Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
File:                     8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json)
Hash identifier:          ox+rD3X66GNOKuSEq3Z3N2fw46vTgTzb3d1w3yuuOrM=
Subject key identifier:   79:D7:1A:2D:B6:D1:13:03:A9:21:71:BA:4B:64:F8:5C:03:D6:8C:13
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Certificate issuer:       /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial:       0E2E10A3731A8F0F64ABD765C4F892EAEB8996AF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
Manifest number:          04F5
Signing time:             Thu 19 Jun 2025 01:21:39 +0000
Manifest this update:     Thu 19 Jun 2025 01:16:39 +0000
Manifest next update:     Sun 22 Jun 2025 13:01:39 +0000
Files and hashes:         1: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=)
                          2: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=)
                          3: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: wVt6bIGWzo6k1tIdIYYZ5Qj28PpcD22nSqNPdbkI/7g=)
                          4: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: lYozuS7H8g71TmDAhlsE7Z+j/6P9Ega8nsca+NA9iZs=)
                          5: 3231302e3234372e3234322e302f32342d3234203d3e20313430343035.roa (hash: dw24NIap+hZJ4wq3Y9e+7pPi7wiN8EZO2tINonm4ebY=)
                          6: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=)
                          7: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=)
                          8: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: gnvURXZkhn/FEj22B4ytqTMsZk8ZLC9E8Tq6VbTdHlg=)
                          9: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: yw3K/bp/LPi1I2OAb+IKkUT9fIWUEaXPoYhzWvShryU=)
                          10: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=)
                          11: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=)
                          12: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: q5exjX9sipnlgCr446gNBKp3hcZ5p+bSP3uX63/NcUU=)
                          13: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: DLEEWRg8CzNEC40bkoq+06vWx/pLLLcKvRY7UIZLKcs=)
                          14: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: +h2OIV45k9IMNmhDrlIF5o27fKX07HhXCAJxexuPVfw=)
                          15: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=)
                          16: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=)
                          17: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=)
                          18: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=)
                          19: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: gD3qH0CL5kDWzLn1NnDdXaxbwmPWUV8Kvspy5PDfTJA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
                          rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 13:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2e:10:a3:73:1a:8f:0f:64:ab:d7:65:c4:f8:92:ea:eb:89:96:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
        Validity
            Not Before: Jun 19 01:16:39 2025 GMT
            Not After : Jun 22 13:01:39 2025 GMT
        Subject: CN=79D71A2DB6D11303A92171BA4B64F85C03D68C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:a8:25:98:50:4f:70:03:f4:77:40:97:3f:
                    36:96:2a:54:d8:4c:6f:96:fb:85:3c:e5:46:e9:b7:
                    55:3f:e6:76:0e:ae:36:83:b6:65:ab:36:f0:7f:68:
                    d5:25:d2:da:b1:8c:43:bf:9a:42:c7:2a:f5:11:95:
                    53:cc:cf:fe:91:79:6c:98:d8:f0:b4:5b:1f:fe:9d:
                    38:5c:f5:57:70:18:cb:b0:c3:7c:f1:30:ba:32:9c:
                    7b:3e:3d:0d:e3:b0:cb:ff:e4:f3:d0:aa:03:99:ad:
                    a0:da:bf:37:9a:ce:73:65:33:63:34:cd:90:66:db:
                    af:23:0b:6f:75:d3:fd:d8:bb:cd:20:23:b4:61:d5:
                    2a:7e:77:57:25:18:d6:fa:5f:0b:e8:e7:e8:47:54:
                    ba:89:e0:c2:7f:36:4a:fa:7c:db:77:0c:44:5e:99:
                    73:0d:4a:82:a3:69:cb:11:17:b2:ee:de:2b:3f:46:
                    57:8a:ce:4f:5f:a0:b9:b8:6b:3c:e9:8d:13:72:77:
                    e2:fb:cd:95:03:2f:8e:01:26:2d:25:88:c9:9e:ae:
                    29:c6:ab:ae:06:b5:1f:6b:c8:3e:00:d3:36:0e:6c:
                    42:ca:09:cd:f7:49:25:de:c6:f6:4e:21:3f:d9:de:
                    57:a6:6d:96:b0:5d:85:64:1f:ff:ef:8a:8e:bf:46:
                    dd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D7:1A:2D:B6:D1:13:03:A9:21:71:BA:4B:64:F8:5C:03:D6:8C:13
            X509v3 Authority Key Identifier:
                keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ce:5e:03:72:3b:8f:e9:d6:2d:fd:f6:36:fa:49:2d:9c:df:
         0f:fb:c0:99:4d:ae:af:ca:fa:24:24:6a:74:57:ea:94:e7:c7:
         92:8c:68:68:1c:a2:ed:3a:26:7c:04:1c:5f:fb:ea:f3:fb:62:
         6c:ab:a2:6f:2c:5e:3c:41:b0:15:0c:a7:fd:82:be:97:86:cf:
         8a:2f:23:15:c4:d8:7b:52:9d:da:f1:31:8d:f2:ba:d9:5d:20:
         33:25:33:d5:0e:f2:f3:16:c7:ce:4c:1a:12:97:84:5c:ea:a6:
         8d:21:57:d4:67:e0:69:eb:ee:f6:1f:38:39:bc:c9:aa:3a:a6:
         89:f9:c6:4d:32:08:b4:53:75:dd:b4:21:ae:e6:91:c6:6d:3d:
         26:da:ee:0c:5f:91:bc:6c:2e:35:89:1b:4a:66:87:b8:3b:26:
         11:bc:26:8f:b3:c7:14:75:f9:d6:f8:ea:9f:fb:22:2e:e4:20:
         92:e2:19:15:e3:1c:1d:b2:d7:18:f9:58:02:a2:ef:d9:1d:0d:
         fe:4d:a5:a5:05:63:e4:2c:c9:ff:9e:99:7e:f1:d1:34:d4:c5:
         63:72:13:8d:6c:6c:2e:ef:bb:a1:35:d5:0d:e3:dc:ca:f9:ff:
         ae:7f:49:68:a1:bb:45:f6:aa:80:b5:87:30:1c:6a:82:e8:28:
         74:f5:b5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 01:25:20 2025 by rpki-client