Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
File:                     B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft (raw, json)
Hash identifier:          dDh/BEYmPpZvp+NwbfnScAq9bpTJU8ZS/reCaWaqNOY=
Subject key identifier:   25:6B:4B:CE:CE:C7:FD:E0:1C:A7:E0:68:56:C4:34:E7:81:E1:7F:39
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       1037B82B0E580ED1D50F84C7D15F514AF35624E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
Manifest number:          04A0
Signing time:             Thu 08 May 2025 08:22:08 +0000
Manifest this update:     Thu 08 May 2025 08:17:08 +0000
Manifest next update:     Sun 11 May 2025 10:59:08 +0000
Files and hashes:         1: 3230322e31302e34302e302f32332d3233203d3e203538343837.roa (hash: KRNsmf6Crvwx9TUrNXsXyW3TnUFJBor63ScxTykY0Ys=)
                          2: 3230322e31302e33342e302f32342d3234203d3e203538343837.roa (hash: 2wiLBKpeDsUZcWKGP0ZGy0ZfZGGfaiwLub24AoxujkE=)
                          3: 3230322e31302e34362e302f32332d3234203d3e203538343837.roa (hash: cIiVH55gZhKhd09SRv36IxJOQWAEZ8Rp7D3EJnyu0U8=)
                          4: 3230322e31302e34302e302f32342d3234203d3e203538343837.roa (hash: +dYOck0/e3uRLuDueS6QvOeH0VjscDt7f1hJdpKhdVo=)
                          5: 3230322e31302e33352e302f32342d3234203d3e203538343837.roa (hash: vmk5hunDESN8vOvL6W88fmk4goDHn/1O8OmmUKbXwCI=)
                          6: 3230322e31302e34352e302f32342d3234203d3e203538343837.roa (hash: hnTOURzzaJFePxETwo6KOPuWh1c2mWrXiDyNegk+2Rk=)
                          7: 3230322e31302e33392e302f32342d3234203d3e203538343837.roa (hash: gDkskVvw7MvfzXAkNJQhKr4mNe9WkDi5pRYjDti0U54=)
                          8: B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl (hash: j8wWij2anQOZBK4Yp+t23DeEhIHbovWcRkHt5bIkQV4=)
                          9: 3130332e3235332e3231322e302f32342d3234203d3e203538343837.roa (hash: LfLeLwmqbwIkdEDU9U48eQJPk8ImKB/XqlPEOEL8JqE=)
                          10: 3230322e31302e34332e302f32342d3234203d3e203538343837.roa (hash: IPymeFIY4vvBiI4EHDBGEvCTCNOLIzPbdabJg4HBCFk=)
                          11: 323030313a6466313a373830303a3a2f34382d3438203d3e203538343837.roa (hash: QoCbDV1iEX5pO+bibNTu+PL6YjhwlVtwchcxFD62gLg=)
                          12: 3230322e31302e33362e302f32342d3234203d3e203538343837.roa (hash: efs981ogro8h93ghsSqXa4HVYpXNDK+HWci+XUB1i1s=)
                          13: 3130332e3235332e3231352e302f32342d3234203d3e203538343837.roa (hash: uw2rUyDAuur+H0kWMyfo+StxjquIulxfj16YL5BSCig=)
                          14: 3230322e31302e33382e302f32332d3233203d3e203538343837.roa (hash: QPLTqMl2k8GDfaLn1HVTOtXELs6osZwBMiSvIHtsFL8=)
                          15: 3230322e31302e34322e302f32342d3234203d3e203538343837.roa (hash: WdjaanpjvJkV7F66b1RsY5nlVdX7/6/1Vce41UTVhQk=)
                          16: 3130332e3235332e3231342e302f32332d3233203d3e203538343837.roa (hash: OPDRtC0YANq9aPbjw+CR97g9TL7AgzyFDEfEg4LIzko=)
                          17: 3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa (hash: VMNDp3Q2brC3XAq98nR7SUn0JBQnPNYJkRtff0QZOr8=)
                          18: 3230322e31302e34322e302f32332d3233203d3e203538343837.roa (hash: G6aGpW+GX/2AEtcToBRQOMbcRoVxB07Zl/GCfKmQbno=)
                          19: 3230322e31302e34342e302f32332d3233203d3e203538343837.roa (hash: AOs0+RY4Y31s73wRP1Vy1UwZxz7AgTJ0z0r1p3VykqY=)
                          20: 3230322e31302e33382e302f32342d3234203d3e203538343837.roa (hash: i2cfHNp7ELXHkG32amjDVO13rtFH9PXQxmlERj1fotw=)
                          21: 3230322e31302e34362e302f32342d3234203d3e203538343837.roa (hash: Dk232DynCkmrZBXmUPs/XaQ3rhJnt/TRi48HRxBA1w8=)
                          22: 3230322e31302e34342e302f32342d3234203d3e203538343837.roa (hash: 9/w5ckdQgwQDW73FdKzObo7UiCVTcJeMlBHUt5JeTjI=)
                          23: 3230322e31302e34312e302f32342d3234203d3e203538343837.roa (hash: XDX9+SvZbYtzcNBqIUpGuVyJOYI0R883wJ6tAP6KXYE=)
                          24: 3230322e31302e33342e302f32332d3233203d3e203538343837.roa (hash: hurkyeazXrOEmUWCJ42qCT3bjAG0s//7GloH0oAN8wE=)
                          25: 3230322e31302e33362e302f32332d3233203d3e203538343837.roa (hash: laV47cYc2Y+YU5ngUHDLm0eIPkxpjWT8ScmhZj5qM0I=)
                          26: 3130332e3235332e3231332e302f32342d3234203d3e203538343837.roa (hash: nXd+T08BzwUBsTCm772rTt3T7OGX+ISh5lyg0yjVkpU=)
                          27: 3230322e31302e34372e302f32342d3234203d3e203538343837.roa (hash: u58aVcSaGI4G1j8KcCBgXQjLG6jts8lqMjNzR3uAE1k=)
                          28: 3130332e3235332e3231322e302f32332d3233203d3e203538343837.roa (hash: Q/vj8e8aAkRGeQkUCDDQE56ayYlvn1SjQG2hHxKRj0A=)
                          29: 3230322e31302e33372e302f32342d3234203d3e203538343837.roa (hash: Gd+XobvX/fy/Mh2XkDqNxhWNk3QnX1w7MS4RWmVMXCk=)
                          30: 3130332e3235332e3231342e302f32342d3234203d3e203538343837.roa (hash: zZakuOmqTaPYvlnDGqieXdb5+PUOtUVcUy3BMfF3gIo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 10:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:37:b8:2b:0e:58:0e:d1:d5:0f:84:c7:d1:5f:51:4a:f3:56:24:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: May  8 08:17:08 2025 GMT
            Not After : May 11 10:59:08 2025 GMT
        Subject: CN=256B4BCECEC7FDE01CA7E06856C434E781E17F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1f:36:69:9c:c6:58:5f:dd:4d:5b:f5:1a:95:
                    d7:88:a1:d4:78:c1:84:80:92:29:48:bd:6a:d7:55:
                    46:d5:4a:08:bb:ef:4e:2c:c9:e2:75:79:8c:de:db:
                    9c:63:b2:fc:16:fb:1c:cf:ec:3d:cd:fc:08:ed:90:
                    fb:07:b7:e1:e4:0d:76:80:bf:da:a0:e7:a1:f8:67:
                    9e:66:df:4c:11:10:d5:b3:cc:02:4b:94:b7:b7:25:
                    e8:c9:86:f2:40:34:81:c2:d7:e3:31:fa:ec:7c:56:
                    37:93:5a:25:62:e9:02:d1:5e:1a:6b:a3:db:5d:4d:
                    03:89:a4:0c:90:86:82:c7:70:80:4c:1c:43:20:73:
                    c4:7f:1e:bb:b4:28:8f:6a:7e:c4:53:60:28:e4:a8:
                    b8:b0:d8:ac:cc:ef:9b:43:ca:25:8e:54:db:89:09:
                    39:d6:8b:a8:41:cf:6b:e9:1f:cf:f3:18:90:03:06:
                    b2:39:d4:75:1f:ff:ed:20:14:87:2a:91:40:ec:f2:
                    53:45:a9:81:82:1d:eb:0b:f8:f4:42:ae:77:17:5f:
                    d5:6a:a0:4c:3b:66:5d:66:e5:74:8a:cb:10:8f:63:
                    2c:92:5e:f0:61:5b:39:d4:74:3f:59:5d:e1:9d:28:
                    4c:af:d4:24:79:7d:09:34:f9:46:27:9e:26:2f:d8:
                    eb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6B:4B:CE:CE:C7:FD:E0:1C:A7:E0:68:56:C4:34:E7:81:E1:7F:39
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7c:4d:e3:3c:f2:60:fc:f1:5e:b7:9a:ff:90:f2:ac:53:5b:
         cc:68:20:d4:d1:9f:db:b2:0d:f2:5a:69:8d:61:50:9d:21:f2:
         3c:dd:fa:01:73:56:4e:14:ec:ff:d6:08:1f:8e:c4:28:dd:fc:
         6d:e3:9a:54:4b:0e:f9:e8:52:90:29:8d:41:54:3d:e9:46:e0:
         41:40:f6:0b:7b:42:71:ca:d2:f9:24:5c:bb:1a:07:f3:56:45:
         86:08:81:ef:81:69:5c:2a:21:f0:41:48:e8:cb:52:7d:15:a4:
         07:a8:e3:86:c7:f2:cf:10:59:e7:e6:dc:72:cf:3e:6f:b9:72:
         73:42:ea:ea:dc:b9:50:15:ee:85:6f:67:86:b8:30:ea:59:f1:
         b4:43:eb:5d:a8:8e:dd:fd:f7:f5:54:0d:12:3b:9a:32:41:8a:
         06:ea:7a:a8:0d:6a:e3:4d:2c:3d:f9:6f:a3:6b:08:dc:84:ef:
         ee:bb:24:29:cb:db:aa:89:45:20:2c:70:1c:4f:48:c0:64:17:
         13:33:bd:67:47:70:9d:a2:b5:86:d4:f6:1d:88:bb:5c:f6:1e:
         34:2a:41:f7:30:eb:87:fd:93:24:c0:67:a5:00:a1:5b:05:4a:
         9e:c2:d7:19:46:c8:17:fc:6a:47:0e:2c:92:d9:4a:13:ce:d9:
         c5:96:3d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:08:26 2025 by rpki-client