Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft
File:                     A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json)
Hash identifier:          53L+MVdjngx84mzCG/mcCrRUmC+w7uw6OWgYca1tYFI=
Subject key identifier:   18:27:04:E2:51:4B:89:C3:6E:B1:85:47:45:BF:E3:84:34:49:21:5A
Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B
Certificate issuer:       /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B
Certificate serial:       06DFCCAAFE1C7FF09897D4BEF5D06A3821AC0308
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft
Manifest number:          0100
Signing time:             Mon 28 Apr 2025 06:41:13 +0000
Manifest this update:     Mon 28 Apr 2025 06:36:13 +0000
Manifest next update:     Thu 01 May 2025 15:38:13 +0000
Files and hashes:         1: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: efT2VIhj2XJFzQsE4rz4I187biAWyJw7ETKSSdBeGzM=)
                          2: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: fdKLklGtOpTaZiKknSWtQhokJ8SyF+EacKH1Get3Tjc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl
                          rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:df:cc:aa:fe:1c:7f:f0:98:97:d4:be:f5:d0:6a:38:21:ac:03:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B
        Validity
            Not Before: Apr 28 06:36:13 2025 GMT
            Not After : May  1 15:38:13 2025 GMT
        Subject: CN=182704E2514B89C36EB1854745BFE3843449215A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:eb:9c:7a:e6:08:5e:50:2a:29:ba:47:4a:8c:
                    fb:73:b0:61:35:57:71:4d:9e:05:57:92:3a:f1:c8:
                    f5:53:7f:6e:00:34:d7:ec:94:50:c5:65:1c:15:ef:
                    d6:ae:71:c6:4f:8f:97:b7:ce:7a:ce:02:f3:52:66:
                    23:2f:0d:ca:14:a1:49:81:62:ca:2b:09:56:1d:c0:
                    b7:c2:b1:eb:ef:69:ad:86:2d:dd:29:19:70:fa:ef:
                    4f:a2:6f:36:02:c8:00:50:a2:89:73:3f:88:3e:d4:
                    ff:a9:85:bd:68:2c:f6:7e:4a:71:94:fe:ee:d5:e9:
                    24:4e:2e:7d:7b:36:4b:4c:46:18:f1:fd:67:ad:b9:
                    78:bf:51:d7:45:14:cb:22:9f:b9:ae:67:05:25:a9:
                    52:92:75:3a:a5:09:63:d7:6e:fe:33:13:a9:aa:78:
                    b5:e5:01:67:13:f8:51:56:39:9b:13:28:05:34:22:
                    23:5e:d8:f8:fb:12:fe:34:1d:87:c2:07:14:21:80:
                    f0:78:87:56:cc:5c:22:54:0c:9c:53:e7:12:c8:11:
                    08:e9:6b:2e:14:c9:7a:97:da:c3:1e:55:fd:e3:30:
                    fa:d3:c6:2b:2d:39:a2:c5:52:4c:67:6f:8d:86:fa:
                    dd:d1:d7:6e:1a:67:ae:39:12:51:e4:93:22:f8:1f:
                    b0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:27:04:E2:51:4B:89:C3:6E:B1:85:47:45:BF:E3:84:34:49:21:5A
            X509v3 Authority Key Identifier:
                keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:fe:48:c1:0e:75:eb:af:37:28:b0:41:e3:0f:b9:33:33:38:
         e7:fb:29:8a:f3:97:c6:3c:65:9e:64:97:66:29:52:c7:1a:59:
         98:2e:36:54:2e:d3:af:23:fa:06:e4:57:f9:f7:32:97:82:1e:
         0a:a8:b6:83:e2:fc:14:63:5f:ac:c6:c6:5e:cf:09:7b:c9:f7:
         d4:ef:ac:b4:6f:05:31:9b:bb:0e:c5:d8:74:47:18:b3:bd:f7:
         a9:ed:58:34:e8:82:17:a0:f1:c6:6a:c6:bc:30:7c:66:ad:ae:
         44:39:38:65:86:7a:36:27:d1:6a:d5:51:ef:a1:1c:25:43:9d:
         f1:56:6b:ae:d7:25:5c:fe:77:b0:6b:5e:a0:23:d8:93:56:c1:
         1e:b1:b0:39:ab:a6:c7:34:47:7e:a3:c1:64:ba:5f:c2:e3:ca:
         03:25:d2:27:aa:84:1a:f8:9b:87:ea:6b:d1:bb:51:58:2c:f6:
         76:5e:a1:fe:a7:5d:f7:cd:7c:07:25:71:c4:86:2f:cf:48:ec:
         a8:48:ff:57:ba:d9:f9:8b:63:73:de:df:1c:26:06:d2:5f:4b:
         d0:15:cd:05:33:3b:b4:05:ff:b2:22:7c:09:42:0b:7f:c9:77:
         f1:b7:3a:c1:96:8e:36:73:2d:68:f1:86:78:2e:0d:03:52:cd:
         e0:11:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:22:59 2025 by rpki-client