Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft
File:                     EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json)
Hash identifier:          KO1c6h6odzlWAfNA68WFk9A3JIZgvhXoKW0ui0Lxf6c=
Subject key identifier:   68:71:5C:B1:83:E3:AC:7B:05:7F:03:0A:68:5B:2E:2F:0D:99:10:88
Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20
Certificate issuer:       /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520
Certificate serial:       6A1B9C873D5807050C6F12D7D87EF3298B6A5B2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft
Manifest number:          018A
Signing time:             Mon 16 Jun 2025 22:40:02 +0000
Manifest this update:     Mon 16 Jun 2025 22:35:02 +0000
Manifest next update:     Fri 20 Jun 2025 03:34:02 +0000
Files and hashes:         1: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: /cdl8KopWWEAVSKHGwwN7jQvT8+haRS7g+4C1ytM8Dg=)
                          2: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: A8O4HhKJBUpQAVtG9F/HuVJZcjl2PJnz2blEINGnJlw=)
                          3: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: JP9VcOXu9yShvgD9CtjBFnD93tq40s8BCly951ednd4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl
                          rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 03:34:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1b:9c:87:3d:58:07:05:0c:6f:12:d7:d8:7e:f3:29:8b:6a:5b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520
        Validity
            Not Before: Jun 16 22:35:02 2025 GMT
            Not After : Jun 20 03:34:02 2025 GMT
        Subject: CN=68715CB183E3AC7B057F030A685B2E2F0D991088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2e:d6:78:8b:81:93:49:61:42:6d:37:41:ab:
                    98:b7:f7:f2:6c:d6:c2:21:98:dd:7e:a4:b7:e1:31:
                    dd:e3:ca:95:aa:dd:1b:f0:fa:76:ce:fe:28:cc:8a:
                    30:50:92:95:7b:e6:0e:c5:f1:7f:e1:a8:07:7a:15:
                    81:e2:cc:d9:6d:8c:73:30:71:d3:40:54:f1:5a:1f:
                    18:d4:71:7b:ef:d7:63:2b:6a:68:3b:1c:d6:5e:bb:
                    d0:46:13:81:1a:f8:c4:aa:5e:3d:7b:20:70:4e:d3:
                    1c:49:de:4c:86:f8:1b:3f:b3:3d:80:03:ae:a6:41:
                    e9:d4:af:95:29:90:e8:b2:ee:25:a6:3b:83:b8:a8:
                    ab:34:36:4a:0a:cc:d4:8c:35:9a:7d:01:31:1d:88:
                    74:2b:15:47:0f:a9:2a:40:37:34:1f:c5:8d:59:e7:
                    56:9e:25:bf:07:14:e1:93:d4:7d:de:5d:5a:62:ce:
                    c0:e3:d6:e5:8c:75:1d:be:a6:bd:21:3f:4c:04:43:
                    9b:d6:d8:01:97:74:ba:83:d5:98:29:32:89:87:0d:
                    75:30:3e:3d:e2:a5:bd:16:cc:ac:d5:80:f1:a6:ec:
                    1d:d5:c0:5c:e0:6b:d8:c6:75:e1:1c:00:4b:a0:13:
                    fb:94:a8:18:a1:5f:f5:69:82:38:ae:30:d7:a2:03:
                    d8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:71:5C:B1:83:E3:AC:7B:05:7F:03:0A:68:5B:2E:2F:0D:99:10:88
            X509v3 Authority Key Identifier:
                keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b9:8a:58:5f:6b:ee:47:01:a4:b3:6a:6a:9b:80:bb:bd:65:
         11:2f:a7:ea:9b:79:a5:90:27:fc:6d:5a:6e:18:a0:aa:fc:66:
         22:6b:78:e3:aa:2d:e8:c4:3e:5c:87:50:a4:e1:5b:84:b2:e6:
         1a:e4:7b:30:98:bd:64:99:c6:d2:1b:12:6f:f1:e4:fb:ed:e3:
         36:2b:fb:73:e3:14:dc:fe:19:b7:c6:31:51:08:bd:0a:cc:86:
         9f:f4:0a:b2:85:7b:75:bb:6c:3d:b0:7c:90:9b:4b:60:a4:c8:
         62:b5:fe:a7:02:0a:cd:56:ac:1d:f4:66:d5:c8:c8:3a:5b:1d:
         e1:72:b9:02:d6:85:7a:5b:d8:05:1d:99:77:2d:08:8c:7d:b1:
         f3:44:13:8a:5e:ca:11:0f:3b:8d:06:48:62:a1:5e:2b:60:5f:
         85:de:ae:e2:e7:f1:13:52:cf:1f:a3:f2:1e:a2:43:9b:c4:53:
         b3:8c:9e:00:e7:85:52:d1:6c:7f:e6:24:05:ee:c5:f6:b2:5c:
         3c:58:14:c1:38:51:db:4f:39:80:71:14:4c:e2:a0:25:e8:0f:
         83:ef:d7:14:9c:da:23:f5:ca:20:b1:0b:d6:d6:67:a3:b8:93:
         fd:dd:bd:73:52:5b:f0:8b:a2:6c:05:74:c8:c8:01:c5:23:62:
         2a:f9:4d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:58:07 2025 by rpki-client