Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
File:                     4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json)
Hash identifier:          5B00esmcJvbHJQ7Ho24yegQ8kRzQx94ye33NnVK3rBw=
Subject key identifier:   E2:39:88:25:0B:A9:52:1D:EB:47:47:83:21:65:34:FB:F1:72:08:B6
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Certificate issuer:       /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial:       57AF1464D65AA05718E37F810BD4CD059BFC2AFB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
Manifest number:          9A
Signing time:             Sun 27 Apr 2025 02:01:23 +0000
Manifest this update:     Sun 27 Apr 2025 01:56:23 +0000
Manifest next update:     Wed 30 Apr 2025 10:52:23 +0000
Files and hashes:         1: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: /RbGQNrG5f2b5xUZmbLZIUIJCT8zlW48+GUxpa/P1BY=)
                          2: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: DUx1uGcFaMxSBQpP1ITofuirpaclZNzBSNRp/I11LcM=)
                          3: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: hfVgYmT+s3T/gP2ZWIlWtZU/K6JQ3MvR1bPnXxp9XLc=)
                          4: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: mdadZ+r3nk3ljg8TD8Qk3FJTWop4VzOG0q1+8q98qdQ=)
                          5: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: CExyw62yhaULfuFNwHgJQzvOaDneumlJpO9PSL24k5c=)
                          6: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: /Nnh6j9dQCYcuoIKmMpFeUVi7V4lhYfyFAMUQ8KcTyY=)
                          7: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sw0SlIxt+FA7pZy4rkUInlCn0uAcgR4nYJ5Re3N9oxc=)
                          8: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: BcmLy7eGAXxwcAZfEvgQEqwzVahjl/LS8t/7DNQb3O0=)
                          9: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: amybII68a8VE28x622WWbP3X6DorgNErjKJn51v04hU=)
                          10: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: opmintFf7rKX4t8MJAAA/SPs3kIqRtIjgx+RStmQ20g=)
                          11: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 2kWw72G7y9+iu7Oj2LdzHrFFqPrgZYlByeJlEDz3xGE=)
                          12: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lc21YQEjyBtBR3cEzA2MpTAYh2Z++8zZog+Taujf5EA=)
                          13: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: T8cBlOmjcetrSbtW+daV9YtXlBHJ/TgUuSP0ZRu08us=)
                          14: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: Lk2DgYj+QODfg+053uFba0kcIHOb5Vr+/MafHCR41Bo=)
                          15: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: Wdn8WLm/z70TbHCfvi7cPeFpinXRYOP3acHf9F2yoZI=)
                          16: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: 12eKUXGhIz6FHVGhhjWlfvlhTiivVo5sPJpz1GDHaMw=)
                          17: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: f+QA2MdOH3pD5wnFB0dGm2Zrsg4T8gtTfRmGOdNWdhQ=)
                          18: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: cFUzi273SYArAUsUFdIqNgQFTFMOnTlJq02/dC40bZE=)
                          19: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: IUWcIIvw/5B79/1vlmhpjp2xq/bxBr1gvBDlm1MJkEE=)
                          20: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: VrqEqcYe4ew7uni6W9u41N7qHk2GgBXWkfjAlNiKflw=)
                          21: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: 2dvpZD7SkLIO8Bb1a+NTuA+XOzdWGBmc4e1hLBWS+aY=)
                          22: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: Rd+MYgkYtI8Em6b7VkPxEFn2gv60uz4eRZ5jfkklOME=)
                          23: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: PWcu8n1GQVYIbIpIIeTmS8WPhGjRtUMxtKVHKNkmcLA=)
                          24: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: vJHjXSNbN+nrHshiQZVlbnAzNovBDlJVOtnmhWeep78=)
                          25: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: CswFvDupWqQkmZpyiNQV19oxsV8YOajNmUapEbDiz6Q=)
                          26: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: FCPjRuILimc1y3AzWysntAW1lv6bPjvpNuCAb/4Y8KY=)
                          27: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9hl66Fb3ZZtaq9RTVyzyMYKvn9CeIA27uiDhLsoWI3A=)
                          28: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: NVdbP46U9HcnF9BcVuhppXenoJ+oGsK6bpcGbNkhYrY=)
                          29: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: htvHw1UId6QYt8Zem0GwkkJ79UHzGuY9MeNMUAYecR4=)
                          30: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: ZsU2hnorupqrYFme1F8mYhmx+8CljA3i8vqenwYb6GE=)
                          31: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: balnJcNONLw8SBYvt7tVe9VLlUUBAlIKjs8CUCdy5n0=)
                          32: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: v0m70RT7TsMBD2CfWXOxviOzxM9VbD9adOYfqtuzcmg=)
                          33: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: jSQKKM5t1FotHl9IvmmOV1bpO2Bm+Ktc/PrlSfNtDhw=)
                          34: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: bZomEerwTckK0uovhCRCPeCKuhMrW+Qy9Lz5ot1+QLM=)
                          35: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 62idZGQxlSWM3llZuSqKAdjwW6hLve0VhfHgcV849wU=)
                          36: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: +efjUKkfN7wyOn1gEZ4iK+HOgdi5kSwgmzRJxOnk92c=)
                          37: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: Z2kUGl4d2/nWr+hivZqHD1txvHpg/IJVAL0dy1bjHtc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
                          rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 10:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:af:14:64:d6:5a:a0:57:18:e3:7f:81:0b:d4:cd:05:9b:fc:2a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
        Validity
            Not Before: Apr 27 01:56:23 2025 GMT
            Not After : Apr 30 10:52:23 2025 GMT
        Subject: CN=E23988250BA9521DEB474783216534FBF17208B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:dd:06:72:c5:ab:9b:93:98:94:0c:62:ad:
                    27:0c:31:19:29:6a:05:36:18:77:19:99:31:d1:9a:
                    d0:41:66:36:50:a9:62:8c:33:4a:8e:ae:cb:35:0f:
                    45:1a:f2:58:fa:ac:ad:c3:c6:65:08:7a:6f:2b:44:
                    a5:57:55:7a:3c:11:5c:33:6b:43:f3:a1:3a:7a:92:
                    a3:ce:1e:7e:58:3c:b9:f8:c6:dd:89:a0:6d:3f:9f:
                    b3:5b:e8:fc:f8:00:12:8c:3c:aa:6d:25:0a:ce:09:
                    f2:14:f8:e9:f4:dc:e9:89:dc:d0:04:64:30:ef:b5:
                    b9:68:eb:50:cd:a7:c9:74:0b:33:92:46:f3:a5:bc:
                    4c:7e:9b:37:20:c5:1b:23:9c:9a:c5:cc:4c:6a:5f:
                    e7:cb:b7:32:bd:5f:7f:36:a2:a4:16:44:8f:cc:b6:
                    a3:11:c2:c5:55:57:38:02:73:70:1c:af:65:ca:f4:
                    d0:01:22:e2:0d:df:fd:b7:f3:e4:83:84:bf:6c:ad:
                    65:e5:db:1b:85:a9:41:69:5f:43:38:5f:e6:46:52:
                    78:1e:ad:59:5f:55:49:0d:de:91:37:c3:24:65:36:
                    f3:2d:80:ff:01:89:2f:f5:1d:3d:59:6c:da:4c:43:
                    57:fb:69:e4:2b:8c:40:56:9c:cf:a2:ab:81:c6:17:
                    59:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:39:88:25:0B:A9:52:1D:EB:47:47:83:21:65:34:FB:F1:72:08:B6
            X509v3 Authority Key Identifier:
                keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:78:ff:47:66:21:51:be:52:67:4e:de:19:d3:46:7b:05:60:
         43:10:65:ab:fc:9f:d7:33:66:49:3f:2d:b5:48:9b:ee:bd:84:
         a1:41:6a:5a:d2:b9:54:58:ac:63:77:3d:21:3d:b8:95:f6:d2:
         6d:37:4b:7c:94:ae:1f:b0:ba:ae:31:c7:ea:10:ac:1b:30:b3:
         2a:3f:e3:95:ad:4c:66:6d:c7:8d:4b:f1:c5:74:c5:ac:c7:33:
         be:64:45:85:ee:04:93:07:ba:ba:d7:4f:6e:44:03:ea:a3:62:
         11:fe:10:90:19:05:80:a3:75:41:d6:f3:37:d5:6a:77:b1:15:
         4b:33:29:20:9d:74:70:4d:63:e1:1f:cd:b1:62:ef:6c:2b:63:
         06:6e:7d:ac:29:d9:32:1e:4f:d3:54:4f:14:e0:94:53:38:25:
         c0:6d:77:63:4e:07:5a:99:9c:13:37:e0:60:83:b0:df:92:83:
         a0:69:5a:d1:a7:d5:32:2d:e2:14:66:d2:4a:81:6a:52:f4:ba:
         a2:15:e2:b2:e8:03:ae:b3:dd:c4:d6:03:8f:8c:d3:20:de:a5:
         55:b2:8d:4e:fa:7d:20:71:b5:d6:2b:29:89:9d:af:85:35:39:
         8e:64:c9:9d:87:12:b1:32:a9:8c:3c:36:29:d3:b1:28:f7:81:
         8c:f0:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:18:06 2025 by rpki-client