Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft
File:                     7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft (raw, json)
Hash identifier:          +fguGP6dNZbo4TtQUIgg9IWKv74FA8u7Aq8PQqvOr+s=
Subject key identifier:   27:2A:D9:AB:9E:34:10:BC:7A:C2:B4:B5:F5:C6:C5:B2:08:3C:CE:C1
Authority key identifier: 7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92
Certificate issuer:       /CN=7D52713C0D26932DC1EECC75CB0C11784C9B0592
Certificate serial:       DE40FFE12BA2A79E97E9969F21CB4FD42613E3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft
Manifest number:          026A
Signing time:             Mon 28 Apr 2025 00:51:38 +0000
Manifest this update:     Mon 28 Apr 2025 00:46:38 +0000
Manifest next update:     Thu 01 May 2025 09:07:38 +0000
Files and hashes:         1: 3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa (hash: VrargDlMOcqR57wnlmh9egvUgy55RdV/PdmVKUweO1M=)
                          2: 323430353a623034303a3a2f33322d3332203d3e20313339393531.roa (hash: e6sexSgsStO6owug/ZWl3GYIquSX/tV3q/cRIhml4Mc=)
                          3: 7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl (hash: q41KPsxZDj+HkTy6dKG1gy+cxHpq9JhlHOOcAHQLUe4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl
                          rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 09:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            de:40:ff:e1:2b:a2:a7:9e:97:e9:96:9f:21:cb:4f:d4:26:13:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D52713C0D26932DC1EECC75CB0C11784C9B0592
        Validity
            Not Before: Apr 28 00:46:38 2025 GMT
            Not After : May  1 09:07:38 2025 GMT
        Subject: CN=272AD9AB9E3410BC7AC2B4B5F5C6C5B2083CCEC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:59:46:34:17:10:2f:c8:9e:7e:e9:e9:b9:
                    21:9d:6a:15:55:3b:1e:3e:e1:b8:e7:84:74:8a:d8:
                    d5:0d:db:83:38:f4:d9:71:6c:66:c1:d1:70:03:b9:
                    b2:e4:ff:34:01:4a:2f:34:82:bb:b4:52:26:25:9d:
                    43:39:86:6c:dc:85:45:51:b2:db:db:28:da:04:ff:
                    24:4d:0a:04:85:37:66:cb:e2:75:c8:ef:dc:ef:0e:
                    68:03:36:f4:6c:e2:ef:6f:20:6f:5b:8c:94:84:1c:
                    1f:21:72:64:ec:0a:e1:e4:ed:3b:7e:1f:6e:72:5f:
                    89:33:ab:ab:cd:42:64:e5:00:f3:98:25:27:67:b1:
                    81:6f:ab:bb:22:12:59:11:bb:e7:15:ff:8e:41:9b:
                    5c:31:37:31:f0:a1:de:11:81:c2:02:45:9e:76:54:
                    e1:53:3a:8c:2d:63:99:04:0c:cd:26:d1:36:4e:36:
                    d4:38:51:25:f0:21:ba:77:3e:e9:e4:1b:3b:5a:3c:
                    89:eb:dc:3f:60:9f:37:58:50:94:10:76:dd:4c:24:
                    a7:f9:fe:cb:9a:4c:94:94:03:c4:e2:ce:b8:47:cd:
                    79:48:4b:10:cf:dc:14:62:58:6f:cb:86:6d:53:bf:
                    8b:72:77:fa:fa:e1:c1:7d:08:08:9a:93:1e:9a:e3:
                    95:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2A:D9:AB:9E:34:10:BC:7A:C2:B4:B5:F5:C6:C5:B2:08:3C:CE:C1
            X509v3 Authority Key Identifier:
                keyid:7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6c:e4:8d:41:4f:1d:11:89:ab:04:68:47:42:a1:a5:02:93:
         9e:aa:b9:eb:e4:47:0f:82:73:8d:ff:b1:d5:a2:02:dd:cb:48:
         fa:b5:71:e1:7b:1d:17:8f:3a:39:55:d7:ea:45:e1:1d:a8:75:
         91:a0:4a:17:27:3a:83:46:e7:ff:56:9a:ab:ba:05:b4:b7:cb:
         c6:fd:92:89:59:54:79:72:de:41:98:07:7c:7e:0b:8f:23:26:
         14:55:9e:d2:80:09:b9:00:f0:78:ca:27:1d:1f:d6:5b:a7:c3:
         8c:47:cb:37:9d:13:40:bf:7e:95:72:9b:a3:be:6d:bd:41:e0:
         70:32:3e:a0:db:a0:51:d9:d2:d3:4f:a8:15:3c:91:45:f0:91:
         6d:d9:61:a4:6b:86:87:17:0c:80:32:66:c0:91:23:57:d7:0c:
         b0:d7:18:7d:11:db:bc:69:49:84:f8:ba:48:b4:b4:00:bf:fb:
         d8:cf:c7:25:19:4f:cb:da:15:9d:48:3b:5a:33:ff:73:24:bc:
         82:35:98:35:75:c1:81:08:16:03:04:c9:33:5c:19:56:f1:55:
         53:1f:ad:7e:d0:5b:9e:0c:f6:41:f2:21:6c:ed:6f:a9:3c:ed:
         00:10:ea:87:3e:b4:3a:c3:82:73:a9:c0:65:75:2c:fc:81:ad:
         03:f8:39:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:54:56 2025 by rpki-client