Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
File:                     0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json)
Hash identifier:          N4Y5czslBPyct4DEfMVROYCxmYiu35iL2eddSYZPTMU=
Subject key identifier:   CE:E0:4D:65:74:16:E3:64:D9:2C:59:D1:23:28:BF:04:9A:DA:8F:5D
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Certificate issuer:       /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial:       632F94B474C184A98EFD2654E8EA13507FCE26E0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
Manifest number:          0131
Signing time:             Wed 30 Apr 2025 04:01:16 +0000
Manifest this update:     Wed 30 Apr 2025 03:56:16 +0000
Manifest next update:     Sat 03 May 2025 05:06:16 +0000
Files and hashes:         1: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: K6wVrrcLEBjlC6xeoIoIGULUclDZlzAkoc88QQdbCvU=)
                          2: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: NQ2ye5QxCxIoEkqHxBUJyo6rSBIUVJNBvpNF3uf87lc=)
                          3: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=)
                          4: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: g83LIJ3ExQtEGXGTQd6P8xh7CcOhD81osnr+YMgS0Qs=)
                          5: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: 21cpDFe/haDs0njL2oPUNz4sAGajUf2AiXZqZS0XaNQ=)
                          6: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: VCJVYb5Yj3VQmqeBZPc4wM5hAoFiEaNDgbEKKi9Z34Y=)
                          7: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=)
                          8: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=)
                          9: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo=)
                          10: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: P8qqWd8lu4ePMxcCVDgoAu5B+0ALSgogKErRSPrn+aQ=)
                          11: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: 4rWzT0kttC+3o1m8M4nqZx/LEwYsgQQY9aJJrFVM75k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
                          rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 05:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2f:94:b4:74:c1:84:a9:8e:fd:26:54:e8:ea:13:50:7f:ce:26:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
        Validity
            Not Before: Apr 30 03:56:16 2025 GMT
            Not After : May  3 05:06:16 2025 GMT
        Subject: CN=CEE04D657416E364D92C59D12328BF049ADA8F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fa:b1:ef:e6:75:23:5e:6b:a2:e9:0e:3c:e1:
                    a6:59:55:7f:43:6e:c9:71:69:2a:26:f2:ac:06:b9:
                    58:bb:c6:92:07:ab:97:61:0d:46:9d:59:ab:d5:ac:
                    cd:70:82:ab:e5:bb:78:f5:ab:90:dc:d8:bf:11:3b:
                    b0:40:cb:cc:43:d0:eb:95:22:d4:02:0a:e0:fe:ff:
                    fb:12:34:cd:27:38:ce:02:ad:83:82:0b:a5:e0:ab:
                    1b:5b:e7:e8:9d:02:6b:8a:68:e6:78:76:fb:2c:28:
                    63:30:3a:80:58:ed:16:2d:f1:9a:0c:eb:d5:79:97:
                    8f:0b:38:91:cb:72:40:33:7c:ab:2b:92:d3:97:d7:
                    96:fc:cf:4b:0e:23:09:38:21:45:fe:b4:e7:a6:b2:
                    cd:54:0c:86:aa:06:49:d8:e2:76:c4:82:9c:50:25:
                    8a:c9:61:9e:4e:05:8e:75:0c:12:74:e5:61:3e:77:
                    f7:51:04:35:af:3d:ed:83:46:d9:c9:b8:61:8b:e0:
                    6c:fa:cf:e6:1f:5e:47:a7:5a:31:8a:97:fd:6a:b2:
                    b5:50:d5:6a:8f:9f:a9:6c:b7:75:b4:66:dc:6d:21:
                    61:34:95:93:88:de:5f:fa:cc:00:b8:52:4b:5d:77:
                    d9:f3:d1:e0:2d:ed:90:da:25:0f:14:5b:e1:3a:d3:
                    d8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E0:4D:65:74:16:E3:64:D9:2C:59:D1:23:28:BF:04:9A:DA:8F:5D
            X509v3 Authority Key Identifier:
                keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b8:d6:9c:3a:2f:ef:7e:f5:4f:56:7f:7e:b6:a8:f4:3c:69:
         e8:6d:74:90:a0:5e:2f:f1:fd:57:71:9f:00:2f:d8:63:5f:b7:
         c5:aa:61:54:33:a3:53:a2:99:75:89:8f:2b:9d:f5:0c:63:72:
         35:02:9b:4d:c2:6d:60:fd:1c:2b:23:e9:a7:8f:68:8a:c8:6a:
         13:af:8d:b8:3d:22:1b:40:d4:6a:f5:14:85:08:77:57:83:fa:
         a9:bb:3b:ff:18:43:06:de:34:ef:37:c0:fc:29:d1:70:47:7b:
         42:a6:0e:03:74:06:4c:d9:20:43:e5:65:8d:d6:96:91:94:3c:
         26:bd:c5:e9:28:f9:6f:5d:36:a5:53:8c:42:5e:68:b3:e6:0f:
         4a:7f:b9:e8:5d:f0:61:61:e5:57:12:c4:72:20:5f:5d:8f:f2:
         b4:9a:fa:31:3f:e0:cf:79:a0:db:2c:9d:7f:7b:61:95:8c:e1:
         23:2d:40:8a:07:24:08:b1:2e:e7:52:bf:de:0f:70:2c:76:ad:
         25:dc:b2:b6:fe:ed:6a:d7:3c:54:dc:76:0d:4d:5d:79:b8:68:
         aa:c7:68:86:7a:de:7a:0d:ee:68:11:e0:66:a6:aa:7d:7f:d7:
         b8:ff:20:11:e0:26:44:30:c4:91:a5:ec:27:31:23:87:db:6d:
         65:bb:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:10 2025 by rpki-client