Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
File:                     F490341241E1B1C7D170AB872CA39A68309B3F3B.mft (raw, json)
Hash identifier:          ncoJf30b4xtpbM9zLOB3XNuxmGDh9BjpIxbp6QdYVfI=
Subject key identifier:   04:AB:F3:43:A3:05:FA:D6:45:B3:FA:88:F7:DF:28:9B:0A:B5:B2:55
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       661E93B696A3174104E9276150B2E940C7ED519B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
Manifest number:          04DC
Signing time:             Fri 04 Apr 2025 17:11:08 +0000
Manifest this update:     Fri 04 Apr 2025 17:06:08 +0000
Manifest next update:     Tue 08 Apr 2025 02:38:08 +0000
Files and hashes:         1: 3138322e3235352e372e302f32342d3234203d3e203436303439.roa (hash: LwcbD+sHZALJzN975SZcrEx7OkI4wSuCBSFEZ0s2LcA=)
                          2: 3138322e3235352e322e302f32342d3234203d3e203436303439.roa (hash: ReHGyi3wPol8w+dXN58JQZ3jKDZy41EdBUQ9KqgqxNE=)
                          3: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (hash: gYdBbEHqi/8GEIbwa19GzLrLlojYDwF4Guaq4yqtU1w=)
                          4: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (hash: DdfVx1Y4zhGVI0wY6FDIqnJ7U45MXqnwWFPD5ypl2Cc=)
                          5: 3138322e3235352e362e302f32342d3234203d3e203436303439.roa (hash: kuZS7DLLlgmMTpJidQpDkrlhCk8WMeXuEnGoo6NlY4A=)
                          6: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (hash: 4lUl/bGr3LsLR/vnV3xMIVxucYqdv89T4oDlo5SwVJ0=)
                          7: 323030313a6466303a62353a3a2f34382d3438203d3e203436303439.roa (hash: cvXp0ryiRslGKbI04u3NZ/8isAZXiXHmgeBpSrGft3g=)
                          8: F490341241E1B1C7D170AB872CA39A68309B3F3B.crl (hash: RSK+D6zNQfRDBeQcdg/SyUjW7bprisxN8S1gV/5AlTQ=)
                          9: 3138322e3235352e302e302f32342d3234203d3e203436303439.roa (hash: ctLBkJdn5QnPjKLcq9nVyPuWBDgr1w513Qyi8PIDRPM=)
                          10: 3138322e3235352e342e302f32322d3232203d3e203436303439.roa (hash: iL4PMKbvrqXhDgoAoAWusZEJsxlC06RfPP/P+d5o2nI=)
                          11: 3138322e3235352e312e302f32342d3234203d3e203436303439.roa (hash: wWiP9md+rg4jkV6o4vvI8Sn+AClqa4kF5AOzHWEDjoU=)
                          12: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (hash: 1XpGe+qbE1OOWK8DTNkeP+L7ndY3082zjqj/g6hwuD8=)
                          13: 3138322e3235352e332e302f32342d3234203d3e203436303439.roa (hash: 0D0mLk+Xng2R+/IUUM+8XhOsNRalYtt+3M4upuYxRoc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1e:93:b6:96:a3:17:41:04:e9:27:61:50:b2:e9:40:c7:ed:51:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Apr  4 17:06:08 2025 GMT
            Not After : Apr  8 02:38:08 2025 GMT
        Subject: CN=04ABF343A305FAD645B3FA88F7DF289B0AB5B255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:34:c5:0b:f5:61:c6:dc:b2:ec:e4:46:50:21:
                    59:f9:14:1d:d2:04:ba:18:b8:6b:fe:67:0f:38:93:
                    0d:ff:e6:af:2a:02:61:04:70:43:9a:76:ee:da:2b:
                    ee:86:6a:b3:48:71:c4:a4:9c:9d:de:81:ce:08:cc:
                    51:78:92:53:7a:7c:00:b7:a6:e2:65:6a:5e:71:dc:
                    19:3b:65:39:f3:99:3b:31:ba:6a:1b:df:58:0b:b8:
                    4f:02:cf:4c:fd:9f:82:0e:ff:7b:15:e6:49:7b:9e:
                    56:cc:98:26:48:c0:a8:44:d3:ed:9a:36:f6:5c:11:
                    9d:5a:92:03:3d:05:8f:0f:17:50:99:89:25:52:2b:
                    73:b5:0c:2f:4b:10:aa:d5:d7:13:d2:04:64:bb:c6:
                    8f:be:61:66:5e:d6:fd:9d:1e:02:35:85:75:9d:77:
                    6c:ac:19:25:f0:d6:8d:b0:27:df:e5:27:79:b1:ae:
                    c4:3d:cd:ef:3e:cc:a8:26:e3:92:29:e7:28:dd:ab:
                    0b:9e:1c:da:f1:23:db:b5:8f:5d:54:e4:0c:f5:71:
                    d6:f9:39:e7:32:59:e2:32:b5:4b:b5:7b:77:b0:57:
                    be:a8:be:94:ac:12:aa:24:73:7d:bf:1a:3f:41:36:
                    96:11:2e:f7:1c:4a:01:88:c0:72:41:e5:d2:a1:0e:
                    01:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AB:F3:43:A3:05:FA:D6:45:B3:FA:88:F7:DF:28:9B:0A:B5:B2:55
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a8:5f:fa:d1:32:24:78:c6:95:94:09:db:48:4b:0f:32:64:
         31:22:af:ef:46:81:5d:ae:0b:38:e0:cf:4a:42:a2:51:79:b1:
         19:6b:2a:7a:88:42:3b:5f:10:4a:6a:50:e0:ba:93:40:fc:dd:
         b1:04:b5:0c:94:07:5f:be:9f:71:3a:aa:95:5a:13:3c:70:4d:
         c4:83:9a:d7:79:5b:83:58:47:28:90:bb:ae:7a:c7:b4:f7:7b:
         e4:45:b0:02:d6:44:df:b6:e0:93:41:df:60:14:d8:c0:51:0e:
         82:b7:f6:bc:42:de:75:54:6b:01:d1:e4:13:2f:0f:bc:69:b9:
         14:db:cc:c7:11:05:0f:a5:17:b7:26:4b:ca:02:5f:e8:2d:79:
         c4:4f:1c:b8:93:a0:ad:c3:34:e7:bc:9f:a1:ff:4e:be:b5:73:
         ea:68:e0:bc:4c:98:34:fc:ae:b8:6b:d9:83:dc:47:e2:0c:ed:
         d1:e9:8d:70:61:fa:69:ae:59:ae:6c:29:31:2b:13:9b:26:6f:
         59:13:f7:eb:9e:97:a9:59:9e:f4:c3:44:28:98:d9:96:68:52:
         52:93:5c:7a:37:d3:ac:a9:4c:19:5f:ec:ff:26:ec:f4:53:ed:
         9f:d2:01:ab:8e:cb:c3:3a:e5:67:2f:91:73:99:10:b4:f1:92:
         ca:d1:fb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:01 2025 by rpki-client