Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft
File:                     0EAF2A0CD22523DB087375417038E4165075CA3E.mft (raw, json)
Hash identifier:          Oo9UfR+e/OmyBbAlaGAieafJcnKKBRjcvUVL266cbMg=
Subject key identifier:   2C:46:59:2A:52:49:6B:77:19:60:BF:C4:5A:DF:19:5E:81:29:0B:29
Authority key identifier: 0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E
Certificate issuer:       /CN=0EAF2A0CD22523DB087375417038E4165075CA3E
Certificate serial:       4E9717E4BCB537973CB892E64F1B6175661082F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft
Manifest number:          CE
Signing time:             Wed 06 Aug 2025 21:21:03 +0000
Manifest this update:     Wed 06 Aug 2025 21:16:03 +0000
Manifest next update:     Sat 09 Aug 2025 21:38:03 +0000
Files and hashes:         1: 0EAF2A0CD22523DB087375417038E4165075CA3E.crl (hash: GsP+6fSbpxQRJ3gzanVw3/OldCro5rirUoYZnFOF1Q0=)
                          2: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: LQj0jMPge82CwHOWS5fHIk0tBtvaFA1Hv5mniV+5odo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl
                          rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 09:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:97:17:e4:bc:b5:37:97:3c:b8:92:e6:4f:1b:61:75:66:10:82:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EAF2A0CD22523DB087375417038E4165075CA3E
        Validity
            Not Before: Aug  6 21:16:03 2025 GMT
            Not After : Aug  9 21:38:03 2025 GMT
        Subject: CN=2C46592A52496B771960BFC45ADF195E81290B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5a:86:20:43:6e:a1:d0:cc:5a:bf:71:2d:d3:
                    b9:73:ec:54:42:0a:a9:ea:24:27:c5:84:ff:61:4f:
                    ed:eb:a9:e9:06:f7:c4:a8:5e:22:2b:f8:90:51:4d:
                    d8:85:f5:f5:fc:98:e6:51:fe:48:0d:09:fc:9f:40:
                    5e:27:3c:af:0c:7e:69:4f:f1:14:33:ec:a4:32:75:
                    77:8e:f8:4f:72:74:59:9a:90:7c:77:2a:7f:1d:26:
                    51:72:71:d6:93:72:35:8a:a3:6c:ec:22:dd:c7:f7:
                    25:04:48:48:4a:a5:ab:45:5a:99:83:a9:eb:26:cc:
                    7f:34:5f:f3:95:3d:d9:36:fd:5e:17:b3:3c:5b:59:
                    58:cd:0a:ad:99:5c:99:46:da:90:92:1a:0f:a9:7c:
                    fa:07:bb:d5:fa:11:60:4a:0f:bc:21:ba:37:91:66:
                    6b:f2:6e:36:15:2a:58:9d:a6:aa:1a:15:20:44:10:
                    98:be:da:4e:88:41:42:26:96:fc:03:9f:fb:17:1e:
                    0d:a9:97:e2:ea:e1:aa:cb:bc:5c:d8:3a:09:fe:d6:
                    96:b8:4e:74:25:01:ee:ed:6b:6f:9e:aa:26:2c:bd:
                    49:e0:64:69:97:18:a9:5f:36:85:61:7e:92:8f:f1:
                    bf:76:ab:5a:5d:31:3d:8b:44:e0:e4:e3:42:6c:95:
                    15:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:46:59:2A:52:49:6B:77:19:60:BF:C4:5A:DF:19:5E:81:29:0B:29
            X509v3 Authority Key Identifier:
                keyid:0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a8:f3:39:c2:82:a9:cb:5b:c6:26:05:89:f7:2b:7e:ff:4b:
         e5:a8:39:1f:e2:cf:21:58:53:35:ea:00:11:c8:a5:a9:d4:f1:
         b4:21:2d:e8:1a:03:34:6b:2b:3d:bb:8a:9e:f2:64:ce:63:8b:
         e9:09:80:e5:62:ee:f8:e2:c9:53:9a:68:ae:26:3e:de:7e:3d:
         e2:c3:f2:1a:d4:c6:9a:4f:e7:9b:da:95:1d:91:5a:f5:1f:26:
         55:f3:e3:6d:65:79:f2:b9:cb:0f:19:f4:ab:77:5f:fd:e1:51:
         77:23:3f:e9:21:ac:47:2e:9e:66:82:b7:7d:35:09:0c:cf:6a:
         f5:76:4b:f0:97:38:03:35:6e:c0:ea:e5:fb:79:42:80:f7:2c:
         51:39:02:8b:2a:18:63:88:da:69:06:6c:af:f7:c4:39:28:13:
         13:49:1e:5d:5b:e7:f2:be:d4:de:48:e5:a7:b4:53:91:01:48:
         67:3b:18:d7:8f:38:9c:0f:8a:a5:c2:72:2c:c1:88:99:86:0c:
         e5:f1:fa:30:1b:56:b0:1b:a3:1d:0f:5a:0e:a9:c4:bf:f8:4f:
         7f:a0:11:c5:3d:1a:25:33:ec:dc:5a:63:4f:44:73:2a:86:a4:
         fb:56:eb:22:d8:40:84:68:1a:42:78:35:ec:c4:3b:b9:62:75:
         89:97:00:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:23:31 2025 by rpki-client