Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
File:                     405E466852C38FD4CD20BA6115840947D5D24F5D.mft (raw, json)
Hash identifier:          rdMcK72t8K55bc5H7QpUEQe8y44k2thbgbwLQ2PoREs=
Subject key identifier:   82:5D:1D:34:9C:C6:0F:A5:8B:E9:95:79:77:D9:66:C6:49:F2:A4:49
Authority key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D
Certificate issuer:       /CN=405E466852C38FD4CD20BA6115840947D5D24F5D
Certificate serial:       67F4B3EB5D64D7FC142C54781242B1C77ED5B926
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
Manifest number:          8B
Signing time:             Tue 17 Jun 2025 03:11:09 +0000
Manifest this update:     Tue 17 Jun 2025 03:06:09 +0000
Manifest next update:     Fri 20 Jun 2025 13:51:09 +0000
Files and hashes:         1: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: hOlyHuu2wphYhBJDocKFWHEZrEGEanCNnjs4wR5XHPw=)
                          2: 405E466852C38FD4CD20BA6115840947D5D24F5D.crl (hash: PF5RGqpBVYjlS5mj0lh+Hu8DGX3fXwMims8M+sXdpBc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl
                          rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 13:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f4:b3:eb:5d:64:d7:fc:14:2c:54:78:12:42:b1:c7:7e:d5:b9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405E466852C38FD4CD20BA6115840947D5D24F5D
        Validity
            Not Before: Jun 17 03:06:09 2025 GMT
            Not After : Jun 20 13:51:09 2025 GMT
        Subject: CN=825D1D349CC60FA58BE9957977D966C649F2A449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:6b:ae:4a:01:b4:3d:5b:fa:85:2f:00:ff:
                    ce:97:9a:6b:65:46:f2:4f:ec:b3:6b:26:ad:f3:1b:
                    f2:70:61:b7:3e:e2:5e:c4:58:1f:d7:e3:0d:81:00:
                    e1:d9:02:d1:12:9b:0a:85:7f:1f:d3:99:ca:09:b4:
                    41:55:fb:f1:35:dd:6f:f7:9d:c9:2e:9b:88:66:91:
                    a6:00:b6:95:cc:2e:29:12:25:88:6e:e5:56:b0:88:
                    37:7f:fe:5c:7f:59:69:f9:b7:9f:bd:a6:9b:dc:00:
                    3d:26:9f:da:a5:dd:09:37:38:01:8f:57:bb:15:88:
                    7b:cd:cd:49:89:d5:11:c7:27:96:0a:d7:7f:9c:24:
                    08:9e:4d:8d:33:33:0a:8e:bb:ff:a9:a1:55:85:78:
                    af:68:2c:9b:e2:09:c9:46:24:2f:56:71:aa:09:cd:
                    94:d0:15:6b:25:e1:a4:34:52:93:80:29:a3:78:d2:
                    71:28:b4:ba:9c:91:85:bc:ec:12:26:20:43:f0:5f:
                    09:16:fd:49:c4:e7:f3:5b:00:41:92:64:94:62:b4:
                    b0:9c:5a:26:6e:f8:1b:22:c7:c4:9c:74:62:82:3c:
                    3b:72:bb:f8:40:a1:13:ac:61:f2:c1:ed:0a:9a:53:
                    e3:b6:6b:f7:7a:6d:6e:fd:67:9b:4e:0d:4e:b4:b1:
                    de:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5D:1D:34:9C:C6:0F:A5:8B:E9:95:79:77:D9:66:C6:49:F2:A4:49
            X509v3 Authority Key Identifier:
                keyid:40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:42:2c:63:f9:c1:72:87:7b:86:a1:bd:a4:85:f0:f7:f4:37:
         f8:59:74:33:5f:1c:47:5c:a6:cd:69:8f:16:56:2a:2c:b1:b6:
         ca:be:fb:9c:cb:b7:3f:00:da:08:75:4c:71:b3:9a:75:e0:32:
         3f:77:59:e8:f1:2a:07:39:fa:e4:86:b7:5c:6c:4c:28:0f:8d:
         dc:b4:66:fa:c0:ee:13:ae:b3:2b:f3:d4:03:3f:89:8e:a0:d2:
         df:1d:d2:a4:d4:09:2c:97:84:1c:0c:96:0e:1b:e1:be:bb:55:
         0d:d3:8d:fd:74:28:18:66:d5:75:ae:ff:a2:88:81:fb:66:8a:
         e6:18:b1:3b:c6:37:63:25:25:bc:26:40:fb:be:b1:3c:c3:84:
         3f:9a:58:f2:90:bd:b7:81:16:90:ee:b4:c6:49:2e:5d:fa:e4:
         42:36:ba:16:6a:48:e9:0e:31:ad:be:02:0d:d5:2f:75:01:b4:
         6c:f1:97:27:d5:c4:c4:c5:08:b5:d0:5a:e6:b7:78:ae:5b:f9:
         25:3e:74:93:62:0c:38:2d:74:ae:d3:13:ed:c0:d5:e4:ac:36:
         d8:54:5d:61:5b:44:db:2d:4a:67:53:8b:d0:ac:ca:ae:87:ac:
         50:8e:5a:b8:45:f1:03:e9:76:48:cf:1e:be:20:58:14:71:8c:
         f6:97:2c:d9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ/Sz611k1/wULFR4EkKxx37VuSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdE
NUQyNEY1RDAeFw0yNTA2MTcwMzA2MDlaFw0yNTA2MjAxMzUxMDlaMDMxMTAvBgNV
BAMTKDgyNUQxRDM0OUNDNjBGQTU4QkU5OTU3OTc3RDk2NkM2NDlGMkE0NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23GuuSgG0PVv6hS8A/86Xmmtl
RvJP7LNrJq3zG/JwYbc+4l7EWB/X4w2BAOHZAtESmwqFfx/TmcoJtEFV+/E13W/3
nckum4hmkaYAtpXMLikSJYhu5VawiDd//lx/WWn5t5+9ppvcAD0mn9ql3Qk3OAGP
V7sViHvNzUmJ1RHHJ5YK13+cJAieTY0zMwqOu/+poVWFeK9oLJviCclGJC9WcaoJ
zZTQFWsl4aQ0UpOAKaN40nEotLqckYW87BImIEPwXwkW/UnE5/NbAEGSZJRitLCc
WiZu+Bsix8ScdGKCPDtyu/hAoROsYfLB7QqaU+O2a/d6bW79Z5tODU60sd4vAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgl0dNJzGD6WL6ZV5d9lmxknypEkwHwYDVR0j
BBgwFoAUQF5GaFLDj9TNILphFYQJR9XST10wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YWM2MTU1ZS0yZDJmLTRmOWUtYjIxOC1lYjUyNWIzYTExMTkvMC80MDVFNDY2ODUy
QzM4RkQ0Q0QyMEJBNjExNTg0MDk0N0Q1RDI0RjVELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdENUQy
NEY1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFjNjE1NWUtMmQyZi00ZjllLWIy
MTgtZWI1MjViM2ExMTE5LzAvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5
NDdENUQyNEY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFxCLGP5wXKHe4ahvaSF8Pf0N/hZdDNfHEdc
ps1pjxZWKiyxtsq++5zLtz8A2gh1THGzmnXgMj93WejxKgc5+uSGt1xsTCgPjdy0
ZvrA7hOusyvz1AM/iY6g0t8d0qTUCSyXhBwMlg4b4b67VQ3Tjf10KBhm1XWu/6KI
gftmiuYYsTvGN2MlJbwmQPu+sTzDhD+aWPKQvbeBFpDutMZJLl365EI2uhZqSOkO
Ma2+Ag3VL3UBtGzxlyfVxMTFCLXQWua3eK5b+SU+dJNiDDgtdK7TE+3A1eSsNthU
XWFbRNstSmdTi9Csyq6HrFCOWrhF8QPpdkjPHr4gWBRxjPaXLNk=
-----END CERTIFICATE-----
Generated at Wed Jun 18 00:06:51 2025 by rpki-client