Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
File:                     9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft (raw, json)
Hash identifier:          yhrTPVIO+EmzrFMv71qPIMTxXFXVf1y0Oi3Kk4EI1Pg=
Subject key identifier:   E7:51:D7:5F:84:8E:5B:D4:0B:42:0B:84:67:E6:B6:5A:3E:C7:36:FE
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       29F7C93DBC0027F6C8462168BF248FD4CF557BDF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
Manifest number:          04CE
Signing time:             Sun 11 May 2025 08:41:41 +0000
Manifest this update:     Sun 11 May 2025 08:36:41 +0000
Manifest next update:     Wed 14 May 2025 12:15:41 +0000
Files and hashes:         1: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: Ljte3plUxakf1AvmLvyn5ZBd+3DR/9Jpvk/gL8v2UXA=)
                          2: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: RTIwq7shR7bXdamWXaTuuLysxlJ3zoLqtpVO/z6TjXA=)
                          3: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: ZwR9FjboZAZDVU/wKbYd21qYjHtnOrshCk3dUigmn3Y=)
                          4: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: EK6IOQrf2rr4CozcXpyHn0lnKDzMTXzhLY1ojyQBefA=)
                          5: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: p56aDnFiB/sHhi4D9oPCP6BupyFFvyZDIPu2wfqqfRI=)
                          6: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl (hash: jfqog4slaFtzPhwyuOZ1HgyvniIgxQ4j7VR6BnaClcY=)
                          7: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: DPT2KnFo+j/wGnEOe0FeHMRN87ddzlG5/+viaBnBaYY=)
                          8: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: 5lHQNRH9ZyHtRlqVq3mhv2CF0AIKUXgULtiM3hQL6BM=)
                          9: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: qkSNUdJkDxdqKObXFqJ7YGM+qaLs/AFZbanOaV69gsQ=)
                          10: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: J9LMzNjTfq8117LmMgk4XK1mYRtXVZzkGAU9iFEulaM=)
                          11: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: f3iCk3LjLjEMoJPF3LFNtbgYp3UzsumaaaJ0MXf+xdI=)
                          12: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: ZDywncesSAjMu6O/tvcMI1s4FDR1nuIEwpOi5m0PtTE=)
                          13: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: 4fgr8pnAQyhzmUnk9mguo5zm84SrVO1dIjnC4wxY3dM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 May 2025 12:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f7:c9:3d:bc:00:27:f6:c8:46:21:68:bf:24:8f:d4:cf:55:7b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: May 11 08:36:41 2025 GMT
            Not After : May 14 12:15:41 2025 GMT
        Subject: CN=E751D75F848E5BD40B420B8467E6B65A3EC736FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:cb:6a:b4:b4:ee:67:01:a3:4f:33:36:ad:
                    38:42:2e:d0:82:fb:98:e3:ee:a6:26:25:ca:ca:56:
                    5a:c0:19:ee:9c:15:ed:32:ac:0c:7c:bc:1a:ce:18:
                    bb:9a:09:b2:10:28:b3:19:86:e0:6f:1d:7b:dd:d9:
                    74:5f:c2:dd:9f:ad:8c:8b:7b:42:42:25:b3:77:43:
                    47:49:22:17:b9:87:73:88:6e:d1:86:12:f6:02:6a:
                    9f:2a:68:ef:14:59:a0:9f:3c:0b:fb:75:00:4c:ed:
                    33:80:7d:cb:5f:45:48:e7:d2:43:ff:c8:9a:3f:49:
                    b0:da:35:d9:47:15:47:6f:1f:c8:1e:17:e0:ab:28:
                    4f:e3:ca:bb:0a:b6:bb:61:ba:6c:61:dc:54:ca:da:
                    35:a7:3c:27:d4:e5:6f:f1:3c:8c:64:23:32:b0:fe:
                    f2:c4:90:f7:78:65:17:d0:f2:d5:c7:1d:51:c1:53:
                    9b:9d:b3:2d:da:f1:99:02:65:98:f4:90:0d:c9:42:
                    67:39:54:af:0d:de:43:0a:17:cc:c2:87:61:4c:ae:
                    06:7d:b5:be:d3:29:c3:71:cb:fe:14:aa:69:f1:c4:
                    d6:6a:b3:dd:da:08:de:39:e8:4b:35:c6:8e:21:30:
                    67:2d:83:c9:6b:2f:de:1c:d5:3d:58:a3:d8:8b:98:
                    d6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:51:D7:5F:84:8E:5B:D4:0B:42:0B:84:67:E6:B6:5A:3E:C7:36:FE
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:86:62:be:e5:8d:a8:51:4c:41:60:de:d6:36:63:24:b6:b2:
         cc:e9:c1:e5:58:77:29:7a:d1:b3:2a:5d:49:ac:91:04:93:16:
         08:de:39:f9:8c:32:ab:5b:0b:95:0a:e8:1a:e2:06:17:42:11:
         8c:3b:4c:88:62:5d:65:da:61:35:8e:ed:45:ce:8d:c9:47:6c:
         f7:6e:d1:69:a4:fc:94:f9:cd:9d:62:68:a1:92:49:51:36:b8:
         9a:9e:51:2b:46:f3:b8:ba:bd:fc:62:60:83:da:26:cb:bf:9a:
         0c:77:17:6c:a1:41:0a:a1:0d:ab:57:60:35:dd:2e:3e:86:ed:
         03:e8:47:33:ab:3c:c1:63:56:fd:6d:3d:fc:d7:15:0c:86:b8:
         12:99:c8:8b:19:56:87:c3:65:95:36:cb:82:34:9a:c4:3c:fb:
         a3:4d:4f:7e:d2:a8:ed:c9:20:95:63:0b:d0:3d:b1:c9:29:da:
         da:42:2d:3f:df:02:5f:d1:0a:97:a0:da:f1:bf:7f:a2:23:0d:
         b2:c2:a2:66:bf:d2:d4:6a:57:28:b0:06:00:66:5e:ff:cf:91:
         bf:74:e7:85:c6:83:e3:f8:13:f1:31:9e:06:9a:c8:8d:60:92:
         2d:c5:a0:ae:d0:c6:bc:d8:ff:ab:39:9c:07:2c:3e:93:ae:1e:
         07:19:05:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:59:35 2025 by rpki-client