Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
File:                     C00163880F235714759920507217F2A7D557C953.mft (raw, json)
Hash identifier:          rxMClWRBppvTRdiBsVBxyABWAj7JWLMLEwubMkhnjPo=
Subject key identifier:   CC:90:9E:1F:21:50:D6:C6:08:3D:B5:CE:9F:16:87:6F:B9:D0:11:4C
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       4A9ACE028CE1E9489060F13E64E54AB66B31A0CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
Manifest number:          0494
Signing time:             Thu 21 Nov 2024 02:11:10 +0000
Manifest this update:     Thu 21 Nov 2024 02:06:10 +0000
Manifest next update:     Sun 24 Nov 2024 05:10:10 +0000
Files and hashes:         1: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: 4drbhys0k9nwMVhQ3qP8hx5pwYTiOzSCA3fRbQudv88=)
                          2: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: J59QE5miS7Q09b3DmdG9phLeYWnJ8p568DWwknnw+ZY=)
                          3: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: jLKCSwUB/7+RWWMUUnjb77Vl80z1WI/m0WnLZPBMhZg=)
                          4: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: Ewo+otbU3EuAz7CmopHziGOTbYOmapFScMdrRGG9Lcc=)
                          5: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: bsRtn7HqcpQRX69WpTIALDf59zF0XM0taxugCPsZKAs=)
                          6: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: peoi92UYki92OlMKYXE7q6FGXu3QDKL092I9QxG8hOk=)
                          7: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: prxETRZ+UcJYInSy8kj+pHh+ePpdBSveL40hYMcOpu4=)
                          8: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: vUUnROqus6D3mRY4HQAIFQ7ChbN3n89TAiS9dIrWGT8=)
                          9: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: XsokazWYyrH8hmyykS91vIf9A8hAZD2XExNJhM3r7Sg=)
                          10: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: gu2eLJYOhzvMAWqCTll0Z1vHSzpodGweSdH5sGIIl3o=)
                          11: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: geNiVt084FKZi/IBm+BDpI573wwR9JlWoK+/Mfdplrc=)
                          12: 34332e3235322e3135362e302f32322d3234203d3e203535363636.roa (hash: RejeS3+iaS53ceAS6fuGs26b5emqFusVNb6sZtoMkNY=)
                          13: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: U0I//X86Q/rUbfJXDzRnjdrCyC/j03yKMZXu5NlJOfY=)
                          14: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: X1M4lkdlV+Ji88HiSy4MoehizuXPUPqhQ4nsudueXzM=)
                          15: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: rXJITdSTf7rG1pymvXO1ysNsyoeZtDtUx+nuZFnM6As=)
                          16: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: 7O6Dd1pVn2PAgO/JC+6eZtBKSmbupFrMdDgAwEstd0U=)
                          17: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: P45VtUk4zwe5B2CqcFOfVndx/2WWBVpFQyWVFqoW1Ls=)
                          18: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: lgZeud8tEUP81Q7WuvcLNWvZQI8mDWjY+tlobsPLBAo=)
                          19: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: /N+GbbnL1idqgDjtW6KvcgPSGuY52hOxy4FItcWTp7M=)
                          20: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: vJEkgcLpU3cf/IfScJ12Mu6c2mkTNJRJxXf7tOrvqsU=)
                          21: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: vT7uiKIYhyvmNGLqWyoP+PTV4q1863lGm0ht8O6eyH0=)
                          22: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: /tllqFCqoEKXuRPZgdKgL/0BtCYLYIiONPJsBcFPtJc=)
                          23: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: fv7w6z62outeFY04yktIZFxsP8pQo+LaBilVbns7Fng=)
                          24: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: sJlpSAXpnAOAavNq3mzp6a49Bmd3VaX73BDvee/Ceuc=)
                          25: C00163880F235714759920507217F2A7D557C953.crl (hash: HzIsQCicew2Ug5YmFfQSZFdN1Jpl82ES6jHKmxRZBhU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 05:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9a:ce:02:8c:e1:e9:48:90:60:f1:3e:64:e5:4a:b6:6b:31:a0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Nov 21 02:06:10 2024 GMT
            Not After : Nov 24 05:10:10 2024 GMT
        Subject: CN=CC909E1F2150D6C6083DB5CE9F16876FB9D0114C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9e:c0:49:52:01:57:4e:db:e2:15:6f:a2:d5:
                    a6:bf:08:d7:93:5a:80:51:84:7e:89:ca:da:f1:b1:
                    e5:e1:0c:dc:53:b0:6c:3c:6b:fc:e3:1e:b9:28:36:
                    6d:97:d7:ae:6b:1c:57:87:bb:14:2f:62:22:c7:0e:
                    53:cb:04:e4:7f:70:be:d7:a4:0e:8d:71:67:51:b0:
                    ba:0a:a6:2a:8e:98:f7:a8:3c:92:15:c2:a3:9f:8b:
                    b1:99:38:b1:d6:71:f1:bc:37:6e:6b:6e:a4:45:6d:
                    fe:09:10:e7:3b:c2:f1:92:4f:23:4b:c5:a1:bc:45:
                    ee:aa:97:81:9f:2e:e0:a8:c9:d1:b2:33:2f:4c:63:
                    ab:bf:05:68:67:cd:15:b0:3c:cd:fd:b6:e6:ee:f0:
                    2b:c8:d2:fa:26:9d:bb:0e:7d:86:28:a8:7c:2c:ba:
                    e8:a9:7e:5f:4a:5c:45:10:c9:b7:23:fe:75:9c:e6:
                    0a:1e:e0:09:7d:ee:4c:05:b2:21:77:e8:b2:31:65:
                    fa:2b:4d:70:ea:51:3a:42:11:e5:9f:6a:6d:0f:2e:
                    64:56:3b:a6:92:6f:a1:35:64:86:6d:56:89:9d:e1:
                    a7:a5:32:78:9a:33:a6:6d:d0:65:4e:af:4b:8f:ff:
                    3d:6b:1f:99:b6:85:8c:fd:5b:69:6a:fd:66:ef:13:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:90:9E:1F:21:50:D6:C6:08:3D:B5:CE:9F:16:87:6F:B9:D0:11:4C
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:23:65:5f:87:b1:89:8f:05:7a:94:c0:be:73:e6:fd:e6:ce:
         bb:dc:1a:1d:bc:cf:6d:02:ff:ec:f3:22:fc:01:65:8c:1e:3d:
         c1:81:82:cf:b2:15:bd:cf:48:3c:c8:23:35:db:e9:69:7e:e3:
         1d:9e:86:df:0d:e0:76:d4:3b:5b:fc:c0:3b:d8:3f:e7:a6:41:
         87:12:10:c2:ab:8b:0a:c6:2d:d5:f2:67:4e:cf:f5:0a:d4:dd:
         b0:a4:48:21:68:18:d8:2d:cf:36:ef:bf:c7:d4:5c:78:76:bd:
         40:4e:66:72:e4:0c:1c:da:55:99:8c:a4:32:7b:e5:ed:19:46:
         aa:8b:d9:9a:32:6a:e2:f3:1f:1b:f5:93:72:de:17:ff:a7:65:
         a1:33:d7:ca:ce:8c:00:62:48:eb:fc:6c:bc:c8:9f:cf:4a:d1:
         bf:b6:26:5a:04:da:6d:31:11:df:8e:7e:0f:c8:80:d5:d8:67:
         ae:c8:9d:72:58:c1:d4:6e:65:9c:9f:6f:2b:0d:f6:57:ad:1b:
         af:44:19:e5:ff:58:ee:f0:82:ad:cb:17:49:da:8a:24:80:4a:
         e1:5b:3b:71:c6:ee:ae:97:09:01:49:ce:c6:3d:dd:52:d8:0a:
         d5:0e:5f:d6:5f:94:9c:56:1b:86:d1:8d:39:03:5d:9e:21:40:
         1d:f3:ba:4c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSprOAozh6UiQYPE+ZOVKtmsxoMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdE
NTU3Qzk1MzAeFw0yNDExMjEwMjA2MTBaFw0yNDExMjQwNTEwMTBaMDMxMTAvBgNV
BAMTKENDOTA5RTFGMjE1MEQ2QzYwODNEQjVDRTlGMTY4NzZGQjlEMDExNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvnsBJUgFXTtviFW+i1aa/CNeT
WoBRhH6JytrxseXhDNxTsGw8a/zjHrkoNm2X165rHFeHuxQvYiLHDlPLBOR/cL7X
pA6NcWdRsLoKpiqOmPeoPJIVwqOfi7GZOLHWcfG8N25rbqRFbf4JEOc7wvGSTyNL
xaG8Re6ql4GfLuCoydGyMy9MY6u/BWhnzRWwPM39tubu8CvI0vomnbsOfYYoqHws
uuipfl9KXEUQybcj/nWc5goe4Al97kwFsiF36LIxZforTXDqUTpCEeWfam0PLmRW
O6aSb6E1ZIZtVomd4aelMniaM6Zt0GVOr0uP/z1rH5m2hYz9W2lq/WbvE/65AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUzJCeHyFQ1sYIPbXOnxaHb7nQEUwwHwYDVR0j
BBgwFoAUwAFjiA8jVxR1mSBQchfyp9VXyVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZWE3YTExNS1iOGI4LTQ5MGItODMyMC1jOWU1OWExMDAzZGQvMC9DMDAxNjM4ODBG
MjM1NzE0NzU5OTIwNTA3MjE3RjJBN0Q1NTdDOTUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdENTU3
Qzk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVhN2ExMTUtYjhiOC00OTBiLTgz
MjAtYzllNTlhMTAwM2RkLzAvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0Yy
QTdENTU3Qzk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKojZV+HsYmPBXqUwL5z5v3mzrvcGh28z20C
/+zzIvwBZYwePcGBgs+yFb3PSDzIIzXb6Wl+4x2eht8N4HbUO1v8wDvYP+emQYcS
EMKriwrGLdXyZ07P9QrU3bCkSCFoGNgtzzbvv8fUXHh2vUBOZnLkDBzaVZmMpDJ7
5e0ZRqqL2ZoyauLzHxv1k3LeF/+nZaEz18rOjABiSOv8bLzIn89K0b+2JloE2m0x
Ed+Ofg/IgNXYZ67InXJYwdRuZZyfbysN9letG69EGeX/WO7wgq3LF0naiiSASuFb
O3HG7q6XCQFJzsY93VLYCtUOX9ZflJxWG4bRjTkDXZ4hQB3zukw=
-----END CERTIFICATE-----