Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft
File:                     68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft (raw, json)
Hash identifier:          OrQDahUfdYUPDqa3dvRv/5/RMIrVezK3aZXccmZkYyo=
Subject key identifier:   48:91:38:5B:D9:80:4F:E3:8B:2A:D1:CA:2C:42:2E:B9:4F:EB:7F:00
Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8
Certificate issuer:       /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8
Certificate serial:       3D28D43979685FCE5677D7CDE3C566FC1FDB1C47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft
Manifest number:          0432
Signing time:             Wed 30 Apr 2025 08:20:57 +0000
Manifest this update:     Wed 30 Apr 2025 08:15:57 +0000
Manifest next update:     Sat 03 May 2025 10:25:57 +0000
Files and hashes:         1: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: I1rDYvqqFg4aRnuf/vWK5XXOGVBK8suZyd8orlilX60=)
                          2: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: DSCdhRjgPhVc7GP3hYwZBTxGLDzPYuxYKap6JH0m82g=)
                          3: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl (hash: ypRCD4q0EXJDZUnBavdvH5l9A5gLGiEgWSZvYbTTlXo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl
                          rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 10:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:28:d4:39:79:68:5f:ce:56:77:d7:cd:e3:c5:66:fc:1f:db:1c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8
        Validity
            Not Before: Apr 30 08:15:57 2025 GMT
            Not After : May  3 10:25:57 2025 GMT
        Subject: CN=4891385BD9804FE38B2AD1CA2C422EB94FEB7F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:c0:1c:8a:6a:63:d2:9b:7d:10:17:cd:3d:
                    46:0e:24:a4:5d:07:00:d8:e4:43:51:3a:60:7a:8d:
                    f6:ca:40:aa:a4:f7:9d:44:86:dc:dc:b4:fb:33:1d:
                    22:df:4b:e8:0f:43:d3:f8:9d:55:fa:b9:65:d3:c8:
                    47:23:97:0a:98:25:4b:39:67:5f:b6:c4:6e:85:b4:
                    b9:43:96:26:af:e7:1d:9c:13:a6:bc:c0:75:91:25:
                    39:dc:f6:78:3c:e4:b4:70:64:3b:8c:e0:75:fd:e4:
                    a0:31:d9:15:b2:78:cd:8e:28:96:b0:93:87:3a:d3:
                    e9:cc:fe:96:07:27:49:c8:d3:f5:16:2a:21:ab:55:
                    15:50:79:c2:cf:92:39:10:bb:43:2b:82:24:69:25:
                    2e:da:e9:d2:4d:17:c5:e6:ce:58:94:de:52:b0:4f:
                    71:e3:d7:d0:b9:f9:ef:c1:a2:97:ca:cf:89:44:53:
                    7f:d7:26:68:a1:98:3c:56:aa:d2:6e:8e:48:46:37:
                    ae:15:34:c2:34:26:73:58:6d:b4:bb:55:98:05:7b:
                    a5:24:4e:a2:da:db:89:24:69:d2:53:22:b9:a6:12:
                    fb:2c:a9:e4:25:d0:65:b4:6f:06:46:9c:2f:2c:e8:
                    db:16:cc:26:85:54:be:ef:dc:1f:22:7c:da:50:ff:
                    9b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:91:38:5B:D9:80:4F:E3:8B:2A:D1:CA:2C:42:2E:B9:4F:EB:7F:00
            X509v3 Authority Key Identifier:
                keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:0c:67:86:98:3f:59:e3:be:91:db:83:ea:5c:d7:2e:13:ce:
         7f:ad:06:1e:cd:02:2f:b8:24:c8:5d:8e:29:51:fe:ce:30:f8:
         09:10:e6:9d:9e:33:b9:43:88:5d:ce:95:b1:8e:2f:45:c1:d4:
         7b:1b:b6:bf:07:f4:ca:45:0d:d3:ae:7e:94:9f:dc:01:2c:b7:
         22:64:d0:fb:78:f1:6f:bb:e5:a1:53:4e:de:67:78:c7:08:3f:
         86:52:a2:46:c4:06:40:be:66:01:c4:27:94:83:e3:cb:b3:d5:
         bc:f8:87:be:9a:52:02:99:d0:e0:b9:77:6b:dd:42:7b:a7:37:
         a9:45:d9:19:24:fd:f2:77:a9:2d:0f:95:ba:11:20:07:59:bc:
         52:08:94:19:e2:18:53:fb:8c:aa:f5:34:18:8d:67:a9:0f:7a:
         16:d0:49:24:cf:8c:19:c6:ea:22:3e:77:a3:b6:0b:e8:87:f4:
         51:0b:af:ab:b3:d6:52:cf:fa:42:df:bc:c2:d8:2d:de:43:36:
         0c:6a:7f:f0:cf:ab:e7:55:21:1c:c2:74:71:94:b1:33:2d:e9:
         6d:70:99:eb:e7:d5:ff:1b:03:52:a6:8b:23:10:3c:10:f9:ac:
         e0:26:c9:b1:6f:82:f0:b3:5a:a5:20:c8:70:b1:30:b6:25:c0:
         43:fb:02:f6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPSjUOXloX85Wd9fN48Vm/B/bHEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1
QUFFQUFGODAeFw0yNTA0MzAwODE1NTdaFw0yNTA1MDMxMDI1NTdaMDMxMTAvBgNV
BAMTKDQ4OTEzODVCRDk4MDRGRTM4QjJBRDFDQTJDNDIyRUI5NEZFQjdGMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMcAcimpj0pt9EBfNPUYOJKRd
BwDY5ENROmB6jfbKQKqk951EhtzctPszHSLfS+gPQ9P4nVX6uWXTyEcjlwqYJUs5
Z1+2xG6FtLlDliav5x2cE6a8wHWRJTnc9ng85LRwZDuM4HX95KAx2RWyeM2OKJaw
k4c60+nM/pYHJ0nI0/UWKiGrVRVQecLPkjkQu0MrgiRpJS7a6dJNF8XmzliU3lKw
T3Hj19C5+e/BopfKz4lEU3/XJmihmDxWqtJujkhGN64VNMI0JnNYbbS7VZgFe6Uk
TqLa24kkadJTIrmmEvssqeQl0GW0bwZGnC8s6NsWzCaFVL7v3B8ifNpQ/5vvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUSJE4W9mAT+OLKtHKLEIuuU/rfwAwHwYDVR0j
BBgwFoAUaNV4L7rbkUz9dK4o2ll4SlquqvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMC82OEQ1NzgyRkJB
REI5MTRDRkQ3NEFFMjhEQTU5Nzg0QTVBQUVBQUY4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1QUFF
QUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj
YTQtNWRmYmQ0YjI3MTMwLzAvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4
NEE1QUFFQUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAsMZ4aYP1njvpHbg+pc1y4Tzn+tBh7NAi+4
JMhdjilR/s4w+AkQ5p2eM7lDiF3OlbGOL0XB1Hsbtr8H9MpFDdOufpSf3AEstyJk
0Pt48W+75aFTTt5neMcIP4ZSokbEBkC+ZgHEJ5SD48uz1bz4h76aUgKZ0OC5d2vd
QnunN6lF2Rkk/fJ3qS0PlboRIAdZvFIIlBniGFP7jKr1NBiNZ6kPehbQSSTPjBnG
6iI+d6O2C+iH9FELr6uz1lLP+kLfvMLYLd5DNgxqf/DPq+dVIRzCdHGUsTMt6W1w
mevn1f8bA1KmiyMQPBD5rOAmybFvgvCzWqUgyHCxMLYlwEP7AvY=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:32 2025 by rpki-client