Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft
File:                     C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json)
Hash identifier:          oTPLRpYwGeh814jMlRdJDb9hVc8YwqLb7+5tz6WKGMo=
Subject key identifier:   57:F0:00:06:2F:C3:3B:C9:6C:E9:18:90:DF:2D:6D:32:88:9D:20:A0
Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58
Certificate issuer:       /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
Certificate serial:       2E4DE910183CB1EBA869E72AFE7BE2C09D80F5BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft
Manifest number:          01C6
Signing time:             Tue 06 May 2025 22:31:49 +0000
Manifest this update:     Tue 06 May 2025 22:26:49 +0000
Manifest next update:     Sat 10 May 2025 07:09:49 +0000
Files and hashes:         1: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: CYQSWkTaaZ6K9+7+9YJK43BT2Fo5yakPcT5MU6uL7zE=)
                          2: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: oVyta3N0Mp/gJIOjUuII3Ckof/UiXXBN66axBFVKUF8=)
                          3: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: LxUd0O28QOB1FYX/IFpf9oVaAeBcqqLD1CISWs5/zKU=)
                          4: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: drm5WlPooA+cXHugsdKMGRjH68ZH1tfEYng/uM0+I/k=)
                          5: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: 8/eE/PYHMBJPTrQPC17Q3NEbx/FlMytkUCt7uXgNssQ=)
                          6: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: KsaLu3Xogdgpn1OrIouiwRZdFGE9dO1KB2nXhDDqXYM=)
                          7: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: UM5Dr5xVDHboWnjTqZiCkih1iC9EYKdetdnfEfnMBxE=)
                          8: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: i2n9xauYnKFkMb9wLY0IpaPCp6UqDrgTBZRn1u9jdpo=)
                          9: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: qoD1LCcgQcrGscaCKsDBZxnNC5k+7tlPjQmxqDS5VvE=)
                          10: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: jrKOjUUwCHRLgMIZvbf9Vgbrr6Mcup2HCjSzDEIBe+Y=)
                          11: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: UjIV/riQTo8dasvJuqxqQ0jauvPuOkXhGx+ZlLnU9B8=)
                          12: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: N0uAcX8uZo5tOJEaTL943Qy+8/w2XD0bZnW15V+4qhE=)
                          13: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: XL51m8qCCMdZ/MeraS+TLjplQBrWd1/iq0OzRCxKdAw=)
                          14: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: xtjpkayX42ahjTFsnuY46Hlm9SoehvE8O0HLSPjq06w=)
                          15: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: Kd6lbqfT1RBZ7TFebToOIO4foLVr0hxqsz+9vL5vL6c=)
                          16: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: ZqSTpukEEv9K3H+WS14a2YN7W1ErkKRWN2pN8lNqj0A=)
                          17: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: DZw3cfVpl9eMlsIinfHwKcH6/KtzgbcJ6EVoNMOzf5I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl
                          rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 May 2025 07:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4d:e9:10:18:3c:b1:eb:a8:69:e7:2a:fe:7b:e2:c0:9d:80:f5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
        Validity
            Not Before: May  6 22:26:49 2025 GMT
            Not After : May 10 07:09:49 2025 GMT
        Subject: CN=57F000062FC33BC96CE91890DF2D6D32889D20A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:0b:6b:7a:c1:70:36:05:c1:59:6e:1e:40:
                    19:aa:50:5f:21:d3:42:ab:71:e1:91:47:7f:b7:3f:
                    ee:80:b5:c5:5a:30:a4:31:0d:b7:18:0a:43:65:68:
                    ae:72:1e:72:67:1b:6a:ed:02:c5:69:bd:af:89:da:
                    91:f3:6e:6f:2c:f7:58:05:6f:b9:d0:aa:6c:a5:c1:
                    c2:1b:1f:54:69:8f:0d:50:47:8c:ce:f5:88:5c:35:
                    75:7a:66:5c:ec:16:63:8e:2c:b1:54:35:65:0e:bb:
                    e5:a2:fd:1a:13:59:30:da:ea:73:80:48:41:3a:58:
                    3c:d2:11:3d:de:d0:bc:15:26:06:d3:1e:c4:75:19:
                    07:18:78:2f:84:05:73:e8:e0:14:44:1e:d8:f5:8b:
                    9d:df:16:a1:27:34:81:93:7f:6b:cf:84:3e:8b:20:
                    4d:af:58:b3:a1:c3:00:43:2c:47:e6:58:a3:79:fc:
                    ce:e1:3e:b3:cc:5b:82:57:11:85:6f:b1:f6:81:a8:
                    e3:20:de:97:5a:61:e0:3d:2f:1a:63:16:a8:b1:1a:
                    08:aa:31:b6:f0:3f:60:4a:ca:c3:fb:64:c5:9e:b9:
                    15:d5:ea:9a:fa:bf:8c:b7:38:80:43:ac:15:2b:ff:
                    79:77:59:a3:28:ce:eb:85:b0:f6:95:80:bf:2a:eb:
                    26:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F0:00:06:2F:C3:3B:C9:6C:E9:18:90:DF:2D:6D:32:88:9D:20:A0
            X509v3 Authority Key Identifier:
                keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:42:1e:7d:77:71:c4:92:a3:78:66:9e:12:ac:34:8b:3e:1d:
         d1:ac:7d:8a:c0:40:8b:f7:69:45:58:28:b8:72:52:ac:4e:06:
         bf:75:bf:85:36:a1:2a:36:0f:35:0c:48:2a:54:38:2a:01:9d:
         70:a6:91:71:db:1c:18:9f:a5:f0:12:5c:e3:17:90:a4:50:ef:
         fa:cd:7a:b2:9a:10:43:37:79:23:95:f9:68:fe:24:62:b1:e2:
         3d:16:1f:d6:74:ad:c9:64:dd:c6:bd:db:50:b2:90:db:51:4e:
         71:14:d2:dc:eb:94:49:cb:e3:87:ef:9f:27:c4:50:57:ef:3f:
         d4:af:25:1c:1e:1d:70:9f:d1:5a:6e:e6:d1:5d:a7:26:a9:67:
         9c:2b:38:6e:01:e4:2b:7f:9c:da:59:59:ed:55:04:c1:20:ac:
         b4:37:50:28:0c:69:c0:2d:15:c5:d9:ad:ac:cb:2d:27:19:81:
         12:27:7b:fb:ca:aa:61:20:a0:7c:7b:4d:81:7f:cd:cf:12:52:
         80:27:7e:b8:31:29:22:63:63:75:ee:9c:cf:08:c6:ea:bf:d3:
         40:b6:f9:d4:2e:8a:30:df:30:25:61:8a:48:f3:98:8b:b4:b5:
         f1:ef:96:81:50:f8:28:74:71:ff:82:da:79:9c:fc:aa:3c:60:
         e9:27:df:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:34:24 2025 by rpki-client