Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
File:                     8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json)
Hash identifier:          R8LvfI8+spvv++nJir7XOrfLyuSI2UYyXK8YM1B3GPQ=
Subject key identifier:   EF:E2:70:23:0F:71:CB:28:9D:EF:A8:D0:F8:EB:9A:16:B0:E6:F0:46
Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA
Certificate issuer:       /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA
Certificate serial:       57A4AE0834935029E0F52FECCAC837E336321D3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
Manifest number:          04F0
Signing time:             Fri 27 Jun 2025 22:42:11 +0000
Manifest this update:     Fri 27 Jun 2025 22:37:11 +0000
Manifest next update:     Tue 01 Jul 2025 03:58:11 +0000
Files and hashes:         1: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: lmYVrCn9BeJjLwZ83vYZIK3fLJEIHwntZ3WH1J4i7Cc=)
                          2: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: noWc8fil64c2Tg6Fd8HysZdq+L8pr2YONscqQitoUoI=)
                          3: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: HFx27am61y/dC1xdTadXPgOw5A9a+PEjL0futSZShAU=)
                          4: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: J6znwF/VIOIQq7nf+/cVdXFnP4yNGPdAl3m1qZHQzpE=)
                          5: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: eYJSZ6BNvJdcwOjXxyxNY4HDMCsMbaLoRNn+0CbiAds=)
                          6: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: W5Zb76xYohKVMN4oDjg1HwPWp43mgnWE5orvLBb5SkM=)
                          7: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: Q4FCJx2xdQyXWuG/Mkdlbm+EYQuJWHSMRXEQhaDwxBc=)
                          8: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: IvhePbxETJJ1An12hekeGcMrYJecR0U54GWOfDVzXpo=)
                          9: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: i3HQaU7A5T+hugQmUCoVWplcF5RYtJ+OjDq/WGotyFM=)
                          10: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: HfReQfR8KQgqYxrjCjLONRll8cJTpbYph9s5PnSext8=)
                          11: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: Myo0yUY2zYBlmDu7ifkTtwfEDTywRzZJiBzIgMz4kyk=)
                          12: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: i565en58aZkxitE/Cu7dj7vQtPe24rOc0XFo1zdj2pA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl
                          rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 03:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a4:ae:08:34:93:50:29:e0:f5:2f:ec:ca:c8:37:e3:36:32:1d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA
        Validity
            Not Before: Jun 27 22:37:11 2025 GMT
            Not After : Jul  1 03:58:11 2025 GMT
        Subject: CN=EFE270230F71CB289DEFA8D0F8EB9A16B0E6F046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:ce:62:8a:2f:0e:81:fb:2e:f6:96:65:ae:
                    d7:e8:fb:35:d8:69:a1:1c:5a:c7:4f:9c:93:ea:b4:
                    ce:c2:90:41:52:03:2a:2d:ed:3d:f0:46:b7:fc:e6:
                    4b:71:73:72:86:94:53:84:e4:4d:c5:a4:8d:5b:b3:
                    12:2f:68:63:63:5d:74:02:fb:b8:05:9e:a2:83:6c:
                    0a:58:21:0c:1d:d5:e0:84:a2:a5:93:79:7b:4d:7f:
                    a2:67:00:b0:12:15:93:d8:de:e8:0c:fd:50:bb:1a:
                    02:c2:2b:61:c0:aa:c7:5e:ed:27:e3:13:5f:db:7a:
                    5a:df:65:18:85:cd:cd:d0:15:6d:ff:fe:d0:91:2b:
                    13:27:82:9e:55:db:c4:9d:b5:a8:7f:0e:d1:60:a6:
                    50:7b:3e:e6:6f:f6:e4:00:bf:db:ea:94:f8:39:ab:
                    6a:d7:98:68:98:14:da:8f:ea:ba:31:c4:c5:e9:0f:
                    fe:26:e5:f8:7d:6f:d9:39:5b:0b:8f:61:41:83:d8:
                    d2:55:09:ad:0d:e4:f3:71:af:fd:94:ab:28:b2:cb:
                    ab:4c:0e:2a:d4:cd:dc:f4:f7:d8:83:50:9a:aa:75:
                    be:03:c5:cc:e8:9c:f1:07:9b:c5:ef:c7:f1:65:81:
                    e5:37:fb:6d:67:ee:6c:30:d0:d5:06:d1:f8:35:45:
                    1f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E2:70:23:0F:71:CB:28:9D:EF:A8:D0:F8:EB:9A:16:B0:E6:F0:46
            X509v3 Authority Key Identifier:
                keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:27:76:31:b6:f0:9e:41:32:17:f0:5b:7e:39:79:47:51:86:
         2d:3c:b3:97:0f:10:f1:94:3a:78:a9:cd:f4:91:72:30:21:f2:
         4d:6f:f0:8d:e2:22:05:2d:89:0e:9c:5c:b2:33:6a:53:97:1c:
         9a:eb:9c:c0:9d:d8:36:b1:20:ad:c5:b6:cb:d9:96:e7:90:e3:
         20:71:0e:39:58:fc:55:6a:11:da:2a:d8:73:79:09:f8:9d:5a:
         f8:27:7b:6c:41:8e:4e:fe:25:fa:66:59:cb:64:7a:f1:03:d9:
         ec:60:f0:c3:2a:31:89:7e:f3:cf:c0:37:a0:dc:70:7a:9f:c7:
         b9:5a:46:ed:ab:93:fe:2d:01:5c:bd:20:67:ae:82:85:75:e2:
         c2:82:a5:ed:94:fa:a2:89:ce:96:02:c3:30:e8:c5:6c:5f:e1:
         37:e7:2b:48:79:fd:a4:7c:65:4b:fa:9f:db:ce:cf:1f:eb:57:
         4b:7e:4f:e3:27:9c:56:02:97:86:ba:c3:33:d0:ce:dd:d1:bf:
         9b:38:cd:dd:4f:48:55:f5:43:6f:71:bb:0c:d3:8a:00:ae:10:
         f1:c1:67:41:16:cf:09:56:ba:d3:4c:31:c6:c0:22:e2:db:87:
         7a:c9:64:d7:09:43:20:bd:b9:9f:c0:f6:d7:81:de:c0:3f:b6:
         4f:c9:f4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:10:14 2025 by rpki-client