Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft
File:                     DA3283EBD45CCF7056D92A914183FB7825C66692.mft (raw, json)
Hash identifier:          vCOZ8aC+6+Vf978hZvWu2caGb4XsyGOrTVhC7o5wF/M=
Subject key identifier:   C9:04:7D:6C:B2:AF:24:16:BE:1D:7B:D3:BE:25:B9:BA:B2:0A:76:40
Authority key identifier: DA:32:83:EB:D4:5C:CF:70:56:D9:2A:91:41:83:FB:78:25:C6:66:92
Certificate issuer:       /CN=DA3283EBD45CCF7056D92A914183FB7825C66692
Certificate serial:       270C0A48B78741FB602726D95A71B020747B85D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft
Manifest number:          0346
Signing time:             Sun 27 Apr 2025 19:01:18 +0000
Manifest this update:     Sun 27 Apr 2025 18:56:18 +0000
Manifest next update:     Wed 30 Apr 2025 19:55:18 +0000
Files and hashes:         1: 3130332e3136362e33362e302f32332d3234203d3e203137393935.roa (hash: UCkFJwGn7KbxLC7kdPU1kA5YxB/v64VWKdnsapg9BD0=)
                          2: DA3283EBD45CCF7056D92A914183FB7825C66692.crl (hash: Tc4koW2mJT7a9KBUjPPxOuEA6ZrNzyKR327Tv3nFWDo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.crl
                          rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 19:55:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0c:0a:48:b7:87:41:fb:60:27:26:d9:5a:71:b0:20:74:7b:85:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA3283EBD45CCF7056D92A914183FB7825C66692
        Validity
            Not Before: Apr 27 18:56:18 2025 GMT
            Not After : Apr 30 19:55:18 2025 GMT
        Subject: CN=C9047D6CB2AF2416BE1D7BD3BE25B9BAB20A7640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:58:6c:f7:b0:f2:e9:86:3b:54:c4:80:eb:c9:
                    ea:12:18:03:84:37:53:bb:fb:3f:73:20:92:08:ae:
                    89:ff:b4:fd:34:1f:a8:5c:f0:72:5a:ea:d9:7d:5d:
                    42:1b:74:54:6c:48:7b:6f:cb:2e:d7:6f:7e:57:1c:
                    64:c6:2e:83:e5:07:73:0e:16:53:e6:2f:84:05:ae:
                    4d:8f:4a:90:be:de:45:76:c8:16:64:8f:16:e9:08:
                    ca:05:79:4a:47:ce:72:ff:31:18:ce:12:6d:89:42:
                    e0:f6:30:ea:57:a1:12:a5:da:2a:15:13:ff:13:a4:
                    93:82:62:06:af:08:d6:6c:57:f6:a2:a9:3f:85:60:
                    6f:7a:14:87:53:ba:dd:64:8f:f0:02:31:2d:31:a0:
                    cb:53:b2:fd:26:29:b1:0f:71:42:d2:57:63:b8:71:
                    b2:07:ae:17:89:5e:37:30:e3:33:7c:82:37:66:67:
                    19:99:06:86:b0:18:4c:6e:de:d4:58:ae:d9:c1:42:
                    83:b4:34:1b:52:14:7e:b0:4b:84:3b:0c:b7:22:f6:
                    fb:3b:93:19:7d:24:6a:ea:b9:7b:6e:ea:26:d6:ce:
                    40:d5:4a:95:6d:97:25:b9:e4:fa:1f:a9:e8:16:5c:
                    77:dc:3c:8e:92:38:00:fb:48:b5:2b:fd:7a:4f:c6:
                    68:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:04:7D:6C:B2:AF:24:16:BE:1D:7B:D3:BE:25:B9:BA:B2:0A:76:40
            X509v3 Authority Key Identifier:
                keyid:DA:32:83:EB:D4:5C:CF:70:56:D9:2A:91:41:83:FB:78:25:C6:66:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f6:22:e4:69:6e:88:9a:a2:46:a0:86:ec:78:fa:c0:13:50:
         04:8f:9b:af:2a:70:73:4e:23:ab:e5:3d:58:60:a2:02:cf:b4:
         5d:3d:c9:a2:17:4d:88:e0:c1:58:e7:67:e6:c2:6a:69:f0:d3:
         24:f1:ce:08:4f:09:4b:42:e7:44:4c:a4:71:a5:f5:fb:81:6d:
         ca:60:1b:f6:1b:dd:ea:97:37:23:66:43:69:77:04:38:f2:f2:
         ec:fe:16:e1:c3:71:b3:db:ed:00:97:75:10:f5:50:08:60:fa:
         b5:f2:10:0b:52:f7:7f:7e:fd:af:3c:ce:80:61:72:2c:27:9b:
         7c:f0:6b:ac:3d:06:93:6b:e2:b6:06:60:14:ff:a9:a1:b5:bb:
         ea:ef:a2:09:bb:ff:1d:72:03:75:03:d7:ca:b8:d7:dc:4f:4d:
         59:bd:49:1c:2a:bd:e6:f5:4d:c6:82:12:64:d2:82:de:34:83:
         44:79:92:b4:ae:51:cc:ad:49:d0:f0:e6:be:77:c0:f6:db:42:
         28:77:b9:b6:f4:06:1a:90:1c:e2:79:56:83:30:b3:33:b5:70:
         b1:ef:4a:50:1b:e8:21:a9:d9:3d:49:d6:9f:6e:f2:02:70:cb:
         71:7f:eb:d2:74:01:25:aa:cd:c8:08:7a:be:10:f1:5d:a6:76:
         47:b9:da:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:05:16 2025 by rpki-client