Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft
File:                     CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json)
Hash identifier:          UxZBSJ5y6bUUT6YxSEQffNTE93/A3bdb4YZDW9bCzO8=
Subject key identifier:   B5:B1:24:C7:71:09:C6:0F:54:DE:1B:07:13:9A:18:4B:45:57:0E:A0
Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A
Certificate issuer:       /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A
Certificate serial:       26463D47954AD340C8FEFA07ABF10104B0F3176C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft
Manifest number:          016E
Signing time:             Mon 28 Apr 2025 17:21:44 +0000
Manifest this update:     Mon 28 Apr 2025 17:16:44 +0000
Manifest next update:     Thu 01 May 2025 22:57:44 +0000
Files and hashes:         1: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: LgZRgu9mKUUb7c3WqAiB456DLH7mZkxQLbemkNLHoeo=)
                          2: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: AgE5l3f9GOldGAaYUjHWBzFfx5q0mU8wvl6ldg+fHQY=)
                          3: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: uz/IjdvRvG2XSh0BR6MGYqBXt/6NeOKQflil0ELjBjA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl
                          rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:46:3d:47:95:4a:d3:40:c8:fe:fa:07:ab:f1:01:04:b0:f3:17:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A
        Validity
            Not Before: Apr 28 17:16:44 2025 GMT
            Not After : May  1 22:57:44 2025 GMT
        Subject: CN=B5B124C77109C60F54DE1B07139A184B45570EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6e:32:ae:73:e1:da:ff:25:06:ec:d1:6e:67:
                    02:43:81:33:20:c7:a8:40:7f:93:cc:a1:a2:d3:d7:
                    61:a1:18:b7:12:ca:ed:96:6f:8e:1c:15:30:49:d8:
                    d6:6a:b8:85:b5:e6:e8:99:de:14:e7:38:3c:30:92:
                    14:25:9a:94:95:59:db:e5:a9:18:5a:af:16:cb:b2:
                    85:31:b6:2f:4d:15:20:ca:89:ac:86:39:14:8e:96:
                    ea:ce:0c:3e:d4:7e:ef:35:ab:ab:99:19:74:c0:89:
                    fe:04:a9:c3:b7:dc:b6:59:87:f7:80:1e:84:1e:21:
                    37:52:65:37:71:33:b7:5b:78:3f:7f:a1:32:3a:46:
                    7c:e8:f9:b3:33:5d:3d:ac:b2:00:19:b9:86:e0:f9:
                    20:3c:a8:c5:06:eb:c9:48:68:09:ab:1d:28:71:9f:
                    80:d9:27:ca:f4:f6:be:74:e1:5a:7b:0c:83:bf:1e:
                    58:5d:9a:65:71:42:f5:0d:4b:91:dd:d4:7b:2a:17:
                    e4:47:7b:35:e8:9e:ad:1d:3a:a2:b0:cf:fd:34:ae:
                    d8:2d:ab:b6:e2:93:e0:34:28:78:28:1c:fd:b4:e4:
                    09:1e:53:a5:fe:b4:c8:67:9a:21:e8:8e:3d:75:bd:
                    ca:d1:39:f9:df:02:e6:a2:06:02:6e:f5:e0:1c:e8:
                    65:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B1:24:C7:71:09:C6:0F:54:DE:1B:07:13:9A:18:4B:45:57:0E:A0
            X509v3 Authority Key Identifier:
                keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:30:fb:14:be:53:8b:a7:ba:5c:20:f3:7d:b3:90:87:f7:88:
         b3:a8:bb:45:a0:29:40:10:60:22:ea:f9:98:fa:bd:91:eb:24:
         e7:78:b7:59:ef:e1:ee:71:69:3c:06:2a:99:e8:43:d3:8e:fe:
         8e:5c:4b:4b:51:a5:8e:cf:43:ce:ba:97:73:6f:ff:06:87:71:
         17:77:1f:e2:7f:81:23:68:d7:3c:b0:9f:8e:ae:a7:cf:b2:a0:
         86:be:b8:5e:9b:ce:2b:47:3b:60:68:38:3d:f6:25:28:ed:3c:
         b7:52:97:7d:6e:31:84:4f:68:6a:83:76:f4:39:9d:f9:09:6e:
         e8:8e:17:d2:1c:81:8b:6e:3d:1d:16:b0:0c:a0:e2:de:21:e9:
         5b:c9:6d:15:1e:40:ae:1a:5c:33:56:fc:dc:e4:b1:06:b6:5c:
         e9:6c:24:97:12:20:66:45:31:7d:13:c5:8d:06:69:42:be:57:
         ed:a9:53:bc:b1:43:35:18:bd:a0:e0:85:b9:0e:37:48:60:8e:
         6a:85:e7:0d:78:ab:4f:45:ae:d0:48:52:06:5b:af:99:3c:d5:
         aa:14:5e:cb:7b:ae:55:b0:a4:69:e7:91:8c:0d:88:33:00:94:
         cf:a2:a8:79:26:09:db:08:78:a6:37:9d:5d:e9:09:59:5d:b9:
         db:01:2a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:40 2025 by rpki-client