Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
File:                     1976DD7D4FBDFBEB355F0B96690613959E106872.mft (raw, json)
Hash identifier:          f7I9LjZSOn86Ot4KaW/nUluohwalsvISBuotY+BimEg=
Subject key identifier:   2B:59:F9:99:D3:C7:55:45:8A:13:A4:93:E3:76:54:DB:10:11:BE:75
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       2C6F468EC18DA9101B25E0093D85D37C2C6A2C47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
Manifest number:          04D3
Signing time:             Wed 07 May 2025 22:01:53 +0000
Manifest this update:     Wed 07 May 2025 21:56:53 +0000
Manifest next update:     Sat 10 May 2025 23:56:53 +0000
Files and hashes:         1: 3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (hash: M04lbY81cSgReu/x5nMfcW4XL5j03JobsQGzMj/Vmmw=)
                          2: 3130332e32332e33322e302f32322d3232203d3e203535363939.roa (hash: +QbrV6etFGpBQNbf+3ULQNDoI74EGacs/J66k/55qRA=)
                          3: 3136302e31392e36342e302f32322d3232203d3e203535363939.roa (hash: x+/p3Q5ADGqhUvhLNv+geBcsDnQ0jyijDiW56RBXbO4=)
                          4: 3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa (hash: AkhktkyJIyCLLreKUWD/ZxrgDzrbrWRbyI+iKLWwlw0=)
                          5: 3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (hash: VUWhftZCz6t5WvzC4+/sPlF0zMj6ttLXWdYMj0+uIE4=)
                          6: 1976DD7D4FBDFBEB355F0B96690613959E106872.crl (hash: V8FUmAPSAJUFKwq6/a74/ODwhVYQxY2CpDIdB33Ep6E=)
                          7: 3130332e3235352e3135362e302f32332d3233203d3e203535363939.roa (hash: QKJnBYsa48aeQstLVfndf8/+iYcSarM3RMNHB08BXNY=)
                          8: 3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (hash: ehMw7XipDXtku35OIScfEFa1n231s20Vh+1JJFGZJOg=)
                          9: 323430343a613163303a3a2f33322d3332203d3e203535363939.roa (hash: qLMqaWG01btU4DjLVKlNjSmJQeLYWY8XvQDF/McekDU=)
                          10: 3230322e3135312e31322e302f32322d3232203d3e203535363939.roa (hash: acQbJQpWqGWIfvq9W6fl9QpMJKA8AlxG/taJBCqg2AI=)
                          11: 3230332e3231302e38342e302f32322d3232203d3e203535363939.roa (hash: S14Z6UvQgxm3zvnB7IqJQnjifft19IGaxbuliv63HPA=)
                          12: 3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa (hash: n0idqAAuE50Cj/bGGCbY0uwiIVXsU1cdHPDhEeqJtd0=)
                          13: 3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa (hash: 2Xzrd99gfWjLyXPyVFPR6/hDG8K/iUOh9y8qCTgaWaM=)
                          14: 3230332e3230372e35362e302f32322d3232203d3e203535363939.roa (hash: Xt7X2bDgMkDTBBHqsSxamiZR8k2GuMHWvJZy4/PpiEE=)
                          15: 3132312e35322e3133362e302f32312d3231203d3e203535363939.roa (hash: y1d0G8T+Y3oi/U7zYsXxsMEdHM9mWNptYCytl+n7OUQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 May 2025 23:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6f:46:8e:c1:8d:a9:10:1b:25:e0:09:3d:85:d3:7c:2c:6a:2c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: May  7 21:56:53 2025 GMT
            Not After : May 10 23:56:53 2025 GMT
        Subject: CN=2B59F999D3C755458A13A493E37654DB1011BE75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c6:fb:7e:5c:d5:27:a6:76:d3:a7:c4:d6:ca:
                    a1:e3:9f:e0:85:e4:fa:04:d9:b5:bb:46:4d:1f:e5:
                    23:2a:4e:c5:35:24:0f:1b:37:c9:bd:63:1a:d6:49:
                    d8:07:de:93:af:af:76:5e:3c:68:d3:14:6f:b0:4a:
                    e3:f5:f2:e8:b2:3f:39:3c:c4:40:a0:69:f6:41:8f:
                    1f:d3:8e:d2:0a:b3:dc:a4:bb:c3:fe:a1:64:6b:68:
                    55:a5:26:30:95:7d:96:12:4a:fb:ac:9f:d0:ea:b0:
                    17:65:a3:b2:41:3d:0b:22:eb:91:07:af:e3:86:3d:
                    3f:53:60:d2:94:40:85:97:2d:f0:14:f1:d2:38:c3:
                    de:0d:10:b8:7f:21:ce:8f:b4:04:45:e9:e2:ad:70:
                    6c:b1:ba:6d:a2:87:89:e4:9b:d9:75:45:c2:e4:8d:
                    3b:ba:d7:0b:8b:81:be:23:61:4c:22:45:b2:ec:86:
                    3a:31:ed:dc:1d:96:f8:d3:9a:8a:5f:1f:6c:a3:d6:
                    46:af:81:60:04:d4:cb:01:d8:fb:0f:ec:81:94:e7:
                    37:12:ae:03:bd:f8:d2:ac:65:30:fa:1f:f7:23:bd:
                    3c:f2:2d:ee:e4:32:2e:cc:8b:4b:d0:f5:6d:b4:18:
                    57:4f:32:f0:7d:b1:67:5a:d7:00:2d:0f:b1:e4:6b:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:59:F9:99:D3:C7:55:45:8A:13:A4:93:E3:76:54:DB:10:11:BE:75
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:23:05:86:d2:cc:4b:c4:eb:e7:cc:26:78:a0:88:1e:2d:a2:
         55:d4:4e:ea:d3:7a:49:2e:aa:d8:e4:84:3c:bd:73:1a:d5:41:
         50:69:5b:05:ca:68:ca:2c:7b:08:02:1d:fc:7b:d3:29:19:3b:
         b9:79:fa:18:73:14:10:4e:3a:22:7d:d2:56:fa:45:29:83:36:
         c5:0b:9f:6b:12:df:a7:dd:7b:29:b7:f8:78:ce:92:43:a7:a4:
         84:d1:1f:79:17:8c:ea:3e:ce:d2:4a:d6:58:27:b8:e8:b0:02:
         10:51:5a:c3:ca:da:d4:ba:f6:2e:b8:20:29:70:93:99:97:fb:
         7a:ac:73:1f:b6:4f:65:57:b9:a0:0f:3e:c6:a2:e0:0c:38:f1:
         f1:93:99:f1:bc:7e:94:32:12:e1:c3:3f:9b:69:ca:45:b2:82:
         eb:ab:e2:d0:7d:72:2a:d8:b2:f4:b9:0d:70:58:02:40:96:91:
         5e:0f:b1:28:d5:c6:a3:62:f4:2e:f9:b9:26:25:a3:90:52:ba:
         97:49:cc:54:17:87:79:74:d7:15:a3:89:1c:69:be:3a:76:25:
         ec:5b:e6:ec:dc:83:7e:34:0a:a6:26:13:d7:96:8b:84:57:a5:
         6f:b5:61:e7:73:c9:bf:b7:3e:eb:bf:d5:1d:01:ef:9f:c8:ea:
         4b:b4:22:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:00:17 2025 by rpki-client