Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
File:                     0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json)
Hash identifier:          56u60bMPNzkMVMk5RzXpIhlOaLptLZkzq4HhgN8VqJs=
Subject key identifier:   8B:E7:62:A1:FE:98:EC:86:27:AC:9F:37:A8:12:76:3D:34:3B:43:BD
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Certificate issuer:       /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial:       19D4F8DE6B8D5A0114C2FFA16FB7A96F5B621E68
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
Manifest number:          0130
Signing time:             Mon 28 Apr 2025 02:41:15 +0000
Manifest this update:     Mon 28 Apr 2025 02:36:15 +0000
Manifest next update:     Thu 01 May 2025 04:00:15 +0000
Files and hashes:         1: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=)
                          2: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: NQ2ye5QxCxIoEkqHxBUJyo6rSBIUVJNBvpNF3uf87lc=)
                          3: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: g83LIJ3ExQtEGXGTQd6P8xh7CcOhD81osnr+YMgS0Qs=)
                          4: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: dQ9d4uuVUUO/EAFn1wsTtY/Iw9VdMQ7VD525q6CvzeI=)
                          5: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: 4rWzT0kttC+3o1m8M4nqZx/LEwYsgQQY9aJJrFVM75k=)
                          6: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=)
                          7: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: P8qqWd8lu4ePMxcCVDgoAu5B+0ALSgogKErRSPrn+aQ=)
                          8: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: K6wVrrcLEBjlC6xeoIoIGULUclDZlzAkoc88QQdbCvU=)
                          9: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: VCJVYb5Yj3VQmqeBZPc4wM5hAoFiEaNDgbEKKi9Z34Y=)
                          10: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=)
                          11: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
                          rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 04:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d4:f8:de:6b:8d:5a:01:14:c2:ff:a1:6f:b7:a9:6f:5b:62:1e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
        Validity
            Not Before: Apr 28 02:36:15 2025 GMT
            Not After : May  1 04:00:15 2025 GMT
        Subject: CN=8BE762A1FE98EC8627AC9F37A812763D343B43BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:1f:b8:7c:7b:63:ad:87:12:38:85:e6:6d:
                    b3:01:17:30:73:a0:0d:9d:f3:19:e1:ab:fc:f3:f3:
                    82:ab:ee:62:a3:ab:f8:a7:04:68:af:fd:f0:76:7a:
                    d0:83:80:a3:e3:54:5d:00:e5:f3:28:fe:da:12:fb:
                    4c:7b:02:57:b3:69:bf:35:32:f2:8a:b9:93:b0:61:
                    68:1f:2f:6f:09:1b:ee:6b:a4:b3:5d:dc:0a:e3:80:
                    d1:1a:a7:00:10:f9:09:f7:1b:58:12:ed:aa:b9:3e:
                    88:4b:43:9c:84:c8:2b:94:29:0c:d1:23:e0:43:1e:
                    88:df:33:5a:4a:85:e6:50:62:49:46:c9:8c:a8:f0:
                    4e:f5:d0:f0:e5:8a:ac:a6:fe:59:b6:a5:37:80:26:
                    eb:97:68:ad:de:6b:08:1f:a9:90:0e:88:2d:7d:ae:
                    cb:3a:ef:d5:51:f6:a2:70:ee:eb:b0:97:da:fc:90:
                    56:5f:e5:12:32:cd:e0:b9:2a:59:4c:b9:ab:45:a7:
                    b2:22:22:55:ec:f5:01:1a:a7:5e:e3:e0:84:47:5e:
                    5d:b1:a3:c3:16:43:66:1d:9f:30:48:83:09:7d:e8:
                    fd:74:42:79:83:c2:55:a5:30:ed:2b:dd:09:77:f3:
                    6a:7e:1f:e9:63:19:b7:43:1a:32:67:66:3d:e7:32:
                    77:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E7:62:A1:FE:98:EC:86:27:AC:9F:37:A8:12:76:3D:34:3B:43:BD
            X509v3 Authority Key Identifier:
                keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:93:7d:05:5c:7e:29:76:b4:6b:ce:c1:74:11:97:9f:78:bf:
         58:d1:c6:70:ac:9a:a2:68:a9:71:23:84:84:ac:dd:0e:bd:db:
         24:96:55:79:8d:e9:4c:fb:cd:15:76:2f:58:d3:6d:5e:8e:0e:
         42:a9:61:5d:19:be:c8:5d:66:c8:94:8b:ac:63:4b:0f:72:7d:
         c3:8b:a1:d6:11:11:f4:2e:b1:32:a9:ab:ab:28:e1:02:96:0e:
         0d:0b:2e:3f:92:79:62:ac:9f:b5:cc:4b:0b:7f:78:73:1f:d7:
         c2:83:81:18:1f:75:c4:5f:89:01:0a:9a:67:eb:f4:07:28:ab:
         49:ce:6a:92:50:13:c7:c2:1c:18:32:e2:d9:83:86:63:74:0f:
         a9:39:50:dc:b8:19:01:46:17:9d:cc:89:b0:87:40:4d:b1:ce:
         9a:45:c6:31:38:73:c5:48:54:4a:7a:40:91:63:5a:3c:bb:14:
         98:f7:21:2c:47:0c:75:12:da:4e:a7:c7:07:59:eb:6c:ae:72:
         d5:63:96:43:9c:bf:45:df:3f:9e:a9:22:b6:16:66:2f:e3:8e:
         84:33:f1:6f:3b:06:e7:e0:18:41:44:6d:d4:68:2c:a8:55:b0:
         c3:2b:e9:3f:43:d7:46:d3:9a:88:83:90:44:9c:9a:a3:09:8b:
         71:17:eb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:31:57 2025 by rpki-client