Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft
File:                     4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft (raw, json)
Hash identifier:          u2Km+8NsEafMTkZz4tZ8Ku3cynBTFld0SBVnVgXbib8=
Subject key identifier:   C3:E0:47:23:92:4C:BB:F2:0E:EC:10:0D:F9:63:C6:FC:5E:39:F6:76
Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82
Certificate issuer:       /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082
Certificate serial:       638AAC2A4D2A64B38744E1B98D50A11ABD370544
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft
Manifest number:          7F
Signing time:             Tue 29 Apr 2025 05:42:16 +0000
Manifest this update:     Tue 29 Apr 2025 05:37:16 +0000
Manifest next update:     Fri 02 May 2025 10:50:16 +0000
Files and hashes:         1: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 7x/SmyPHQFfblL4JZHqrDEN7k/DubxIWEEwK3IKjhss=)
                          2: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl (hash: G3xlwMGUTeIJ1vLU9/FxrvmCrogH5VtvPyxajUySA1c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl
                          rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 17:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8a:ac:2a:4d:2a:64:b3:87:44:e1:b9:8d:50:a1:1a:bd:37:05:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082
        Validity
            Not Before: Apr 29 05:37:16 2025 GMT
            Not After : May  2 10:50:16 2025 GMT
        Subject: CN=C3E04723924CBBF20EEC100DF963C6FC5E39F676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:3e:e0:15:61:b9:e7:c4:0b:aa:cb:22:5d:
                    b3:40:a6:e3:82:ec:64:5b:9e:58:12:d5:f5:a8:7a:
                    12:b6:2f:7c:85:5a:23:21:23:c7:03:41:38:f1:0d:
                    e7:b7:21:78:06:be:ac:d3:b0:a9:d1:9a:3a:65:63:
                    b5:69:d8:0a:bf:33:8c:25:5b:fa:ec:0c:5e:50:6f:
                    ec:1c:23:9a:ec:4c:35:6b:bc:71:ad:0a:af:5f:72:
                    9e:7c:66:d0:cd:b0:02:88:7d:81:1f:fb:8b:20:32:
                    7b:38:39:35:f6:7c:2b:57:1e:3e:c0:7b:a5:92:6c:
                    ea:6c:f4:da:4d:9a:1c:ee:c5:90:f4:9e:f3:8d:af:
                    57:98:76:28:02:eb:7e:5a:de:bb:d2:ae:b3:b9:8e:
                    65:90:a5:63:d2:7f:b7:a8:3b:d9:44:15:a7:f3:62:
                    9e:7b:71:8a:04:b7:a6:d9:8b:cc:a1:37:74:c8:9c:
                    b8:c7:e3:51:d0:3e:e3:b2:2e:d5:04:34:aa:11:d0:
                    bf:2e:e6:bc:c4:59:d2:87:c9:26:bb:19:9f:b9:e5:
                    84:82:66:7a:7a:de:5f:61:11:25:4b:2b:a8:88:a1:
                    e2:34:1d:f8:f6:8e:5b:37:a1:db:9d:49:45:39:b5:
                    4d:e4:71:11:7f:37:89:42:ff:11:c2:ab:5e:ce:67:
                    d4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E0:47:23:92:4C:BB:F2:0E:EC:10:0D:F9:63:C6:FC:5E:39:F6:76
            X509v3 Authority Key Identifier:
                keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:22:f2:27:6c:18:e0:dc:ba:38:9f:c2:4f:8d:11:10:fc:12:
         10:f4:e2:20:a5:6c:b8:6e:e1:a4:2e:f2:67:b0:40:7e:a1:34:
         d7:38:c5:86:d7:0d:46:bb:76:5c:c1:81:9a:3e:b9:a1:93:ce:
         00:32:0b:16:40:52:e6:54:3b:8c:9f:26:06:b8:7f:67:e8:68:
         3b:22:b7:6b:e2:ad:a3:97:7c:38:ea:76:9d:5d:d9:f2:50:9a:
         07:22:51:18:ef:de:ad:21:37:66:44:2e:40:60:b2:14:c0:9d:
         26:be:c6:a9:84:4d:0c:f1:d5:19:2a:f8:2f:9e:96:25:88:6b:
         ab:28:fc:0f:44:db:23:4f:9c:90:d0:d5:f1:22:02:83:1b:da:
         db:01:0f:1b:96:36:9f:0d:02:2b:20:03:8d:ec:c5:56:4a:28:
         43:dd:62:09:79:35:cc:bb:40:7b:bb:00:ed:6b:23:da:6c:54:
         9a:a1:ab:ab:95:77:ec:d3:58:ec:ba:4b:cc:9f:5c:cc:c3:9c:
         1a:3c:5c:8d:d8:dc:5b:80:10:24:68:7a:f4:2b:bb:d0:96:af:
         c4:7d:0c:a0:b9:a7:d4:73:14:62:74:36:7e:16:38:47:f2:d8:
         6b:0c:3a:a9:cf:d2:0d:cc:92:d7:9a:80:91:ae:dc:b7:2e:81:
         da:27:34:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:25:31 2025 by rpki-client