Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft
File:                     585D79944E315672D413B937BFC042F7C0AAB990.mft (raw, json)
Hash identifier:          cjr8TG2AKVETHI9SN18+/bGLkIBX+nWLwU4wqzndB/0=
Subject key identifier:   54:ED:0D:53:20:08:AD:09:13:7C:B3:EE:79:2E:84:2B:04:CE:41:D6
Authority key identifier: 58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90
Certificate issuer:       /CN=585D79944E315672D413B937BFC042F7C0AAB990
Certificate serial:       0DA436CA2E78BA5DE194749D0CC457A285608DC1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft
Manifest number:          F7
Signing time:             Fri 08 Aug 2025 09:01:03 +0000
Manifest this update:     Fri 08 Aug 2025 08:56:03 +0000
Manifest next update:     Mon 11 Aug 2025 20:25:03 +0000
Files and hashes:         1: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (hash: jeEsDMd/+EovuK4uL5Q5qgB89wPIiu04eYRInb+Xh5s=)
                          2: 585D79944E315672D413B937BFC042F7C0AAB990.crl (hash: VjF8dwk/EWoMINr4ZB60gZsCr3mJUj0zski8Ioa8mcw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl
                          rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 20:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a4:36:ca:2e:78:ba:5d:e1:94:74:9d:0c:c4:57:a2:85:60:8d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585D79944E315672D413B937BFC042F7C0AAB990
        Validity
            Not Before: Aug  8 08:56:03 2025 GMT
            Not After : Aug 11 20:25:03 2025 GMT
        Subject: CN=54ED0D532008AD09137CB3EE792E842B04CE41D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:22:ab:5c:c9:f1:af:45:6f:6b:48:7a:e7:
                    8d:ca:ab:1e:52:07:3b:77:7f:25:39:ec:2e:08:ff:
                    d3:64:03:73:da:dd:dd:90:47:3f:e5:08:39:f8:d7:
                    db:38:59:61:3c:91:1a:a5:33:38:ff:d6:8e:18:6e:
                    5b:78:ab:8d:96:18:6d:12:8a:c6:18:8f:3b:32:97:
                    8d:a6:d1:0b:26:eb:a0:42:fc:11:58:95:55:e0:e9:
                    20:96:33:4e:5f:69:9f:55:d6:7a:05:95:e0:14:a7:
                    c3:74:bb:0c:48:83:72:da:51:ac:a0:3e:46:3a:f9:
                    74:cc:ec:f1:a6:7d:6f:f8:0a:3f:7d:d0:8b:7d:3b:
                    e0:c6:ab:d7:7a:0c:65:ae:d9:be:b5:22:62:92:90:
                    32:c5:3c:b2:cf:66:75:0b:cd:f6:85:74:23:e2:f1:
                    10:b1:28:19:d7:e0:4e:39:fe:2e:aa:a9:da:09:f1:
                    be:20:91:a9:31:5a:17:f2:81:1f:97:0c:37:b3:4f:
                    a3:42:94:8b:e6:82:a9:0d:75:be:a8:6d:2a:b2:5a:
                    e3:03:34:50:dc:cb:c5:b6:34:f3:3d:08:dd:13:96:
                    ee:80:de:03:1d:69:a9:e5:84:97:2b:1e:b0:29:f5:
                    a0:61:66:41:2b:fb:f2:6c:e1:1a:2b:46:45:dc:d1:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:ED:0D:53:20:08:AD:09:13:7C:B3:EE:79:2E:84:2B:04:CE:41:D6
            X509v3 Authority Key Identifier:
                keyid:58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1a:f2:e8:40:ec:fe:23:0a:1d:02:0c:11:7b:35:0a:2f:6b:
         2b:0b:8c:83:fc:51:25:40:75:07:87:1f:42:34:02:8f:b9:65:
         3a:30:51:2d:e2:f0:a8:28:8b:28:d6:11:81:5d:06:8e:23:c6:
         99:3d:7f:f0:3e:23:cb:6e:74:c2:7e:8e:01:12:a0:41:c6:cd:
         6d:83:3b:56:33:d3:59:7a:e4:bf:c4:42:77:92:b8:be:09:dc:
         05:d6:a8:d1:dd:94:05:38:df:84:2e:8b:f8:6e:17:b9:5d:c4:
         c9:3e:d9:af:03:6a:e2:fb:89:0a:ba:ab:73:bf:2d:37:08:88:
         72:7d:6e:3b:bc:78:c5:f4:ba:05:dd:07:e1:c7:40:b0:3c:75:
         6d:ed:c0:99:8d:97:f3:72:f5:df:fa:c0:29:6b:8f:46:ed:bc:
         ec:ca:f5:e3:06:a7:1b:09:31:4e:a1:29:a9:65:e5:ad:ef:7d:
         d6:b2:e6:ca:f5:26:8e:d3:41:b7:1d:8f:67:6d:e1:d8:84:8f:
         27:36:69:30:17:49:d3:46:5e:98:6e:ba:3f:8c:eb:8d:d4:3c:
         ac:5d:c5:d2:22:bd:2a:42:c1:ae:b8:9d:43:d0:b2:bb:f4:59:
         18:bc:0e:f9:ca:4d:a8:ad:40:c8:b6:42:eb:16:cc:70:43:02:
         02:80:9b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:39:22 2025 by rpki-client