Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
File:                     8469874AE268E2CD4E9A137EDD5599C748530E9E.mft (raw, json)
Hash identifier:          d+C/n7Kuf2eRmfeVBoI+6YsUbPV7wE9RTqRvCqz2Wfw=
Subject key identifier:   DE:C9:FB:22:27:2A:62:4D:97:D7:9F:3F:44:DC:F8:7F:51:22:AB:76
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Certificate issuer:       /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial:       2D6D0869D8222037E7E345E57DE92794FC4AF703
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
Manifest number:          04EC
Signing time:             Thu 08 May 2025 20:42:06 +0000
Manifest this update:     Thu 08 May 2025 20:37:06 +0000
Manifest next update:     Sun 11 May 2025 22:07:06 +0000
Files and hashes:         1: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: 6BZFe33/a07P77heVgE/RRa/s7Eo4pTfBbM0ftWFlFs=)
                          2: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: t5dSILf0M9LETh0ONTCtPeHbE5Gq+eulQJzX449lTa8=)
                          3: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: w3mgpqsf+QCQ0IESSJ7u/cpRjR0jksdX+ZR9wNYh8rI=)
                          4: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: zqqM4+D0YvV3kzADDLg9UoTtA+fv3LSZ59niExdp6h4=)
                          5: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: LN+YrVCzUblkTbFghEN9RcfZWB+oIkio+9woygN18Nk=)
                          6: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: lejxupJB/ypozilIjk9IOKEOtlHup4PnPlCfI+BqLVI=)
                          7: 8469874AE268E2CD4E9A137EDD5599C748530E9E.crl (hash: c2HrdPOyQqT/wBQSyECXm/ps0WE7B8ChFfLidb5IVe0=)
                          8: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: 1wEjJgzGmGFQx1qLaHwF1vXvoQd7g22cQT5tuVMpCSs=)
                          9: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: 8kcmZ4RG24jB44cBv71IJKv0c+Dtp9Ygk9nrjPzZQxo=)
                          10: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: 0on0Zr09JZO2uwExsn4al/aKrzhro4Rbk1hM7yfdFaI=)
                          11: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: nBHgJ9scpxnDLh4WsmH3WPakx6Rx02RsuPBuZbUxKAs=)
                          12: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: q6gnQ689gbyPRWkFyTqwu7clrVFZi6YA0qntQoU052Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
                          rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 22:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6d:08:69:d8:22:20:37:e7:e3:45:e5:7d:e9:27:94:fc:4a:f7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
        Validity
            Not Before: May  8 20:37:06 2025 GMT
            Not After : May 11 22:07:06 2025 GMT
        Subject: CN=DEC9FB22272A624D97D79F3F44DCF87F5122AB76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:d4:01:82:b2:95:f3:22:fd:df:18:47:86:
                    99:b8:4e:2f:5f:2b:89:a5:7c:ae:00:f4:dc:43:e5:
                    a0:79:b5:2c:51:45:71:62:a5:5a:03:da:3b:82:bc:
                    9f:1a:43:7d:b7:9f:c3:fc:15:58:e7:97:12:9a:d4:
                    4e:26:03:24:e8:66:69:15:e8:a6:09:bf:cc:47:51:
                    12:b7:e9:5c:4d:43:7e:70:81:64:47:cc:4e:2a:41:
                    64:6d:88:8b:4a:26:15:09:e3:eb:36:cc:bf:25:25:
                    06:a3:2a:2b:d8:e4:7a:fe:2a:ae:3b:ef:5e:be:cf:
                    ef:b0:fb:a6:b9:b2:a1:2a:b6:b2:56:a7:47:8b:ec:
                    0a:83:09:1e:6b:9d:7e:8e:d4:13:74:6a:f2:8c:a4:
                    9a:ae:4c:5c:e9:3b:84:c2:ed:45:e5:62:cb:6b:9c:
                    78:36:f0:72:c4:b5:21:c2:eb:7e:60:fa:07:57:ab:
                    78:bd:26:12:92:7b:8a:b7:d9:e1:7c:de:09:1a:8f:
                    a5:fc:39:c1:d6:56:10:5e:42:ff:99:31:61:2e:b4:
                    9d:a4:72:79:7b:d8:f5:7b:33:f1:de:94:d1:fc:73:
                    9b:0a:d6:2e:ee:29:0b:e8:25:a7:20:ec:21:1c:ee:
                    53:cd:86:ae:f8:c4:8a:3a:47:5c:3e:a7:1f:7b:3f:
                    1a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C9:FB:22:27:2A:62:4D:97:D7:9F:3F:44:DC:F8:7F:51:22:AB:76
            X509v3 Authority Key Identifier:
                keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:57:ce:ea:d5:0c:15:c3:55:8d:04:e2:47:c8:49:89:e4:2f:
         65:cf:a6:67:5e:61:63:21:e9:41:7e:9f:08:10:a3:cf:42:87:
         1e:d9:5c:40:a6:d4:5d:15:13:98:ff:06:ed:4b:64:ef:92:49:
         1e:9b:84:d5:0b:6d:f5:ce:82:5c:02:7e:ca:69:d6:79:63:f1:
         46:d6:21:e6:dc:cd:f5:e0:82:2d:f1:6c:a9:c0:b7:73:d4:57:
         69:ed:72:87:80:b9:e8:07:cd:fb:2f:24:6d:b0:ae:79:09:9d:
         74:9e:06:f2:1b:c1:7c:c5:12:9e:a6:61:89:6b:24:a6:82:e1:
         be:be:84:fa:52:3f:a9:fb:ed:a5:ce:e4:43:e0:39:c6:da:b4:
         73:45:f6:49:f7:2b:ae:8f:60:81:0a:28:b8:45:fb:ac:a1:8c:
         fb:93:27:aa:93:47:89:60:68:ec:09:2b:a7:76:f4:7f:9d:4d:
         ab:88:ed:53:f8:b1:8b:68:87:ab:a8:b4:b3:e1:71:0e:27:83:
         a8:46:80:84:04:d6:b0:a6:b2:fe:ac:ba:8f:62:94:80:3b:eb:
         37:80:89:ce:c4:32:b5:7e:4d:cd:5b:59:54:6f:b3:d8:48:c3:
         1d:8a:e0:60:3b:3a:b6:d9:82:89:c3:e1:12:67:2d:c9:6b:4e:
         40:91:c1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:01:19 2025 by rpki-client