Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
File:                     8469874AE268E2CD4E9A137EDD5599C748530E9E.mft (raw, json)
Hash identifier:          uLf1gMiT3Le8oXuyiO4Oa5tJTCyhDOly+pAmU4fEY3I=
Subject key identifier:   30:A7:93:65:38:28:9A:4F:B0:03:8A:CD:A0:5C:B3:09:97:AF:F0:A0
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Certificate issuer:       /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial:       4E521DAF3B1B651F4C2A69895AFF84CEB599C3EF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
Manifest number:          04FD
Signing time:             Sun 15 Jun 2025 17:52:07 +0000
Manifest this update:     Sun 15 Jun 2025 17:47:07 +0000
Manifest next update:     Thu 19 Jun 2025 01:45:07 +0000
Files and hashes:         1: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: w3mgpqsf+QCQ0IESSJ7u/cpRjR0jksdX+ZR9wNYh8rI=)
                          2: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: 8kcmZ4RG24jB44cBv71IJKv0c+Dtp9Ygk9nrjPzZQxo=)
                          3: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: zqqM4+D0YvV3kzADDLg9UoTtA+fv3LSZ59niExdp6h4=)
                          4: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: 1wEjJgzGmGFQx1qLaHwF1vXvoQd7g22cQT5tuVMpCSs=)
                          5: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: lejxupJB/ypozilIjk9IOKEOtlHup4PnPlCfI+BqLVI=)
                          6: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: 0on0Zr09JZO2uwExsn4al/aKrzhro4Rbk1hM7yfdFaI=)
                          7: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: nBHgJ9scpxnDLh4WsmH3WPakx6Rx02RsuPBuZbUxKAs=)
                          8: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: 6BZFe33/a07P77heVgE/RRa/s7Eo4pTfBbM0ftWFlFs=)
                          9: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: q6gnQ689gbyPRWkFyTqwu7clrVFZi6YA0qntQoU052Y=)
                          10: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: LN+YrVCzUblkTbFghEN9RcfZWB+oIkio+9woygN18Nk=)
                          11: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: t5dSILf0M9LETh0ONTCtPeHbE5Gq+eulQJzX449lTa8=)
                          12: 8469874AE268E2CD4E9A137EDD5599C748530E9E.crl (hash: XfujUM8Y8bKg5Fbzi9GYzz280oR1/Pp5e4avglSuxyU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
                          rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 01:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:52:1d:af:3b:1b:65:1f:4c:2a:69:89:5a:ff:84:ce:b5:99:c3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
        Validity
            Not Before: Jun 15 17:47:07 2025 GMT
            Not After : Jun 19 01:45:07 2025 GMT
        Subject: CN=30A7936538289A4FB0038ACDA05CB30997AFF0A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:87:10:7d:e0:57:f9:9c:a5:71:71:06:86:
                    a2:9b:b0:46:d6:53:b3:6e:24:44:11:a6:7a:6b:16:
                    cc:d8:36:4f:5f:2a:51:de:3d:c6:65:5c:f8:75:b6:
                    fe:68:52:9e:67:3c:a4:72:db:93:df:7a:ee:95:af:
                    c6:2f:64:09:ca:78:b8:ff:dc:6c:1e:53:17:ce:4b:
                    79:5c:36:fe:80:3e:c6:e4:2f:0f:7d:29:9d:46:30:
                    d0:3f:c4:38:69:3d:c5:6d:f4:ff:ee:7f:34:0b:50:
                    58:66:1c:9c:71:e3:3d:bb:af:82:bd:89:20:43:cf:
                    69:d6:c8:69:2d:84:3e:7c:56:7a:b6:fb:c5:f2:e4:
                    3e:77:86:34:d3:db:4d:5b:49:1a:95:08:2b:75:7d:
                    fc:5e:2e:59:e6:38:38:20:fc:24:dd:41:5d:63:c2:
                    23:1c:49:82:00:3d:04:b1:7f:33:4a:01:0c:60:b8:
                    fd:c1:df:cc:a3:fe:d7:7b:e2:74:ea:69:89:1c:10:
                    9d:53:dd:fe:a9:79:b2:70:9b:fb:b1:fe:45:a2:e7:
                    e7:76:d0:18:4d:36:0b:b5:77:1f:71:e8:d9:d3:0b:
                    2e:59:e3:57:cd:bd:93:1a:88:33:12:27:80:98:96:
                    d5:28:e6:97:68:39:eb:6e:6d:56:27:6e:40:9d:c1:
                    3c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A7:93:65:38:28:9A:4F:B0:03:8A:CD:A0:5C:B3:09:97:AF:F0:A0
            X509v3 Authority Key Identifier:
                keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a8:ac:02:14:f4:83:64:28:04:d7:b8:31:93:e8:b7:ad:b5:
         48:72:d8:de:08:f1:1f:8c:22:11:9b:f8:2f:f3:6d:79:a8:e8:
         58:77:50:f7:36:b9:8e:6c:73:b8:8b:67:34:0a:26:b0:c9:00:
         47:12:a5:5a:19:a7:65:72:d0:b7:e4:d8:62:19:32:4d:c6:22:
         d9:8f:2b:c3:77:fa:e1:1f:89:28:08:dc:21:da:e8:e2:61:7b:
         05:e6:c2:15:df:34:c8:84:5d:85:96:44:a4:7b:16:6d:6b:24:
         90:85:e0:df:23:df:ce:dc:ea:aa:34:3a:0c:82:93:d1:69:03:
         5e:31:fd:97:c1:cd:f9:a3:22:03:39:29:30:4f:90:45:65:8c:
         a1:37:4b:69:c3:41:c5:11:f0:c0:16:e7:35:db:d2:56:3f:60:
         93:6c:a6:7b:46:ff:56:4c:9d:d1:58:7a:96:c7:01:ee:45:0e:
         f6:3f:f1:91:dc:f8:02:86:ce:34:f9:bd:39:0f:b0:d5:72:b7:
         62:c9:b2:8e:ed:c6:e4:fd:6e:21:ce:45:64:99:37:4d:39:da:
         32:76:94:9d:f9:c1:a7:d5:4e:ce:5a:35:99:ed:58:aa:8f:13:
         4b:66:e3:07:e7:6a:fb:68:00:50:16:0c:37:68:1b:0b:66:f2:
         c9:23:e7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:41:43 2025 by rpki-client