Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft
File:                     DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json)
Hash identifier:          4r+5Cm9xHrs5UX8gyh6Jok3JJMPcLte4JJyMTaWA+W4=
Subject key identifier:   71:82:C3:78:0F:C8:23:E5:D6:52:B9:71:07:33:55:23:44:3E:FD:85
Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E
Certificate issuer:       /CN=DE871A367510652B50812EF1D04572635502AD6E
Certificate serial:       57BBC60E4FD6EB9EB7A7BE3489D3ABF7C5F2AE8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft
Manifest number:          025D
Signing time:             Fri 08 Aug 2025 22:41:06 +0000
Manifest this update:     Fri 08 Aug 2025 22:36:06 +0000
Manifest next update:     Tue 12 Aug 2025 08:24:06 +0000
Files and hashes:         1: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: Z9U+dM0w8o56wGrP2WrZEP6+q5MsgiLLHbm/nR5MRJs=)
                          2: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: JddBvr2E4qhvXzTnvB8cueVnBYtFb2jGcnwSz88frMs=)
                          3: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PDdq8e3i59EuZ/OY6T2ikv6WPALtg9Yb+GzE/u464Cg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl
                          rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 08:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:bb:c6:0e:4f:d6:eb:9e:b7:a7:be:34:89:d3:ab:f7:c5:f2:ae:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E
        Validity
            Not Before: Aug  8 22:36:06 2025 GMT
            Not After : Aug 12 08:24:06 2025 GMT
        Subject: CN=7182C3780FC823E5D652B97107335523443EFD85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5b:33:25:81:ed:21:fa:40:e6:a1:f5:16:3c:
                    05:60:0e:32:3c:d3:e7:78:b6:e1:b5:87:64:c5:d3:
                    fc:e0:c3:14:5e:0d:23:86:ca:53:a9:5f:b7:fd:1e:
                    60:86:f2:36:c5:8e:c0:44:06:57:87:3e:de:33:c8:
                    6a:58:a2:11:27:2b:50:38:1d:19:cb:c4:4e:a5:a9:
                    f2:3f:50:3f:a0:0f:03:4c:17:3e:19:ec:2d:4b:52:
                    c0:c6:18:2c:68:33:7c:a3:4c:99:45:15:a5:31:7b:
                    c6:7b:b7:fc:3f:e6:3e:a4:85:f1:66:d5:9e:c4:8d:
                    69:1c:9e:28:f1:47:68:e2:c2:69:b6:ec:37:5b:81:
                    0f:be:8b:94:20:c1:1f:1e:6f:83:52:e8:c9:bf:10:
                    f0:ed:7a:7b:d5:1f:c0:a7:77:57:a8:4f:36:d0:57:
                    cf:cf:b0:23:41:fd:53:43:a2:72:89:a4:4b:06:78:
                    41:33:96:5b:fc:20:c9:9a:d2:90:b4:8d:7e:56:17:
                    27:2a:b4:e5:13:b7:38:4b:fe:69:3a:51:9f:2b:37:
                    4c:26:a3:fa:27:af:99:e1:6c:cf:47:5c:4d:8f:de:
                    47:80:a3:d4:26:19:7b:2e:44:a7:b1:c0:7b:fb:a8:
                    a8:72:96:c4:60:6e:aa:a7:99:25:68:bc:7f:b7:27:
                    95:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:82:C3:78:0F:C8:23:E5:D6:52:B9:71:07:33:55:23:44:3E:FD:85
            X509v3 Authority Key Identifier:
                keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:89:bc:2c:81:71:87:3f:16:b3:09:21:05:e9:b4:a2:ba:5a:
         7b:21:8e:4e:f8:d2:00:21:5e:99:b4:3a:db:7e:52:f9:16:ec:
         54:0b:9a:85:22:61:f3:73:ee:45:dc:fd:e5:8f:c8:07:26:cf:
         62:8e:01:0d:7c:06:81:4e:55:b1:23:e0:11:66:f4:06:7f:cb:
         ab:bc:5a:39:b7:f2:08:9b:f0:d8:75:14:43:83:0d:ea:6c:c6:
         b0:81:59:55:78:53:94:3c:89:d9:b6:5b:79:aa:04:c5:20:c9:
         b5:27:e0:5b:96:1b:45:30:f1:0b:ab:d0:be:44:c2:0b:9f:71:
         70:24:62:64:dd:ab:da:0d:18:20:5b:58:da:cd:a4:2e:24:40:
         a4:46:41:de:27:62:29:60:65:6f:dd:9e:9a:86:a7:fb:ba:53:
         01:0a:e5:f3:f0:e0:ef:ad:e1:92:af:67:e8:fc:6f:0c:2a:c8:
         27:09:88:0e:85:b3:20:91:da:00:e3:03:65:7a:24:7b:e2:75:
         45:2a:b1:aa:7e:cd:4c:b9:2a:25:39:5f:15:ab:2a:2f:b3:17:
         53:be:12:62:c3:c1:5d:0c:52:bd:a6:df:60:e6:52:04:a8:62:
         0d:ae:aa:43:d9:a4:6f:18:e8:0f:a8:7b:d3:5f:03:91:5e:e8:
         25:7d:4d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:32 2025 by rpki-client