Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft
File:                     9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft (raw, json)
Hash identifier:          KQLNoCKoW/eeEgX7QtebhWy0v7Gstpbn/wSuqoPGE7k=
Subject key identifier:   B7:A5:8F:61:86:31:E5:BC:4F:3E:DA:52:CE:A0:2B:11:19:76:E7:19
Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0
Certificate issuer:       /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
Certificate serial:       4BBA5522D8F5D5724A70702B263249986B67B561
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft
Manifest number:          0369
Signing time:             Mon 28 Apr 2025 05:21:51 +0000
Manifest this update:     Mon 28 Apr 2025 05:16:51 +0000
Manifest next update:     Thu 01 May 2025 07:05:51 +0000
Files and hashes:         1: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: PLxyzNMHDwWhigbWK1elnj9wmeVoOxOWWNDLZHzEEUc=)
                          2: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: Ssv2eZbvx9q2HF9yBmPHiXg5F7RXJ5IV1vipTWA9H6o=)
                          3: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: L5BIjbBfOEx7SS/qKd8g58mpaMP4eQ6lbIGXrSSmvHc=)
                          4: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: MR0vuOK83eKQgL1Fy5JS8qbLGHJrbQXLpQoCt2clqOs=)
                          5: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: wC6luSTP1AKNUykfYnoLzUykZGRywJ+GQGrVX69tkgQ=)
                          6: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl (hash: Y0CdrDC9+/6F8/8Z5Xqv18twj0vhmaJFVFAQjvpEi7Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl
                          rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 07:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ba:55:22:d8:f5:d5:72:4a:70:70:2b:26:32:49:98:6b:67:b5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
        Validity
            Not Before: Apr 28 05:16:51 2025 GMT
            Not After : May  1 07:05:51 2025 GMT
        Subject: CN=B7A58F618631E5BC4F3EDA52CEA02B111976E719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:8e:60:76:f0:35:51:ea:43:c3:b4:bb:a4:
                    31:2c:cb:f4:e2:cf:37:90:7f:08:f9:c8:9f:ef:c5:
                    55:43:50:50:1b:35:04:c6:12:c0:58:96:de:08:9c:
                    5e:75:5c:6b:eb:a9:db:e9:fe:6a:8b:e4:6e:ca:82:
                    e6:2b:2c:92:ca:e5:98:d2:8c:c2:28:19:9a:7a:ed:
                    3b:48:19:75:2f:63:e3:3e:fe:3e:b6:78:f8:65:4c:
                    f6:5a:a5:ea:f4:3f:2e:94:7e:74:7b:e8:da:a4:d2:
                    81:65:71:5a:90:b9:0c:4f:31:a5:48:66:6c:63:8f:
                    5b:1c:6a:92:e3:6b:f3:85:3a:53:0f:e0:da:db:a1:
                    86:51:60:dc:e1:27:2e:bb:1f:7c:0e:62:cf:c6:82:
                    9b:9d:fd:2a:1b:16:80:5a:56:b8:7d:10:72:c2:bf:
                    15:dd:e5:f9:85:85:4b:96:45:ee:5e:bd:45:10:17:
                    28:36:ef:bf:e0:78:7a:1f:36:0f:a3:9b:47:0c:92:
                    80:f7:87:cb:5d:fc:70:77:ad:6f:f2:72:43:de:e8:
                    13:b3:8f:1e:9c:48:a8:01:ef:54:1d:8c:07:d4:27:
                    8f:d9:96:c8:fa:57:3b:fe:65:1d:29:e5:26:b1:66:
                    28:43:36:55:b3:ca:03:dd:1a:6c:23:70:73:85:70:
                    55:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A5:8F:61:86:31:E5:BC:4F:3E:DA:52:CE:A0:2B:11:19:76:E7:19
            X509v3 Authority Key Identifier:
                keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b3:d0:80:a8:a7:92:b5:d0:fc:28:f7:09:08:9b:89:b5:d6:
         00:3a:22:73:e0:ea:2d:4e:d6:3a:2a:50:79:a3:54:8e:20:3a:
         9d:e2:9b:f4:be:4d:a3:a9:84:f5:89:45:61:8c:68:ee:a3:ae:
         22:92:17:c8:bb:c0:c9:f8:40:b7:82:e5:6d:84:ad:00:84:7b:
         8b:42:f7:df:72:62:65:78:aa:7e:6f:3a:9a:c1:b5:a5:6a:6e:
         1d:f8:68:0c:3e:e8:9c:89:63:eb:f8:6a:ab:c4:06:28:0d:dc:
         76:23:4f:d1:88:70:90:60:5a:08:1c:f4:ee:26:9e:ab:08:37:
         06:1d:8f:41:09:9d:f3:d9:74:1e:1b:2b:57:c7:30:52:d5:33:
         c5:90:51:a4:1d:b8:5a:44:d2:5d:97:ff:38:5d:bf:a3:f0:28:
         73:9a:90:dd:3b:b9:bb:bc:ab:1b:07:39:29:85:2d:ab:44:11:
         3f:d8:ac:81:25:72:99:81:1e:c4:d5:62:9d:83:b0:ea:3c:92:
         7a:5e:cb:7b:17:bb:d8:f4:f3:61:2e:ea:e9:c3:a7:98:b4:df:
         75:85:a6:0f:d2:89:fa:5e:75:bd:6a:4a:7f:22:35:da:8f:94:
         79:c0:54:17:cc:63:bc:cb:7d:b9:f6:6a:11:d3:ce:f1:92:65:
         15:82:d7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:43:52 2025 by rpki-client