Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
File:                     935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft (raw, json)
Hash identifier:          6vx5gP+OpyJ3ajZRZJaPDIGdRXvrfvbU1zPgY0R/fb8=
Subject key identifier:   14:1B:59:DE:2C:B8:F0:B7:FF:6F:C3:71:3B:AB:B9:31:9A:AA:88:AF
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       088927FA67BAA8EB860DF7B68A116EB07A91635A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
Manifest number:          04DF
Signing time:             Tue 06 May 2025 05:02:51 +0000
Manifest this update:     Tue 06 May 2025 04:57:51 +0000
Manifest next update:     Fri 09 May 2025 16:44:51 +0000
Files and hashes:         1: 3131372e37342e3132362e302f32342d3234203d3e203338353135.roa (hash: EEaEZh5b8qX6GK9UvSPlgYe2sVCD2bNdjCbgrn86OIw=)
                          2: 3131372e37342e3132302e302f32312d3231203d3e203338353135.roa (hash: gW10ROgt09o0IM/FgnaUDfTJF5ydZooB3pXvlmYpehM=)
                          3: 3131372e37342e3132302e302f32342d3234203d3e203338353135.roa (hash: 1DsSg30Xy7wVzu/nL8H8hRAnWhIsBpUqum19dGO3/mk=)
                          4: 3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa (hash: r8ZqBwcrGdH8TEuK29OivEcKhqjzvIMTsJVTlTtuCYA=)
                          5: 323430323a3630303a313a3a2f34382d3438203d3e203338353135.roa (hash: uXjjFF8r0bZTRb9FAMyxiQMT6f66pjylh6TLVp8RaRI=)
                          6: 3131372e37342e3132312e302f32342d3234203d3e203338353135.roa (hash: U+DhKaCX+eMWoG0BK1JUCp92Kg/SlFMW4W18iDWDPk8=)
                          7: 323430323a3630303a643a3a2f34382d3438203d3e203338353135.roa (hash: jfQj9Xe+FFUAvRMk0Cart8oc9Moe7xONTWgrujdxqvw=)
                          8: 3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa (hash: BpLGzUp7Xs7lG8N9IL3uXt34bHOuJAyWCtEer8epdos=)
                          9: 3131372e37342e3132342e302f32322d3232203d3e203338353135.roa (hash: OqpoVOVJpUhsB4C42PcVh81+Ms4dKWfSDdEhcsKwE60=)
                          10: 323430323a3630303a62313a3a2f34382d3438203d3e203338353135.roa (hash: YPCHB9+pVaURl8+dAGmuKHWAAYIp9zXHQ5RNjAvQlWA=)
                          11: 3131372e37342e3132342e302f32342d3234203d3e203338353135.roa (hash: f1JmznDZXZsYmE+EOn6/ixZplBrsI4tfJgjAi4Te3YM=)
                          12: 3131372e37342e3132302e302f32322d3232203d3e203338353135.roa (hash: CdtTtCGcqTSKprBM/SSCJUpSOUzh3lZ3WFYK1XycLjs=)
                          13: 935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl (hash: 45eOoBnjpElGZJWbd4ED+ua6XPplhfHmA04d8WBAESM=)
                          14: 323430323a3630303a313030303a3a2f34382d3438203d3e203338353135.roa (hash: 7dk3+UbgX607IlNTst1WKsK+D+Kfaq5vP3vfslx3Dv8=)
                          15: 323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa (hash: lmN8CKwnpjABLBKuKVDCz9e5H4GmlgOLsUei3+Y0saA=)
                          16: 323430323a3630303a633162313a3a2f34382d3438203d3e203338353135.roa (hash: hBCdf6MQ44EMODLH0goT5EgLIomwJ27fDjdA8l3goK8=)
                          17: 323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa (hash: vdW3QTcBsIPY6dF/jSl1kcP+cWlLsmSjo55p09Ujwos=)
                          18: 3130332e3130372e3234382e302f32322d3232203d3e203338353135.roa (hash: spz6qG1bxXEvqZGHND0wn8N5S0VzxSUNZ62Ev/Uf0x0=)
                          19: 3131372e37342e3132322e302f32342d3234203d3e203338353135.roa (hash: 3SF0bAW+7rz1kqWvQ04ZAo3EXSDUW7WAvx83Y52xCYs=)
                          20: 323430323a3630303a633a3a2f34382d3438203d3e203338353135.roa (hash: MHLvNBBDeKLXnh9zpHXyspbjmbbkMSXMU/LUFMRRAKk=)
                          21: 323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa (hash: lR+WSBiL7cOFUb1JcRW+5/d+PDThjLOWPJrqzwsQquY=)
                          22: 3131372e37342e3132352e302f32342d3234203d3e203338353135.roa (hash: E3Ix9LCh0uoZASJHsryr0UOCFO0Y4eUcpygMjbixTxY=)
                          23: 3131372e37342e3132332e302f32342d3234203d3e203338353135.roa (hash: DlYUP/F+RIK8nZbMYNKyJFx66/fMZlATHS8Y5cVRmHA=)
                          24: 323430323a3630303a3a2f33322d3438203d3e203338353135.roa (hash: ff8501ZPkr7KlYGUXPEp2Ubjto55pXXgmuYMIxAXR0I=)
                          25: 3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa (hash: N2GLQMMA/qT2QiLPtJRjOfYhs4Npr6h5DA+qLf5C1dI=)
                          26: 3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa (hash: BjsgdP0bBBN6UnRaespbf8YwMMjiGp/LVHsWqYC0AnA=)
                          27: 3131372e37342e3132372e302f32342d3234203d3e203338353135.roa (hash: /vW/TSbog9WsObuCC1lgKjgijK+Dod2mciJtHHUezKU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 16:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:89:27:fa:67:ba:a8:eb:86:0d:f7:b6:8a:11:6e:b0:7a:91:63:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: May  6 04:57:51 2025 GMT
            Not After : May  9 16:44:51 2025 GMT
        Subject: CN=141B59DE2CB8F0B7FF6FC3713BABB9319AAA88AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:38:54:9c:4e:1a:ee:4d:ff:9d:49:c7:ce:
                    e3:a2:63:42:f9:3e:27:30:04:96:5e:ed:0a:d6:c5:
                    12:a8:5d:ef:e9:43:9e:81:f4:9b:4e:c6:5f:42:9b:
                    31:95:5e:97:71:fa:72:00:31:9a:f1:9e:29:21:24:
                    57:f4:c6:1f:8f:99:30:1d:77:ea:25:1d:c5:96:09:
                    88:ed:b0:37:e0:12:97:db:36:3f:5b:99:09:06:24:
                    7d:22:2d:90:05:d8:05:68:3d:44:53:23:17:f3:e0:
                    f6:d5:c2:70:b4:99:57:6b:e3:85:d9:0d:9d:54:6b:
                    ae:bd:2b:45:58:c6:58:aa:e5:01:42:c8:3a:75:54:
                    67:6d:c7:e3:23:d5:59:22:09:75:fc:5e:10:ff:48:
                    c0:59:c3:b5:5b:9c:af:c9:01:9b:95:a6:55:e9:49:
                    e9:6e:e0:44:88:a2:67:05:4f:ff:0e:da:9e:d8:35:
                    42:07:78:45:39:48:47:81:cc:01:64:18:fe:b1:ae:
                    f8:7c:01:92:ac:d0:60:00:cb:a4:0a:70:fd:4c:61:
                    5f:26:dd:ce:aa:25:40:33:a9:26:05:d3:e6:85:08:
                    ed:0e:27:6a:5b:e0:de:32:4e:6f:de:10:d5:54:20:
                    5e:cd:97:c1:cd:bd:f1:6f:95:68:a9:e4:7c:c0:41:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1B:59:DE:2C:B8:F0:B7:FF:6F:C3:71:3B:AB:B9:31:9A:AA:88:AF
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:10:f0:e6:4e:ae:f9:cc:e2:e8:05:c1:b1:88:00:e6:81:5e:
         96:a7:ab:85:61:8b:bb:59:7a:9d:57:a6:be:6d:78:cd:28:30:
         6d:be:09:b0:e2:e3:d3:eb:41:18:72:cc:a2:07:26:36:b1:e8:
         59:d4:cc:2d:62:02:7e:e6:fe:72:a4:3b:06:49:7f:da:dc:fa:
         4c:34:3c:cf:57:ba:19:a5:46:73:66:ae:a9:80:ad:06:91:2c:
         7f:e5:91:4b:bd:c9:0a:fd:0e:38:07:8f:cf:03:0d:19:86:11:
         25:d4:9e:0a:c7:ba:8a:44:32:29:48:85:58:19:92:e4:0e:51:
         82:f6:8f:74:67:aa:6c:97:88:10:88:38:f5:a0:b7:20:ce:f8:
         40:15:9e:c5:97:ac:fd:04:8e:98:c6:da:86:81:e5:d6:51:d2:
         26:b9:da:6f:3d:a3:56:48:9f:be:44:dd:4b:e5:df:ab:f9:48:
         ed:b3:9e:8b:7e:43:7b:53:d1:3e:90:78:cd:fa:04:37:bd:09:
         86:c3:1f:e4:ba:91:f0:93:61:08:50:a3:f4:d0:66:e0:80:b2:
         86:e3:ee:55:74:90:62:40:68:94:3a:32:71:75:8a:f1:c0:f2:
         ee:25:54:7b:db:43:85:db:b1:36:b7:db:cb:c6:4d:ce:d7:20:
         fd:54:97:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:17:18 2025 by rpki-client