Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft
File:                     10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json)
Hash identifier:          38ZZfCjw3LfNPeqmu0OA+YPS0guAG0zSNHXcQyczXbw=
Subject key identifier:   72:54:DF:7B:B9:F3:8E:B8:FA:0F:86:04:1D:FE:B4:4E:30:77:81:6C
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       665E00031246B306E0790E1D317C3AE1831BF365
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft
Manifest number:          0556
Signing time:             Sun 15 Jun 2025 10:40:03 +0000
Manifest this update:     Sun 15 Jun 2025 10:35:03 +0000
Manifest next update:     Wed 18 Jun 2025 15:20:03 +0000
Files and hashes:         1: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: SikieCf4hCQJKXgg5zHf+VY6nfYW+E48SukxrZ3/1a0=)
                          2: AS17885.roa (hash: Hrw/Bx/6mEnK2f91wIyEGNRzxwWv30dDgbF4gTiEsOM=)
                          3: AS139994.roa (hash: V1fHZHeyWM0yunBqcSWTYR9zxd5+dcGWhieykWfyO08=)
                          4: AS24203.roa (hash: oXVZzAc1BVWz8rI4bEPFSzCb/DwmmJ/Nlya3vD+jXrk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
                          rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 15:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5e:00:03:12:46:b3:06:e0:79:0e:1d:31:7c:3a:e1:83:1b:f3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jun 15 10:35:03 2025 GMT
            Not After : Jun 18 15:20:03 2025 GMT
        Subject: CN=7254DF7BB9F38EB8FA0F86041DFEB44E3077816C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:b2:10:47:3e:e1:ea:66:e2:7d:3a:63:cd:
                    9a:74:7f:d1:93:2a:57:8f:92:1a:6c:f7:b4:7a:02:
                    fa:d2:c9:1c:69:67:f1:39:bf:da:14:c0:62:3a:ee:
                    aa:3d:3d:05:ae:d5:9f:72:55:9a:ce:a4:5f:d5:d9:
                    f7:a0:c0:e0:5a:a4:ba:ad:68:65:da:72:fd:ac:ef:
                    60:c1:43:db:8a:40:e1:98:31:e7:98:9f:cb:1a:ce:
                    be:a2:7b:c4:b2:b7:f7:69:43:61:59:14:65:a5:3a:
                    eb:93:3e:a1:44:74:c4:12:4b:7c:ef:58:13:8b:6d:
                    74:e4:ba:45:04:d6:2a:19:40:25:29:11:6f:4f:fd:
                    b6:5a:01:50:37:c3:5e:16:ae:0f:47:bd:e6:ba:aa:
                    42:01:0e:9b:9d:d6:ac:6c:45:4d:6f:0a:50:36:52:
                    83:ba:1e:f1:a7:1a:03:03:e4:4b:c6:86:93:f8:0b:
                    a6:5c:89:aa:a8:0e:54:04:aa:17:5b:b9:75:80:72:
                    20:23:fe:9c:e2:7c:39:1a:a8:4a:03:db:17:19:0f:
                    86:d6:e4:d6:1c:92:99:8e:98:c0:31:39:a7:a7:7f:
                    e9:e8:95:fe:d7:2b:00:30:05:48:57:fe:bd:4a:63:
                    bb:77:93:79:92:0a:8d:66:c5:03:f2:db:60:d3:ed:
                    6c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:54:DF:7B:B9:F3:8E:B8:FA:0F:86:04:1D:FE:B4:4E:30:77:81:6C
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7d:67:23:78:22:b8:83:1e:10:b5:02:f2:5d:00:53:be:e9:
         b5:86:22:64:bb:34:db:11:01:f8:09:4d:f0:df:b2:c5:8d:43:
         29:45:78:4a:dd:a0:7c:b5:ca:3b:3c:f6:7b:2f:c8:7d:25:b3:
         77:f6:f8:bd:4c:38:9c:3e:9e:14:ce:d5:a6:f5:69:02:89:ba:
         7b:5e:38:4c:ef:7e:fd:66:aa:e7:c4:04:03:31:2b:10:52:53:
         6a:05:bb:1a:e8:69:07:0f:07:31:f3:2a:ec:ed:5d:95:24:75:
         4d:9d:39:8d:03:5a:ba:14:e3:c8:5e:5d:33:7c:2f:28:8d:b1:
         38:a2:77:11:0c:9d:c0:d0:0d:b8:bb:c6:c5:fb:70:0f:d8:79:
         55:8b:0e:57:d4:d0:fd:3f:2f:fc:b0:2e:5f:a5:4c:81:95:cb:
         a2:36:d8:ec:a5:dc:2d:16:88:c2:34:27:7b:86:11:b2:95:3c:
         29:17:3a:51:bc:88:40:f6:f5:2b:66:10:19:47:16:54:08:43:
         a2:73:e7:0d:00:5a:59:96:a0:9d:82:ed:23:46:41:29:73:33:
         b4:73:99:80:2c:1a:6e:46:ac:1c:73:56:72:55:d4:7a:21:02:
         b4:3f:8a:ef:e8:bd:16:32:29:37:c4:19:95:15:0b:26:c2:35:
         c6:d9:14:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:38:46 2025 by rpki-client