Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft
File:                     73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft (raw, json)
Hash identifier:          ZdPzcm2p/s50NHLACMk349VjArymft60jNf248X3++Y=
Subject key identifier:   EB:88:8B:5F:01:FA:B2:04:0B:E8:6E:54:1E:38:D9:83:A7:51:6B:1C
Authority key identifier: 73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9
Certificate issuer:       /CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
Certificate serial:       3BF36D30B14AE90DA4C3C6070D0960661FF26635
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft
Manifest number:          010A
Signing time:             Tue 17 Jun 2025 18:22:07 +0000
Manifest this update:     Tue 17 Jun 2025 18:17:07 +0000
Manifest next update:     Fri 20 Jun 2025 23:43:07 +0000
Files and hashes:         1: 3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa (hash: d/xmUChepoOogFc4Soq6uqm5Cedk9W9kH6EQCdLR+3s=)
                          2: 3130332e35352e3235342e302f32342d3234203d3e20333936393832.roa (hash: 3GuMduWTgloUnJZtYU+5K5/Trf+zimiieU09c7Eyrv4=)
                          3: 73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl (hash: 7MXe0fGSbP4/Bi/9VKGVfBSDvVqjdapWSNWzPKSKA8U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl
                          rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 23:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f3:6d:30:b1:4a:e9:0d:a4:c3:c6:07:0d:09:60:66:1f:f2:66:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
        Validity
            Not Before: Jun 17 18:17:07 2025 GMT
            Not After : Jun 20 23:43:07 2025 GMT
        Subject: CN=EB888B5F01FAB2040BE86E541E38D983A7516B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:a1:8d:cf:9f:5e:76:11:02:20:bc:6c:71:
                    f7:a4:3d:b4:ac:fe:0f:d4:70:d8:2b:70:f0:6f:ac:
                    21:e8:69:37:a8:30:97:01:16:86:e5:d7:e3:1c:aa:
                    47:8b:b7:7e:96:e1:4e:e5:30:f7:72:43:51:79:e2:
                    65:66:f8:5b:9d:9d:8c:7c:17:c1:c4:f7:58:93:df:
                    b3:4b:79:f4:55:e0:c0:fa:ea:fc:45:61:74:f2:ad:
                    54:c0:4f:1f:1f:1e:05:62:59:85:23:8d:fc:4a:57:
                    96:51:c0:c4:26:8c:a8:5f:dc:c7:fb:3a:8e:cc:74:
                    4a:48:38:a0:72:a2:94:b4:21:50:aa:0a:12:0b:2e:
                    91:41:e2:24:4a:ad:7a:f8:8c:ad:0f:61:e8:5d:a2:
                    30:0d:65:82:63:fb:5a:4b:07:8c:c8:f4:5a:57:f5:
                    6b:ce:c3:46:f6:2c:bb:e9:83:a7:fd:92:29:b7:e6:
                    15:49:55:c6:c6:de:69:06:a8:f0:7f:ea:0c:d2:59:
                    08:07:9a:db:11:2e:45:59:dc:af:b6:f8:d0:21:13:
                    f8:1b:bf:26:96:24:7f:b7:a8:90:a5:f8:09:91:9e:
                    2c:a8:83:0e:db:a2:f2:8a:b7:dc:70:54:07:27:11:
                    3b:c4:cb:77:7d:21:a6:dd:6e:9d:a6:2f:8c:d8:6f:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:88:8B:5F:01:FA:B2:04:0B:E8:6E:54:1E:38:D9:83:A7:51:6B:1C
            X509v3 Authority Key Identifier:
                keyid:73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:89:eb:0d:de:a3:29:53:32:96:8c:4f:09:08:f3:af:be:89:
         fa:d5:8c:36:a9:ce:54:b4:6f:f1:5d:b1:25:c3:55:c7:14:57:
         dc:50:02:6f:66:c9:15:80:f6:5d:58:67:aa:e8:c1:95:9d:0c:
         8c:a9:d0:6d:15:f9:23:ef:1d:b0:50:d9:1c:3b:15:71:0e:05:
         4b:11:66:6b:f4:21:c8:57:38:c0:b0:d3:c9:bd:01:d3:71:98:
         0b:70:8c:db:b8:9f:26:8f:81:6c:70:46:08:3f:a0:c8:21:41:
         40:13:b5:b6:4a:a5:91:f1:5c:38:96:c8:52:fc:5b:0f:d8:c6:
         b2:99:38:fd:be:fb:03:92:97:51:87:26:2d:6b:d6:a6:ad:cc:
         89:bd:e9:7f:0c:41:a7:1e:5d:07:e5:09:c8:2e:9a:21:3a:95:
         54:69:77:79:a7:14:26:f2:a4:29:df:c9:c0:22:e6:a6:0e:ad:
         29:e7:3b:75:37:94:82:32:5e:f1:1d:f0:cd:c5:38:37:24:7b:
         ab:1b:05:45:1a:6c:98:1e:18:6e:f2:bf:37:a9:2b:93:36:ac:
         4e:33:65:24:9a:82:bd:12:3b:98:40:b9:76:35:2d:b5:d5:7b:
         c2:24:af:94:c8:02:20:bb:de:33:30:b9:69:ef:da:7e:3c:19:
         fa:76:d8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:38:18 2025 by rpki-client