Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft
File:                     EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json)
Hash identifier:          IzMUPpKorTJyETlfVIovRhaGK6+jOV2Ca2x1WmG8Mxw=
Subject key identifier:   20:32:D8:81:71:2A:27:F3:2C:DC:3E:0F:B2:71:CE:76:45:82:57:95
Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68
Certificate issuer:       /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68
Certificate serial:       41D0078BC779BCD6D2C2D8E995015F0F73B7AE99
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft
Manifest number:          01AC
Signing time:             Sun 15 Jun 2025 00:20:44 +0000
Manifest this update:     Sun 15 Jun 2025 00:15:44 +0000
Manifest next update:     Wed 18 Jun 2025 04:38:44 +0000
Files and hashes:         1: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: VkkcM1AqEwXsS/hQawzqHg+YyvXNA8/GMbHDz4dyi9o=)
                          2: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: 5Yump91QHW5zU2CF5tUMZVBWwcQEYdsaEXczoTEugdI=)
                          3: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: X0XLAhvGZfiRvCVCUyNsPxOOwPw6McDgsETmSQQOHuM=)
                          4: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: nU+kB+NyHUbVoehF82OX5jrQgK7DFWejShKduq8TLqc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl
                          rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 04:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d0:07:8b:c7:79:bc:d6:d2:c2:d8:e9:95:01:5f:0f:73:b7:ae:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68
        Validity
            Not Before: Jun 15 00:15:44 2025 GMT
            Not After : Jun 18 04:38:44 2025 GMT
        Subject: CN=2032D881712A27F32CDC3E0FB271CE7645825795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d1:fa:8b:e7:90:a7:e1:e1:cb:7d:84:56:37:
                    e7:f2:b4:61:cf:40:37:cb:e2:e6:ad:aa:da:5b:fd:
                    bb:e5:6c:f5:2b:9e:fa:1e:fd:36:31:b8:03:8e:90:
                    33:1c:a7:7f:29:16:84:46:1c:be:fc:fe:ba:1d:93:
                    a2:a8:3f:82:34:a5:42:68:04:0b:a5:de:7d:81:0d:
                    61:d6:43:a0:e2:9a:8f:23:81:f6:bb:34:fc:d8:2f:
                    c6:cb:8c:b6:38:d3:35:0c:aa:dc:3a:77:66:21:56:
                    c5:8e:b2:a1:d1:01:8a:07:aa:d0:2d:17:41:0b:a0:
                    b5:ac:43:82:2e:22:cc:bd:c9:2b:34:c0:17:18:a7:
                    ea:f7:c2:38:45:52:cc:a5:a9:12:7e:62:f0:9c:33:
                    b3:a1:38:c0:e9:66:22:da:74:fc:c9:20:c0:91:28:
                    24:43:23:c9:d1:70:d8:91:e5:6a:b6:27:bf:c9:b5:
                    ab:fc:0d:45:64:66:87:1e:73:9c:e0:49:cc:9e:24:
                    0a:61:4a:22:6d:60:9c:3a:ce:d6:25:0d:96:c7:50:
                    fb:f4:c7:31:44:63:66:6f:f4:be:b8:9c:75:1a:bd:
                    ba:d2:e1:84:7f:92:60:19:45:29:d5:69:a2:af:29:
                    80:c5:1a:48:89:b4:7e:b9:98:89:4b:3a:db:5a:d7:
                    9a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:32:D8:81:71:2A:27:F3:2C:DC:3E:0F:B2:71:CE:76:45:82:57:95
            X509v3 Authority Key Identifier:
                keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:38:92:a3:a4:bc:80:8f:6e:ff:cc:d8:34:b9:72:70:a4:ea:
         24:de:3d:11:ae:4e:b3:60:06:a6:77:06:70:27:24:03:d8:17:
         c2:2c:b5:14:c0:f2:0e:c1:57:05:fe:2e:6d:0d:05:44:7c:59:
         92:70:6e:83:2a:9f:a2:75:7b:47:ff:e7:41:0f:a5:a0:bc:47:
         7d:9d:59:2d:44:1a:31:03:e8:dc:10:05:84:a6:11:f9:3f:87:
         8f:0f:19:cf:12:b5:c4:f1:5f:1f:c5:12:3f:8d:36:ca:1a:b0:
         66:e9:da:f5:a9:be:c6:33:5b:e4:b4:33:61:ae:31:7f:ef:10:
         ab:58:aa:21:47:cf:19:05:0a:b9:79:66:9d:62:36:52:73:73:
         1a:bb:e8:ea:87:a2:d7:f2:4b:61:df:6f:7b:6a:6d:57:6b:fa:
         e4:1a:1d:51:ac:5d:07:be:57:22:e8:a7:19:0c:1b:7d:ed:25:
         c2:c2:04:d6:62:25:8b:65:8d:19:6c:94:5c:fb:83:51:d9:f4:
         5d:71:f3:97:7c:60:22:43:95:ad:38:3a:83:44:f7:6b:f9:6a:
         0f:2d:e5:6e:ef:76:d1:3f:3a:67:ff:d4:72:bb:83:1e:0e:4b:
         d9:4b:ee:14:fb:1b:7e:66:81:3c:38:0a:89:6f:a1:9e:4a:b6:
         a2:81:a1:c2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQdAHi8d5vNbSwtjplQFfD3O3rpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVF
N0U0NUQ2ODAeFw0yNTA2MTUwMDE1NDRaFw0yNTA2MTgwNDM4NDRaMDMxMTAvBgNV
BAMTKDIwMzJEODgxNzEyQTI3RjMyQ0RDM0UwRkIyNzFDRTc2NDU4MjU3OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL0fqL55Cn4eHLfYRWN+fytGHP
QDfL4uatqtpb/bvlbPUrnvoe/TYxuAOOkDMcp38pFoRGHL78/rodk6KoP4I0pUJo
BAul3n2BDWHWQ6Dimo8jgfa7NPzYL8bLjLY40zUMqtw6d2YhVsWOsqHRAYoHqtAt
F0ELoLWsQ4IuIsy9ySs0wBcYp+r3wjhFUsylqRJ+YvCcM7OhOMDpZiLadPzJIMCR
KCRDI8nRcNiR5Wq2J7/Jtav8DUVkZocec5zgScyeJAphSiJtYJw6ztYlDZbHUPv0
xzFEY2Zv9L64nHUavbrS4YR/kmAZRSnVaaKvKYDFGkiJtH65mIlLOtta15pZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIDLYgXEqJ/Ms3D4PsnHOdkWCV5UwHwYDVR0j
BBgwFoAU7ixS975SoOtpWlSaQucB7ufkXWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YWE0ODlhNi01NDg1LTQ4N2YtYjVkZC04ZjRlZGViNDZiY2IvMC9FRTJDNTJGN0JF
NTJBMEVCNjk1QTU0OUE0MkU3MDFFRUU3RTQ1RDY4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVFN0U0
NUQ2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1
ZGQtOGY0ZWRlYjQ2YmNiLzAvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAx
RUVFN0U0NUQ2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE84kqOkvICPbv/M2DS5cnCk6iTePRGuTrNg
BqZ3BnAnJAPYF8IstRTA8g7BVwX+Lm0NBUR8WZJwboMqn6J1e0f/50EPpaC8R32d
WS1EGjED6NwQBYSmEfk/h48PGc8StcTxXx/FEj+NNsoasGbp2vWpvsYzW+S0M2Gu
MX/vEKtYqiFHzxkFCrl5Zp1iNlJzcxq76OqHotfyS2Hfb3tqbVdr+uQaHVGsXQe+
VyLopxkMG33tJcLCBNZiJYtljRlslFz7g1HZ9F1x85d8YCJDla04OoNE92v5ag8t
5W7vdtE/Omf/1HK7gx4OS9lL7hT7G35mgTw4ColvoZ5KtqKBocI=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:37:03 2025 by rpki-client