Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
File:                     F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft (raw, json)
Hash identifier:          9mLJPSkohXFgiZkMHSkLF+cHddnBdTewP3wEDJ7FchA=
Subject key identifier:   1F:90:6B:42:C5:57:8C:51:CB:2C:A9:DF:32:C1:5E:EF:A4:00:FC:90
Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
Certificate issuer:       /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Certificate serial:       25B3F85C9D26A992A8ACF303A6C7D507286E3B3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
Manifest number:          04DB
Signing time:             Sun 27 Apr 2025 14:11:23 +0000
Manifest this update:     Sun 27 Apr 2025 14:06:23 +0000
Manifest next update:     Thu 01 May 2025 00:17:23 +0000
Files and hashes:         1: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: VCX9eexAv9esi+sSNtpJiYiCYTvRXlMu/Iu7U6GqXZ0=)
                          2: F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl (hash: vXw5vw6wvC+di/zSYwQ/ChjIMEfxJ3moZsb29e9eKWc=)
                          3: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: 5kBm8X0aamwDYytyHbZ00Nrt+F+SLfZj5f3AKcxtU/A=)
                          4: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: YlNYHO0N3pyCcSOGqGXOjx60oOvCKMnQzdF/w4jucvo=)
                          5: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: v86rIL1J9aXi4VbgCIFAar9em5fnxZHq7TIwnysrq94=)
                          6: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: HrJfcQkGnzow9D0Bl2n2tIAUkeZlu+k/wsAvsBxHD24=)
                          7: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: u+fthsBwoket5WEkCazKb6WuPFz2wCYHFQa3CP7W0Dk=)
                          8: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: kj+jjliVyOq89SFtdsJZ6/jz1sCOSflfI1524JkUHIM=)
                          9: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: wANFlcEnJtKYhVhmbvh7ghaUvUER0v8nXkBQby1whj8=)
                          10: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: lvJpSB+CtmvsBBtBTECvLGsRg1YF7AbP+/ZbIwrh9dM=)
                          11: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: NXvf16TxGPkABJJq49GTqJwk939PUmt8PfQbxDW8mBk=)
                          12: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: 28JSxPbguduH6Zlkw/CTIrAclyP4oGfavsJuN7/c/LM=)
                          13: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: vtfeHjfL8yqlk/jNx/lCthha4B7+6EOQKJNCnc7VxN4=)
                          14: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: wdOM2JCDEAghiiuCd/bc5GapnYXK2DGm3CKKwODiePs=)
                          15: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: GZ3/V+zqcDIloNwLRDncl8p22SXMpal1fQkO46P1elU=)
                          16: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: KlXGN9NpwbrgMJftnwFd4i8j5PruwL1rpv1YqPauX1s=)
                          17: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: DL9+8H198UE7h/7Pgpl3P21VNpfarZQNWBdjxHH7R4U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl
                          rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 00:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b3:f8:5c:9d:26:a9:92:a8:ac:f3:03:a6:c7:d5:07:28:6e:3b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
        Validity
            Not Before: Apr 27 14:06:23 2025 GMT
            Not After : May  1 00:17:23 2025 GMT
        Subject: CN=1F906B42C5578C51CB2CA9DF32C15EEFA400FC90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:92:5e:33:b7:9f:26:b7:f3:aa:f7:51:f2:
                    87:9f:0b:dd:57:3e:d7:3e:ef:0a:01:aa:ad:f5:b4:
                    f3:d4:e1:fa:95:0e:8b:d2:11:9b:ce:41:0a:ee:06:
                    63:a9:e0:0a:63:27:5c:db:ea:3a:14:78:78:e0:7a:
                    ab:d0:8c:a6:7d:eb:07:5e:65:38:6a:33:e0:fa:91:
                    ff:d1:91:0f:9c:52:85:79:32:c1:a4:d0:40:92:80:
                    95:18:fc:25:58:4b:8c:ad:c6:e6:10:6e:a9:f6:79:
                    be:56:82:17:a1:6f:fa:c1:34:78:5e:2a:ec:bb:29:
                    19:c5:9e:8a:8a:41:c0:e6:3f:f4:71:cf:e7:4d:43:
                    6b:d8:2a:00:47:00:81:6f:66:30:73:83:0a:05:08:
                    7b:d8:c4:26:31:52:20:9b:e3:18:e7:9b:f6:c2:4f:
                    af:20:7b:a7:c6:f6:f7:6d:89:50:9e:ba:5b:ea:a3:
                    4e:17:94:0b:7d:11:cd:aa:f5:92:2b:97:12:65:1e:
                    83:db:78:92:96:77:11:a9:97:d2:af:f4:ef:85:d1:
                    27:8a:f3:fe:a4:e1:3d:05:f7:54:55:55:2f:0b:21:
                    a5:9d:f0:ae:aa:41:ab:68:ac:ba:85:5e:f0:75:4a:
                    91:47:15:44:66:79:0d:6a:19:14:67:8c:fd:fa:33:
                    6f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:90:6B:42:C5:57:8C:51:CB:2C:A9:DF:32:C1:5E:EF:A4:00:FC:90
            X509v3 Authority Key Identifier:
                keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f7:e5:16:3e:a0:7d:91:ae:d1:24:43:d9:45:c6:3d:01:73:
         33:c0:b1:96:d5:14:51:c7:f0:ec:33:99:2b:92:f7:2a:90:27:
         8e:68:f7:73:d4:d6:4d:22:bb:a4:2b:df:de:30:bd:fd:e3:69:
         2e:0b:26:af:15:7f:e5:de:48:50:c1:bb:b9:55:2c:36:76:a0:
         ce:da:7d:ac:71:0e:db:76:b6:6d:07:7b:f7:7a:78:52:ea:9f:
         67:93:32:1e:f7:eb:00:ab:5b:b0:98:b7:45:37:c6:7f:23:42:
         a7:a4:5e:de:ad:37:c9:43:57:98:2a:6e:37:e5:c8:06:59:55:
         c8:8a:cf:91:90:ed:30:69:04:0c:e9:55:18:ae:77:91:ea:eb:
         7e:ac:07:51:a5:5a:91:49:b7:65:26:72:34:b5:5a:a4:27:02:
         58:9a:e6:8b:c5:73:ba:21:2a:c4:44:3b:99:c7:11:0c:85:cd:
         e6:b5:2a:5b:b4:39:5b:4b:68:52:70:8d:64:6a:0f:d2:83:6c:
         68:76:9a:ef:74:6f:ad:f6:e6:da:70:36:a0:ef:65:51:1d:67:
         04:53:a3:c3:c0:bb:09:4b:a7:cd:f9:16:ec:66:13:4d:5d:d2:
         10:2e:97:31:de:2c:84:be:10:92:b1:52:b6:df:70:c7:ba:c1:
         7f:9f:a8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:36 2025 by rpki-client