ee:ab:7e:25:50:47:
         8d:3f:e0:dc:dc:8a:dd:41:45:73:88:60:0b:9b:31:46:5f:c6:
         ab:29:b3:c8:ad:c7:34:07:68:d0:24:16:dc:a4:b1:28:44:62:
         87:10:af:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:00 2025 by rpki-client