Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft
File:                     90EF20986B3061451D9F1178EB4D439522186281.mft (raw, json)
Hash identifier:          TV+Ls9Cd2CE6WJiqYCWiuOTf2zynI/j20HgFeKu4aeM=
Subject key identifier:   D0:66:DA:75:F4:A7:FD:19:3A:4D:93:20:48:35:A4:CD:95:C7:97:77
Authority key identifier: 90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81
Certificate issuer:       /CN=90EF20986B3061451D9F1178EB4D439522186281
Certificate serial:       32699501D29A9B9FB670735C67034F66A0D3245E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft
Manifest number:          0255
Signing time:             Sun 27 Apr 2025 14:41:53 +0000
Manifest this update:     Sun 27 Apr 2025 14:36:53 +0000
Manifest next update:     Wed 30 Apr 2025 14:44:53 +0000
Files and hashes:         1: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (hash: vFQZ6zJmin+go144K352IonoJjOf81LutMdjmKX7MCM=)
                          2: 3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (hash: JSycxTOglnQdBUlrjThmP2GKqGp0iOUX7UEI4meYjIw=)
                          3: 3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (hash: 9Ryd3Iuo45mFpjlZiuD/h6nihGcwet3lKWcDNjIWflo=)
                          4: 90EF20986B3061451D9F1178EB4D439522186281.crl (hash: zc6lIulI84S/ljxCh5b+BAiIOYxNP5hhtBrV0eA9MxA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl
                          rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 14:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:69:95:01:d2:9a:9b:9f:b6:70:73:5c:67:03:4f:66:a0:d3:24:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90EF20986B3061451D9F1178EB4D439522186281
        Validity
            Not Before: Apr 27 14:36:53 2025 GMT
            Not After : Apr 30 14:44:53 2025 GMT
        Subject: CN=D066DA75F4A7FD193A4D93204835A4CD95C79777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:65:c2:59:ae:a2:98:34:e4:1a:a6:46:8b:
                    7b:cd:0a:5d:f6:f1:a3:18:6f:5d:70:16:71:e2:e1:
                    87:01:80:78:53:81:58:e1:9f:5e:7b:ea:46:91:1d:
                    48:5b:19:4a:2d:da:f2:4f:7a:a8:d0:b8:71:d0:7e:
                    e7:37:46:c7:2a:5a:d1:1b:c8:5b:a7:2f:5e:18:27:
                    ae:05:5a:a9:6b:e4:0a:fb:4a:8a:f9:9a:39:80:23:
                    af:f6:7a:82:fd:a7:bc:b7:10:2d:ce:55:ae:c8:24:
                    fb:fa:99:43:77:1c:d2:00:9b:53:dc:35:66:c2:89:
                    7d:38:2e:61:c7:1e:84:aa:c2:35:63:c3:37:32:af:
                    ce:52:27:79:65:e2:72:66:33:3f:41:00:f8:a0:c7:
                    6e:89:9d:a4:42:fd:9c:fd:e6:46:85:03:21:aa:93:
                    2f:d2:ba:a4:46:db:51:21:be:a5:3a:df:bb:51:5c:
                    a7:c8:04:70:3d:00:db:2d:0d:14:df:04:37:0e:76:
                    ee:13:28:15:86:2a:f3:fa:8f:e5:8e:c6:c8:d1:fc:
                    79:9d:e5:e9:c2:89:71:9d:8d:93:c9:77:f7:74:40:
                    d4:f9:c6:54:76:36:10:57:f0:9e:6b:b4:f0:54:80:
                    5d:a7:94:c6:0f:5d:25:dd:96:02:96:60:ec:0b:fb:
                    14:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:66:DA:75:F4:A7:FD:19:3A:4D:93:20:48:35:A4:CD:95:C7:97:77
            X509v3 Authority Key Identifier:
                keyid:90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:15:da:a9:a9:98:ec:66:0a:01:82:4f:36:f7:d0:ea:6e:4a:
         0e:da:75:3c:79:71:05:9d:86:b2:cd:53:14:21:ce:51:0c:96:
         75:27:8e:54:62:dc:48:45:f8:28:a0:18:9d:ce:43:0f:11:2d:
         29:d1:b9:86:b8:2e:f6:90:c5:ee:c2:88:0f:2f:6b:22:b5:7c:
         a9:8b:50:2e:fb:6c:7e:19:77:05:c4:3d:12:e8:ad:c7:17:95:
         17:e8:ce:a5:45:4c:fd:99:ff:f4:4d:43:16:fe:94:bd:76:df:
         0d:48:ca:b5:11:4d:84:7c:5c:ee:2a:7b:27:e1:6f:7a:e2:8f:
         02:45:a8:13:95:c6:51:60:eb:09:16:57:f0:16:80:13:98:81:
         2c:a8:25:90:9d:de:55:cd:e5:b1:6e:3c:5b:14:fd:08:a0:c9:
         29:b4:e1:8f:b4:0d:86:6a:42:34:db:ee:ed:7b:f6:18:f2:0d:
         6d:46:31:e1:f3:d0:b4:f3:3c:4e:8c:66:05:5e:07:e1:d6:7b:
         6b:8f:cb:2e:77:70:58:2f:56:72:12:10:3d:0d:5f:82:66:e8:
         ee:83:ee:da:8a:61:8d:e3:7a:07:5f:f0:69:d7:50:e8:f7:1f:
         cd:99:cc:2a:b3:b0:94:c1:09:bd:89:90:83:51:08:e6:31:db:
         62:c1:29:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:49:48 2025 by rpki-client