Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft
File:                     D9B568DACE796AFC606BD299D9DA57F714CD7970.mft (raw, json)
Hash identifier:          xtKwmQAZ3xwF1uVI7+HCJysOUoPFoM4Hdcpp8a/EiOI=
Subject key identifier:   6E:FF:49:00:B2:30:CA:39:D0:4D:B3:EB:73:EE:74:D4:90:E4:30:3D
Authority key identifier: D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70
Certificate issuer:       /CN=D9B568DACE796AFC606BD299D9DA57F714CD7970
Certificate serial:       79C2B5C6958A73CE27FEA774C8F2086431CA9A7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft
Manifest number:          EE
Signing time:             Sun 15 Jun 2025 01:21:02 +0000
Manifest this update:     Sun 15 Jun 2025 01:16:02 +0000
Manifest next update:     Wed 18 Jun 2025 05:27:02 +0000
Files and hashes:         1: D9B568DACE796AFC606BD299D9DA57F714CD7970.crl (hash: /gJOef0xkWW4dBv4SxcV2Sbk18U7wUAy9ooAx/6ACkc=)
                          2: 3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa (hash: 5Xv6mrgfWe+rWcCn7CecS/d4Z1XQ/6GwMQiiafaEOqI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl
                          rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 05:27:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c2:b5:c6:95:8a:73:ce:27:fe:a7:74:c8:f2:08:64:31:ca:9a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B568DACE796AFC606BD299D9DA57F714CD7970
        Validity
            Not Before: Jun 15 01:16:02 2025 GMT
            Not After : Jun 18 05:27:02 2025 GMT
        Subject: CN=6EFF4900B230CA39D04DB3EB73EE74D490E4303D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8e:6b:7e:e9:b7:ef:41:30:d0:02:2c:69:96:
                    bc:b0:17:5b:bd:1b:51:1f:69:f7:3b:28:80:2f:cb:
                    37:fe:ad:86:a3:ed:e7:f9:af:68:ed:f1:75:5f:7e:
                    73:fa:72:64:60:83:8c:b1:b4:7b:08:ed:b1:c9:0a:
                    c3:1d:f3:66:fc:25:bc:d3:42:c2:47:37:9f:25:1f:
                    b9:6a:49:63:6a:57:66:97:33:7f:0a:83:ee:39:50:
                    80:c6:19:6d:c9:f1:44:4e:98:28:ed:4e:7f:2d:5f:
                    6c:03:d6:6a:0e:13:60:7e:ea:29:e9:4d:b2:66:dc:
                    2f:83:0e:ac:cb:a5:53:83:20:cf:98:63:d1:af:6a:
                    88:e1:ce:0f:9d:e4:1b:8c:32:cf:36:8f:8f:9a:11:
                    e7:21:e0:4e:3b:18:ed:9a:97:5f:1f:5a:bd:39:30:
                    db:70:e5:45:ab:4e:09:19:21:91:ac:1d:af:51:eb:
                    62:89:4e:64:68:8a:d3:61:c4:53:05:83:9d:2d:32:
                    1e:5c:7d:65:bd:c3:f2:62:00:b5:fd:ec:35:a6:7e:
                    af:bd:0e:d9:54:2c:5b:b2:1f:f2:9e:11:2c:eb:68:
                    14:79:b9:ae:5e:ad:42:32:b8:64:b9:3c:02:a1:30:
                    cb:d5:6f:2f:18:ed:2e:ff:8b:8e:fd:da:f6:a6:87:
                    2a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FF:49:00:B2:30:CA:39:D0:4D:B3:EB:73:EE:74:D4:90:E4:30:3D
            X509v3 Authority Key Identifier:
                keyid:D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:fe:2f:59:a1:4d:b9:9d:e3:f4:bf:7b:8e:ec:7b:59:98:6b:
         f3:9d:a1:68:55:a5:47:47:d2:41:cc:71:78:2e:24:79:6e:eb:
         bf:e4:4a:4c:37:73:17:7c:5a:22:bd:2d:eb:bf:31:24:9a:a2:
         c5:c1:10:08:cd:56:16:86:bc:e0:26:fe:ff:af:ef:a7:7b:12:
         c7:f8:0e:1e:9d:fb:6e:e9:c7:58:52:08:32:c9:41:6e:b5:ad:
         32:11:53:08:8c:f3:b4:ce:24:76:9e:3f:3c:08:51:78:f3:85:
         0a:9a:2a:06:91:af:93:48:67:d1:ec:21:42:91:55:8d:97:54:
         aa:8f:60:7b:0e:0a:ce:74:72:9e:2e:31:63:3d:53:76:33:25:
         ae:eb:81:5c:ef:7c:b4:35:e1:48:eb:60:23:86:09:44:ab:0a:
         71:4a:09:5d:93:ad:be:65:45:0c:df:70:eb:4f:72:24:c0:2e:
         64:e6:a8:83:4a:4e:b9:4e:d8:8a:95:62:0e:4a:ad:f9:9f:59:
         84:7a:72:b6:04:d6:17:02:f5:e8:96:10:1f:5c:f3:18:f9:d7:
         f3:ef:11:3c:b8:b4:2a:02:05:d2:25:cf:ab:67:54:7a:ee:8a:
         fc:29:78:68:1e:14:58:9a:6a:05:fd:90:3a:aa:c7:43:1d:8c:
         70:6d:4c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:27:00 2025 by rpki-client