Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
File:                     07087494011A8BD71E0AB56E4A29820B0C265D45.mft (raw, json)
Hash identifier:          db3DApaeE0KouWyAxKG0wuIFSAhZmXq04HCWXpI+LOg=
Subject key identifier:   BB:3B:6A:5E:D5:66:D6:B5:79:B4:5E:B0:D4:60:BF:57:7D:1B:6B:39
Authority key identifier: 07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45
Certificate issuer:       /CN=07087494011A8BD71E0AB56E4A29820B0C265D45
Certificate serial:       521BBCAFA043F3B633416666DDB6D9402648AB03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
Manifest number:          1E
Signing time:             Tue 29 Apr 2025 16:41:15 +0000
Manifest this update:     Tue 29 Apr 2025 16:36:15 +0000
Manifest next update:     Sat 03 May 2025 03:17:15 +0000
Files and hashes:         1: 07087494011A8BD71E0AB56E4A29820B0C265D45.crl (hash: pAxaTZbtgh/60/FujOB8UFpHGUSI0kIi7AQGUDudHrA=)
                          2: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: nJDk2moXVJKOcLf/s2ENaD41Lvuu7Wv1fbgDq/e+7rk=)
                          3: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: 7vK5kAAznF/vtGtOCVNcNBhvktxpMswh2ctIXuNsU5A=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl
                          rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 03:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1b:bc:af:a0:43:f3:b6:33:41:66:66:dd:b6:d9:40:26:48:ab:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07087494011A8BD71E0AB56E4A29820B0C265D45
        Validity
            Not Before: Apr 29 16:36:15 2025 GMT
            Not After : May  3 03:17:15 2025 GMT
        Subject: CN=BB3B6A5ED566D6B579B45EB0D460BF577D1B6B39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:4a:dd:a5:2f:e5:48:2f:24:89:79:98:dc:
                    71:ab:25:29:24:df:bc:58:5a:ef:de:43:36:ae:16:
                    15:7a:c7:f1:a8:07:bb:04:fd:ec:40:17:74:a9:dd:
                    86:7c:b7:53:8c:1a:35:56:c1:42:3f:7f:f6:f6:5e:
                    cc:0d:4d:94:3b:d2:e7:fe:b0:42:ad:58:de:a3:81:
                    10:72:47:c5:28:ee:49:cc:f0:f3:2a:15:18:21:ec:
                    e4:83:22:c7:60:1d:b3:3f:18:b1:db:27:ad:d6:19:
                    6d:36:15:5e:df:71:0d:29:3c:fa:07:ae:8b:38:76:
                    7a:d3:d9:20:87:b0:18:7f:3a:25:8c:62:43:c3:42:
                    e4:fd:f9:24:60:df:d6:b4:0d:63:d4:0a:00:a7:7e:
                    f9:fd:b5:79:cf:9c:58:d4:9f:b9:86:49:60:b5:3e:
                    ba:67:dc:f7:e4:2b:b3:01:94:cc:c5:a1:61:06:3b:
                    d4:f1:23:6d:39:56:9d:bf:1d:ae:24:52:71:f8:e4:
                    00:03:16:7a:0c:90:3c:29:6b:13:cf:60:1e:67:ab:
                    04:a9:8f:eb:4b:7c:ff:9a:5a:7c:af:8a:06:5a:9c:
                    9e:5d:bd:35:e7:d4:91:67:75:45:d3:c9:02:15:15:
                    69:41:1a:39:e9:37:12:03:7c:3b:8f:b1:ff:d0:63:
                    1a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3B:6A:5E:D5:66:D6:B5:79:B4:5E:B0:D4:60:BF:57:7D:1B:6B:39
            X509v3 Authority Key Identifier:
                keyid:07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:70:ab:a2:13:01:3b:d3:3c:02:31:88:a3:79:5f:c7:93:34:
         72:f2:50:9b:ee:6b:38:b8:75:d9:15:de:51:a1:4d:75:bb:c4:
         b9:e4:09:ee:e2:10:72:e6:be:13:a6:43:b9:da:95:9d:c9:45:
         7f:c8:ce:b9:d6:17:2b:2a:93:87:48:43:1e:f8:cf:83:6d:03:
         4b:a8:06:ae:25:02:b6:c1:19:d6:e3:e4:77:e6:96:d1:82:b4:
         89:8c:aa:a2:ca:1b:74:36:dd:b2:ca:b7:3c:a3:43:45:f9:dd:
         88:6c:4d:b4:c3:05:c2:31:8d:d2:4b:b1:00:dc:df:1b:8d:78:
         e3:20:88:91:85:97:7a:07:38:3a:d6:76:c6:54:a9:16:fa:b6:
         23:ee:e3:c1:c7:40:b1:25:f4:ee:47:d1:7b:d1:8a:c2:7e:59:
         a9:b4:78:7e:f5:86:bd:5b:4c:29:e9:71:1d:7a:c2:68:3a:ba:
         85:26:23:84:18:4f:ef:35:64:d5:76:d6:1e:78:4a:86:2a:5a:
         88:20:7f:db:d8:52:09:15:4a:18:c2:49:76:12:77:e2:33:c4:
         59:92:e5:71:73:c0:8e:de:c3:d1:83:27:be:4a:90:e6:34:4b:
         bf:df:2a:35:1b:ca:ed:12:ed:08:d2:11:ed:41:72:84:df:4c:
         81:84:43:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:05:50 2025 by rpki-client