Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft
File:                     40F85FB380A012F2BB6D055D914C008674125D67.mft (raw, json)
Hash identifier:          TPLrp/DieTgzXJfEvdaH1f4Tz1lXLxU4QhVB1yBSb9A=
Subject key identifier:   6F:CB:A3:DC:F7:F7:6F:4B:0F:10:87:98:CA:61:CF:E4:7A:FB:B2:AD
Authority key identifier: 40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67
Certificate issuer:       /CN=40F85FB380A012F2BB6D055D914C008674125D67
Certificate serial:       3FE3EE3BD934ECD1250EAA69C70E0CCD0928AB6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft
Manifest number:          0493
Signing time:             Fri 25 Apr 2025 18:01:23 +0000
Manifest this update:     Fri 25 Apr 2025 17:56:23 +0000
Manifest next update:     Tue 29 Apr 2025 02:07:23 +0000
Files and hashes:         1: 40F85FB380A012F2BB6D055D914C008674125D67.crl (hash: vP7OnJZ7hZ4pCbOCCQMFw3TpIM/y+2YDYPGwktlrAnY=)
                          2: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: +kMIsYkkYBL9JgD87llrjtp6E+ZI80VFKUP+9fwyfhI=)
                          3: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: 3G3cuIsUsC93A5VqDBrlhjA6pHEL2QIiEv1ZbgGfh7c=)
                          4: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: waFtA9Rs9fa9JmBcejLpW23akTf5m+TT3YHpTZiNW5g=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl
                          rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 00:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e3:ee:3b:d9:34:ec:d1:25:0e:aa:69:c7:0e:0c:cd:09:28:ab:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40F85FB380A012F2BB6D055D914C008674125D67
        Validity
            Not Before: Apr 25 17:56:23 2025 GMT
            Not After : Apr 29 02:07:23 2025 GMT
        Subject: CN=6FCBA3DCF7F76F4B0F108798CA61CFE47AFBB2AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5e:73:d5:4a:15:ed:4f:cf:2d:57:a1:f9:50:
                    c3:6d:23:af:f8:3e:5e:ad:c6:9c:36:ea:86:9e:ee:
                    ca:ad:a2:47:02:39:cb:46:98:bb:be:93:cc:57:33:
                    91:85:67:32:70:41:7f:2a:f1:8a:26:fc:26:c7:6c:
                    35:22:3e:4c:ca:9c:5d:a8:5e:86:fb:f9:64:a4:49:
                    dd:2b:fc:89:88:ec:e1:e7:44:e6:9b:f4:d9:a1:37:
                    4f:10:11:43:03:8d:14:a1:70:8b:78:a2:76:77:01:
                    ca:85:54:dc:9c:57:66:98:16:bb:95:15:51:10:a8:
                    c8:67:ee:b0:c8:44:91:2d:69:9c:04:d8:66:20:df:
                    25:8a:0e:b3:fc:a4:7b:27:59:94:84:28:cc:56:94:
                    98:ab:5f:36:db:b9:a2:0e:9c:fb:55:59:6b:15:63:
                    53:18:20:36:17:c1:46:c5:a4:4f:d9:cb:50:5d:fc:
                    7e:93:1f:5b:bc:e8:10:1c:5c:7f:d2:6a:ac:e0:99:
                    15:b5:b2:8b:f9:a1:d2:9f:62:2e:57:0d:a3:9c:11:
                    5a:e6:a9:8b:93:b2:51:4f:95:a3:87:4e:43:65:8b:
                    38:66:95:a6:92:56:57:e9:eb:4a:dd:07:1f:54:b6:
                    64:e5:4c:6e:30:a2:33:7f:f4:64:35:02:2d:48:71:
                    c4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CB:A3:DC:F7:F7:6F:4B:0F:10:87:98:CA:61:CF:E4:7A:FB:B2:AD
            X509v3 Authority Key Identifier:
                keyid:40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c5:7a:2c:f2:97:61:e2:11:05:ba:42:d1:f9:86:72:21:b1:
         67:9a:51:4e:b7:e3:54:6b:c1:d3:3a:b1:ff:f9:22:2f:db:28:
         43:ed:d2:d9:81:25:3c:d5:14:f6:f7:29:26:2e:bb:a0:38:ee:
         cf:98:f6:d7:e7:22:5c:10:83:e0:2c:ce:7c:41:c1:26:ea:77:
         f1:4a:7c:64:84:c3:8c:d4:5c:94:3b:5d:7c:c6:20:ac:df:d0:
         85:c2:e6:25:ff:dd:a9:f0:8c:53:dc:cf:35:a4:0d:c3:28:35:
         fa:a7:71:f9:62:15:44:4c:34:0c:25:d6:8f:1c:70:b3:9d:8f:
         6e:1a:62:b1:33:56:f1:97:b7:33:93:2e:9d:dd:b9:b4:05:37:
         05:35:66:cd:0d:bd:bc:3b:7a:10:61:f6:45:74:c4:c5:49:a8:
         b7:8f:4a:ba:bb:13:2f:c8:b1:09:30:16:e1:08:9d:05:f1:e7:
         ac:8c:1d:ce:37:62:db:97:14:3f:13:bf:51:10:c4:ce:14:37:
         d3:ed:c5:12:e0:ee:06:c9:4d:1c:6f:89:0a:6c:73:00:3d:ba:
         5e:40:90:d6:f8:96:a6:33:cc:66:89:08:bc:0b:48:08:dd:ba:
         f3:09:bf:63:8c:68:2f:e9:13:84:db:81:46:d3:8c:3f:16:a8:
         f9:91:81:6f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUP+PuO9k07NElDqppxw4MzQkoq2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3
NDEyNUQ2NzAeFw0yNTA0MjUxNzU2MjNaFw0yNTA0MjkwMjA3MjNaMDMxMTAvBgNV
BAMTKDZGQ0JBM0RDRjdGNzZGNEIwRjEwODc5OENBNjFDRkU0N0FGQkIyQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXnPVShXtT88tV6H5UMNtI6/4
Pl6txpw26oae7sqtokcCOctGmLu+k8xXM5GFZzJwQX8q8Yom/CbHbDUiPkzKnF2o
Xob7+WSkSd0r/ImI7OHnROab9NmhN08QEUMDjRShcIt4onZ3AcqFVNycV2aYFruV
FVEQqMhn7rDIRJEtaZwE2GYg3yWKDrP8pHsnWZSEKMxWlJirXzbbuaIOnPtVWWsV
Y1MYIDYXwUbFpE/Zy1Bd/H6TH1u86BAcXH/SaqzgmRW1sov5odKfYi5XDaOcEVrm
qYuTslFPlaOHTkNlizhmlaaSVlfp60rdBx9UtmTlTG4wojN/9GQ1Ai1IccSbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUb8uj3Pf3b0sPEIeYymHP5Hr7sq0wHwYDVR0j
BBgwFoAUQPhfs4CgEvK7bQVdkUwAhnQSXWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
OTcyZjlhMi1iMGZmLTQyOTgtOGRhNi1lMmUzODM0OGEwN2IvMC80MEY4NUZCMzgw
QTAxMkYyQkI2RDA1NUQ5MTRDMDA4Njc0MTI1RDY3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3NDEy
NUQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk
YTYtZTJlMzgzNDhhMDdiLzAvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAw
ODY3NDEyNUQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH/Feizyl2HiEQW6QtH5hnIhsWeaUU6341Rr
wdM6sf/5Ii/bKEPt0tmBJTzVFPb3KSYuu6A47s+Y9tfnIlwQg+AsznxBwSbqd/FK
fGSEw4zUXJQ7XXzGIKzf0IXC5iX/3anwjFPczzWkDcMoNfqncfliFURMNAwl1o8c
cLOdj24aYrEzVvGXtzOTLp3dubQFNwU1Zs0Nvbw7ehBh9kV0xMVJqLePSrq7Ey/I
sQkwFuEInQXx56yMHc43YtuXFD8Tv1EQxM4UN9PtxRLg7gbJTRxviQpscwA9ul5A
kNb4lqYzzGaJCLwLSAjduvMJv2OMaC/pE4TbgUbTjD8WqPmRgW8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:25 2025 by rpki-client on console.sobornost.net