Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
File:                     3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft (raw, json)
Hash identifier:          1QJDdHH+USHQOyiBSjKMR/Khtp5+LyzsIRyFTGOlafw=
Subject key identifier:   D0:37:4C:B0:0A:30:9F:3E:E6:10:7B:57:9C:8D:A2:2F:BF:26:C5:77
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Certificate issuer:       /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial:       1F769EC0E492EB8632DEEFDCC0EA0452C6860F50
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
Manifest number:          0202
Signing time:             Thu 05 Jun 2025 00:02:25 +0000
Manifest this update:     Wed 04 Jun 2025 23:57:25 +0000
Manifest next update:     Sun 08 Jun 2025 03:24:25 +0000
Files and hashes:         1: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: YHuUg4uxFrthFFepE05C4PM9gH2UZAw5dOg3ZxdbMHs=)
                          2: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: E7Xvq+98P7calV+Tra/HI6VBncPkJLZ2WfRUwzVpBzQ=)
                          3: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: VDmzAE5nsSn3VcTtdUYB+JjYbBbEx+qEZDLzkKkFw30=)
                          4: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl (hash: seFeZcAnAZ/ljXhFjuvbdBH0IRPEqWAhSGndSr8rOKc=)
                          5: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: 74adhrSbVzuFjVRQo3T/YKEFIp0ssVu9vw6ZXWstTjg=)
                          6: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: fmU/gB/7itVGB2sFtyfrKlK+5/0j2F7s2JNU9ipGEtI=)
                          7: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: tqVbqJyQTApYbizYu59I5NZoSysKTPKf9ZllM4I7v64=)
                          8: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: OXb58XdJvFeTkl1pb8qqXtG1NjsRZSztJ+uUatv4+8w=)
                          9: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: gQMVqNF5pbofU8fWwfLf24IOx5Rve68FRF/gYFgAFMM=)
                          10: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: lQ+fQzdjr0S1DLs1lSSCMj5N6c3fuO+jsggHmQtAADw=)
                          11: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: FzI5GbnAo75yoelWpGp51ySqxG4wQ2wlQL4r6iiASgc=)
                          12: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: aZ1nkOt0ZwL5bWsxMWDTHMMRjscg2q9LS9hs3Z383Ew=)
                          13: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: iGn1V/gq7zu3cpw0mI8Bqv3oMJsgKj/I69u4ba5O7zE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
                          rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 03:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:76:9e:c0:e4:92:eb:86:32:de:ef:dc:c0:ea:04:52:c6:86:0f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
        Validity
            Not Before: Jun  4 23:57:25 2025 GMT
            Not After : Jun  8 03:24:25 2025 GMT
        Subject: CN=D0374CB00A309F3EE6107B579C8DA22FBF26C577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:55:90:3c:96:5d:3d:02:cf:8a:a4:fe:93:cd:
                    17:4f:c8:b7:d2:38:b8:f3:7c:7e:43:3b:2b:96:b5:
                    a8:71:c2:dc:9e:66:c7:0b:45:03:bf:90:42:7b:d8:
                    ce:b6:0e:09:b3:ae:c6:33:cc:93:b3:2c:b7:e0:66:
                    7a:22:bf:83:47:9b:32:fa:49:c6:38:03:05:bd:27:
                    a9:0b:0f:df:8d:2b:c3:41:e4:a9:cc:00:ef:a1:23:
                    ed:2e:68:87:45:36:12:46:7a:aa:b0:15:ce:ba:b4:
                    24:f7:aa:5f:2c:7a:0f:81:2e:cc:e1:d9:ba:41:5a:
                    c6:19:f5:6e:d8:51:c3:6f:58:fa:eb:20:b9:ae:62:
                    31:a0:10:88:92:55:7a:c7:8d:67:cf:88:9a:01:bd:
                    fb:9e:6c:55:38:05:5a:95:54:b7:8b:38:05:43:0f:
                    00:8d:09:fc:11:82:f3:33:7e:ab:15:31:d5:3f:72:
                    e1:dd:a4:00:96:f5:bd:b6:73:6d:59:a0:8b:1d:7e:
                    d6:97:98:07:e8:cd:64:f6:08:2a:e1:4b:69:af:d0:
                    b1:3b:e2:d8:8e:ac:4b:7c:f9:7a:fc:ff:d8:f8:f8:
                    e9:64:9c:bc:bd:e0:96:e5:b8:e3:b6:e1:97:22:fd:
                    c2:ce:8d:24:2f:71:a7:a1:f9:b0:e4:f4:1b:f4:e6:
                    53:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:37:4C:B0:0A:30:9F:3E:E6:10:7B:57:9C:8D:A2:2F:BF:26:C5:77
            X509v3 Authority Key Identifier:
                keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:84:0e:f3:7f:75:7d:c6:bd:5e:41:d4:31:1a:8c:39:2f:3d:
         37:1a:28:db:7d:a5:58:12:7f:24:0d:da:10:9a:8e:ee:48:ac:
         5b:aa:c4:32:35:f6:42:4e:b0:e2:2a:18:7d:4c:9e:6c:bf:91:
         56:ac:50:5f:92:21:93:1d:b3:2a:a6:a1:6a:1d:00:b0:f5:bb:
         5a:43:8f:8b:96:8c:d5:3a:34:19:0f:0b:1f:03:21:a1:0f:1f:
         08:8e:88:34:71:27:3f:65:9d:40:f3:da:4b:17:4f:f7:36:bb:
         6a:4e:3a:db:00:47:ce:5b:34:5b:4a:57:8a:da:a0:1a:13:7b:
         be:e3:24:31:86:d2:65:b7:76:4e:8a:ed:94:e6:7d:ff:3f:3d:
         a6:6b:94:a5:93:6b:4c:cb:70:9e:96:d1:9f:0e:89:a2:fe:79:
         f8:0e:5d:87:94:c9:9c:ae:da:b0:22:e6:a2:a0:6e:4e:6a:fa:
         93:47:1c:e5:6b:1b:e9:d5:1a:32:59:92:a3:0b:70:50:e2:54:
         31:ee:a8:b9:55:7b:a3:d8:e3:fc:8e:da:58:1e:d4:ba:c3:b4:
         73:06:2b:a1:8d:8c:e6:74:86:72:f9:09:30:73:98:3d:c4:7c:
         19:6b:e4:2f:96:b3:42:98:54:cb:70:68:27:17:2b:86:52:12:
         63:8f:00:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:28:57 2025 by rpki-client