Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
File:                     F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft (raw, json)
Hash identifier:          bEQqoTWbBt12Elv/1SQgRbrc4XX0wfYTEJ+fuxdg600=
Subject key identifier:   BA:3E:99:EA:C5:9F:8F:19:70:28:A1:BD:B2:8C:1D:BD:67:D9:26:0F
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       0B05224291DD8FCD3AECA60219D388FE6067B478
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
Manifest number:          027D
Signing time:             Sat 10 May 2025 06:32:15 +0000
Manifest this update:     Sat 10 May 2025 06:27:15 +0000
Manifest next update:     Tue 13 May 2025 18:13:15 +0000
Files and hashes:         1: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: VwTNigUnV52ERl4JC5acU3ZlKRaYwPoaUPZcexI3ywI=)
                          2: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: z29/6B1kOK/eMjCWZtmvPZLgk+HLmYp/VefCqYrAsKY=)
                          3: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: Yi662bRsVhQynKfcqy7qXGygDZ5R6XwwA4ioPRSjZss=)
                          4: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: RgKgrskhhkjPJ/Dk8nbIAuuLnQfC2xLVHfdXQzj2BLI=)
                          5: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: ZffeIBEtnLg/Ujj93wFNolRHO6kiysPo5MQ8XNigO0w=)
                          6: F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl (hash: sF52MSIWqnR5zvOFscV/LbdIWgDL/AbRpmyiFRY+SaY=)
                          7: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: nC9Vz/V7n91DCoxvdGVxW+GzAM9lX59dn3xendBCsjg=)
                          8: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: lYQCgluKRMLdqhxTINGi3YwkFcOJwrOABEOfRjK/jF8=)
                          9: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: d6Eei0Mi3Z0MIL/gTjyKioJhC1+Xma/Y2mDdx7nO/5M=)
                          10: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: W4a/cfhB9oac3lsy90TNAMFErRsxFA2KdB5prppjaDo=)
                          11: 3130332e33392e31322e302f32332d3233203d3e203633383237.roa (hash: ESipPGaWYxRGOLDa3lXlGJb3f8FCnj+2d4bGvhqlgIk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 18:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:05:22:42:91:dd:8f:cd:3a:ec:a6:02:19:d3:88:fe:60:67:b4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: May 10 06:27:15 2025 GMT
            Not After : May 13 18:13:15 2025 GMT
        Subject: CN=BA3E99EAC59F8F197028A1BDB28C1DBD67D9260F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:1d:10:37:a7:75:7e:f6:fb:a9:ff:57:8b:
                    83:b2:42:83:dd:28:a2:98:d1:f5:3a:f7:74:d3:8d:
                    2c:b7:77:da:59:95:c9:fa:4e:6a:96:91:69:37:f9:
                    96:df:7a:6d:a1:35:ad:0f:92:99:1d:b3:e5:6d:3d:
                    fd:a0:fd:a5:5a:94:c5:cf:e2:f7:c3:4a:fb:d2:24:
                    83:b6:73:5f:14:8e:27:c9:19:d4:23:91:55:3e:47:
                    bb:ff:e8:d5:9e:59:ba:4d:9d:14:ac:91:3d:84:40:
                    c0:d2:05:24:cc:e1:14:ba:53:28:84:a3:e8:38:aa:
                    4e:56:fc:45:f4:6d:25:cf:69:6b:5c:75:10:3d:3f:
                    fe:e3:30:ff:15:1e:c6:37:04:8a:67:cb:44:b7:18:
                    54:d1:55:20:ff:c4:d7:26:64:e9:8d:17:8c:de:9e:
                    c3:0d:33:59:61:46:53:28:3c:54:96:35:4a:d7:d6:
                    20:5e:90:00:2a:27:df:0c:d5:bd:01:08:96:2e:06:
                    c9:f8:93:31:0b:62:6a:a8:21:50:6e:35:a4:c1:be:
                    57:72:c8:62:f0:40:cf:53:1e:87:39:fb:32:60:36:
                    85:64:d5:d0:67:76:eb:06:71:87:89:a7:04:1c:1a:
                    6c:6d:15:04:75:c1:67:ab:5c:8b:e6:73:62:37:4f:
                    95:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3E:99:EA:C5:9F:8F:19:70:28:A1:BD:B2:8C:1D:BD:67:D9:26:0F
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:5f:8f:8b:73:dd:e3:95:bd:df:d7:f7:68:87:b4:f5:5a:d2:
         56:25:f5:d1:74:69:5f:75:83:b3:fa:ba:26:88:ed:91:47:e4:
         80:43:9e:04:e8:3f:6c:3a:9e:74:f6:28:16:50:bd:23:b2:43:
         5b:75:40:1f:79:36:cf:94:0a:00:53:e7:4e:7d:f9:d3:49:b1:
         53:23:4b:1e:df:fa:b7:70:09:35:96:da:41:d8:d1:4b:66:de:
         eb:73:ab:7b:0c:4c:ef:03:85:b8:7d:08:02:e3:b6:a4:fc:a4:
         69:64:35:12:3f:b7:4c:7e:65:3f:ac:a4:a7:7e:9a:af:2d:00:
         b2:dc:62:cc:6c:8e:00:3f:86:ce:f5:14:ba:df:62:95:89:10:
         34:1e:18:9a:4c:ba:08:07:c9:3f:7a:64:b6:a3:1b:c4:84:11:
         a8:63:8d:63:cb:41:ed:86:8f:76:73:24:32:ce:dc:dc:70:4d:
         62:28:46:67:b6:7c:57:2f:b7:72:fb:b7:78:50:5b:30:30:97:
         3a:5b:d3:54:1a:52:55:e3:1e:86:c1:54:16:42:e6:a1:6b:a7:
         22:02:5d:e4:00:50:4c:c3:09:2f:c7:2a:a0:f6:5c:83:c7:c1:
         16:de:32:f9:b5:30:b2:9a:ba:5d:8f:f2:14:88:fe:60:e2:7a:
         58:9a:91:8c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCwUiQpHdj8067KYCGdOI/mBntHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JFMDNB
MDMzNzg0QjAeFw0yNTA1MTAwNjI3MTVaFw0yNTA1MTMxODEzMTVaMDMxMTAvBgNV
BAMTKEJBM0U5OUVBQzU5RjhGMTk3MDI4QTFCREIyOEMxREJENjdEOTI2MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwB0QN6d1fvb7qf9Xi4OyQoPd
KKKY0fU693TTjSy3d9pZlcn6TmqWkWk3+Zbfem2hNa0Pkpkds+VtPf2g/aValMXP
4vfDSvvSJIO2c18UjifJGdQjkVU+R7v/6NWeWbpNnRSskT2EQMDSBSTM4RS6UyiE
o+g4qk5W/EX0bSXPaWtcdRA9P/7jMP8VHsY3BIpny0S3GFTRVSD/xNcmZOmNF4ze
nsMNM1lhRlMoPFSWNUrX1iBekAAqJ98M1b0BCJYuBsn4kzELYmqoIVBuNaTBvldy
yGLwQM9THoc5+zJgNoVk1dBndusGcYeJpwQcGmxtFQR1wWerXIvmc2I3T5W3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuj6Z6sWfjxlwKKG9sowdvWfZJg8wHwYDVR0j
BBgwFoAU9ptjfqlN5MyRUL39Uye+A6AzeEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MWE2ODcxMi0xZDlhLTQxNDMtODJmMS0xYzgyYzMzMTY1ZWEvMC9GNjlCNjM3RUE5
NERFNENDOTE1MEJERkQ1MzI3QkUwM0EwMzM3ODRCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JFMDNBMDMz
Nzg0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhNjg3MTItMWQ5YS00MTQzLTgy
ZjEtMWM4MmMzMzE2NWVhLzAvRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JF
MDNBMDMzNzg0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALBfj4tz3eOVvd/X92iHtPVa0lYl9dF0aV91
g7P6uiaI7ZFH5IBDngToP2w6nnT2KBZQvSOyQ1t1QB95Ns+UCgBT5059+dNJsVMj
Sx7f+rdwCTWW2kHY0Utm3utzq3sMTO8Dhbh9CALjtqT8pGlkNRI/t0x+ZT+spKd+
mq8tALLcYsxsjgA/hs71FLrfYpWJEDQeGJpMuggHyT96ZLajG8SEEahjjWPLQe2G
j3ZzJDLO3NxwTWIoRme2fFcvt3L7t3hQWzAwlzpb01QaUlXjHobBVBZC5qFrpyIC
XeQAUEzDCS/HKqD2XIPHwRbeMvm1MLKaul2P8hSI/mDieliakYw=
-----END CERTIFICATE-----
Generated at Sun May 11 07:37:18 2025 by rpki-client