Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
File:                     405E466852C38FD4CD20BA6115840947D5D24F5D.mft (raw, json)
Hash identifier:          7SQoOyFopRgAGvID+0eJhURuQW+hlLGih1/NLHBaKYI=
Subject key identifier:   49:E8:DB:85:33:6F:B6:43:C9:D3:C7:5A:C7:9C:85:9B:B8:A1:25:63
Authority key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D
Certificate issuer:       /CN=405E466852C38FD4CD20BA6115840947D5D24F5D
Certificate serial:       2E169C1BF6290A06EC7744AFBD5E6101B6634503
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
Manifest number:          8A
Signing time:             Sun 15 Jun 2025 01:12:46 +0000
Manifest this update:     Sun 15 Jun 2025 01:07:46 +0000
Manifest next update:     Wed 18 Jun 2025 03:06:46 +0000
Files and hashes:         1: 405E466852C38FD4CD20BA6115840947D5D24F5D.crl (hash: YJ13lipXD8mWuCZ2f73Yfj2hGvwluWstC01zet2WTZE=)
                          2: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: hOlyHuu2wphYhBJDocKFWHEZrEGEanCNnjs4wR5XHPw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl
                          rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 03:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:16:9c:1b:f6:29:0a:06:ec:77:44:af:bd:5e:61:01:b6:63:45:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405E466852C38FD4CD20BA6115840947D5D24F5D
        Validity
            Not Before: Jun 15 01:07:46 2025 GMT
            Not After : Jun 18 03:06:46 2025 GMT
        Subject: CN=49E8DB85336FB643C9D3C75AC79C859BB8A12563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:11:98:3c:5a:a6:12:dc:0d:ab:45:f7:b4:3f:
                    59:5c:4b:27:fe:c0:57:35:27:75:e6:4b:a5:30:1b:
                    19:8e:8d:04:96:07:d3:d3:b0:be:37:5d:ad:a4:8d:
                    19:bb:5b:0f:90:27:ec:3b:72:cd:ba:6c:66:d6:59:
                    7e:6f:cb:d3:82:1b:43:39:e9:80:b1:64:fd:fa:4c:
                    ab:4f:7e:19:a0:3f:aa:93:7b:bb:db:29:ef:41:70:
                    c8:23:f6:d6:cb:1c:59:83:c1:4b:32:70:3c:31:87:
                    33:45:e4:08:6a:04:46:8b:27:8a:2b:de:dc:0f:56:
                    7a:2d:6f:b5:5d:23:92:f2:8c:13:75:cc:89:da:1c:
                    97:7e:d7:8c:09:08:b7:99:89:60:95:a1:90:6e:a1:
                    38:f9:b2:81:a6:8f:cc:1f:ae:42:1a:d8:d4:0a:92:
                    70:8b:fd:18:6e:45:d7:c2:32:23:a0:76:84:33:3a:
                    1d:63:5d:2f:38:42:ae:cf:c9:05:3c:57:8f:94:fb:
                    57:d7:2a:b0:55:28:fb:60:93:86:51:7f:dd:46:2a:
                    d5:08:b4:a5:3a:7b:59:2c:f4:e3:bd:33:19:98:4b:
                    0a:f5:35:6c:a1:a1:6a:9b:63:60:9e:61:e2:10:ea:
                    65:90:eb:e6:5e:d1:f8:05:c8:0d:d6:30:52:4b:29:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E8:DB:85:33:6F:B6:43:C9:D3:C7:5A:C7:9C:85:9B:B8:A1:25:63
            X509v3 Authority Key Identifier:
                keyid:40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:bd:60:7e:9f:38:c5:52:d3:a0:cc:62:b0:f4:de:17:4e:0a:
         28:9a:84:20:71:1e:4e:7d:59:72:61:c3:f6:f2:d2:52:e8:65:
         b4:88:bf:87:d8:ac:a9:83:39:ab:80:2c:41:14:77:1a:b1:4a:
         44:71:f1:5d:83:28:62:39:7b:9d:0a:f1:fc:4a:3b:5f:5e:45:
         40:cc:0b:ae:6e:51:4e:7a:0c:7c:84:73:48:16:52:e5:73:10:
         1c:97:77:b0:3c:78:97:88:ab:ae:74:0e:a5:21:2b:ad:4d:76:
         37:c5:52:77:f7:ca:f7:90:3a:9b:36:58:62:6b:b8:bb:5a:dd:
         80:2d:0f:9f:b6:c3:79:f7:b6:b7:2e:2e:c9:d8:d1:ef:4b:b2:
         20:02:b2:da:58:96:7c:08:db:fe:20:3e:d0:b4:44:e9:b5:40:
         86:bc:15:6f:87:e1:41:3a:b6:bd:7a:ad:3b:f4:82:54:c2:f1:
         6e:67:9b:f2:fc:0c:25:56:d0:07:9e:23:01:ab:eb:25:52:90:
         98:20:03:86:db:6d:b3:fb:43:29:9b:f3:ad:9a:3c:93:17:48:
         2b:9c:27:4c:d1:08:35:73:2f:ed:0a:b7:a7:99:4d:f4:a3:65:
         57:cf:44:98:72:0d:f3:3e:eb:97:1a:41:04:06:87:c8:d8:12:
         ac:64:c9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:24:49 2025 by rpki-client