Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft
File:                     E3928623409C1C10E292F838F8308E11636E6C03.mft (raw, json)
Hash identifier:          WgCSouKrz+8+1s212KOInLGQXRm/PhKxGNBMyKETP9g=
Subject key identifier:   C4:61:1A:7B:0D:D9:F5:58:8A:6F:CF:97:89:8C:D9:4F:15:8C:B3:7B
Authority key identifier: E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03
Certificate issuer:       /CN=E3928623409C1C10E292F838F8308E11636E6C03
Certificate serial:       20C3082610BD6E3482F9D1B627AAF866471DEEFB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft
Manifest number:          80
Signing time:             Mon 28 Apr 2025 20:52:07 +0000
Manifest this update:     Mon 28 Apr 2025 20:47:07 +0000
Manifest next update:     Fri 02 May 2025 02:53:07 +0000
Files and hashes:         1: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: fpi4CO6dz+MooFZgF3fJxoijLeT4dgpZBighVWAxUxY=)
                          2: E3928623409C1C10E292F838F8308E11636E6C03.crl (hash: 6KvxdeeW6PCMtCAcKSCgUqJs/KsSVDgw9cKENjbxFIc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl
                          rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c3:08:26:10:bd:6e:34:82:f9:d1:b6:27:aa:f8:66:47:1d:ee:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3928623409C1C10E292F838F8308E11636E6C03
        Validity
            Not Before: Apr 28 20:47:07 2025 GMT
            Not After : May  2 02:53:07 2025 GMT
        Subject: CN=C4611A7B0DD9F5588A6FCF97898CD94F158CB37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:ed:03:35:be:c0:17:09:20:1b:e8:94:39:
                    6d:d1:e6:74:bf:2b:b1:af:21:2c:1f:a1:8e:29:23:
                    cf:6b:d0:88:ba:d7:39:99:20:0c:9f:d4:94:91:54:
                    ce:bf:0a:12:49:10:1f:74:48:f7:4d:d8:03:aa:b4:
                    52:7f:17:50:c4:ba:d5:7e:6a:0b:56:2c:37:6a:a6:
                    fc:7e:50:75:76:fc:98:15:ba:28:48:33:8e:27:24:
                    90:cf:5c:83:64:37:c4:a7:e2:ac:22:76:46:41:5c:
                    b9:8e:86:7c:07:6f:74:91:de:a4:26:b7:4d:24:87:
                    dd:88:1f:e6:73:70:2a:a4:7b:ff:9f:16:a4:67:b4:
                    6f:c4:26:0e:50:12:c2:20:5f:53:33:36:3d:be:7b:
                    22:38:c7:f0:82:52:df:a7:3c:36:e6:f8:a5:77:8d:
                    d1:d6:a5:b7:1b:c4:86:f8:5d:22:88:f9:0b:f8:3d:
                    4c:aa:9f:f4:55:41:e2:57:99:d4:a0:e9:fd:c1:c2:
                    f9:63:70:1f:b4:2e:5e:f2:2c:a2:34:df:d2:2f:ea:
                    85:79:03:8b:7e:b2:5c:88:9d:52:c5:22:8d:bc:b0:
                    39:bc:bd:fe:c8:05:ff:e2:52:77:b3:f9:d7:97:2f:
                    9f:c7:4b:7f:a5:ae:40:e1:d1:22:29:59:90:ea:45:
                    f7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:61:1A:7B:0D:D9:F5:58:8A:6F:CF:97:89:8C:D9:4F:15:8C:B3:7B
            X509v3 Authority Key Identifier:
                keyid:E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:51:23:de:92:a6:e4:ac:76:ad:8c:44:75:ab:d2:45:3b:c6:
         f8:63:e5:fc:03:51:36:80:6a:30:14:ff:4a:4b:9e:56:ee:82:
         58:0e:de:e3:53:b3:01:ed:0f:b8:fb:a2:98:5e:43:14:29:b9:
         92:7c:e8:27:09:e4:86:6f:ea:f9:75:4a:f8:ef:9b:c2:bc:e5:
         c2:d0:9e:b3:0a:84:70:57:84:db:bd:54:a6:66:6a:b3:b5:2b:
         d1:26:94:5f:ed:19:3a:35:5d:55:ff:cb:c1:4d:6f:5a:14:27:
         ea:20:75:e3:00:09:f9:d3:12:0a:8d:88:7a:f8:aa:50:e5:24:
         23:0b:48:de:04:41:e1:d1:ea:07:ea:86:0b:2e:fc:ae:a0:3f:
         26:17:b5:04:8d:7f:a5:6d:27:53:7c:e3:e9:94:63:cb:83:b2:
         7d:4e:76:6e:2c:c5:7b:7b:2a:41:77:f3:d5:b5:d3:cb:5f:28:
         10:bc:b6:d4:f7:9b:2f:2b:b0:d9:64:a1:ab:b7:60:2b:e0:e9:
         a4:cd:5c:01:98:7e:49:9f:f9:e4:30:fe:4e:99:ad:5c:2f:01:
         02:3c:fb:06:11:c6:42:47:5f:08:8f:42:11:80:8d:27:bb:e2:
         ab:53:f0:d0:dc:09:2f:f2:e1:f7:54:ac:44:6c:1c:d0:43:21:
         44:e0:27:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:23:07 2025 by rpki-client