Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
File:                     405E466852C38FD4CD20BA6115840947D5D24F5D.mft (raw, json)
Hash identifier:          HkMcnmb52yqexBYHJJfeeWYPZYElH3OOouJ0vJgluE8=
Subject key identifier:   FF:C4:5D:2B:A1:08:47:7C:DF:18:AB:1F:E7:BF:26:F3:4F:3E:86:73
Authority key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D
Certificate issuer:       /CN=405E466852C38FD4CD20BA6115840947D5D24F5D
Certificate serial:       662BA5D6291A68A097750DB6ADB8B43B824F7320
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
Manifest number:          74
Signing time:             Sun 27 Apr 2025 04:41:06 +0000
Manifest this update:     Sun 27 Apr 2025 04:36:05 +0000
Manifest next update:     Wed 30 Apr 2025 12:55:05 +0000
Files and hashes:         1: 405E466852C38FD4CD20BA6115840947D5D24F5D.crl (hash: uRzmzf+NCwzfVxJE8Y1bNNGZ5X2BSaTPKuO/+/aVlBI=)
                          2: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: hOlyHuu2wphYhBJDocKFWHEZrEGEanCNnjs4wR5XHPw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl
                          rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 03:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2b:a5:d6:29:1a:68:a0:97:75:0d:b6:ad:b8:b4:3b:82:4f:73:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405E466852C38FD4CD20BA6115840947D5D24F5D
        Validity
            Not Before: Apr 27 04:36:05 2025 GMT
            Not After : Apr 30 12:55:05 2025 GMT
        Subject: CN=FFC45D2BA108477CDF18AB1FE7BF26F34F3E8673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:c6:b4:91:24:cc:96:22:1d:d4:f1:52:11:
                    7c:70:9a:9c:4c:71:47:dd:af:18:d6:65:5d:8c:db:
                    41:64:57:62:93:c0:b6:e5:ce:ee:cc:34:95:f3:80:
                    aa:2f:4a:1d:a9:19:c8:e3:16:2e:9c:5d:17:a0:c9:
                    e7:4a:07:92:fb:9d:2c:35:fa:1b:44:0e:69:6a:4a:
                    e9:17:24:43:78:df:40:d0:62:e5:a1:41:75:ed:b3:
                    8f:24:33:f7:99:24:9b:9f:75:1f:b0:f9:bf:8c:54:
                    18:30:0a:e5:cf:91:fb:c6:b5:93:94:9d:e7:ef:c0:
                    90:ca:5a:41:f1:c6:60:0f:3b:be:c9:63:fe:5f:af:
                    03:83:53:b3:f7:6d:4a:95:9c:1a:6c:fd:ad:19:2d:
                    43:0b:53:5f:90:2a:3f:b5:48:4d:7e:3b:bf:5e:6b:
                    92:f0:34:fb:66:d6:5b:87:39:55:99:ac:2a:c4:ee:
                    35:0c:c3:fd:72:eb:b0:a9:c5:2c:f9:55:60:e4:e2:
                    66:d9:6a:14:d3:ea:5f:e8:ca:84:bb:61:2d:44:51:
                    6d:10:3a:d7:af:59:af:ec:43:4c:b9:ac:a9:9a:1c:
                    4e:9d:d3:c2:77:f3:60:71:71:9c:e6:e7:89:f7:ae:
                    79:c6:d6:f0:49:ae:a9:d4:50:84:0c:b3:d1:10:d9:
                    c8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C4:5D:2B:A1:08:47:7C:DF:18:AB:1F:E7:BF:26:F3:4F:3E:86:73
            X509v3 Authority Key Identifier:
                keyid:40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:83:45:a7:8b:6d:0c:7c:48:60:4b:8d:45:9c:b4:3b:ed:25:
         cb:04:94:ba:f1:0f:51:24:8b:04:28:f6:34:92:4c:6f:fa:58:
         3f:50:1e:e0:9c:72:66:30:9d:1a:24:6b:27:bc:49:8c:17:92:
         f3:84:80:fe:4f:90:5a:82:dc:0d:ab:ed:62:c9:59:a8:a3:8a:
         5e:bf:68:92:85:02:65:31:fc:3b:d6:97:30:e0:30:cc:c7:df:
         fc:1d:63:01:73:cd:1f:50:a0:f5:69:ee:49:17:83:7a:a4:5c:
         51:5a:42:1a:e7:1a:14:c3:98:bb:38:d1:7a:1b:b7:0e:ec:85:
         40:ec:11:71:d0:8b:f6:3e:db:81:31:0e:f1:d0:0f:35:a0:7f:
         54:37:92:fc:63:08:ef:f2:73:80:af:90:ba:35:f5:d9:98:b7:
         b2:e6:33:72:cb:7f:4d:82:3d:1a:d3:87:a0:76:73:0a:b7:b3:
         b3:fc:4f:63:68:b2:80:a9:65:81:9e:8c:d7:f7:5f:6b:57:96:
         ee:4f:97:02:21:7d:a1:15:86:3e:ba:3a:a0:ba:cb:3f:1a:6e:
         af:06:e8:3f:43:9a:62:70:5a:ad:01:b9:c6:4e:12:1b:2b:56:
         4c:85:02:5a:87:21:38:77:0b:41:67:8d:eb:70:af:c2:41:f1:
         bb:87:52:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:46:25 2025 by rpki-client