Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
File:                     9EDE64DBC4098881F11B70123DF514D38F7881EE.mft (raw, json)
Hash identifier:          yeBFAb2ZesJv2r+5xJd4HvU0z6VXn/pldquh4QGYPOM=
Subject key identifier:   0D:86:24:FA:42:05:13:26:17:9E:4F:A4:4F:C8:F7:9C:A2:0A:27:91
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       2FC8714372E3E5C1F77F80E486F9E792A6E7EF9F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
Manifest number:          04CF
Signing time:             Tue 06 May 2025 15:12:06 +0000
Manifest this update:     Tue 06 May 2025 15:07:06 +0000
Manifest next update:     Fri 09 May 2025 23:42:06 +0000
Files and hashes:         1: 3230322e37322e3139382e302f32342d3234203d3e203538353532.roa (hash: QUFcuh1cAH8JClqGPwdg/LnLIMi2ZSW43V51jngGkIA=)
                          2: 9EDE64DBC4098881F11B70123DF514D38F7881EE.crl (hash: u+cO/aB2G8McQyPso4nyetCNwjcaewRw+gIKwVd5ZLI=)
                          3: 3230322e37322e3230342e302f32342d3234203d3e203538353532.roa (hash: c1LzwRP8jvbCSrkQN3bZf2LHFiYRAEujqAcqaUwTi/M=)
                          4: 3230322e37322e3230372e302f32342d3234203d3e203538353532.roa (hash: Cc808Lrm8NF6mVavT8ZAe4/yAgDE2y1l1Iy2+05Vees=)
                          5: 3230322e37322e3230362e302f32342d3234203d3e203138313533.roa (hash: NhokA+dkNeyTa0cIuzxjlIODiQueTMP+c1vLStKO2M0=)
                          6: 3230322e37322e3230342e302f32332d3233203d3e203538353532.roa (hash: 84NHgJQYjlJ/pmSiSulvDHOQRv5wUGvBGEJEJ98qS5M=)
                          7: 3230322e37322e3139392e302f32342d3234203d3e203538353532.roa (hash: 0apjzr4EB5B9PS/w/+U6JAnW4cJ/tSr/z/VxAgvm8qA=)
                          8: 3230322e37322e3139342e302f32342d3234203d3e203538353532.roa (hash: xi/DomC6pZOdnD30a0YCtlxPGCgG/p9Ie+K1F4X8eOA=)
                          9: 3230322e37322e3230352e302f32342d3234203d3e203538353532.roa (hash: pox4YzvlrbK6lEx3cIyanwN2eN/9UqsWyjIWSuGfnTU=)
                          10: 3230322e37322e3139322e302f32342d3234203d3e203138313533.roa (hash: fgF07yiTwlq8z0/GIsBiwHeqZ0W/fkpaCFL6OVV/kHY=)
                          11: 3230322e37322e3230322e302f32342d3234203d3e203138313533.roa (hash: qoFoSbEjvotob245ERNaqYAqcBr27SjHGBEF7/cp8Ss=)
                          12: 3230322e37322e3139352e302f32342d3234203d3e203138313533.roa (hash: ZDHJLQjR2EcKfELrR30PqEprpb2M1nxEOVJUfwH1Deo=)
                          13: 3230322e37322e3230332e302f32342d3234203d3e203538353532.roa (hash: 6PJcLqWCmY4PRA0TAwgMqDi6RiuAs923VVMJCRqCPgo=)
                          14: 3230322e37322e3230312e302f32342d3234203d3e203138313533.roa (hash: H8iPsC0j4tEPSrqGkn++qpzDL6XNvlmhQEwazgG7NhI=)
                          15: 3230322e37322e3139362e302f32342d3234203d3e203138313533.roa (hash: dhbQVwIPrzMJZo0Z8qXmW4C8csE4RdguXDDvUzny8YY=)
                          16: 3230322e37322e3139332e302f32342d3234203d3e203138313533.roa (hash: Xutr0YqDtBS7D1LPv3a30bPdwmsO1lSTu8Rx/vp0vu0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 23:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c8:71:43:72:e3:e5:c1:f7:7f:80:e4:86:f9:e7:92:a6:e7:ef:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: May  6 15:07:06 2025 GMT
            Not After : May  9 23:42:06 2025 GMT
        Subject: CN=0D8624FA42051326179E4FA44FC8F79CA20A2791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:69:04:32:f1:d7:13:1f:eb:5b:f9:21:f5:
                    a0:18:5b:9a:81:ad:dc:29:45:3a:3c:c7:85:28:2f:
                    63:9f:99:e5:ba:66:8b:df:f0:54:ca:01:ad:17:4a:
                    cc:d4:45:3b:43:7f:ea:18:ec:5e:dc:90:b8:00:a9:
                    84:e6:0d:92:9e:3e:10:85:a9:6c:bf:5d:72:d8:8d:
                    d1:07:b3:50:e8:b8:64:9f:82:d1:22:be:85:93:7d:
                    7d:e7:86:5e:9f:50:59:56:e8:c6:59:23:78:d4:2f:
                    ee:63:59:ed:8d:91:b2:bb:bd:0f:82:28:22:91:91:
                    d1:38:53:fc:b4:c3:fa:ff:14:ad:39:9a:70:e2:9c:
                    e8:36:f9:fb:21:61:25:0b:8f:4e:67:64:d9:ed:e6:
                    e2:41:e4:90:a1:75:8d:68:41:3a:98:94:63:fe:cc:
                    ee:ea:53:25:18:c9:cd:62:1a:a7:55:23:79:1c:cc:
                    c5:85:b1:0a:bf:28:da:19:d1:1e:37:a5:32:9a:d3:
                    6c:7e:bc:90:4e:ba:5e:ec:12:60:10:dd:02:9a:17:
                    e2:cc:ae:98:60:f5:03:12:33:7b:5a:e2:c6:8d:be:
                    98:ae:69:5d:22:54:86:ae:17:19:45:38:a1:e7:b7:
                    39:6c:35:38:d4:68:a8:44:d4:2d:9e:47:4d:c1:61:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:86:24:FA:42:05:13:26:17:9E:4F:A4:4F:C8:F7:9C:A2:0A:27:91
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b9:0e:78:7e:48:66:f5:fc:e9:13:dc:52:3b:6a:31:f3:2c:
         c0:73:7b:8a:5d:a9:21:e3:ae:1a:76:b6:1b:41:10:79:28:07:
         47:7a:ab:3d:e9:19:ff:ea:61:50:bc:99:8d:b9:d8:00:85:19:
         88:d8:ba:27:e0:19:3b:58:d5:55:8a:cd:d9:f2:1b:7a:f6:05:
         ca:a4:4e:bd:dc:51:e7:c3:b1:8c:cb:71:b4:26:b5:47:05:62:
         76:71:74:f4:09:1a:a7:ae:54:25:09:38:c3:cb:44:fe:71:d7:
         65:8c:fd:d0:ff:a4:53:54:98:5f:20:51:5f:59:59:13:5e:22:
         7c:92:8a:4b:c7:63:4d:ba:81:c1:95:50:e8:c1:18:1d:ac:9c:
         78:a5:1d:46:28:71:9a:c6:f1:51:52:db:07:08:44:ac:09:11:
         f0:0d:a8:0a:1d:93:7d:a9:65:c4:60:07:6d:8f:b1:5f:1a:d1:
         fe:35:55:3d:81:04:90:d4:96:93:a4:ef:3b:ab:45:55:11:b5:
         04:57:37:89:b5:36:c9:08:22:8c:4a:cf:4d:17:0e:78:b8:4f:
         e8:8f:65:04:6e:16:2d:77:7b:ff:fd:6f:08:3e:1c:1c:7b:4b:
         db:d0:16:e9:7a:8a:67:74:7e:6d:21:4b:e9:c2:1d:eb:ca:39:
         5b:7b:16:a3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUL8hxQ3Lj5cH3f4Dkhvnnkqbn758wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4
Rjc4ODFFRTAeFw0yNTA1MDYxNTA3MDZaFw0yNTA1MDkyMzQyMDZaMDMxMTAvBgNV
BAMTKDBEODYyNEZBNDIwNTEzMjYxNzlFNEZBNDRGQzhGNzlDQTIwQTI3OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWGkEMvHXEx/rW/kh9aAYW5qB
rdwpRTo8x4UoL2OfmeW6Zovf8FTKAa0XSszURTtDf+oY7F7ckLgAqYTmDZKePhCF
qWy/XXLYjdEHs1DouGSfgtEivoWTfX3nhl6fUFlW6MZZI3jUL+5jWe2NkbK7vQ+C
KCKRkdE4U/y0w/r/FK05mnDinOg2+fshYSULj05nZNnt5uJB5JChdY1oQTqYlGP+
zO7qUyUYyc1iGqdVI3kczMWFsQq/KNoZ0R43pTKa02x+vJBOul7sEmAQ3QKaF+LM
rphg9QMSM3ta4saNvpiuaV0iVIauFxlFOKHntzlsNTjUaKhE1C2eR03BYUGXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDYYk+kIFEyYXnk+kT8j3nKIKJ5EwHwYDVR0j
BBgwFoAUnt5k28QJiIHxG3ASPfUU0494ge4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
OWFjYjRhOC03ODA0LTQ1MjYtODRkMi04NjliOTFhNjcxOWQvMC85RURFNjREQkM0
MDk4ODgxRjExQjcwMTIzREY1MTREMzhGNzg4MUVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4Rjc4
ODFFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjlhY2I0YTgtNzgwNC00NTI2LTg0
ZDItODY5YjkxYTY3MTlkLzAvOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0
RDM4Rjc4ODFFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJa5Dnh+SGb1/OkT3FI7ajHzLMBze4pdqSHj
rhp2thtBEHkoB0d6qz3pGf/qYVC8mY252ACFGYjYuifgGTtY1VWKzdnyG3r2Bcqk
Tr3cUefDsYzLcbQmtUcFYnZxdPQJGqeuVCUJOMPLRP5x12WM/dD/pFNUmF8gUV9Z
WRNeInySikvHY026gcGVUOjBGB2snHilHUYocZrG8VFS2wcIRKwJEfANqAodk32p
ZcRgB22PsV8a0f41VT2BBJDUlpOk7zurRVURtQRXN4m1NskIIoxKz00XDni4T+iP
ZQRuFi13e//9bwg+HBx7S9vQFul6imd0fm0hS+nCHevKOVt7FqM=
-----END CERTIFICATE-----
Generated at Thu May 8 09:33:25 2025 by rpki-client