Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft
File:                     6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft (raw, json)
Hash identifier:          4jkp7tjKEPvfvTT/uEo7Dt0aXiTI58GTjoL+5Z+3GpU=
Subject key identifier:   B4:03:E7:42:3F:D1:B2:2C:75:B5:E4:19:F9:B5:2C:BF:38:EB:C6:D8
Authority key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB
Certificate issuer:       /CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB
Certificate serial:       351038C067AD1797883D14E2424434955C0DA6D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft
Manifest number:          03AF
Signing time:             Mon 16 Jun 2025 20:21:47 +0000
Manifest this update:     Mon 16 Jun 2025 20:16:47 +0000
Manifest next update:     Fri 20 Jun 2025 04:55:47 +0000
Files and hashes:         1: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: LY7WT+w7FguQLmfrSOP0mKv6BUNq2KCw3SGoAGK1WaA=)
                          2: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl (hash: nR8n3V9WiE+zAFBtEnfUBgIBZkyba6zI0/pHRiJsnZ8=)
                          3: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: dq2C0qn2bszea5JrNdqQBrs3uxaP2+6us75MTw8i5Kc=)
                          4: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: w25Hdja8cVcMSMfXbCo6MIHOJSikdvlBUIB8EBkQuqs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl
                          rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:10:38:c0:67:ad:17:97:88:3d:14:e2:42:44:34:95:5c:0d:a6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB
        Validity
            Not Before: Jun 16 20:16:47 2025 GMT
            Not After : Jun 20 04:55:47 2025 GMT
        Subject: CN=B403E7423FD1B22C75B5E419F9B52CBF38EBC6D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:5f:09:7c:d3:f7:f6:87:77:28:90:72:b5:
                    4a:ad:d4:c9:b7:0e:5c:53:5c:92:1e:8a:51:db:51:
                    83:b0:97:c1:b8:a9:aa:b6:76:e3:60:c1:30:24:dd:
                    79:1b:ba:c9:7d:ce:51:5d:4c:ec:6c:6a:71:c3:bc:
                    b3:17:90:8c:75:64:f1:23:5e:84:48:e2:90:1f:82:
                    29:68:7f:2e:a7:d0:56:96:57:00:e9:d0:1a:51:e1:
                    81:04:67:e2:88:d0:f3:14:83:18:5c:d1:1a:46:95:
                    e3:33:36:80:8f:42:a1:9a:b4:21:17:c2:0c:ba:af:
                    b3:5e:2c:8a:26:8b:66:be:84:1b:5e:42:da:72:e6:
                    b4:ce:2a:45:04:09:12:e8:31:b7:23:a1:7d:27:9f:
                    20:1a:3c:fa:47:ce:63:88:ed:1e:70:8a:f5:80:8c:
                    ae:65:c5:70:d5:d1:9f:ed:5d:5e:6a:45:01:36:09:
                    a2:96:99:f0:06:eb:85:ad:39:23:be:91:ba:76:97:
                    75:57:82:d6:be:ef:47:d2:b6:d7:83:58:22:a0:8c:
                    f8:6b:37:e9:b2:93:0e:83:d5:f8:eb:f8:f5:41:5d:
                    41:28:1e:09:78:96:10:2e:80:4e:01:4a:28:3b:0d:
                    d0:be:18:81:06:3a:9c:ca:76:9f:c4:a6:a3:5b:c6:
                    d3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:03:E7:42:3F:D1:B2:2C:75:B5:E4:19:F9:B5:2C:BF:38:EB:C6:D8
            X509v3 Authority Key Identifier:
                keyid:6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b0:b7:88:e5:75:a6:0c:1a:41:02:20:7a:bb:9d:a2:c5:a4:
         2c:a4:7c:a2:41:8a:4d:94:23:dc:2c:c2:68:a0:75:a4:c5:fb:
         ed:38:0b:b1:c0:35:7d:8a:92:a6:c3:d9:7a:54:45:ff:0d:42:
         56:99:ee:24:2c:4a:d8:5a:09:52:df:94:d0:18:53:42:23:5b:
         f4:c7:c1:04:f5:9a:25:fe:45:10:bd:7c:07:7d:89:aa:16:3d:
         44:0f:14:c5:0f:e0:18:6e:67:b1:a1:45:fa:d3:ee:b1:6b:a3:
         53:40:4f:0b:e3:49:ae:67:ed:2f:41:44:4a:bb:87:8c:e8:1b:
         fc:39:33:ea:07:49:55:19:4a:d5:e3:cf:94:3d:b4:ba:38:d9:
         78:be:63:d1:ae:e8:14:9c:d5:62:95:4d:c1:e5:cc:12:63:65:
         19:ed:49:8b:1e:18:ef:fd:9e:47:71:37:fa:c4:3f:5b:de:bc:
         3b:96:12:74:d5:4e:7d:43:a9:f0:5b:73:11:d5:54:d0:2f:58:
         a3:58:88:1e:c2:9e:03:a1:62:b3:a5:17:36:3c:be:f4:fe:72:
         86:b2:71:a6:d3:7a:20:ce:b2:68:64:d5:22:79:2e:95:97:72:
         8e:02:78:8e:fe:f3:2e:f0:ed:34:b6:05:71:7d:86:12:be:fb:
         d2:b0:4c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:36:20 2025 by rpki-client