Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
File:                     0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json)
Hash identifier:          l4kPzX3GZmcCd4HB/kavgHldbAemPhLKwrMg8UMtYgI=
Subject key identifier:   45:B2:D6:87:1F:67:DC:5B:0A:53:A8:7E:05:9C:95:BF:FA:90:54:DD
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       55F90E6FD005D46A9C83BF1D597991220F13D14A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
Manifest number:          04F2
Signing time:             Sun 04 May 2025 14:30:50 +0000
Manifest this update:     Sun 04 May 2025 14:25:50 +0000
Manifest next update:     Thu 08 May 2025 01:34:50 +0000
Files and hashes:         1: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: +6pVD67UjeVGjTszHXfeH5DOs+PMEo+OZcwkbcYuJKY=)
                          2: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: ymwaUvhXT8JXSJrNzjbP7gt7yXJ53LxTJX8Voq/f/74=)
                          3: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: /Pgqw6Rs+ajT828waAS0R/dEt8fu2pWuzGj9i8zT3Rk=)
                          4: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: 7oqjul+B96Fyx6/pagmyjP5QQVBBMq8zOtlvMQysbzI=)
                          5: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: KoEPh6lpEMSvfnV/vjmbsJ0wLOTaFFj1PpSDlGO5Ls8=)
                          6: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: iuF2E3N7pxHO8JHPcoRZARPadHuWLz4uUgfXtRL/cvo=)
                          7: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: jYKdHs/1nDVZ/+Ed/Vmdxf+QRP9rr+yNjg2t9L7K9P0=)
                          8: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: Jx6gu7CM37SUOvL42UESgBTOXc6oDUc/aIFJ06b8y3o=)
                          9: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: eUGLFIbBQXUlbrF2iA2Xszdo9Zh7AGLGsZzJrRkvT6k=)
                          10: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: 8rPJ4nXTJ70Up3y89jTvrnK5p5EQ4mjAGK2p65JUucA=)
                          11: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: nj7nwkg4jEji5skSyGq127SyeIEToj2AxAchD/5z7y0=)
                          12: 3131302e37362e3134382e302f32332d3234203d3e20313333383330.roa (hash: hJMSnRVsi5t20DGIdOobYby7Tk1CLRDO/LphhBQDrQ8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 May 2025 01:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f9:0e:6f:d0:05:d4:6a:9c:83:bf:1d:59:79:91:22:0f:13:d1:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: May  4 14:25:50 2025 GMT
            Not After : May  8 01:34:50 2025 GMT
        Subject: CN=45B2D6871F67DC5B0A53A87E059C95BFFA9054DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:f0:a1:ea:54:2c:c7:da:e5:39:02:61:3e:
                    62:03:d9:f0:6f:93:ee:fe:71:bf:0d:f8:93:b3:ee:
                    d7:b6:bf:36:5d:81:4b:2a:44:ca:77:94:b3:91:e6:
                    c5:d5:fc:9b:e5:b8:9a:fc:4a:a5:7c:83:10:80:68:
                    f9:71:0f:b1:a7:95:b3:c3:15:cb:0a:de:78:87:7d:
                    18:5c:f5:9c:58:d0:bd:fe:75:4e:49:10:6e:d3:11:
                    e4:33:95:f7:ca:68:73:d6:6d:43:ba:e1:a6:6d:0c:
                    bb:ea:07:7b:cc:4b:e3:a8:df:46:4b:b8:dc:f9:3b:
                    79:2a:34:1a:aa:60:f1:44:70:e1:93:49:57:cf:13:
                    2c:af:ce:a0:f0:2f:54:d9:a0:f4:d7:11:ed:55:a6:
                    f9:04:77:38:08:2f:06:fa:64:62:6d:95:12:22:7a:
                    61:07:39:64:85:7c:6d:4e:69:41:e3:5b:41:b0:4e:
                    ae:57:2d:95:b4:ca:d7:64:7a:59:08:d9:5c:d2:11:
                    6c:d1:17:a2:f0:31:18:b0:5d:56:08:95:36:e0:84:
                    e0:d4:e9:ed:2e:4d:94:c3:6d:06:c6:5c:8a:d1:3b:
                    f5:87:10:c0:b2:4d:c9:9a:24:0e:2f:73:41:c8:f1:
                    12:b3:ac:94:9d:6f:10:54:de:17:be:00:f0:6d:a6:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B2:D6:87:1F:67:DC:5B:0A:53:A8:7E:05:9C:95:BF:FA:90:54:DD
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3c:8d:82:62:32:82:32:9c:e5:8d:0f:bb:98:1e:74:03:ee:
         a0:5b:14:49:41:f6:a1:7f:a2:33:58:e2:45:d6:55:b0:7f:43:
         e5:82:73:a4:69:9c:ee:80:59:fa:21:8b:f9:09:f5:3a:04:b5:
         ed:d6:04:2e:79:26:06:79:96:43:61:82:53:6d:af:7b:a9:93:
         85:dc:d8:d4:98:35:d1:2d:4b:66:49:05:d7:31:1b:d1:f7:a0:
         4a:30:25:93:a0:1a:42:58:d9:c1:a4:e8:a9:3d:5a:87:a3:b1:
         d6:95:c7:82:a3:02:ca:00:5c:a0:5f:05:2f:35:fc:89:b3:a6:
         27:b4:61:0f:82:b4:25:01:99:55:ec:f9:30:b6:3b:18:2f:0f:
         f5:3f:fb:93:27:6b:aa:2a:b8:10:ae:22:6f:4b:20:c1:ce:ed:
         6d:45:fc:9b:44:cd:bf:25:a1:2e:e0:e6:90:68:5e:65:93:24:
         a2:d8:c1:9b:89:82:97:11:08:8d:ad:94:7c:c4:8e:3a:b8:0c:
         f4:6b:97:99:5e:5e:2f:b3:ed:fb:16:3e:56:a1:43:e0:b6:b2:
         cb:f2:99:4a:37:c1:67:aa:de:5a:91:30:59:bf:e5:1e:a4:ef:
         c8:6e:78:7c:09:52:c1:dd:f5:31:af:3b:a7:98:02:cc:b0:af:
         05:b5:9d:cf
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVfkOb9AF1Gqcg78dWXmRIg8T0UowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1
MUJDMTdBMjAeFw0yNTA1MDQxNDI1NTBaFw0yNTA1MDgwMTM0NTBaMDMxMTAvBgNV
BAMTKDQ1QjJENjg3MUY2N0RDNUIwQTUzQTg3RTA1OUM5NUJGRkE5MDU0REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtSfCh6lQsx9rlOQJhPmID2fBv
k+7+cb8N+JOz7te2vzZdgUsqRMp3lLOR5sXV/JvluJr8SqV8gxCAaPlxD7GnlbPD
FcsK3niHfRhc9ZxY0L3+dU5JEG7TEeQzlffKaHPWbUO64aZtDLvqB3vMS+Oo30ZL
uNz5O3kqNBqqYPFEcOGTSVfPEyyvzqDwL1TZoPTXEe1VpvkEdzgILwb6ZGJtlRIi
emEHOWSFfG1OaUHjW0GwTq5XLZW0ytdkelkI2VzSEWzRF6LwMRiwXVYIlTbghODU
6e0uTZTDbQbGXIrRO/WHEMCyTcmaJA4vc0HI8RKzrJSdbxBU3he+APBtpip7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURbLWhx9n3FsKU6h+BZyVv/qQVN0wHwYDVR0j
BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz
NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD
MTdBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI1NDhiYWQtN2ZlZC00MWZkLWI0
MmUtNzgwMzcyYzQ1MjU1LzAvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZC
QzQ1MUJDMTdBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADY8jYJiMoIynOWND7uYHnQD7qBbFElB9qF/
ojNY4kXWVbB/Q+WCc6RpnO6AWfohi/kJ9ToEte3WBC55JgZ5lkNhglNtr3upk4Xc
2NSYNdEtS2ZJBdcxG9H3oEowJZOgGkJY2cGk6Kk9WoejsdaVx4KjAsoAXKBfBS81
/Imzpie0YQ+CtCUBmVXs+TC2OxgvD/U/+5Mna6oquBCuIm9LIMHO7W1F/JtEzb8l
oS7g5pBoXmWTJKLYwZuJgpcRCI2tlHzEjjq4DPRrl5leXi+z7fsWPlahQ+C2ssvy
mUo3wWeq3lqRMFm/5R6k78hueHwJUsHd9TGvO6eYAsywrwW1nc8=
-----END CERTIFICATE-----
Generated at Tue May 6 11:03:19 2025 by rpki-client