Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft
File:                     DE99361912581A3A43349B6FFB379A285B0972E7.mft (raw, json)
Hash identifier:          2XVVz6FdgdKQriZeKF82NQZvursTDFBeErN8BnAQYOM=
Subject key identifier:   D9:2C:52:50:B3:7C:59:21:3A:65:E7:F2:E7:6B:15:AE:D6:D9:90:CB
Authority key identifier: DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7
Certificate issuer:       /CN=DE99361912581A3A43349B6FFB379A285B0972E7
Certificate serial:       2E9678735158A60AD1B190446E695D85807549DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft
Manifest number:          8A
Signing time:             Mon 16 Jun 2025 23:20:42 +0000
Manifest this update:     Mon 16 Jun 2025 23:15:42 +0000
Manifest next update:     Fri 20 Jun 2025 06:51:42 +0000
Files and hashes:         1: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: mI6PTkpaM6ChlY4guRYd5Ne9UFAZRwUFW3RPT7EOVQM=)
                          2: DE99361912581A3A43349B6FFB379A285B0972E7.crl (hash: WjO1E/3K0f2mUh+WXtuSrwLSPqBlvnv4YwqYJqmkCXI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl
                          rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 06:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:96:78:73:51:58:a6:0a:d1:b1:90:44:6e:69:5d:85:80:75:49:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE99361912581A3A43349B6FFB379A285B0972E7
        Validity
            Not Before: Jun 16 23:15:42 2025 GMT
            Not After : Jun 20 06:51:42 2025 GMT
        Subject: CN=D92C5250B37C59213A65E7F2E76B15AED6D990CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:73:75:4f:c4:de:c5:06:d9:01:8d:0f:18:c2:
                    c0:38:32:9f:59:39:13:84:50:da:da:47:33:cd:c0:
                    08:10:cd:c2:76:28:69:70:99:83:66:1f:89:d3:5d:
                    cf:e8:2e:1f:39:11:92:45:58:31:c8:b3:f7:ca:aa:
                    8f:53:b8:dd:ab:b6:4b:f6:76:dd:78:f8:88:42:d5:
                    f2:da:de:a9:28:77:34:ae:a7:2f:d8:bc:da:35:9c:
                    dc:30:84:7c:9e:6c:85:78:1c:e2:2a:66:df:10:2e:
                    eb:6b:1c:4f:b6:47:4f:c4:7f:85:20:79:6a:ab:0c:
                    ee:05:58:1e:84:73:a6:4b:13:4f:b9:91:db:91:c6:
                    6b:68:0f:58:27:5e:56:87:44:f5:55:5a:f5:41:b9:
                    a8:c8:08:0e:14:ce:07:82:6a:90:fb:8c:d7:97:f9:
                    5b:0e:a2:37:e2:d6:81:5c:18:3e:41:9e:80:cf:48:
                    4f:91:8c:7d:95:48:25:f4:d6:83:c7:91:00:2a:c6:
                    db:33:7f:17:fc:22:db:49:f9:83:be:30:54:b3:22:
                    d6:9d:01:b2:ac:1a:52:a3:6d:bb:df:65:f1:52:b6:
                    79:66:6e:16:3a:cf:9c:cb:83:32:05:36:2f:a9:8e:
                    45:8a:30:ce:e3:07:2c:cb:0d:5f:3b:fe:47:0f:e7:
                    e2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2C:52:50:B3:7C:59:21:3A:65:E7:F2:E7:6B:15:AE:D6:D9:90:CB
            X509v3 Authority Key Identifier:
                keyid:DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e6:6f:ae:b9:98:1a:13:60:e4:c0:2a:4e:97:49:e2:69:e5:
         10:61:b5:86:63:84:a9:ff:c0:38:15:58:f3:48:fb:72:f3:9a:
         ce:a6:61:06:0d:56:ec:72:ed:21:22:b7:d9:42:61:c9:ce:77:
         c0:07:9b:3b:50:1e:47:ba:9d:c6:36:be:5c:d7:8f:ee:84:30:
         f4:85:af:e1:a1:30:d6:1e:74:3e:6c:1b:2e:c3:a5:ea:c7:79:
         c5:2e:f7:24:14:0d:74:57:fc:6f:7a:b1:e0:9f:37:41:ab:fd:
         7b:ce:b0:bd:83:8d:8b:b1:b8:e5:71:71:af:0a:58:f1:94:33:
         50:87:ef:09:e2:9e:5b:39:b8:84:d8:1a:7a:75:0a:1f:ad:bd:
         29:28:b5:88:7c:31:fe:b8:51:77:ad:7d:9c:5a:54:60:24:33:
         64:50:91:37:51:08:bf:70:d5:cc:a1:53:13:4f:f6:bf:de:43:
         0d:45:4e:be:ef:a5:fd:81:ab:73:c1:e0:ef:de:38:8c:6a:f5:
         eb:c0:22:7a:5d:83:33:7c:56:5b:42:db:b7:e9:dd:32:18:97:
         f6:df:e4:aa:e9:e2:b2:65:3f:2f:11:44:4a:62:67:89:d9:d7:
         77:a4:ba:28:6a:29:4e:4a:11:e5:39:b8:03:dc:c8:3f:c8:d6:
         17:cc:71:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:23:07 2025 by rpki-client