Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
File:                     882209E37356E0512FBE4E81B00E4F2481865087.mft (raw, json)
Hash identifier:          28VFtN0ZwspqHUHppBZPnWIwG0Q/K4A3jF294W47pgs=
Subject key identifier:   B3:3D:9C:92:0D:AB:BB:81:49:16:13:D8:12:90:00:B9:47:35:D2:F4
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       3A8C568060F0E8E74D2178DF73CB85B2D4D2BF03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
Manifest number:          04C9
Signing time:             Tue 29 Apr 2025 22:11:59 +0000
Manifest this update:     Tue 29 Apr 2025 22:06:59 +0000
Manifest next update:     Sat 03 May 2025 05:43:59 +0000
Files and hashes:         1: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: Rb28NXlYt2i42cKjjOk5iENFCUNoEfsw3NtDJbjO8H8=)
                          2: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: w3Ks91mwkS7NztUtNLKYf1Zt3ODkRQznfK1tF6ldT8k=)
                          3: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: uQXGM2cnzjEJ+e+qYTRcu8Q2bkfF87zDJZZFwMyns1U=)
                          4: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: /cpzswwTNxt4PA+y5NQBd3j9f6qF16C52KUQtHtdF0o=)
                          5: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: tJ8ZvI46pqkm8zQNc8mw5mnCsJpq72czgdRpZYAABAU=)
                          6: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: NOw/zlirvTqoOX6sm1/vix2ODTXn4yeECfZvuo38lBs=)
                          7: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: rpd32ZUdwQpFXx4Nv2RhdtnfkJHyyuemJCQ3vprxsb0=)
                          8: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: 5OLfvTl6gcSwQBrapeYjNQFXfGFP7wdrUnoFQhbTuyE=)
                          9: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: xpET03ZY7J+readhaJ1QYHRYS1mjCgsf+hUmxPF8BxA=)
                          10: 882209E37356E0512FBE4E81B00E4F2481865087.crl (hash: Vtm8efKjjj+jv9pJZKdxnVazU6XR+ZWn83P3h5Xk0tk=)
                          11: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: Xew1w+gXgylH740u1c4Z60dTjHU8+UmrHSS0NUpHOoU=)
                          12: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: +orAdsz6eB8/rfzFzwo7jDI03fKrjW+cdaqzhCiMpmg=)
                          13: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: e+Om61XELdd62RuYWQyB46Ok2HY1yu4g+v0tQE3Vs9M=)
                          14: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: sJb8leavmPnYQkhyoTizATUpn0Qf48YJaugxYyG/DSE=)
                          15: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: ax01vkbIK29IQaPMOtL4UaEdAFFntCppP1NSNhQX5iY=)
                          16: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: zFwcJRk1pIStXgYvOW6EJ+sh6WfmyVgLQT18K9kq+Sw=)
                          17: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: XT+BpWNDktvWNwFTQkLNNS/w5oWhizouaSiWM8/abUU=)
                          18: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: y6nyZ4wEj4h4my4pTHsmLYPMQpLcieoKxLYPlH4EY2A=)
                          19: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: JZOCGNrXopoaPI4jZi8eXqzn2wPKF8AfdVx1G95vRF4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 05:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8c:56:80:60:f0:e8:e7:4d:21:78:df:73:cb:85:b2:d4:d2:bf:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: Apr 29 22:06:59 2025 GMT
            Not After : May  3 05:43:59 2025 GMT
        Subject: CN=B33D9C920DABBB81491613D8129000B94735D2F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b5:f0:14:e7:91:df:e3:e1:bc:6e:47:bd:53:
                    dc:f8:6e:39:68:9b:d4:a4:1f:84:a9:c3:1d:d1:6b:
                    c8:cc:b8:24:fe:a9:ca:96:2f:2b:72:a9:ee:69:98:
                    36:07:b3:bd:dd:a3:8c:a2:4a:87:5a:60:29:67:f3:
                    e8:97:02:fa:87:89:64:ed:77:6c:71:8f:b8:fb:9c:
                    fa:54:e5:b8:35:6d:1d:f6:95:b7:e1:6b:99:9a:c3:
                    1f:ca:f3:9c:dd:44:52:28:67:d6:25:30:76:31:e5:
                    47:5f:e3:65:2c:b6:b3:0b:ca:a2:cf:f7:43:6d:5f:
                    b4:2e:80:8e:c9:49:14:fc:02:46:4d:46:1c:3e:cd:
                    9e:97:0e:95:f9:6b:fa:4a:67:7e:75:cf:9d:0b:52:
                    3e:81:48:a7:50:a6:5e:bf:14:10:42:4d:a9:a9:32:
                    6b:b7:8e:14:4f:71:ae:59:3d:21:32:6a:39:7d:c5:
                    e9:5a:0b:ee:17:0f:86:86:16:ef:c5:6e:73:7b:23:
                    84:96:c9:c7:48:ea:05:f4:68:a9:2c:2b:19:c2:c9:
                    a6:74:8a:3e:b7:10:4e:ab:1c:67:c1:ef:b1:b7:08:
                    fa:9a:59:bf:1b:46:95:e9:85:e0:32:e7:01:cc:d3:
                    1a:e0:2e:b3:4d:e1:45:9e:1d:aa:92:41:18:60:29:
                    4b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3D:9C:92:0D:AB:BB:81:49:16:13:D8:12:90:00:B9:47:35:D2:F4
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:52:89:00:78:e7:32:eb:94:10:fa:45:bd:45:20:0e:ac:fb:
         7c:68:e1:fc:d5:95:a0:85:0f:b5:76:a4:78:69:00:14:fb:be:
         67:99:7e:80:a3:99:0a:1d:10:2e:15:9a:7f:13:e0:23:7c:37:
         4b:87:34:38:17:2f:5a:c1:b8:09:d2:81:c0:ff:78:c0:7c:45:
         11:88:5c:57:9a:d2:49:cb:f1:e7:41:2c:c1:a6:d6:b8:77:e7:
         24:e4:20:11:10:52:d3:b1:ec:ea:81:10:53:62:74:81:79:66:
         76:70:84:74:2d:2c:14:31:ff:98:0a:b2:da:3e:98:46:c0:0d:
         87:78:c9:e4:4b:d3:01:9a:11:4b:4d:fa:af:e7:d7:0c:ee:e0:
         2b:d2:5e:9c:10:1d:da:9c:60:6d:c4:e6:f3:e2:95:46:98:30:
         a3:f4:9b:e6:3d:f9:73:ad:e7:f2:27:a6:1a:ab:5b:e1:13:b6:
         96:ae:c8:f2:69:ae:ed:d7:35:52:74:0b:35:ed:d4:4d:a7:73:
         d8:0d:10:06:86:42:0f:ec:e3:ea:85:e4:aa:fd:dd:41:12:a9:
         11:d7:4d:8b:c5:62:a8:fc:7d:28:98:a7:a4:13:6f:16:9c:1a:
         7d:aa:11:c1:c4:8c:b6:3a:ef:56:0a:ca:88:e5:f0:9a:7d:8e:
         5e:10:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:35:07 2025 by rpki-client