Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
File:                     F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft (raw, json)
Hash identifier:          WoT4mkfuxyz7EvYiAiF561NFws31Z32IFCwBMAZfhDI=
Subject key identifier:   2F:72:3C:38:13:18:D8:94:98:40:33:FD:8F:A6:34:E5:3C:17:5E:C7
Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
Certificate issuer:       /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Certificate serial:       2CEC57084356A6E165B995A65B8A81B3DDC3993C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
Manifest number:          04E0
Signing time:             Thu 08 May 2025 18:21:24 +0000
Manifest this update:     Thu 08 May 2025 18:16:24 +0000
Manifest next update:     Mon 12 May 2025 04:41:24 +0000
Files and hashes:         1: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: kj+jjliVyOq89SFtdsJZ6/jz1sCOSflfI1524JkUHIM=)
                          2: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: v86rIL1J9aXi4VbgCIFAar9em5fnxZHq7TIwnysrq94=)
                          3: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: vtfeHjfL8yqlk/jNx/lCthha4B7+6EOQKJNCnc7VxN4=)
                          4: F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl (hash: b7f1gY5UWtH/UvzY5mreRTLNVoZqVu8OLZ6i860RcRs=)
                          5: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: DL9+8H198UE7h/7Pgpl3P21VNpfarZQNWBdjxHH7R4U=)
                          6: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: NXvf16TxGPkABJJq49GTqJwk939PUmt8PfQbxDW8mBk=)
                          7: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: lvJpSB+CtmvsBBtBTECvLGsRg1YF7AbP+/ZbIwrh9dM=)
                          8: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: GZ3/V+zqcDIloNwLRDncl8p22SXMpal1fQkO46P1elU=)
                          9: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: YlNYHO0N3pyCcSOGqGXOjx60oOvCKMnQzdF/w4jucvo=)
                          10: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: 28JSxPbguduH6Zlkw/CTIrAclyP4oGfavsJuN7/c/LM=)
                          11: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: wANFlcEnJtKYhVhmbvh7ghaUvUER0v8nXkBQby1whj8=)
                          12: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: HrJfcQkGnzow9D0Bl2n2tIAUkeZlu+k/wsAvsBxHD24=)
                          13: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: wdOM2JCDEAghiiuCd/bc5GapnYXK2DGm3CKKwODiePs=)
                          14: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: KlXGN9NpwbrgMJftnwFd4i8j5PruwL1rpv1YqPauX1s=)
                          15: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: VCX9eexAv9esi+sSNtpJiYiCYTvRXlMu/Iu7U6GqXZ0=)
                          16: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: 5kBm8X0aamwDYytyHbZ00Nrt+F+SLfZj5f3AKcxtU/A=)
                          17: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: u+fthsBwoket5WEkCazKb6WuPFz2wCYHFQa3CP7W0Dk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl
                          rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 04:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ec:57:08:43:56:a6:e1:65:b9:95:a6:5b:8a:81:b3:dd:c3:99:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
        Validity
            Not Before: May  8 18:16:24 2025 GMT
            Not After : May 12 04:41:24 2025 GMT
        Subject: CN=2F723C381318D894984033FD8FA634E53C175EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a9:01:3d:2e:ab:71:15:28:a1:a8:d7:39:e9:
                    63:c2:11:8a:84:03:8c:85:90:58:de:0e:c2:f4:69:
                    67:64:29:f1:68:05:e8:e2:5a:f9:87:c1:95:aa:51:
                    2b:13:b8:d9:53:4d:ba:d8:3e:f6:28:75:6e:ea:b9:
                    91:8a:58:fb:a9:e3:15:f4:0d:8a:48:00:3c:22:d9:
                    eb:56:96:55:51:09:0c:ae:d6:b6:b3:7c:73:07:8b:
                    22:9b:8f:2c:8c:be:77:4e:d3:35:6a:9a:04:16:e1:
                    db:3c:53:09:65:27:81:5a:c1:db:a6:c4:c6:19:83:
                    23:ca:a9:f2:f8:1d:1d:58:ea:99:53:a3:ba:73:4a:
                    1a:d1:d4:cb:01:2a:4e:cb:9a:f5:97:9b:d9:42:c1:
                    8f:63:87:0b:ca:c5:32:20:71:84:d8:a0:67:a4:c9:
                    ed:ad:da:d7:f7:4c:c8:d9:6d:8b:0a:43:be:66:43:
                    a6:59:f5:ce:85:2c:9e:c2:3e:a5:a8:cc:ac:3d:85:
                    3e:c2:bb:b1:78:bb:c8:db:0d:fc:a2:8d:95:e2:21:
                    d6:91:7a:18:6e:cc:e1:4b:4f:a7:23:4b:2b:38:9d:
                    c4:51:23:87:58:9b:17:fa:b0:c0:9a:39:c6:f5:2c:
                    54:de:c0:51:09:5d:15:78:42:b2:d7:f1:83:7c:ca:
                    85:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:72:3C:38:13:18:D8:94:98:40:33:FD:8F:A6:34:E5:3C:17:5E:C7
            X509v3 Authority Key Identifier:
                keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:4b:53:fe:c1:73:68:6c:b5:1b:00:ed:64:4f:34:03:d1:7e:
         7a:5f:36:8e:a0:dd:ef:ef:f3:51:9f:e8:63:c0:15:f8:f8:a5:
         d4:0f:57:3a:11:f9:8d:ee:20:42:32:b8:4d:4c:cd:04:b7:db:
         89:cb:a9:f7:a8:81:0d:f4:c3:5c:43:25:8c:64:61:e3:06:96:
         bd:8c:c4:36:b1:6f:66:4c:26:23:70:8a:39:92:1f:27:38:8f:
         1f:39:5a:6a:ab:8e:0e:57:66:c8:85:24:5d:89:6b:fb:f6:98:
         98:2e:18:65:9c:c2:9b:cc:e7:85:5f:1c:37:9c:e1:6f:30:c0:
         c3:54:a1:fb:c3:1d:98:ad:e9:9d:65:7a:c4:7b:b7:da:a8:61:
         57:c9:d8:b3:b3:c1:08:5b:7c:04:ea:54:47:80:84:73:93:69:
         33:30:de:69:57:70:a2:45:71:89:2b:51:3e:6f:66:6a:8b:fe:
         ca:4e:6a:87:ef:f7:44:b7:db:73:c4:bc:94:a8:d0:0c:97:35:
         e2:18:21:b0:92:e0:12:2f:35:7f:4e:ab:83:7e:a5:0e:8f:f8:
         37:c8:3e:d9:b7:7e:bd:dc:3d:46:03:ea:3e:96:8d:07:d8:ec:
         2f:6e:bb:d0:e6:2a:9e:f0:1f:13:78:16:22:67:4c:f9:c6:bc:
         4a:47:d7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:01:09 2025 by rpki-client