Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft
File:                     30D21A97E1EED902F151C3022374D979F0A4A7EF.mft (raw, json)
Hash identifier:          RgP4+jwnNCIiSwtYmXwrz8akIzEtFQC/oHvQ8/yHGUU=
Subject key identifier:   63:28:3F:D8:2B:AB:5E:C9:13:55:A9:6B:80:1C:96:99:32:92:C6:B4
Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF
Certificate issuer:       /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF
Certificate serial:       C9956D0B9D2F9A0AEB1C7EEB532977A9FDCCDA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft
Manifest number:          EA
Signing time:             Fri 09 May 2025 11:51:40 +0000
Manifest this update:     Fri 09 May 2025 11:46:40 +0000
Manifest next update:     Mon 12 May 2025 20:49:40 +0000
Files and hashes:         1: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: lGxv0hhUzCj7M28hqKeyqRqBKDDJKTxW9siQxZRW/8Q=)
                          2: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: ROzSHjIj4d0A5I5xwPcr8qcP04vsXN3kHThsDDQGeag=)
                          3: 30D21A97E1EED902F151C3022374D979F0A4A7EF.crl (hash: rcg1LfWcADaCo8Pv6Lnoh4IDDOlRuoDjJ0xfRZSmvK4=)
                          4: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: nmoiRM53K6xpzn1bErPhguSmoFMNRryI2xbTQlBLJ8Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl
                          rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c9:95:6d:0b:9d:2f:9a:0a:eb:1c:7e:eb:53:29:77:a9:fd:cc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF
        Validity
            Not Before: May  9 11:46:40 2025 GMT
            Not After : May 12 20:49:40 2025 GMT
        Subject: CN=63283FD82BAB5EC91355A96B801C96993292C6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7d:fe:3d:ff:d8:c6:b7:22:9a:3f:c0:58:f9:
                    f6:ec:ec:43:25:f2:fa:fa:26:e6:c8:a3:fe:1f:59:
                    76:b0:67:70:3f:59:dc:7b:58:34:5d:75:d6:f5:43:
                    73:ce:2f:c3:98:42:79:81:a1:0c:26:8d:62:ec:04:
                    94:67:d1:33:a3:78:7e:35:1a:99:29:41:db:f1:cf:
                    07:8a:af:6e:82:cc:42:50:a9:54:58:ef:dd:9c:59:
                    a5:bf:2a:ef:eb:ca:44:0e:4e:c3:12:14:4a:90:06:
                    a1:f8:b1:e5:20:99:84:26:d8:56:7a:ef:ef:6e:b3:
                    00:14:61:0b:a3:d1:01:a8:e3:4b:37:b8:ee:69:c5:
                    ec:bb:2d:e7:d0:cc:81:4c:d5:de:4c:84:f4:ef:67:
                    d6:cc:cd:2e:db:c9:09:e3:bf:72:5f:99:ac:52:b4:
                    e9:60:a6:22:4f:7f:da:ad:7f:58:39:10:01:3f:17:
                    5c:6f:2a:74:7f:61:48:b9:7a:52:01:d5:1e:63:e4:
                    b5:cd:a6:f9:b7:ad:3e:9c:a9:91:04:7b:c4:33:f9:
                    f1:59:fc:6d:fa:6e:79:45:82:e5:97:3f:57:3a:bc:
                    ee:ca:b8:01:c2:89:88:74:7e:c4:3c:79:7d:c6:74:
                    21:13:1d:f1:dc:d0:b8:21:ae:c8:ce:6e:89:6b:ef:
                    06:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:28:3F:D8:2B:AB:5E:C9:13:55:A9:6B:80:1C:96:99:32:92:C6:B4
            X509v3 Authority Key Identifier:
                keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c3:d0:3a:5a:6e:7d:e0:7d:65:22:72:2c:7c:cd:0d:0d:8a:
         a9:5c:1c:7f:ac:aa:60:90:42:59:5f:01:4d:2c:dd:46:ff:14:
         a9:bd:13:c2:06:7a:1f:a0:4b:6f:5a:a3:c5:d6:d1:a1:1b:39:
         ef:1d:a6:ea:25:6b:4e:7b:36:f1:b3:21:74:5a:3c:94:90:9c:
         f1:8e:0f:17:71:13:f7:31:1b:94:e6:29:6d:d5:1d:1a:9a:99:
         a3:37:f9:3a:25:2a:45:b1:0a:65:4a:6d:e0:cb:f7:69:70:67:
         04:cc:63:0c:cb:2b:c1:2f:9e:8c:c6:cc:5c:bd:b9:bd:49:6d:
         22:10:59:0e:8d:42:2c:88:21:98:38:b6:ba:19:05:9b:e7:21:
         d5:24:5b:b4:7d:cc:13:00:73:05:dd:b7:a9:7b:9e:da:54:7a:
         21:f8:2a:37:bf:ec:c1:43:3d:57:8f:8d:a3:9d:52:e0:8a:7d:
         56:4b:8b:2c:61:cb:89:08:a3:c3:a2:15:04:16:95:cd:00:02:
         1c:9d:d8:84:a6:72:4d:ee:25:46:40:e4:dd:6a:97:2b:31:17:
         a9:ac:3a:16:5b:57:94:b0:91:47:d2:ad:2b:01:0e:46:bd:19:
         3d:97:51:ec:14:8e:e9:35:33:45:b7:74:cb:d8:55:02:6c:81:
         8f:4d:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:38:34 2025 by rpki-client