Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft
File:                     38A92419EE1289455FCB1B71F9420F05CA334C15.mft (raw, json)
Hash identifier:          R7+BlYLR/sF7MLinqjxNU6ANEadRS0Bv5ynEYkra7lc=
Subject key identifier:   37:C2:3B:84:99:71:63:68:61:CF:84:DC:D4:C7:BD:1C:66:FD:0E:60
Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15
Certificate issuer:       /CN=38A92419EE1289455FCB1B71F9420F05CA334C15
Certificate serial:       0E750AA0A4D1A8166D81BE8EC6E8F32D0EBFDF59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft
Manifest number:          01D2
Signing time:             Mon 12 May 2025 08:20:00 +0000
Manifest this update:     Mon 12 May 2025 08:15:00 +0000
Manifest next update:     Thu 15 May 2025 13:32:00 +0000
Files and hashes:         1: 3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (hash: /4y0i2UIqC94Q9jjKOVg3BHE03KUaQHXxOynS0oUshc=)
                          2: 3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (hash: FHb4F7lq3vcwTbWDvi1X4f5+wy1PMf7axFDD1qokmPs=)
                          3: 38A92419EE1289455FCB1B71F9420F05CA334C15.crl (hash: fiWHsutKd0bE4v7OaV1WgV0ZR+tfkptNqenm5cvB4NA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl
                          rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 13:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:75:0a:a0:a4:d1:a8:16:6d:81:be:8e:c6:e8:f3:2d:0e:bf:df:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15
        Validity
            Not Before: May 12 08:15:00 2025 GMT
            Not After : May 15 13:32:00 2025 GMT
        Subject: CN=37C23B849971636861CF84DCD4C7BD1C66FD0E60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:96:e8:9b:cd:b6:2e:3c:c9:11:da:03:c1:
                    53:2f:50:de:52:07:24:30:cf:d9:29:61:c9:31:1d:
                    56:b3:b2:8e:3c:9f:04:d2:60:05:6d:4e:65:26:db:
                    32:b4:3f:cb:16:3b:b1:cf:a4:33:9f:8d:71:a9:88:
                    46:54:48:f0:72:32:94:2c:2d:48:b3:25:54:4b:f2:
                    a1:1f:76:ee:70:22:46:52:a3:a5:67:57:9e:ea:25:
                    54:26:d7:e8:d2:6f:22:8a:ef:ef:aa:bf:dd:74:97:
                    98:b0:ea:59:42:cf:b2:04:ae:28:76:a0:ad:72:c2:
                    ef:92:ef:58:b6:96:fa:99:da:66:43:e5:dc:1c:41:
                    05:d4:16:0e:9a:e7:b0:ed:b5:d2:43:c1:45:c2:55:
                    88:11:52:08:66:a2:1f:2c:be:61:8e:3a:73:a4:93:
                    39:52:81:e4:63:42:20:17:82:54:90:49:22:cd:41:
                    e3:4f:4e:3c:ec:aa:2f:5a:82:d3:66:8e:7f:73:ee:
                    1c:0d:11:c4:40:cc:8f:90:07:e9:64:6a:a6:f9:e0:
                    bb:c3:14:6a:f1:aa:a9:32:e0:0d:1a:5c:4d:d4:74:
                    3e:59:fa:59:b6:92:c0:95:c8:67:8d:11:bc:b1:4e:
                    7b:2d:f9:7f:5b:ba:54:0d:a4:00:89:5b:0c:b8:29:
                    6e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C2:3B:84:99:71:63:68:61:CF:84:DC:D4:C7:BD:1C:66:FD:0E:60
            X509v3 Authority Key Identifier:
                keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:21:d8:88:71:0c:d6:95:5a:e9:03:49:51:8c:73:7a:af:a0:
         5e:14:b3:bc:f1:ad:23:be:b3:84:b6:7f:6f:42:33:43:a7:59:
         4e:d7:72:7c:e2:c6:5b:d5:e3:fa:d6:bd:c3:db:8b:4d:2f:c4:
         b6:c5:83:7d:b9:71:78:46:ba:56:b2:4c:85:4e:01:16:24:95:
         e9:06:59:3d:42:ec:ff:a0:82:80:a3:85:4e:c3:12:e0:9d:83:
         d5:79:52:07:70:5f:bc:1a:ae:85:e9:2c:17:e6:6b:da:a0:03:
         19:ca:a3:40:f4:74:16:e3:ba:ce:5e:7a:79:2d:9b:70:07:43:
         14:12:f9:04:26:0f:e9:f2:35:b8:1e:97:b4:9e:94:47:a4:73:
         6a:ef:f6:f8:4b:27:19:99:fe:82:03:e9:a5:00:85:67:ba:38:
         d3:9e:f4:0e:83:ce:cd:cb:59:31:bd:eb:92:ef:a2:07:fe:b4:
         0a:e5:5d:7d:b6:2c:3b:e5:a6:28:7d:6c:7e:fd:07:45:17:5e:
         2e:e5:7a:a6:02:55:59:94:d5:09:e6:88:a7:1a:5a:2b:4f:de:
         83:0f:e3:1e:49:71:e8:17:6f:14:bf:78:db:64:b9:32:0f:f6:
         d6:bc:94:51:29:f7:fc:a3:50:53:99:41:bf:ce:bb:d2:d6:57:
         0e:0d:a2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:26:56 2025 by rpki-client