Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft
File:                     10FC4D9D2403FC433C19BB76131325B776505E51.mft (raw, json)
Hash identifier:          q16KT4pCCbG6cXgbbNlgZ0jkU9Cpf92Fhx180v5Kzqc=
Subject key identifier:   C3:99:E2:73:2A:E9:29:99:8D:A1:0A:50:8A:F1:9C:D5:A5:69:F8:EB
Authority key identifier: 10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51
Certificate issuer:       /CN=10FC4D9D2403FC433C19BB76131325B776505E51
Certificate serial:       294CF620ECD7EF5E4D48EA4DEED1EA0CAAFA5F29
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft
Manifest number:          0478
Signing time:             Sat 14 Jun 2025 19:40:43 +0000
Manifest this update:     Sat 14 Jun 2025 19:35:43 +0000
Manifest next update:     Wed 18 Jun 2025 00:07:43 +0000
Files and hashes:         1: 3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (hash: t69ZmB5AfQefXh46d6riQKv97oXcLxZ4rvdZWRyfuzY=)
                          2: 10FC4D9D2403FC433C19BB76131325B776505E51.crl (hash: iTtwGUICvH3AbqxJNNTx+0LRIUU2smQlS2xSPo4ihIk=)
                          3: 323030313a6466343a346230303a3a2f34382d3438203d3e20313337333135.roa (hash: TFWcJe7P8Qs88Vg5FhFLSAp9T62akG9eg+btkWY8D/w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl
                          rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 00:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4c:f6:20:ec:d7:ef:5e:4d:48:ea:4d:ee:d1:ea:0c:aa:fa:5f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FC4D9D2403FC433C19BB76131325B776505E51
        Validity
            Not Before: Jun 14 19:35:43 2025 GMT
            Not After : Jun 18 00:07:43 2025 GMT
        Subject: CN=C399E2732AE929998DA10A508AF19CD5A569F8EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c4:7c:2b:af:54:7b:19:79:82:34:39:70:e4:
                    c1:d6:24:55:07:83:c0:4c:fa:73:0e:3f:72:5a:d8:
                    1c:d8:51:3a:88:77:b7:ed:09:b2:dd:07:32:57:8e:
                    9c:51:3b:9c:3f:d8:54:01:65:66:e1:c3:28:81:9b:
                    f7:0e:42:4e:c0:28:61:0c:75:1a:c7:7c:42:1a:87:
                    13:78:b6:d8:30:16:73:9e:6c:ee:5c:41:b9:55:ba:
                    54:1c:cd:df:08:32:13:c8:d4:ba:22:b9:aa:17:f3:
                    2e:26:39:57:70:79:71:82:52:05:a3:bb:56:92:05:
                    b1:06:03:f9:79:d9:7e:9f:b9:4a:68:d7:e4:46:6c:
                    cc:ef:8f:d3:3e:41:6c:2f:e8:00:e0:32:c7:5b:02:
                    21:51:03:e5:38:29:67:12:f3:05:67:24:52:ea:30:
                    fe:8f:00:e8:10:3d:04:bc:8e:c6:67:54:c4:59:b7:
                    88:c4:e1:e0:2d:b8:eb:59:5f:ab:b9:92:be:be:20:
                    00:2b:ca:57:0b:29:20:48:3d:99:37:da:ab:fd:8c:
                    a3:f0:21:5c:20:69:1f:e1:02:09:89:1c:81:80:73:
                    36:62:2f:f1:80:ef:c3:3b:a9:c3:3e:ab:87:e5:aa:
                    8f:75:84:83:ce:03:76:9f:1f:96:5c:9e:38:3d:f6:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:99:E2:73:2A:E9:29:99:8D:A1:0A:50:8A:F1:9C:D5:A5:69:F8:EB
            X509v3 Authority Key Identifier:
                keyid:10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ff:dd:9a:c3:cc:8e:a7:b8:35:66:42:bb:00:c8:ff:0a:36:
         12:3e:11:52:e9:69:b6:28:d6:f6:9f:99:00:b4:45:b0:1d:91:
         26:9a:ac:c3:64:fa:6d:4c:0a:49:5d:c5:66:db:18:00:48:8c:
         70:19:1e:3c:01:75:e1:10:b5:42:9f:33:08:45:47:b0:51:40:
         c0:a0:b7:f6:b8:10:cc:35:c1:e8:ab:31:5a:20:02:41:ab:ba:
         5f:95:9a:13:d0:7b:85:a5:86:ec:45:a4:89:1a:88:5b:39:92:
         4d:78:02:37:b2:bb:46:4a:df:b8:9a:f8:3e:2a:4c:d2:ea:88:
         13:d8:b8:b9:b1:f1:50:f6:d2:66:11:e1:50:07:c7:e8:e8:7f:
         6b:ef:4a:34:42:73:fe:a8:9c:0f:26:b5:1c:05:0e:c2:56:73:
         38:54:fb:ff:bf:50:c9:42:68:61:41:88:83:d7:72:7e:1a:2e:
         73:19:3a:2f:54:a1:ed:0a:b0:00:a0:e7:e5:ff:cc:ac:ed:01:
         d1:fd:0c:ce:67:93:de:79:12:2a:e7:03:0a:a6:45:26:c1:ce:
         76:1e:5e:06:01:a8:eb:7a:77:1f:50:25:4a:53:d3:05:18:55:
         b8:76:bf:d7:d7:5a:ab:bc:73:20:77:26:c3:5f:5a:c1:be:89:
         6c:32:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:38:10 2025 by rpki-client