Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft
File:                     821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft (raw, json)
Hash identifier:          wuRByWKYluS/GZw7MKeF3FpqASv60bFhAlQGM87bqVw=
Subject key identifier:   A6:7E:CE:3D:0A:8D:F1:F6:42:AE:69:C0:42:19:79:C6:46:EC:32:DB
Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0
Certificate issuer:       /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
Certificate serial:       3736700EE4E6878332C2C6B6E23DF057590290A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft
Manifest number:          04CA
Signing time:             Thu 24 Apr 2025 02:41:14 +0000
Manifest this update:     Thu 24 Apr 2025 02:36:14 +0000
Manifest next update:     Sun 27 Apr 2025 11:28:14 +0000
Files and hashes:         1: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: E70nlSvwN/YRzt3ipt5eUpiof5ZiDppc9oAiJGHFIb4=)
                          2: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: TFhZKwNR/B40CI6MIhTrGqXdafQxmGh3I/WIFrNxEC0=)
                          3: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: 7Y6qCTa63vPiuGKVBW20e/ioBfU8xWNmqBl6jRZtq+c=)
                          4: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: yblUfrf5SIh1ilGvgnHlCA4piWC1NnXyvHb/63k5VZg=)
                          5: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: ZWhy/wolBT2qTHnDdCH6juzwqEsIwsR+xgtIVGxTfs4=)
                          6: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl (hash: dGvfovcP0I2pMhRkJko1P9F761KOt8EeA/AGARzmgwQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl
                          rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 08:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:36:70:0e:e4:e6:87:83:32:c2:c6:b6:e2:3d:f0:57:59:02:90:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
        Validity
            Not Before: Apr 24 02:36:14 2025 GMT
            Not After : Apr 27 11:28:14 2025 GMT
        Subject: CN=A67ECE3D0A8DF1F642AE69C0421979C646EC32DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:05:04:cf:8f:63:13:14:96:76:09:0c:bf:a4:
                    31:a1:91:ff:b5:4a:01:b3:4b:28:88:c8:e2:bf:82:
                    36:51:bb:29:99:3b:4c:7f:fc:d1:f1:65:07:67:d1:
                    30:25:e6:39:93:dc:e5:43:3c:4b:ab:28:ae:a6:a0:
                    e8:d7:aa:76:5d:e4:85:61:8b:a2:ed:c2:ab:c8:35:
                    9d:58:e1:12:19:f0:33:36:e8:e2:22:d0:36:87:e9:
                    7d:33:18:db:a7:e4:71:3a:a6:ca:a3:2b:b9:40:df:
                    db:1f:84:40:70:3b:31:48:b6:ed:fe:a9:93:bc:5b:
                    c5:43:ef:0c:08:12:68:7a:f3:88:16:2d:bc:93:44:
                    7d:6e:c6:94:41:e3:d1:c3:c3:68:f5:1e:ac:99:69:
                    b8:99:b1:5d:4b:ad:73:11:76:2b:27:0f:06:a3:77:
                    56:05:2a:aa:ab:a8:92:43:4d:9a:0d:a8:ec:1b:e7:
                    70:06:2d:ce:24:b2:07:b0:f3:3e:68:00:84:2e:79:
                    7b:b9:7a:24:b4:23:4f:37:9f:4b:23:c7:72:9a:37:
                    fd:01:9d:c6:50:68:13:be:c2:da:1c:29:fc:c3:54:
                    3f:e3:ba:f8:2a:3c:ce:e7:a3:29:f3:86:3d:65:01:
                    9a:38:e4:15:02:27:a7:b6:4c:bd:46:a8:86:3c:53:
                    c2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7E:CE:3D:0A:8D:F1:F6:42:AE:69:C0:42:19:79:C6:46:EC:32:DB
            X509v3 Authority Key Identifier:
                keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:aa:96:6a:da:dd:68:eb:76:1e:b6:dc:07:c7:31:5f:d9:6a:
         b2:14:53:10:bb:dd:70:46:16:9d:86:9c:57:91:b9:af:51:2c:
         5a:42:6c:f9:1c:d2:3d:00:5e:d2:0b:b5:da:de:c9:18:03:11:
         30:9b:b9:9d:1e:ba:4c:e0:f0:73:45:a0:76:da:95:1f:65:28:
         be:62:12:88:79:7e:7b:da:c9:29:ad:e5:6f:8e:0c:3f:3a:73:
         b1:2f:d0:60:ea:a5:93:f5:6a:f3:56:7b:d7:8e:b9:a6:63:ee:
         44:59:ae:9a:31:5d:50:86:4a:2c:d5:a2:0d:97:d6:86:a2:62:
         72:1b:5d:da:97:98:ce:b9:d5:09:d0:65:4c:11:93:86:fa:ee:
         69:5a:d2:1f:69:d7:95:ca:70:5a:68:3e:c2:cb:d7:f7:e5:ca:
         e5:18:67:a1:51:73:90:3a:20:1f:ee:ac:31:5a:74:3b:8a:00:
         e8:9a:c9:e0:b0:e1:03:31:fd:98:f2:81:ee:75:f9:05:d2:02:
         b6:36:6f:10:21:16:0f:45:c1:a5:70:2f:a0:0c:4b:ec:ec:34:
         cc:0d:b5:a1:c1:90:04:14:56:e2:c6:94:88:ad:36:98:6f:62:
         10:64:08:11:34:68:f4:3e:f4:e6:3c:12:f7:d5:de:41:3f:07:
         78:b3:3a:2f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNzZwDuTmh4Mywsa24j3wV1kCkKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNB
OUMwQjZBMDAeFw0yNTA0MjQwMjM2MTRaFw0yNTA0MjcxMTI4MTRaMDMxMTAvBgNV
BAMTKEE2N0VDRTNEMEE4REYxRjY0MkFFNjlDMDQyMTk3OUM2NDZFQzMyREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpBQTPj2MTFJZ2CQy/pDGhkf+1
SgGzSyiIyOK/gjZRuymZO0x//NHxZQdn0TAl5jmT3OVDPEurKK6moOjXqnZd5IVh
i6LtwqvINZ1Y4RIZ8DM26OIi0DaH6X0zGNun5HE6psqjK7lA39sfhEBwOzFItu3+
qZO8W8VD7wwIEmh684gWLbyTRH1uxpRB49HDw2j1HqyZabiZsV1LrXMRdisnDwaj
d1YFKqqrqJJDTZoNqOwb53AGLc4ksgew8z5oAIQueXu5eiS0I083n0sjx3KaN/0B
ncZQaBO+wtocKfzDVD/juvgqPM7noynzhj1lAZo45BUCJ6e2TL1GqIY8U8IhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpn7OPQqN8fZCrmnAQhl5xkbsMtswHwYDVR0j
BBgwFoAUgh8WWB+TGhmhS0Db8eKwU6nAtqAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YWRkN2MwZi0wMmQzLTQyMTctOWZjMy0wMDQ3YWUxODM2ZGMvMC84MjFGMTY1ODFG
OTMxQTE5QTE0QjQwREJGMUUyQjA1M0E5QzBCNkEwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNBOUMw
QjZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm
YzMtMDA0N2FlMTgzNmRjLzAvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIw
NTNBOUMwQjZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC6qlmra3Wjrdh623AfHMV/ZarIUUxC73XBG
Fp2GnFeRua9RLFpCbPkc0j0AXtILtdreyRgDETCbuZ0eukzg8HNFoHbalR9lKL5i
Eoh5fnvaySmt5W+ODD86c7Ev0GDqpZP1avNWe9eOuaZj7kRZrpoxXVCGSizVog2X
1oaiYnIbXdqXmM651QnQZUwRk4b67mla0h9p15XKcFpoPsLL1/flyuUYZ6FRc5A6
IB/urDFadDuKAOiayeCw4QMx/Zjyge51+QXSArY2bxAhFg9FwaVwL6AMS+zsNMwN
taHBkAQUVuLGlIitNphvYhBkCBE0aPQ+9OY8EvfV3kE/B3izOi8=
-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:50 2025 by rpki-client on console.sobornost.net