Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft
File:                     68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft (raw, json)
Hash identifier:          +1decFStq0jG47ohac8iqrX1PISMtZevfWIUwldkmkw=
Subject key identifier:   65:40:92:B6:A6:06:45:1F:7B:57:F1:10:41:B9:53:9D:59:A1:C2:93
Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8
Certificate issuer:       /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8
Certificate serial:       02169C1BB8C036552D16542DD1741AEF3B83FE19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft
Manifest number:          0431
Signing time:             Mon 28 Apr 2025 07:50:58 +0000
Manifest this update:     Mon 28 Apr 2025 07:45:58 +0000
Manifest next update:     Thu 01 May 2025 08:19:58 +0000
Files and hashes:         1: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl (hash: vltQKWsfR7smuXDiN7yuWB1wnmBAyyUHyvOSvVLZCk4=)
                          2: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: I1rDYvqqFg4aRnuf/vWK5XXOGVBK8suZyd8orlilX60=)
                          3: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: DSCdhRjgPhVc7GP3hYwZBTxGLDzPYuxYKap6JH0m82g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl
                          rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 08:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:16:9c:1b:b8:c0:36:55:2d:16:54:2d:d1:74:1a:ef:3b:83:fe:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8
        Validity
            Not Before: Apr 28 07:45:58 2025 GMT
            Not After : May  1 08:19:58 2025 GMT
        Subject: CN=654092B6A606451F7B57F11041B9539D59A1C293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:61:c0:e0:84:b1:ad:12:93:4e:4f:ec:45:
                    04:59:1b:a8:cc:7e:d0:dd:b7:25:20:58:96:9f:ac:
                    f4:ed:eb:83:b3:c5:6e:a4:b5:5b:31:d4:dc:9a:27:
                    76:85:a2:7b:50:f0:31:6e:9d:9f:ae:d2:b9:45:84:
                    76:4a:8d:8d:ba:bd:b0:15:03:17:43:77:69:2c:38:
                    ce:e3:96:58:34:16:83:4d:94:8a:5d:a7:a4:45:93:
                    e7:1e:20:1e:ef:82:41:d5:5e:54:70:45:f0:22:6f:
                    f0:57:10:f1:63:58:d0:2c:9f:1d:71:9f:56:a0:d0:
                    db:2a:9e:7a:1f:10:be:21:b7:59:c3:8f:b3:f8:50:
                    33:65:fe:27:49:38:57:6b:c0:a0:1d:3a:d9:b3:74:
                    06:34:9c:b2:ab:d5:e2:2f:d1:5b:f8:37:a1:8a:92:
                    e4:06:12:24:9f:76:e1:ca:15:83:4f:b1:50:fd:9a:
                    78:79:34:16:ce:68:4a:3b:9f:17:2a:8f:88:f9:49:
                    09:06:d3:5b:d1:21:bf:57:f3:e2:41:6f:54:01:fc:
                    d8:c0:f3:da:22:2c:8e:8f:b0:f8:50:52:c9:e8:ea:
                    02:df:14:c2:e4:ae:77:97:16:fa:df:e6:81:63:17:
                    a2:40:6f:93:2f:cb:96:60:8d:4f:f7:2a:cb:98:2e:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:40:92:B6:A6:06:45:1F:7B:57:F1:10:41:B9:53:9D:59:A1:C2:93
            X509v3 Authority Key Identifier:
                keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d6:26:85:0e:e2:35:2e:02:98:95:d9:19:63:e5:08:d8:ba:
         5d:e3:63:59:fc:38:f8:b8:9a:78:97:e2:48:da:90:26:41:1c:
         71:d1:14:51:00:2f:dc:84:c2:77:c4:12:50:13:f0:77:fa:7f:
         24:7f:2b:6e:3d:b0:6b:c1:de:a7:ea:93:df:dd:2a:a1:9a:db:
         b6:a5:37:d6:e4:96:cc:7b:7d:96:39:42:94:5b:ea:d7:95:d7:
         0d:1e:7e:0a:82:5e:00:45:c0:36:a5:ce:4b:26:9a:e6:0e:50:
         65:a2:f1:69:73:29:8d:15:02:aa:20:1e:2d:7a:4f:d2:29:9d:
         11:99:f4:78:47:37:cb:6b:49:58:ac:da:b9:82:74:c2:36:6a:
         81:b4:7d:1e:68:c7:b1:b3:60:64:9e:47:a7:2f:e6:f5:87:d3:
         79:a7:d2:e0:7c:4a:33:a4:e6:80:d0:e0:28:c1:5f:a8:02:c0:
         11:17:65:f4:cd:ee:53:e9:df:40:a8:02:e8:9d:b8:ba:f4:6f:
         42:d4:7e:87:ab:ac:1a:1e:21:db:05:08:1e:e5:fb:88:ec:c6:
         52:7d:e3:c4:84:2e:9c:c9:d8:f8:99:21:ee:0e:26:b3:a4:05:
         26:f8:67:a3:fd:e2:50:aa:6c:42:69:2a:0c:d5:65:fc:13:92:
         a2:23:50:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:32:34 2025 by rpki-client