Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft
File:                     6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft (raw, json)
Hash identifier:          7LFQRf/5AcyIatjazGzWbNhJUha8xi8kKlu1plP1wLk=
Subject key identifier:   C6:A5:32:EC:BF:FE:6C:4C:72:28:BD:7B:BF:6C:EC:EB:28:82:22:E3
Authority key identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9
Certificate issuer:       /CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9
Certificate serial:       2B35EA4A3997C54A6E829EE1962DD5A39250D61D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft
Manifest number:          04C8
Signing time:             Sun 27 Apr 2025 21:10:38 +0000
Manifest this update:     Sun 27 Apr 2025 21:05:38 +0000
Manifest next update:     Thu 01 May 2025 03:29:38 +0000
Files and hashes:         1: 323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa (hash: qdWdsvIUCg9flRqMStTQ4oe1N2TKrSaY2SzVkpN3z2c=)
                          2: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl (hash: Ai2iGkC8NKBuiJjaef9xp05Lczv1qlrzjystJ6fVHPg=)
                          3: 3130332e3135312e39352e302f32342d3234203d3e203137353338.roa (hash: bGhluMXBlQ6D58wwD+73zV+Z0ql197un24tcoC8iLHI=)
                          4: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (hash: 6APR7Hv9TSOuXZpSsPHBjMrP1CKzIss5d9cN4qNnUI8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl
                          rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 03:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:35:ea:4a:39:97:c5:4a:6e:82:9e:e1:96:2d:d5:a3:92:50:d6:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9
        Validity
            Not Before: Apr 27 21:05:38 2025 GMT
            Not After : May  1 03:29:38 2025 GMT
        Subject: CN=C6A532ECBFFE6C4C7228BD7BBF6CECEB288222E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:a3:41:71:79:44:7b:35:27:72:4c:ab:6b:
                    af:1d:99:c4:60:79:05:de:76:90:e8:14:0e:8b:06:
                    fb:4b:7b:79:3e:7d:d2:79:93:f3:a6:37:07:69:6b:
                    36:e6:b0:9f:bf:58:d4:fa:26:68:a7:9d:f1:d2:5c:
                    ac:36:c9:02:53:97:f2:13:48:29:c0:3d:18:65:8e:
                    ed:15:ce:1b:7f:ec:b2:16:35:32:d0:bd:de:4d:14:
                    57:c3:f1:7c:9a:69:eb:2e:3a:a5:41:ba:0c:1b:88:
                    c8:6c:47:11:7e:4c:cd:67:c7:a3:51:3b:13:9a:58:
                    7f:8c:bc:70:52:ee:ba:2c:18:50:df:44:1f:29:fe:
                    a0:7a:11:2a:2e:99:c2:2f:a9:f8:9d:d3:53:49:3c:
                    88:f4:c2:59:50:a6:fb:70:3b:b3:fe:8e:9a:a8:ba:
                    a6:e2:6e:a1:27:39:21:34:ee:50:1d:7a:5e:a4:0f:
                    69:27:52:a6:7f:2c:d8:7d:00:d0:b4:72:0c:17:72:
                    f3:89:70:00:24:b3:88:2f:5b:1f:62:cb:df:fc:df:
                    d7:05:9b:21:cb:b4:49:e3:b4:6d:3c:f4:53:1f:5e:
                    ce:a0:22:da:52:ab:df:9d:d3:ed:18:fa:09:0c:b8:
                    c7:83:66:b2:02:69:71:0c:90:f2:51:6d:b3:79:26:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A5:32:EC:BF:FE:6C:4C:72:28:BD:7B:BF:6C:EC:EB:28:82:22:E3
            X509v3 Authority Key Identifier:
                keyid:6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d3:7d:58:17:a9:46:92:cd:ff:66:a2:25:52:79:e7:da:73:
         9f:86:64:cb:ae:62:37:9f:c7:91:35:97:53:68:cd:6d:87:75:
         1d:15:3b:c2:85:d9:df:55:3b:8c:8c:3b:ca:bd:ed:ff:6e:31:
         d6:d0:05:4f:32:f9:87:eb:5e:52:00:50:ef:34:0f:7e:03:80:
         92:02:37:37:66:68:0b:be:8b:32:3a:fc:ee:52:0c:ef:32:5e:
         ad:2a:5e:76:0e:01:e7:bd:10:76:17:df:b3:53:3e:2c:ba:00:
         2c:78:7e:3c:3a:1c:ba:4a:6e:51:13:06:7c:af:0b:c2:28:12:
         e8:d1:a1:01:08:bb:85:8d:f9:da:26:eb:ca:9b:c2:52:5a:c1:
         aa:c6:d5:8e:e6:b3:d3:5c:68:38:07:3b:ac:e5:65:98:94:4c:
         83:28:69:5e:51:b8:8d:4c:d4:03:d5:e4:b3:4f:26:23:4f:37:
         14:ee:8c:5b:c2:a1:6f:d3:8b:3d:70:81:55:aa:ed:5c:53:bc:
         ef:97:bf:08:8b:83:b7:de:e4:69:1e:3c:37:1f:c5:69:e2:d0:
         46:d7:75:e6:7c:d0:5a:ff:bf:7d:2e:ef:bc:fe:76:d7:28:26:
         ab:4b:14:60:89:f2:05:55:33:f0:b4:aa:5a:77:ff:0f:40:a8:
         11:7d:dc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:01 2025 by rpki-client on console.sobornost.net