Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
File:                     B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft (raw, json)
Hash identifier:          uVSghs1CkmZPTl5zzSAl5TRE35V5iYiFnALhP4ThfdI=
Subject key identifier:   AC:3F:0B:35:36:7F:7E:32:AE:A1:7F:C1:49:9F:4F:50:11:AA:B9:F7
Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1
Certificate issuer:       /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
Certificate serial:       6A49A4AB94F87CC74F8407AE06602732AECCCE78
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
Manifest number:          021D
Signing time:             Mon 16 Jun 2025 03:02:52 +0000
Manifest this update:     Mon 16 Jun 2025 02:57:52 +0000
Manifest next update:     Thu 19 Jun 2025 08:06:52 +0000
Files and hashes:         1: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (hash: KAd16ldutYh48OLbDnroVNt1O/HTzAA/aCmbtAP1Odw=)
                          2: 3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (hash: hum6PwDa+tJlyU75JQFBXd7LlyucqEnCFxIhwk7g/uE=)
                          3: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (hash: YwiS5nlm2sACVNb5Xfq0EOTBtueDgKIv6RAnbgfUwRk=)
                          4: 3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (hash: 1UJAHonWaadwHYuLef8BFUV8SSyJkucgr+FB5CesNHg=)
                          5: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl (hash: tn7YZOQLVfm14eLlGIZ+Xso0wGFyHDR0Pyze0gX5Xds=)
                          6: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (hash: WwW9nUa1rmjUn7BCAW+1oX9KPadjU43XCXkkj1toOfQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl
                          rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 08:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:49:a4:ab:94:f8:7c:c7:4f:84:07:ae:06:60:27:32:ae:cc:ce:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
        Validity
            Not Before: Jun 16 02:57:52 2025 GMT
            Not After : Jun 19 08:06:52 2025 GMT
        Subject: CN=AC3F0B35367F7E32AEA17FC1499F4F5011AAB9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:56:58:4e:39:a7:e1:5b:7b:72:13:1c:e7:
                    28:f2:b6:84:3e:4c:22:02:14:99:12:bd:9f:79:b1:
                    9b:b7:46:8e:18:49:3c:ba:39:be:2d:1d:e0:22:7b:
                    44:9f:96:90:0b:2b:ac:80:71:5f:23:1a:3d:49:74:
                    51:00:48:45:b5:82:ac:06:87:b6:d7:31:9d:1e:14:
                    0f:6b:1c:c0:93:16:5f:e7:bb:4f:40:77:78:18:44:
                    64:b3:e7:5e:10:f2:df:42:c4:48:95:e9:d3:5c:49:
                    6f:db:6f:08:42:85:da:b1:bf:fc:9b:29:6b:96:3b:
                    aa:4f:31:a3:26:c7:ed:ab:fb:e4:1a:da:d5:79:29:
                    08:25:30:37:30:88:45:62:76:79:ae:fd:37:79:c8:
                    15:05:fc:00:c0:d5:4a:a3:80:10:c9:9d:21:7d:a9:
                    b2:01:3d:66:d2:bc:89:34:a4:ee:f9:47:e9:1e:a7:
                    61:20:9a:6e:b4:db:34:5d:57:48:ac:53:59:93:d9:
                    b6:50:14:2f:a0:e3:01:10:fc:2d:2d:72:ae:3e:fc:
                    55:0e:35:23:f0:d4:b4:da:e2:b3:03:1b:be:b2:90:
                    38:33:f0:ee:77:97:cb:8b:fa:00:2c:14:1a:3a:63:
                    d1:77:af:62:1a:e9:3e:1e:fa:23:95:ff:81:ec:d6:
                    b2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3F:0B:35:36:7F:7E:32:AE:A1:7F:C1:49:9F:4F:50:11:AA:B9:F7
            X509v3 Authority Key Identifier:
                keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:83:1e:13:b0:ae:22:66:b9:15:23:b0:1e:88:79:e0:89:dd:
         4e:89:9c:e4:6b:49:c4:ff:ee:3c:7a:7d:1f:ee:57:78:54:0a:
         61:9f:61:d4:b6:63:38:bd:a8:04:53:66:4e:85:e9:c2:15:51:
         64:53:27:ad:14:ad:f1:80:62:e8:94:99:6f:ce:0a:df:4e:0f:
         a7:10:8f:fc:f3:80:59:2b:3b:53:09:e8:d8:a8:8c:c6:95:3b:
         c4:85:8e:e0:99:59:7e:92:d1:4b:96:69:b9:a1:ba:61:54:a6:
         68:8a:6b:db:0b:14:d5:dc:96:30:69:c6:d2:ae:72:5a:a0:98:
         71:86:9b:1e:17:1d:71:19:35:31:47:3b:37:88:19:fe:b7:1c:
         57:1a:5e:7f:09:a0:a2:fb:88:59:d0:62:cf:b4:11:5a:a4:f2:
         56:03:46:98:d9:77:7b:47:54:96:df:21:82:5c:11:2a:e0:ec:
         36:f2:46:6a:46:f9:64:79:26:79:88:1c:83:23:28:6e:1f:2a:
         31:e3:c1:cf:00:81:46:c9:b2:83:61:a7:d3:81:51:e9:c2:29:
         41:35:6d:89:8f:b4:b2:f0:e5:36:25:eb:a3:ec:3f:5d:6f:cf:
         70:a2:ac:de:d6:fc:2c:54:2d:28:9d:ec:42:74:01:0a:c9:b5:
         79:35:ac:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:59:10 2025 by rpki-client