Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft
File:                     C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json)
Hash identifier:          cpxRro/1c+Ve3KqF4XQGJb045uWrJPNirGbvCH+/lOc=
Subject key identifier:   77:6F:76:15:A3:37:C6:DB:1D:B0:C9:82:3C:4F:C2:DF:A7:8E:9B:A2
Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7
Certificate issuer:       /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7
Certificate serial:       275BD380594C20B8D0361932980CB7B9FF50D1F8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft
Manifest number:          032D
Signing time:             Sun 15 Jun 2025 06:22:13 +0000
Manifest this update:     Sun 15 Jun 2025 06:17:13 +0000
Manifest next update:     Wed 18 Jun 2025 13:06:13 +0000
Files and hashes:         1: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: +IfVHcs1bzGtK2kXBikSwmWMulSUPhTMXv7+sKpXoRI=)
                          2: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: tUeL2L2NZGxhk7lppCZ0ZmMoSziMiBP1aFhhhYxJa6g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl
                          rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 13:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5b:d3:80:59:4c:20:b8:d0:36:19:32:98:0c:b7:b9:ff:50:d1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7
        Validity
            Not Before: Jun 15 06:17:13 2025 GMT
            Not After : Jun 18 13:06:13 2025 GMT
        Subject: CN=776F7615A337C6DB1DB0C9823C4FC2DFA78E9BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:36:02:3b:d6:44:c9:9f:a9:82:c0:fd:c7:c1:
                    06:46:b5:ad:b4:1a:4f:24:3d:d9:9b:1f:a3:df:3e:
                    5a:8c:f9:dd:34:af:76:6c:58:b2:99:fd:98:5c:59:
                    a1:d2:75:7b:2a:fe:fb:2e:7a:c4:b7:31:b5:02:e7:
                    01:b6:e4:05:e2:65:3a:38:d9:96:3f:81:8f:eb:ce:
                    c9:03:f8:e9:c1:6d:b2:51:bb:72:6f:b7:6c:af:83:
                    d8:80:d6:b1:d6:64:be:bd:ed:66:3b:a5:dd:01:01:
                    50:bb:8f:c6:ca:8a:09:40:da:ae:13:07:2d:3c:4b:
                    37:64:be:e6:47:b5:9d:d2:13:72:39:89:64:38:4b:
                    97:5d:87:fa:50:3e:50:52:b6:3f:5b:bf:82:6e:84:
                    b8:1f:f9:c8:15:53:42:7f:ca:ad:88:e9:86:da:fb:
                    3c:f9:67:46:37:57:e7:64:74:79:7f:6a:5d:f0:ae:
                    cc:c3:fe:14:6c:a8:97:b2:51:e6:7c:83:bc:54:ed:
                    d0:48:7a:f5:17:a0:51:48:28:ec:bc:cc:03:04:ed:
                    36:7b:a5:a3:53:f8:43:4e:0d:b0:1a:e4:f0:8d:44:
                    d5:bd:1c:04:a5:ca:cd:51:98:98:c0:15:54:1e:62:
                    34:05:cc:df:b8:17:fe:14:23:11:98:8b:6a:17:05:
                    6e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6F:76:15:A3:37:C6:DB:1D:B0:C9:82:3C:4F:C2:DF:A7:8E:9B:A2
            X509v3 Authority Key Identifier:
                keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f5:7e:02:23:07:23:28:fd:01:48:b2:c1:08:d4:b7:8a:36:
         53:0f:bd:dd:cb:dc:eb:e8:54:51:27:20:7e:64:dd:d1:4c:33:
         3e:56:0b:53:47:9e:97:bb:89:35:5d:e4:71:9d:93:82:6f:ae:
         a3:06:cc:ba:5b:d2:8a:aa:12:01:a0:4c:56:c3:b2:1c:77:42:
         07:47:99:81:7d:55:61:89:8d:57:4e:4c:9f:73:87:cf:f7:98:
         bc:ec:1a:1f:d5:fb:d2:57:c3:d0:b7:9d:c0:8d:2a:68:c8:bc:
         a0:9e:6b:84:c7:b8:95:49:68:39:2e:52:67:db:3c:e8:c0:6c:
         a0:78:55:00:c4:92:4a:f2:a5:ed:ee:05:41:1f:cc:fb:19:cc:
         25:b9:de:a2:26:ed:77:55:2e:8b:b5:00:3a:99:7e:6a:cb:06:
         ad:d1:5d:87:6c:68:46:de:85:4f:b4:8c:7f:be:b0:a3:20:a6:
         f8:5e:43:2f:8b:1f:ba:4b:df:18:26:a8:c1:02:9b:d1:ab:5b:
         ef:03:9e:bc:9e:55:f8:91:e9:a0:84:b2:71:89:ff:f4:eb:35:
         30:e9:7c:f4:bf:ca:ad:a7:ae:c9:13:2c:52:92:56:a0:fe:ea:
         d1:26:68:b0:fb:48:08:d4:e7:95:d4:57:0c:16:f6:6d:6b:ee:
         64:06:57:6e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJ1vTgFlMILjQNhkymAy3uf9Q0fgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky
Mjg2MzFGNzAeFw0yNTA2MTUwNjE3MTNaFw0yNTA2MTgxMzA2MTNaMDMxMTAvBgNV
BAMTKDc3NkY3NjE1QTMzN0M2REIxREIwQzk4MjNDNEZDMkRGQTc4RTlCQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGNgI71kTJn6mCwP3HwQZGta20
Gk8kPdmbH6PfPlqM+d00r3ZsWLKZ/ZhcWaHSdXsq/vsuesS3MbUC5wG25AXiZTo4
2ZY/gY/rzskD+OnBbbJRu3Jvt2yvg9iA1rHWZL697WY7pd0BAVC7j8bKiglA2q4T
By08SzdkvuZHtZ3SE3I5iWQ4S5ddh/pQPlBStj9bv4JuhLgf+cgVU0J/yq2I6Yba
+zz5Z0Y3V+dkdHl/al3wrszD/hRsqJeyUeZ8g7xU7dBIevUXoFFIKOy8zAME7TZ7
paNT+ENODbAa5PCNRNW9HASlys1RmJjAFVQeYjQFzN+4F/4UIxGYi2oXBW7JAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUd292FaM3xtsdsMmCPE/C36eOm6IwHwYDVR0j
BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD
RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2
MzFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1
ZTEtOWY1NzAzY2QwOTg5LzAvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMw
QzkyMjg2MzFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJv1fgIjByMo/QFIssEI1LeKNlMPvd3L3Ovo
VFEnIH5k3dFMMz5WC1NHnpe7iTVd5HGdk4JvrqMGzLpb0oqqEgGgTFbDshx3QgdH
mYF9VWGJjVdOTJ9zh8/3mLzsGh/V+9JXw9C3ncCNKmjIvKCea4THuJVJaDkuUmfb
POjAbKB4VQDEkkrype3uBUEfzPsZzCW53qIm7XdVLou1ADqZfmrLBq3RXYdsaEbe
hU+0jH++sKMgpvheQy+LH7pL3xgmqMECm9GrW+8DnryeVfiR6aCEsnGJ//TrNTDp
fPS/yq2nrskTLFKSVqD+6tEmaLD7SAjU55XUVwwW9m1r7mQGV24=
-----END CERTIFICATE-----
Generated at Tue Jun 17 05:26:26 2025 by rpki-client