Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
File:                     8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json)
Hash identifier:          20ZkDyX1niNRF3AACdZjCJkcqhp70oRPJgdfNhsJ9Zo=
Subject key identifier:   23:FD:D4:9E:09:95:8E:69:4A:78:E5:F6:9D:6B:CC:1F:AC:7C:B1:79
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Certificate issuer:       /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial:       246173635298E5C96E602CD7917A8E53DF0E9DDC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
Manifest number:          04DF
Signing time:             Thu 01 May 2025 21:21:38 +0000
Manifest this update:     Thu 01 May 2025 21:16:38 +0000
Manifest next update:     Mon 05 May 2025 06:01:38 +0000
Files and hashes:         1: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: f/UXoSDfbRkGf1lUmUNbaOYccjPXICPU6lcajtxcZik=)
                          2: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: +Wv9KU9iNmf8e+dcDb3YT6/AamLrR1m0U+jn1PjO20c=)
                          3: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: ZfF3KZtk2dhQe1TSXKb5jkKHdT8hFQeAF+Yp3HxE2X8=)
                          4: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: lYozuS7H8g71TmDAhlsE7Z+j/6P9Ega8nsca+NA9iZs=)
                          5: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: YdgVrIhwigf5vVjBfE6W9Ix4PmwssBDwnjxMo0ci8Oo=)
                          6: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: yw3K/bp/LPi1I2OAb+IKkUT9fIWUEaXPoYhzWvShryU=)
                          7: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: gD3qH0CL5kDWzLn1NnDdXaxbwmPWUV8Kvspy5PDfTJA=)
                          8: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: gnvURXZkhn/FEj22B4ytqTMsZk8ZLC9E8Tq6VbTdHlg=)
                          9: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: ee3hb82wlCfvRHJv/Z0BLwZrijit1p8khM33Y7zMuT4=)
                          10: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: X4Pk8WgmhA0dbNOl0G7YhvirhZLSY9c290PzK0yXcPw=)
                          11: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: DLEEWRg8CzNEC40bkoq+06vWx/pLLLcKvRY7UIZLKcs=)
                          12: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 5z4EVyXkxyXnhxl5JH3Pz2dy7K+1+d6O34E8YEu6Oo0=)
                          13: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: OGhCgqd+yFXyin7LdpaXHRwcXVv7L7Y3v81I7/pmZew=)
                          14: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: SbxBJwcyRNjmcJAEw7SuNTFi3HhmkmBhtQkXMEm7WeI=)
                          15: 3231302e3234372e3234322e302f32342d3234203d3e20313430343035.roa (hash: dw24NIap+hZJ4wq3Y9e+7pPi7wiN8EZO2tINonm4ebY=)
                          16: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: +h2OIV45k9IMNmhDrlIF5o27fKX07HhXCAJxexuPVfw=)
                          17: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: q5exjX9sipnlgCr446gNBKp3hcZ5p+bSP3uX63/NcUU=)
                          18: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: 1tp2p0lmzVYvYN9LyCd/jXojPSljtaqZldm282NgTBI=)
                          19: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: IQcHIUy46CTJePR6Z9z+26UQZV8/dla1aLxrUhi96Yc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
                          rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 06:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:61:73:63:52:98:e5:c9:6e:60:2c:d7:91:7a:8e:53:df:0e:9d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
        Validity
            Not Before: May  1 21:16:38 2025 GMT
            Not After : May  5 06:01:38 2025 GMT
        Subject: CN=23FDD49E09958E694A78E5F69D6BCC1FAC7CB179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ae:0f:b0:bd:09:be:64:8f:ec:82:c8:39:6f:
                    44:5e:01:aa:5f:da:20:0f:5d:a8:94:c8:9b:59:4a:
                    81:92:fc:d0:0c:05:22:8f:26:36:04:73:81:29:95:
                    fe:15:a4:3a:20:89:be:72:92:96:22:89:2a:0c:b1:
                    55:17:3c:ae:65:12:51:cf:ad:bc:fd:c4:ee:57:5a:
                    d1:cd:4c:57:59:15:0e:2b:56:9e:e8:ec:27:13:a1:
                    d8:c8:32:e2:19:e9:6f:3b:6c:56:5b:62:2f:69:26:
                    e5:76:ee:b7:e2:4b:46:59:20:ee:c2:7e:13:5d:5d:
                    88:9a:96:f4:4e:db:fd:9c:f9:34:f7:ea:c0:41:5e:
                    88:44:c1:80:ce:14:96:b0:49:42:74:dd:99:80:9e:
                    fd:c9:97:9a:a8:8e:08:58:90:08:a5:e3:3d:0f:7c:
                    d1:54:42:50:0c:14:83:8f:fd:4f:f2:f7:d3:76:55:
                    45:a3:e6:ac:3b:3b:48:1f:f5:90:5d:ab:07:e9:63:
                    2e:cd:e6:92:1c:84:16:ea:a7:a0:7b:74:b2:3f:11:
                    fa:17:56:97:9a:84:8b:81:29:17:4d:56:dd:24:5e:
                    22:f8:bf:b4:33:3a:b4:cd:08:0e:b7:7a:fd:b8:f3:
                    ab:77:20:9c:8d:e5:aa:32:59:86:e1:b9:c8:62:91:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FD:D4:9E:09:95:8E:69:4A:78:E5:F6:9D:6B:CC:1F:AC:7C:B1:79
            X509v3 Authority Key Identifier:
                keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:49:e1:17:59:03:8e:01:c0:97:cc:61:0d:31:37:c6:77:41:
         b3:c6:99:d6:79:1b:4b:01:99:12:62:02:d6:37:62:4b:39:70:
         b8:3f:cc:ba:c7:b2:a8:df:50:28:3f:fe:6b:2b:50:53:3b:96:
         2b:9b:4c:82:52:dd:69:48:05:c6:39:d5:43:00:2d:5e:32:dc:
         48:d0:ab:08:78:8e:3f:af:0a:9f:06:79:66:b2:75:e1:27:72:
         15:85:b8:95:30:77:25:97:ec:b3:d3:5b:83:12:4a:2c:ee:c5:
         97:ae:ef:16:ea:ee:75:b7:15:21:9b:ec:8a:ca:58:1c:8a:4e:
         a6:a7:37:de:89:1b:8d:11:36:e8:47:6f:bb:00:98:69:05:47:
         09:89:ce:fc:2c:09:48:60:a3:ac:4f:a2:c8:4d:d1:6b:f8:35:
         c1:1e:ce:53:f0:58:c0:1c:2c:ce:4b:71:d0:44:c2:d3:68:8e:
         ff:74:2a:62:e7:5b:d8:b3:c7:2a:fa:c6:79:27:e2:89:76:45:
         6e:0f:36:f5:de:77:96:fd:d2:aa:b2:10:da:ce:2f:38:f9:92:
         59:9f:49:66:51:04:60:80:2a:65:76:a2:a2:a0:5b:69:56:ad:
         ee:5a:81:2c:03:53:c5:6f:7e:a2:e9:73:7f:b3:8e:9f:e0:4a:
         4a:96:af:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:33:27 2025 by rpki-client