Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
File:                     8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json)
Hash identifier:          yrNuqDMHpyMLuL4cUqRb1Ng2lagHKqowROrYrxkECEI=
Subject key identifier:   1D:05:D0:D8:90:3A:35:C3:2F:B1:93:54:83:45:34:FF:B4:D3:5D:66
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Certificate issuer:       /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial:       25C2E21F15092011C9D2241C3ABBDF7C7B0F6259
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
Manifest number:          04E5
Signing time:             Thu 15 May 2025 19:01:48 +0000
Manifest this update:     Thu 15 May 2025 18:56:48 +0000
Manifest next update:     Sun 18 May 2025 23:30:48 +0000
Files and hashes:         1: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: gD3qH0CL5kDWzLn1NnDdXaxbwmPWUV8Kvspy5PDfTJA=)
                          2: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: WKjUY7A9s0t/PRWAP+LH/F+hMYuiLUis5qYYMcuOyVc=)
                          3: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: yw3K/bp/LPi1I2OAb+IKkUT9fIWUEaXPoYhzWvShryU=)
                          4: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: ee3hb82wlCfvRHJv/Z0BLwZrijit1p8khM33Y7zMuT4=)
                          5: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: 1tp2p0lmzVYvYN9LyCd/jXojPSljtaqZldm282NgTBI=)
                          6: 3231302e3234372e3234322e302f32342d3234203d3e20313430343035.roa (hash: dw24NIap+hZJ4wq3Y9e+7pPi7wiN8EZO2tINonm4ebY=)
                          7: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: lYozuS7H8g71TmDAhlsE7Z+j/6P9Ega8nsca+NA9iZs=)
                          8: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: X4Pk8WgmhA0dbNOl0G7YhvirhZLSY9c290PzK0yXcPw=)
                          9: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 5z4EVyXkxyXnhxl5JH3Pz2dy7K+1+d6O34E8YEu6Oo0=)
                          10: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: f/UXoSDfbRkGf1lUmUNbaOYccjPXICPU6lcajtxcZik=)
                          11: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: ZfF3KZtk2dhQe1TSXKb5jkKHdT8hFQeAF+Yp3HxE2X8=)
                          12: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: q5exjX9sipnlgCr446gNBKp3hcZ5p+bSP3uX63/NcUU=)
                          13: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: SbxBJwcyRNjmcJAEw7SuNTFi3HhmkmBhtQkXMEm7WeI=)
                          14: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: IQcHIUy46CTJePR6Z9z+26UQZV8/dla1aLxrUhi96Yc=)
                          15: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: YdgVrIhwigf5vVjBfE6W9Ix4PmwssBDwnjxMo0ci8Oo=)
                          16: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: +Wv9KU9iNmf8e+dcDb3YT6/AamLrR1m0U+jn1PjO20c=)
                          17: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: +h2OIV45k9IMNmhDrlIF5o27fKX07HhXCAJxexuPVfw=)
                          18: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: DLEEWRg8CzNEC40bkoq+06vWx/pLLLcKvRY7UIZLKcs=)
                          19: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: gnvURXZkhn/FEj22B4ytqTMsZk8ZLC9E8Tq6VbTdHlg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
                          rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 23:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c2:e2:1f:15:09:20:11:c9:d2:24:1c:3a:bb:df:7c:7b:0f:62:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
        Validity
            Not Before: May 15 18:56:48 2025 GMT
            Not After : May 18 23:30:48 2025 GMT
        Subject: CN=1D05D0D8903A35C32FB19354834534FFB4D35D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a0:44:46:e6:75:b6:70:72:b3:28:e2:d1:5f:
                    e9:4f:77:0b:6a:89:34:03:d8:0f:eb:e0:08:84:9f:
                    37:56:30:90:b1:ed:3b:78:64:00:f8:6e:5e:ad:56:
                    e6:bb:f9:99:96:80:7d:9b:4e:34:40:81:fc:63:60:
                    87:48:c4:ae:a3:25:e1:03:e4:e1:80:d6:9f:3d:ce:
                    74:8b:31:a9:c7:68:d2:cd:71:90:ef:69:8a:e2:71:
                    ab:01:16:c1:e4:cc:a8:0e:49:0f:60:9a:c8:66:59:
                    69:65:8f:e4:41:1e:2c:f2:fc:c7:65:6c:09:26:88:
                    89:07:cd:60:0d:90:35:9d:0c:5e:64:21:b3:39:61:
                    53:67:b3:44:a4:8e:12:06:99:17:fe:d1:a7:71:b4:
                    a2:48:7b:55:8c:cf:d0:3a:da:b8:fb:af:05:15:a6:
                    b8:7c:bd:69:5c:20:93:85:44:4d:9a:d1:7d:81:28:
                    a2:75:f7:19:6b:d2:58:2b:e9:64:dc:0d:48:69:1b:
                    b7:f5:d7:5b:cd:6c:89:7b:ad:13:93:1a:8b:37:a0:
                    e9:60:ce:be:65:a5:eb:f6:30:5d:d4:5b:b7:77:4c:
                    f2:da:0d:4d:04:fe:6f:11:6e:bf:77:d5:8c:7b:94:
                    cb:42:a0:a5:7a:c5:29:2d:9f:a0:6d:62:43:97:25:
                    55:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:05:D0:D8:90:3A:35:C3:2F:B1:93:54:83:45:34:FF:B4:D3:5D:66
            X509v3 Authority Key Identifier:
                keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:71:8e:20:cc:56:34:41:f5:78:49:62:d8:5a:49:23:70:2a:
         c7:3a:b5:b6:a7:ad:61:87:f6:84:1a:da:eb:72:cf:12:3a:37:
         c7:f9:0d:5b:c7:a7:84:96:b3:48:17:19:13:ca:c1:62:c5:af:
         74:6b:c3:28:46:14:08:4c:ac:7a:61:dc:f4:8a:d1:c3:18:f4:
         ea:50:6d:46:dd:41:b7:6b:65:66:d2:e0:f5:1d:41:17:07:c5:
         79:f8:5f:b4:f7:d0:4d:19:30:76:38:75:ef:cd:ec:4a:85:cd:
         a2:8a:66:b9:da:1e:cf:77:be:ff:c3:d3:6a:3f:28:d7:c7:a9:
         aa:a0:6f:2d:7a:dd:f1:53:21:a1:a7:a6:7f:42:1c:19:70:53:
         1e:60:98:2f:63:ed:7f:a2:47:fd:c4:1c:0a:ec:bf:8f:41:c0:
         42:a2:9b:cb:12:87:05:9e:b2:39:f2:71:f9:80:17:cc:a1:6e:
         d1:a4:ed:3f:fa:6c:71:02:9d:fd:c3:a1:65:d7:8d:8d:f6:a4:
         c6:8b:2e:2a:47:e8:dd:23:8e:48:50:15:52:21:a4:a8:31:25:
         ab:29:a5:db:d3:87:23:cd:61:4c:d2:e4:7a:68:1a:bb:d3:32:
         e5:5a:00:30:15:ff:d3:40:b7:f6:65:e5:28:a7:40:16:19:6f:
         16:a4:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 03:08:14 2025 by rpki-client