Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
File:                     2FEC60739EF087F0D4F947C7230A725109EC6178.mft (raw, json)
Hash identifier:          uLF/M55k9nMYdYxQW7NqlOTHTb1G0FWNcin5ZyvOAoQ=
Subject key identifier:   38:D2:EA:8E:93:58:13:E0:FD:B5:F3:17:28:6B:31:80:81:2D:71:7B
Authority key identifier: 2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78
Certificate issuer:       /CN=2FEC60739EF087F0D4F947C7230A725109EC6178
Certificate serial:       4D3AE4D1101111216106C11DBBED134F29EFD6B4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
Manifest number:          017C
Signing time:             Tue 29 Apr 2025 19:51:01 +0000
Manifest this update:     Tue 29 Apr 2025 19:46:01 +0000
Manifest next update:     Sat 03 May 2025 07:25:01 +0000
Files and hashes:         1: 3130332e38312e3231382e302f32342d3234203d3e20313336303731.roa (hash: zWeyoVA0qOIjaDafAvIQb12jZYR0oaDd22mIF8oHmpo=)
                          2: 2FEC60739EF087F0D4F947C7230A725109EC6178.crl (hash: LbeO7LTOk7iK6PXGOuho0Kbw1z8i2VJ80ePhEivJWts=)
                          3: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (hash: H/sQHGm23pHeiM29QxCCnpOLF9jsO1FQ1jBVySyo3Cs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl
                          rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 18:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:3a:e4:d1:10:11:11:21:61:06:c1:1d:bb:ed:13:4f:29:ef:d6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FEC60739EF087F0D4F947C7230A725109EC6178
        Validity
            Not Before: Apr 29 19:46:01 2025 GMT
            Not After : May  3 07:25:01 2025 GMT
        Subject: CN=38D2EA8E935813E0FDB5F317286B3180812D717B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:75:1b:48:a0:3b:28:bd:04:dc:d4:38:36:
                    c0:dd:9c:72:fa:34:8a:7b:8c:36:20:37:a1:79:9c:
                    44:e9:46:f4:c9:de:33:16:0b:db:19:59:3c:cc:69:
                    1b:e9:15:f9:6a:d0:76:23:ed:20:40:0b:a3:cd:f8:
                    55:4b:e7:59:ac:e4:4a:a3:99:79:05:8c:74:13:59:
                    93:8e:c6:6c:b4:bc:bf:31:6e:9c:50:96:80:70:1d:
                    bb:31:de:13:1e:e3:9d:1e:48:17:fc:f7:9c:cc:8e:
                    a3:4e:e4:90:20:96:2d:ba:49:2e:53:25:16:04:e0:
                    ca:da:b4:02:e1:d4:9f:a8:d2:6c:ab:07:ba:18:75:
                    f0:6a:c3:18:27:ec:30:82:03:4e:a7:f5:af:32:3f:
                    ca:0f:c6:89:b4:c8:7f:9c:96:4b:ff:56:f0:04:42:
                    e6:55:57:b1:c6:43:2d:1b:30:ca:02:40:8d:2c:54:
                    1a:78:a3:65:55:37:30:3e:f4:15:a3:c8:c6:71:84:
                    9f:7a:f2:31:a3:80:33:51:b3:ce:86:b2:bb:44:6f:
                    d6:81:5e:50:06:46:6b:d8:96:e4:76:0e:4e:9f:4f:
                    2a:9e:0d:ea:ba:4d:d5:37:46:f4:56:14:a7:b1:a5:
                    93:f8:99:6a:0f:6e:32:c2:62:b6:88:1b:51:21:c8:
                    96:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D2:EA:8E:93:58:13:E0:FD:B5:F3:17:28:6B:31:80:81:2D:71:7B
            X509v3 Authority Key Identifier:
                keyid:2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f1:70:9d:3f:29:a4:fa:68:55:93:e9:1c:57:2b:a0:ba:82:
         e7:bf:57:75:43:69:77:c8:56:fd:64:4c:b6:85:54:db:98:32:
         e5:39:54:bd:d4:ca:c0:fc:59:68:f4:33:94:97:60:bf:6a:18:
         36:b1:78:42:fc:0c:6f:c3:90:7a:e9:c5:68:d6:83:ae:5a:ed:
         17:02:67:28:de:51:46:ef:b1:0c:c2:af:a3:3d:96:aa:a1:35:
         02:0a:3c:33:51:bd:de:d8:b7:df:e7:05:1d:72:64:0f:8a:0c:
         25:d6:68:b5:27:37:07:24:18:23:2e:7f:2f:54:2f:71:06:bf:
         bd:22:54:e1:61:ab:d6:4e:7e:b8:b9:58:97:9a:72:9f:04:75:
         73:f4:44:fb:ed:e5:49:48:42:20:38:04:d2:94:c8:70:c9:5e:
         fb:ea:39:d6:3f:64:fa:3a:b0:f5:0b:e8:34:ee:2e:d6:c7:fb:
         b5:55:f5:0e:3a:a6:43:41:ec:28:91:00:f2:a7:a8:bd:46:22:
         79:09:c2:ff:44:c2:2a:ed:d2:75:ef:fa:88:73:08:97:86:c2:
         75:2e:2f:ab:0c:fb:76:24:29:22:66:e5:ac:8b:bf:e7:09:e3:
         a1:3a:2d:64:80:5b:15:54:10:77:63:97:ae:df:d4:1c:f9:f4:
         f9:7e:ed:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:13:14 2025 by rpki-client