Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft
File:                     8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json)
Hash identifier:          nccAzXO6V3VAAIhx9CnBZ2QV+KXeS3vpykU7LmiSrXM=
Subject key identifier:   8B:74:D0:80:5F:B5:FA:DF:B5:82:79:A9:51:8F:9C:90:17:45:B0:35
Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F
Certificate issuer:       /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F
Certificate serial:       6D6A10B1D557C1C22FF013D9B48F23491C328A21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft
Manifest number:          01F6
Signing time:             Thu 24 Apr 2025 09:41:50 +0000
Manifest this update:     Thu 24 Apr 2025 09:36:50 +0000
Manifest next update:     Sun 27 Apr 2025 18:41:50 +0000
Files and hashes:         1: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: sLjEyNLP44oLLTNBz1jIEt6iKSNqyKrmkOKLSr9k0lg=)
                          2: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: HFk7ZXCdW9wfDS/hfecKGCLLq/Teh7kpCIOmtHxAR/8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl
                          rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 10:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:6a:10:b1:d5:57:c1:c2:2f:f0:13:d9:b4:8f:23:49:1c:32:8a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F
        Validity
            Not Before: Apr 24 09:36:50 2025 GMT
            Not After : Apr 27 18:41:50 2025 GMT
        Subject: CN=8B74D0805FB5FADFB58279A9518F9C901745B035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e4:b4:5a:45:8a:e5:1e:c1:ea:c4:7c:81:bd:
                    19:5f:3b:46:ef:27:32:0c:2a:85:b4:a5:1d:9d:dc:
                    89:ac:02:fe:75:8f:03:7a:fe:ee:42:ad:c9:b6:f3:
                    62:d5:44:a4:41:9a:c3:30:99:5d:87:ee:99:63:de:
                    f0:3b:25:69:b2:1e:8f:af:7a:9c:0d:60:ab:13:98:
                    6f:4c:9f:1b:9a:61:dc:27:cc:8d:bc:1e:8d:0a:3d:
                    6f:21:69:b2:4e:06:b3:d2:85:69:d2:b2:94:f0:4c:
                    50:57:71:4a:28:91:56:6a:04:74:c8:3d:32:aa:bc:
                    62:4d:1e:58:a0:d5:2f:63:8e:40:ba:c0:b9:9b:64:
                    03:aa:c2:9f:2c:9f:3b:2c:88:e0:18:20:f1:2a:b8:
                    f7:6c:1d:5e:ce:47:0f:54:04:41:d8:2e:49:cb:2b:
                    18:9c:03:0a:a1:37:80:4c:37:48:58:03:c5:ea:d2:
                    91:32:a4:c7:c6:25:4d:07:c1:1d:c1:59:cd:c3:5f:
                    61:62:49:f7:49:7e:24:22:df:86:72:ff:c3:e5:a9:
                    cb:9d:ff:b4:e7:bd:94:e9:bf:d5:47:c1:4d:9d:4d:
                    b0:2e:4a:83:c1:af:b6:f1:29:c8:d4:65:cb:97:a7:
                    c4:2d:62:f0:f5:9c:3f:8a:d0:6c:5c:b4:37:2d:d2:
                    a8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:74:D0:80:5F:B5:FA:DF:B5:82:79:A9:51:8F:9C:90:17:45:B0:35
            X509v3 Authority Key Identifier:
                keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:98:74:f9:3e:88:54:c1:6d:b1:2f:34:40:a5:5d:2a:1f:98:
         76:3d:9a:41:a8:e1:8f:9f:f6:cf:3d:8f:8d:30:dc:7e:74:51:
         d1:1a:3f:5b:71:91:03:a2:cb:e9:a4:e5:23:4f:c8:85:48:1f:
         d7:9c:ec:99:63:2d:15:73:4b:79:fb:75:22:4a:67:0e:ee:b0:
         7d:a9:d1:a9:e5:21:97:3a:5b:95:ff:af:1a:34:bb:32:ea:c9:
         25:1f:70:2c:f6:b0:38:34:fb:08:41:95:5a:8f:fa:4e:9b:3c:
         25:17:43:67:da:dc:a8:2d:9b:e6:82:a1:61:c0:fe:bb:d5:ae:
         03:ae:81:a6:0a:ad:01:10:d7:17:01:aa:bd:15:24:1b:ff:59:
         fa:0b:c9:1d:9a:32:6f:de:ea:a7:f3:4d:43:01:2b:c1:98:7a:
         8a:8a:77:71:c3:45:d4:a9:8b:ac:5e:15:46:66:15:04:23:ee:
         da:e1:65:83:8b:6b:85:83:5b:45:49:fe:99:a6:30:09:95:35:
         11:6b:ef:b8:82:0f:73:57:ff:29:6d:fe:b3:cf:3d:9c:74:9f:
         bf:f4:83:fe:e6:48:9a:c7:00:94:35:85:99:ed:c1:ab:3a:0d:
         f3:cb:e1:3f:6c:6b:e5:78:0b:14:fe:ef:85:43:bc:de:d2:c9:
         03:11:9f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net