Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
File:                     E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft (raw, json)
Hash identifier:          hcXhD3aLlTFe0vFqmL0a+9VzMHuUcNByLyCkA2VOPlc=
Subject key identifier:   8A:A1:FA:C2:99:13:86:2E:E4:FF:32:30:49:CC:1A:01:07:A0:0E:68
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       5847A56269512E3DA5077F8F1B824378F76097EB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
Manifest number:          04E6
Signing time:             Fri 02 May 2025 04:41:32 +0000
Manifest this update:     Fri 02 May 2025 04:36:32 +0000
Manifest next update:     Mon 05 May 2025 10:59:32 +0000
Files and hashes:         1: 3130332e32302e39312e302f32342d3234203d3e203538333831.roa (hash: euk9OJMoqKJ/PoRjzKpkFgAP821pupDkAT5Pdi0akjA=)
                          2: 3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (hash: hvbDj3oW0Ulg1k85u9jkPnoGdFUSrxAWB+C8nIEEK6o=)
                          3: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (hash: /OfdPYALZiupMxs8iF6+SD24UB/8ZrzibAD0LeJLOAs=)
                          4: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (hash: vA7wUsbitPXQ/g+uEYWZCPKwK0C5BXMnrLidIFEb1Os=)
                          5: 3130332e32302e39302e302f32342d3234203d3e203538333831.roa (hash: U8zMaSQ7+KDj9JX6Jxw28z4BWL6cFt7T425dsrSW9yo=)
                          6: 3130332e352e35302e302f32342d3234203d3e203538333831.roa (hash: it/SzipXfJLThyc3J7HfzvzUSlGSxUAWhA/O+pawjWg=)
                          7: E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl (hash: uBBKudC6kIwiuaNaG1TxO2m4RRgX0JJNIsiR21imRlA=)
                          8: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (hash: yZc1iS4QoDixBleI5zCzNqJxlWUKStGiBLindHs1iEI=)
                          9: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (hash: 3bTLU0r/kGjXKDq/4CyYvhxk4DKQ0m82aKinCx3VEv4=)
                          10: 3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (hash: sWFHDQkTsVJom3rOu9Mf9y3OJpTKgRwn5bDfHA2Pw9Y=)
                          11: 3130332e352e35312e302f32342d3234203d3e203538333831.roa (hash: 8JW2i4QARgl0zJX/bSzH4du3GV59x2527JCrnJKQbAc=)
                          12: 3130332e352e35302e302f32332d3234203d3e203538333831.roa (hash: n6DP+hj0ytP63iMEg7QfxbSfnpN9qL6B51j5r569ips=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 10:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:47:a5:62:69:51:2e:3d:a5:07:7f:8f:1b:82:43:78:f7:60:97:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: May  2 04:36:32 2025 GMT
            Not After : May  5 10:59:32 2025 GMT
        Subject: CN=8AA1FAC29913862EE4FF323049CC1A0107A00E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:db:22:a4:5f:9b:83:64:47:2a:b7:58:3f:
                    2e:7a:d0:67:d0:9e:bc:a3:30:dc:97:0a:90:17:bf:
                    60:80:fb:f3:10:33:69:07:4f:28:bd:df:00:57:29:
                    4d:9c:19:8e:a1:c4:db:9a:dc:28:ac:00:09:31:88:
                    91:8c:9a:7a:5d:bc:f8:a0:09:3b:79:28:68:b8:80:
                    da:a5:0e:fd:15:7c:9f:ec:5d:96:84:9a:79:ae:b7:
                    df:70:b2:3d:5c:8c:8a:ae:bc:12:b5:96:3e:bf:b3:
                    d2:9b:80:a1:f4:6d:79:cb:73:93:12:87:b6:41:51:
                    7d:b9:fc:51:78:96:81:20:fe:f0:7d:18:83:51:3e:
                    a3:87:8e:cd:34:34:ad:22:8b:cc:86:09:7a:bc:b7:
                    d1:10:b7:d1:36:3b:48:43:88:43:00:7d:61:ce:a0:
                    1a:b5:31:ce:67:66:b9:dd:96:4f:f7:cf:cd:08:57:
                    6d:80:7a:02:9c:0d:63:16:3d:50:23:49:17:7f:22:
                    e8:c1:5d:7e:42:ee:ad:1d:16:a1:48:f7:bb:e2:be:
                    29:d2:7f:f0:40:f5:e8:4f:8b:fe:81:8e:d2:57:4e:
                    f8:65:e4:44:4f:21:81:d4:ca:65:24:3d:a0:b0:31:
                    01:e7:a4:bf:c8:4f:d5:0e:ec:54:57:a7:e1:82:b4:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A1:FA:C2:99:13:86:2E:E4:FF:32:30:49:CC:1A:01:07:A0:0E:68
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f7:ea:e2:3a:8a:5d:ef:03:91:d0:34:5f:9f:95:ed:98:48:
         9d:8d:ff:6e:60:1d:f1:fd:1f:43:87:bd:df:24:61:82:00:10:
         f2:19:f1:49:ae:78:35:df:13:b3:fa:f3:22:1a:3b:f7:ae:9d:
         5d:26:7d:4d:a0:54:5b:b3:9b:03:f2:2d:1c:57:d2:de:bb:49:
         b4:b5:45:1f:a1:53:77:b9:90:1e:a9:25:39:32:17:65:0c:a4:
         78:5d:e0:c2:f3:78:b0:25:ce:91:e2:9e:5a:f6:7f:03:59:14:
         7c:f7:43:04:6c:ec:f3:4b:d5:bb:c5:91:41:2e:11:49:e4:1e:
         c9:a9:c8:8d:2d:b5:c8:39:1f:9b:d3:2e:d2:37:b4:3c:3e:6f:
         7f:bb:59:09:59:1c:58:9e:96:4e:b9:19:27:e1:4c:17:6f:d8:
         80:0b:aa:19:6a:cd:37:4d:ac:3e:10:47:64:79:a3:72:78:c2:
         7a:a2:0d:7d:0f:04:85:18:37:5a:3d:dd:dd:29:32:57:78:32:
         03:18:f8:0a:c7:fb:db:cb:a3:87:64:40:ef:e0:69:00:34:c6:
         e9:6e:f2:3c:63:d4:9d:bb:17:4f:51:e7:a8:ec:6a:88:17:f3:
         e3:31:30:ae:7c:73:0b:2a:fd:32:9c:ad:1a:f5:37:fa:9b:9f:
         a3:20:98:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:04:03 2025 by rpki-client