Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft
File:                     571E2EFA23FEA611810611410635E23A090F4550.mft (raw, json)
Hash identifier:          nJdsQ6scupmaTBlUpoNe+6IUhtRzV5Yw7Ou0qzGWWrQ=
Subject key identifier:   CC:1E:F6:CA:20:D5:22:77:67:D3:5E:31:A6:47:07:74:5D:15:07:E8
Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
Certificate issuer:       /CN=571E2EFA23FEA611810611410635E23A090F4550
Certificate serial:       799357A85E71EFF5C2AA2E2E900B8B715ADE806F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft
Manifest number:          04F5
Signing time:             Sat 14 Jun 2025 21:22:12 +0000
Manifest this update:     Sat 14 Jun 2025 21:17:12 +0000
Manifest next update:     Tue 17 Jun 2025 22:37:12 +0000
Files and hashes:         1: 571E2EFA23FEA611810611410635E23A090F4550.crl (hash: PSgaGAotVzZq9Ops8SKRAZZ8fZONmau+K3XTU750pIQ=)
                          2: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: YxNi6/uAllHxRs/TmMjIhKw+j/AevGbXCAwCtWlO7/Y=)
                          3: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: oMW/juSzl+5S8B2tH+GiR7KV/7mKnJINuimdyFIaiWU=)
                          4: 3130332e3135352e36352e302f32342d3234203d3e20313431363231.roa (hash: CeAdG0+iQqX7R4GwVIJ8BeduoZGnHUGjqn0LAsOfmaQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl
                          rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 22:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:93:57:a8:5e:71:ef:f5:c2:aa:2e:2e:90:0b:8b:71:5a:de:80:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550
        Validity
            Not Before: Jun 14 21:17:12 2025 GMT
            Not After : Jun 17 22:37:12 2025 GMT
        Subject: CN=CC1EF6CA20D5227767D35E31A64707745D1507E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:66:14:ca:1e:f5:f7:fb:1c:67:bd:db:f0:
                    a3:13:be:dd:d9:e3:7f:d5:91:bd:8a:48:9e:eb:37:
                    35:a1:f4:5d:fd:ed:01:40:4c:45:79:23:db:ef:09:
                    96:f3:c2:92:83:2b:6a:ef:d0:fa:25:ee:f8:1e:47:
                    5a:08:68:8f:38:48:1d:7e:3a:6a:a0:c4:67:53:1f:
                    70:1a:e7:81:8b:44:06:ff:52:ba:75:f6:6a:ee:14:
                    ab:b6:71:72:26:c7:d1:ba:10:0b:b6:65:a0:0d:07:
                    02:4a:fb:3a:02:ee:60:fc:40:2b:9e:ad:05:87:51:
                    5b:98:59:cb:5e:fa:21:a1:de:b8:4e:ed:4a:e8:dd:
                    fc:08:4e:ce:a2:0c:4d:68:1e:2f:d4:41:06:6e:02:
                    8c:56:6a:c0:bb:b8:74:33:ad:06:cf:02:0d:53:3a:
                    4b:e9:e8:86:53:7d:80:82:13:2e:59:8d:aa:2c:b9:
                    af:0b:13:6a:53:9d:6f:97:a7:c0:24:47:26:c3:c7:
                    eb:84:f2:65:f0:a8:0b:1a:0f:b7:ad:34:32:0b:a6:
                    cf:3f:5d:77:0d:ad:c4:e6:9a:57:49:ba:3d:2c:fe:
                    04:68:93:74:f3:9b:ae:d8:04:1f:f9:01:f0:03:e8:
                    89:a2:54:0a:b5:56:ca:69:a3:db:b6:50:59:ef:cf:
                    5f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1E:F6:CA:20:D5:22:77:67:D3:5E:31:A6:47:07:74:5D:15:07:E8
            X509v3 Authority Key Identifier:
                keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ff:c1:2b:f4:66:2e:8f:c3:80:5b:d1:d6:9f:bc:90:0c:9c:
         3e:02:bf:30:4e:8d:90:d2:29:8b:fb:d8:18:b5:2e:b2:19:a5:
         7b:6a:78:f0:6f:a4:35:2c:21:4e:2a:25:54:39:c0:20:4e:4e:
         9e:b6:b3:cf:07:7b:f0:d6:84:93:98:31:54:57:2c:f0:43:5f:
         63:3f:83:03:5f:63:4a:87:57:98:2b:92:91:c9:1c:7a:7c:e2:
         3c:db:10:7a:bf:5a:ea:5b:8e:bb:77:e8:f0:df:97:4e:13:8c:
         8b:ce:af:9d:3d:f1:48:9e:16:8f:dd:77:24:88:6e:42:b5:3a:
         c4:ac:49:6a:57:fd:66:fd:32:fb:6b:2d:b0:78:92:72:d4:45:
         13:40:85:f7:f6:9f:e7:82:b5:88:c0:8a:f4:f1:11:de:25:68:
         59:19:06:f6:9e:20:77:d0:4c:95:e0:31:c1:3d:fc:17:c2:c5:
         61:c5:d7:05:e1:3f:c6:ba:23:bd:50:4b:50:84:be:83:a8:ce:
         2d:ca:88:e1:24:8c:1f:54:4c:99:45:fc:3c:2f:3d:f7:a8:41:
         b7:06:d4:23:56:48:02:f9:fc:77:4a:34:42:17:8e:b0:9d:5a:
         cd:89:eb:4c:b7:58:be:04:96:d1:6a:83:d0:ed:48:6e:fe:01:
         d6:d9:64:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:31:13 2025 by rpki-client