Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
File:                     8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json)
Hash identifier:          MVoIhvm/3ztPy6J2ikh8jfRzcQzpZWMdIskgjsg3Dg8=
Subject key identifier:   A5:A0:44:79:E8:D0:B6:2C:51:3D:B4:0F:46:20:E2:A6:4E:CB:D1:A9
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Certificate issuer:       /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial:       057E8858D2013C340D4FE3BC275905DDC4742031
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
Manifest number:          04DD
Signing time:             Sun 27 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 27 Apr 2025 13:56:40 +0000
Manifest next update:     Wed 30 Apr 2025 20:58:40 +0000
Files and hashes:         1: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: YdgVrIhwigf5vVjBfE6W9Ix4PmwssBDwnjxMo0ci8Oo=)
                          2: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: IQcHIUy46CTJePR6Z9z+26UQZV8/dla1aLxrUhi96Yc=)
                          3: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: gnvURXZkhn/FEj22B4ytqTMsZk8ZLC9E8Tq6VbTdHlg=)
                          4: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: wogp6Fwk27hSJcyx9ep7Z5fly5SbwAyNo1MifakiPFo=)
                          5: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 5z4EVyXkxyXnhxl5JH3Pz2dy7K+1+d6O34E8YEu6Oo0=)
                          6: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: +Wv9KU9iNmf8e+dcDb3YT6/AamLrR1m0U+jn1PjO20c=)
                          7: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: SbxBJwcyRNjmcJAEw7SuNTFi3HhmkmBhtQkXMEm7WeI=)
                          8: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: f/UXoSDfbRkGf1lUmUNbaOYccjPXICPU6lcajtxcZik=)
                          9: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: gD3qH0CL5kDWzLn1NnDdXaxbwmPWUV8Kvspy5PDfTJA=)
                          10: 3231302e3234372e3234322e302f32342d3234203d3e20313430343035.roa (hash: dw24NIap+hZJ4wq3Y9e+7pPi7wiN8EZO2tINonm4ebY=)
                          11: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: yw3K/bp/LPi1I2OAb+IKkUT9fIWUEaXPoYhzWvShryU=)
                          12: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: ee3hb82wlCfvRHJv/Z0BLwZrijit1p8khM33Y7zMuT4=)
                          13: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: X4Pk8WgmhA0dbNOl0G7YhvirhZLSY9c290PzK0yXcPw=)
                          14: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: ZfF3KZtk2dhQe1TSXKb5jkKHdT8hFQeAF+Yp3HxE2X8=)
                          15: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: DLEEWRg8CzNEC40bkoq+06vWx/pLLLcKvRY7UIZLKcs=)
                          16: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: lYozuS7H8g71TmDAhlsE7Z+j/6P9Ega8nsca+NA9iZs=)
                          17: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: q5exjX9sipnlgCr446gNBKp3hcZ5p+bSP3uX63/NcUU=)
                          18: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: +h2OIV45k9IMNmhDrlIF5o27fKX07HhXCAJxexuPVfw=)
                          19: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: 1tp2p0lmzVYvYN9LyCd/jXojPSljtaqZldm282NgTBI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
                          rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 15:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7e:88:58:d2:01:3c:34:0d:4f:e3:bc:27:59:05:dd:c4:74:20:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
        Validity
            Not Before: Apr 27 13:56:40 2025 GMT
            Not After : Apr 30 20:58:40 2025 GMT
        Subject: CN=A5A04479E8D0B62C513DB40F4620E2A64ECBD1A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:dc:d0:82:a2:72:c0:7a:38:e0:3e:f2:08:
                    6c:35:2f:97:1e:26:f2:cc:86:04:e2:e0:b9:1a:4a:
                    a9:2d:aa:8a:3f:8f:33:b6:a4:e2:50:3b:af:6c:43:
                    b5:06:20:a2:e6:d0:a8:53:f6:1b:6c:af:37:89:5d:
                    d1:95:07:a0:ad:95:40:09:1e:eb:a3:29:90:23:8c:
                    21:b2:68:62:25:a3:9c:12:de:c6:cb:83:61:7e:db:
                    87:f2:4f:1f:86:43:09:fe:12:31:ae:e8:b0:c5:7a:
                    35:6d:82:44:e7:ad:4b:95:c9:9e:7f:a8:83:5c:c5:
                    1a:f4:62:a9:ec:1b:79:eb:79:30:ca:6c:a9:dc:5e:
                    b4:37:8f:2b:a8:b3:94:03:c2:a3:d8:fc:d2:28:98:
                    18:8d:6b:dc:09:74:57:26:1c:ca:1f:94:b6:32:c2:
                    9d:8c:6a:4e:bc:78:82:08:8e:58:77:88:7c:a8:a6:
                    8b:98:a0:4f:af:c3:93:e8:2b:0d:33:d0:9b:45:8a:
                    60:57:57:d4:ac:06:25:52:b2:71:e7:fa:de:86:ed:
                    66:e4:ff:1e:53:c5:d3:d6:79:c2:5b:1d:44:2e:69:
                    52:ec:63:4c:32:ac:c3:3f:6f:ee:93:11:b5:ff:4f:
                    f2:d2:03:02:ca:00:85:9a:9f:c3:be:6b:94:c0:9f:
                    fd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A0:44:79:E8:D0:B6:2C:51:3D:B4:0F:46:20:E2:A6:4E:CB:D1:A9
            X509v3 Authority Key Identifier:
                keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:46:29:b9:1b:bf:7e:df:ac:32:84:05:48:fb:3e:a2:9d:5b:
         8e:12:0b:58:eb:c2:5e:08:bc:76:34:b3:e4:68:b9:77:17:d9:
         fc:ec:02:ad:a0:b1:1c:a9:36:79:b7:4c:b3:ce:d1:1b:40:69:
         fa:f7:f1:42:00:30:26:dc:4c:83:b4:97:cb:d9:19:bd:0e:ea:
         8b:93:72:6b:b2:7e:31:59:dc:c2:ca:cb:3f:d6:65:5d:98:6c:
         db:dd:b9:eb:82:10:46:f2:59:df:84:a4:a1:77:b1:7f:ae:6d:
         3b:55:d8:af:20:f6:75:99:76:b1:bb:55:2f:c4:c9:71:e3:69:
         8d:1a:0a:4b:f3:78:c3:9e:77:9a:9e:63:95:41:18:69:45:4f:
         47:f3:c3:41:b9:57:c3:d5:2b:33:6a:f2:1b:8e:a2:e3:44:e4:
         23:48:79:6d:cc:09:bf:7c:0d:61:c4:c8:13:f4:e5:44:03:f6:
         7d:d6:e0:62:1e:3b:95:a2:60:51:01:b0:6b:53:a6:c0:1a:c3:
         ab:1a:36:ae:77:13:ce:8d:ea:6d:db:c3:0b:cb:3f:7a:e5:6a:
         6a:b1:dd:ee:ee:18:e4:84:7b:2c:5e:fb:09:32:de:8d:04:e5:
         6b:a1:00:bd:63:c0:4c:c3:ec:01:92:2b:f0:19:50:28:1f:31:
         1b:01:79:09
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBX6IWNIBPDQNT+O8J1kF3cR0IDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJD
QUI5NjEwRjAeFw0yNTA0MjcxMzU2NDBaFw0yNTA0MzAyMDU4NDBaMDMxMTAvBgNV
BAMTKEE1QTA0NDc5RThEMEI2MkM1MTNEQjQwRjQ2MjBFMkE2NEVDQkQxQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/tzQgqJywHo44D7yCGw1L5ce
JvLMhgTi4LkaSqktqoo/jzO2pOJQO69sQ7UGIKLm0KhT9htsrzeJXdGVB6CtlUAJ
HuujKZAjjCGyaGIlo5wS3sbLg2F+24fyTx+GQwn+EjGu6LDFejVtgkTnrUuVyZ5/
qINcxRr0YqnsG3nreTDKbKncXrQ3jyuos5QDwqPY/NIomBiNa9wJdFcmHMoflLYy
wp2Mak68eIIIjlh3iHyopouYoE+vw5PoKw0z0JtFimBXV9SsBiVSsnHn+t6G7Wbk
/x5TxdPWecJbHUQuaVLsY0wyrMM/b+6TEbX/T/LSAwLKAIWan8O+a5TAn/3zAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpaBEeejQtixRPbQPRiDipk7L0akwHwYDVR0j
BBgwFoAUiv67UdAMjgaq6oQuDAz/wsq5YQ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NjEyNDMyOS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC84QUZFQkI1MUQw
MEM4RTA2QUFFQTg0MkUwQzBDRkZDMkNBQjk2MTBGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJDQUI5
NjEwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYxMjQzMjktZWMyMC00NDYwLWFj
MzEtOWMzNmNmOTRmM2ZiLzAvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZG
QzJDQUI5NjEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD1GKbkbv37frDKEBUj7PqKdW44SC1jrwl4I
vHY0s+RouXcX2fzsAq2gsRypNnm3TLPO0RtAafr38UIAMCbcTIO0l8vZGb0O6ouT
cmuyfjFZ3MLKyz/WZV2YbNvdueuCEEbyWd+EpKF3sX+ubTtV2K8g9nWZdrG7VS/E
yXHjaY0aCkvzeMOed5qeY5VBGGlFT0fzw0G5V8PVKzNq8huOouNE5CNIeW3MCb98
DWHEyBP05UQD9n3W4GIeO5WiYFEBsGtTpsAaw6saNq53E86N6m3bwwvLP3rlamqx
3e7uGOSEeyxe+wky3o0E5WuhAL1jwEzD7AGSK/AZUCgfMRsBeQk=
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:56 2025 by rpki-client on console.sobornost.net