Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
File:                     3E0D060F214DF8E6493243033EBD30ABD627ED36.mft (raw, json)
Hash identifier:          An0ZOQ5zaCZOo7HWlzePUtxq2Qu5xS7RQBo2Qn+F6gM=
Subject key identifier:   61:FB:D1:E7:F5:6A:D2:7F:16:8B:26:44:86:61:EA:AE:E5:AE:47:DD
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Certificate issuer:       /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial:       2BA17EDC69774A5F5F214A23CB5F53E5CCFFE092
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
Manifest number:          0313
Signing time:             Mon 28 Apr 2025 10:51:18 +0000
Manifest this update:     Mon 28 Apr 2025 10:46:18 +0000
Manifest next update:     Thu 01 May 2025 12:03:18 +0000
Files and hashes:         1: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: ts4ui87HscUHyB13k2SORNOVEV8lmbIHT+7Kro5+2+I=)
                          2: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: tn5BWTR0J9UoMe7jLV/fiiamBVILihaK5ORZZLrE3Ow=)
                          3: 3E0D060F214DF8E6493243033EBD30ABD627ED36.crl (hash: AF+fKlOtddbKqPJQjqzRIXL1gBS/gVwFRjZNddK3KKs=)
                          4: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: DHeMqVwrApzxWg7Auqbk1A2iZy33N/HgDZkHf2KtsyA=)
                          5: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: J1GwFDnmIYjEvkx3C2B28UvrTOpPZPzdK7wZFaiwPBo=)
                          6: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: aeHqzsDwYpkiZ2meJHiQaLCAVKepMtGrTnvq+XpcCkQ=)
                          7: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: cL/EaAFWPgPQRUnEMYPDXqFPgbgzeIq7Q0xZDcBuDxc=)
                          8: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: DlmCsbcNDlGVgCuY+L/I/iLFSpyWeiPIkj2K3tuGHAk=)
                          9: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: PJ9cIoI2RngKat8DQH17EBk3grHiRG6NbDeKZtvmI30=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
                          rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 12:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a1:7e:dc:69:77:4a:5f:5f:21:4a:23:cb:5f:53:e5:cc:ff:e0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
        Validity
            Not Before: Apr 28 10:46:18 2025 GMT
            Not After : May  1 12:03:18 2025 GMT
        Subject: CN=61FBD1E7F56AD27F168B26448661EAAEE5AE47DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:2c:3a:40:8d:fe:56:3e:f7:66:f0:11:16:
                    18:5b:8e:b5:6e:54:0a:3c:b9:03:3d:46:e8:7f:20:
                    ae:ba:d3:32:38:89:74:59:f5:0b:b0:3b:a8:e0:8e:
                    76:3c:50:1e:31:16:10:9f:f6:da:5b:be:9a:d3:df:
                    6f:43:4c:84:ac:64:4a:37:00:d6:8a:66:78:57:64:
                    e8:f8:c9:92:23:ea:59:79:cd:08:a9:e7:36:c0:7e:
                    0c:ff:8d:93:df:ea:de:49:9c:73:b8:d0:b4:e6:fc:
                    f6:05:4e:9a:8e:f3:61:59:95:fa:b4:62:b1:c2:3b:
                    22:c1:f8:83:7a:92:94:f8:31:d9:53:e1:b8:3a:1f:
                    2d:cc:c9:35:98:d9:a5:2b:8c:28:a2:69:fb:98:ff:
                    af:a7:39:e3:41:a4:d4:87:13:c3:cd:71:8f:ca:e4:
                    af:61:59:58:11:3d:d1:fa:c3:d1:c8:76:c2:85:32:
                    5f:c3:2f:da:b2:6d:21:6b:6b:0b:af:ed:1a:58:35:
                    9c:2c:b1:01:29:de:04:4a:1d:bd:de:5e:d0:44:34:
                    6d:6d:d7:28:4f:49:74:bd:0b:01:3c:1a:b9:9f:04:
                    03:1d:64:3d:27:45:3d:f2:b7:d2:a7:08:b4:74:ad:
                    e4:de:a1:5d:02:d9:ea:a0:a3:55:87:09:dc:23:06:
                    af:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FB:D1:E7:F5:6A:D2:7F:16:8B:26:44:86:61:EA:AE:E5:AE:47:DD
            X509v3 Authority Key Identifier:
                keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4d:4e:42:01:34:fc:88:c3:74:c1:79:f6:a8:55:f2:85:0c:
         0e:9a:89:28:de:fb:b9:f4:a8:2d:e1:27:b6:9c:ea:af:6c:21:
         3a:13:bd:9b:ef:9b:92:24:b4:b1:9d:b9:4e:70:d6:e2:1b:91:
         7c:65:6e:b7:3d:32:5d:ab:a1:37:0a:3c:f6:13:60:53:9f:be:
         d2:4d:85:c7:e4:0a:71:41:94:f2:f4:75:6e:54:9a:c3:5a:7d:
         05:51:5d:04:10:44:5b:d9:f1:6b:bf:e9:44:78:99:ff:f8:16:
         b2:27:ab:cb:5c:12:ff:dc:a1:64:d8:b5:62:f2:55:1e:56:b9:
         70:5e:bd:53:57:0f:cf:ef:c7:11:03:ad:e3:b6:1a:5b:04:1c:
         df:39:79:c1:10:c1:3f:8f:44:74:ab:05:04:f2:8b:b1:67:5d:
         53:4a:99:54:fc:9d:1a:51:f5:a2:58:62:1d:5a:07:5e:ba:03:
         79:d3:a0:dd:d6:b4:de:8a:42:62:cc:90:54:1a:00:2f:a9:4b:
         df:c4:9a:f2:51:7f:e7:7c:67:c2:0d:0c:59:1a:de:01:5d:1b:
         13:d0:bd:a3:e1:89:f1:5e:e8:0a:62:92:d1:e4:0c:0b:15:f8:
         01:f3:3a:44:db:94:b5:29:4c:ac:98:72:69:d2:a5:75:43:b3:
         b1:16:c9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:48 2025 by rpki-client on console.sobornost.net