Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
File:                     B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft (raw, json)
Hash identifier:          Qz82mLuHyrGx3RhzDF5IVlpAEXysnmbkrQh3ngbwjSE=
Subject key identifier:   C7:B0:2B:F5:77:34:BC:31:7E:DD:F9:C4:6F:EB:51:66:93:FF:95:21
Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD
Certificate issuer:       /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD
Certificate serial:       27AACDD11BF9904C3ED26CAE34AE14125E48AEF2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
Manifest number:          01AE
Signing time:             Tue 29 Apr 2025 02:11:38 +0000
Manifest this update:     Tue 29 Apr 2025 02:06:38 +0000
Manifest next update:     Fri 02 May 2025 03:58:38 +0000
Files and hashes:         1: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: SEQ6tg3JngKo4EuPEoreDiNfhhs+RQhioJdhjUZ/tYA=)
                          2: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: LVSCMc7vfnzRcaQCBVnLhOspmvGT6C720G71HkuX20g=)
                          3: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl (hash: o4xncD+fuUJ6wjp4wM8TYujvDMSiWRcDDJvN0z04l40=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl
                          rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:aa:cd:d1:1b:f9:90:4c:3e:d2:6c:ae:34:ae:14:12:5e:48:ae:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD
        Validity
            Not Before: Apr 29 02:06:38 2025 GMT
            Not After : May  2 03:58:38 2025 GMT
        Subject: CN=C7B02BF57734BC317EDDF9C46FEB516693FF9521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:ce:9f:29:83:92:39:8c:1f:66:51:c8:05:
                    e0:06:dd:73:b0:1a:62:7e:5d:9c:54:b1:30:29:bb:
                    68:35:82:84:16:9a:80:69:b6:ed:e0:ec:4e:e5:09:
                    96:11:c0:18:dc:78:dd:5e:b4:7f:de:9a:39:86:a6:
                    f9:f7:0b:8d:f5:57:52:cd:9f:ec:9a:ee:c6:10:e9:
                    e7:a4:d0:6e:68:66:a9:ab:59:fe:f7:79:23:a2:8d:
                    3c:59:93:ec:8d:06:c6:e7:0a:e9:d5:3e:10:af:e9:
                    f7:d6:e6:51:4e:8a:c7:f7:4c:10:f9:29:60:59:48:
                    df:ff:b9:16:9b:13:7f:de:fa:57:53:64:4f:47:ee:
                    94:7e:9f:04:01:23:6c:41:a9:53:2d:5e:a0:39:15:
                    b5:cd:af:46:ad:69:9b:77:5b:87:fd:5c:09:47:38:
                    e7:96:99:7a:35:f4:b8:8e:dd:46:8c:b5:da:20:7c:
                    c8:ae:40:66:29:35:d0:75:36:3d:d0:ea:17:1e:cd:
                    ab:5b:01:14:97:cb:53:65:4b:89:f4:b0:84:8b:0c:
                    e2:56:81:cd:33:7b:2c:f2:0c:90:20:38:b9:fc:19:
                    0a:61:a9:9b:9b:63:84:85:51:5e:e0:07:f4:1a:43:
                    09:91:1c:76:50:52:21:e9:2c:96:ab:00:eb:98:98:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B0:2B:F5:77:34:BC:31:7E:DD:F9:C4:6F:EB:51:66:93:FF:95:21
            X509v3 Authority Key Identifier:
                keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:16:89:ee:b7:55:72:05:b0:48:be:c0:44:c9:2f:07:26:1d:
         a4:fd:ad:01:19:44:c0:b9:b4:71:d5:fd:bb:48:f8:89:42:1b:
         ac:16:4f:3a:af:39:e5:a3:bf:e0:cb:0d:40:cd:3d:29:d8:e0:
         e0:3c:d3:e4:43:a5:39:20:dd:7c:53:02:40:cf:7e:08:7f:67:
         14:da:2e:30:68:ff:c7:2f:ca:22:e9:5a:bd:08:7b:24:0c:79:
         75:e3:e6:db:44:6d:e9:11:90:34:3e:75:57:81:22:cb:41:26:
         54:7e:b0:4f:ed:fe:1e:f6:56:32:b0:ff:ff:05:74:ed:5d:eb:
         66:34:2c:b9:37:86:ba:7a:5a:43:54:46:7f:3a:18:16:a3:59:
         72:ee:fc:28:2b:cf:80:61:6a:6b:65:1c:7a:04:33:2a:de:2a:
         be:db:da:1b:be:0e:89:8f:a4:8d:ae:2a:ce:35:9f:0e:87:dc:
         60:9b:4c:ae:09:72:e2:f7:84:ea:d6:c4:b7:fd:0f:aa:13:0c:
         34:e3:54:66:57:a2:f2:e3:ca:f0:85:50:cb:75:f5:77:ce:68:
         ac:f0:9c:82:15:3d:e0:81:06:e3:e0:4d:df:bf:95:67:03:1c:
         3a:9e:c1:83:3f:81:d7:21:a2:29:a6:a8:3d:e8:08:3f:9f:e2:
         43:7e:dd:22
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJ6rN0Rv5kEw+0myuNK4UEl5IrvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJE
MEI0RDhCRDAeFw0yNTA0MjkwMjA2MzhaFw0yNTA1MDIwMzU4MzhaMDMxMTAvBgNV
BAMTKEM3QjAyQkY1NzczNEJDMzE3RURERjlDNDZGRUI1MTY2OTNGRjk1MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDaM6fKYOSOYwfZlHIBeAG3XOw
GmJ+XZxUsTApu2g1goQWmoBptu3g7E7lCZYRwBjceN1etH/emjmGpvn3C431V1LN
n+ya7sYQ6eek0G5oZqmrWf73eSOijTxZk+yNBsbnCunVPhCv6ffW5lFOisf3TBD5
KWBZSN//uRabE3/e+ldTZE9H7pR+nwQBI2xBqVMtXqA5FbXNr0ataZt3W4f9XAlH
OOeWmXo19LiO3UaMtdogfMiuQGYpNdB1Nj3Q6hcezatbARSXy1NlS4n0sISLDOJW
gc0zeyzyDJAgOLn8GQphqZubY4SFUV7gB/QaQwmRHHZQUiHpLJarAOuYmA5bAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUx7Ar9Xc0vDF+3fnEb+tRZpP/lSEwHwYDVR0j
BBgwFoAUti5ELI0scND1q14qOh8RstC02L0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MGQzNGU3Ny02Y2Y2LTQxODctOTA4My0xYzdhODgxOWU5NjUvMC9CNjJFNDQyQzhE
MkM3MEQwRjVBQjVFMkEzQTFGMTFCMkQwQjREOEJELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJEMEI0
RDhCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw
ODMtMWM3YTg4MTllOTY1LzAvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjEx
QjJEMEI0RDhCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKcWie63VXIFsEi+wETJLwcmHaT9rQEZRMC5
tHHV/btI+IlCG6wWTzqvOeWjv+DLDUDNPSnY4OA80+RDpTkg3XxTAkDPfgh/ZxTa
LjBo/8cvyiLpWr0IeyQMeXXj5ttEbekRkDQ+dVeBIstBJlR+sE/t/h72VjKw//8F
dO1d62Y0LLk3hrp6WkNURn86GBajWXLu/Cgrz4BhamtlHHoEMyreKr7b2hu+DomP
pI2uKs41nw6H3GCbTK4JcuL3hOrWxLf9D6oTDDTjVGZXovLjyvCFUMt19XfOaKzw
nIIVPeCBBuPgTd+/lWcDHDqewYM/gdchoimmqD3oCD+f4kN+3SI=
-----END CERTIFICATE-----
Generated at Wed Apr 30 01:34:22 2025 by rpki-client