Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft
File:                     D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json)
Hash identifier:          WmaGbpP5WE2+X4jDPGukvRyUgsfalAkbZfpEzDzorZo=
Subject key identifier:   29:F5:72:35:E3:3E:E4:C2:7F:81:EA:E4:E3:2C:DF:BD:B2:4A:62:73
Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29
Certificate issuer:       /CN=D3BDA2123144839640DA280D6B971C12D0C9C929
Certificate serial:       4B5D8D22C28CA4AACC00CCE3E76085B074F03BEC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft
Manifest number:          0194
Signing time:             Mon 28 Apr 2025 13:21:40 +0000
Manifest this update:     Mon 28 Apr 2025 13:16:40 +0000
Manifest next update:     Thu 01 May 2025 21:21:40 +0000
Files and hashes:         1: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: LgwwS+fgDKg25QWDtuUlSa123O0j3oTaPddVCPibVQw=)
                          2: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: 20LgV/uczjHJGKO4OO/eXJp6RzLLunCubclElIPhcdI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl
                          rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5d:8d:22:c2:8c:a4:aa:cc:00:cc:e3:e7:60:85:b0:74:f0:3b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929
        Validity
            Not Before: Apr 28 13:16:40 2025 GMT
            Not After : May  1 21:21:40 2025 GMT
        Subject: CN=29F57235E33EE4C27F81EAE4E32CDFBDB24A6273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:12:a3:06:64:c6:dd:4f:ba:a4:01:d7:23:
                    72:d6:fc:d0:d3:fb:f0:36:27:8f:e4:2d:cb:85:8a:
                    1d:c8:a8:54:1b:40:91:d4:cd:8b:22:ed:6b:37:83:
                    71:3f:99:cd:9b:f3:37:e0:ea:c0:05:8a:8e:a5:36:
                    cd:65:56:5a:8b:49:d3:a9:07:80:4f:6f:c4:57:8e:
                    aa:80:5f:63:4c:10:48:b2:fb:fc:3e:be:4d:e1:d2:
                    52:c5:2f:c3:cf:c8:45:ab:83:75:7c:a4:61:14:97:
                    1f:b8:aa:44:13:6b:a1:7a:bf:d5:f4:86:68:10:5a:
                    db:e1:d2:56:a5:8c:c7:93:57:6b:66:39:4b:7e:8f:
                    41:95:e7:a1:e0:c5:b5:a7:5a:aa:b8:b8:4c:36:18:
                    ae:c3:5e:db:2f:a5:70:8c:d2:c3:35:8d:ea:fe:fa:
                    1c:4f:20:a4:48:e8:d7:d7:25:86:17:17:21:a9:4f:
                    54:62:fc:11:8c:50:f4:3c:c0:0d:9a:fb:ef:5d:cf:
                    9e:4a:8c:22:98:01:76:5b:a8:ef:c5:e5:90:56:f4:
                    79:ec:30:38:15:a7:91:9e:d5:b0:60:b0:b0:9c:05:
                    de:0c:6f:d9:8d:50:0d:bc:be:89:15:8c:7e:01:23:
                    e6:2c:65:48:69:e5:1c:f7:1e:4b:fd:f0:6c:78:b9:
                    87:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F5:72:35:E3:3E:E4:C2:7F:81:EA:E4:E3:2C:DF:BD:B2:4A:62:73
            X509v3 Authority Key Identifier:
                keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ac:68:3c:50:d4:01:5e:e4:59:4f:e1:bc:55:a1:8e:7d:ce:
         da:b8:7d:9a:a6:36:77:36:eb:d5:38:37:9a:f7:b8:7d:27:8e:
         61:67:da:8f:31:a6:51:d2:47:2f:a7:05:00:82:3e:e8:aa:24:
         ba:8e:83:a0:8e:9e:b8:c3:4b:cf:5c:85:24:2f:4f:bc:d5:d7:
         80:72:fd:44:68:85:3b:39:9a:86:1e:22:73:b2:67:11:c5:d4:
         a3:db:bc:5c:82:b5:21:5b:45:15:14:e8:90:bd:96:20:e9:20:
         e4:64:64:4c:2d:71:86:5d:39:12:46:df:f9:ba:39:1b:12:5c:
         89:13:b4:e1:d3:4d:a9:34:4f:73:7e:e5:44:84:89:ef:60:35:
         1c:88:bd:e1:26:94:74:65:ee:63:79:da:c2:f6:f1:50:91:b2:
         45:61:71:d8:56:e4:ee:55:1d:33:40:67:91:dd:c8:ff:6a:b8:
         9d:ff:f6:db:a7:29:95:30:00:93:3d:fc:a8:74:a8:72:32:6f:
         89:db:7f:1a:57:8b:23:9f:7b:01:40:fd:4f:7f:57:02:09:a8:
         ed:f7:a0:48:66:38:21:23:52:8c:99:50:ce:40:a6:bd:e6:d7:
         fe:bc:00:e6:e7:f0:be:79:27:cb:54:ee:61:1d:b6:15:66:d0:
         2f:86:41:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:38:59 2025 by rpki-client