Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft
File:                     7FAD2077691F807236683910594F23BA68280CD9.mft (raw, json)
Hash identifier:          GF+Qtdb320PLBhjXpg6S6F4byi82Hkrt8X0uh+JLTFw=
Subject key identifier:   D5:65:47:A1:D1:57:EC:50:E3:02:76:03:9E:47:00:1D:38:75:B3:01
Authority key identifier: 7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9
Certificate issuer:       /CN=7FAD2077691F807236683910594F23BA68280CD9
Certificate serial:       5ED8287D3387F78142B624377DC2F3EECFDC1107
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft
Manifest number:          04CA
Signing time:             Wed 30 Apr 2025 08:01:53 +0000
Manifest this update:     Wed 30 Apr 2025 07:56:53 +0000
Manifest next update:     Sat 03 May 2025 15:05:53 +0000
Files and hashes:         1: 7FAD2077691F807236683910594F23BA68280CD9.crl (hash: yomBTY66sC8b1c3jl0+AKZ5wMlj+ZNHq+ptIzA+p9gU=)
                          2: 3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (hash: BPKyUKqegcQh7lOAU+lF0QRMkfi7PI2y8bbVLrRKJ70=)
                          3: 3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa (hash: STCIBkV4O4sw+ena+bAZNkSQED0zf2lw3cxzw1UUOzE=)
                          4: 323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa (hash: +uyBDm0MxakCRL3LyrZfACr0/yZS3EtEWF40Oj0ezd8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl
                          rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d8:28:7d:33:87:f7:81:42:b6:24:37:7d:c2:f3:ee:cf:dc:11:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FAD2077691F807236683910594F23BA68280CD9
        Validity
            Not Before: Apr 30 07:56:53 2025 GMT
            Not After : May  3 15:05:53 2025 GMT
        Subject: CN=D56547A1D157EC50E30276039E47001D3875B301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:66:84:aa:d9:79:e6:ca:01:b9:c2:91:a4:dc:
                    94:bc:e2:5c:f1:de:32:c6:f4:c4:a3:fd:ef:ca:9e:
                    c1:73:ee:ff:13:c9:3e:53:8c:15:78:d0:db:b0:a8:
                    70:fa:7d:31:86:51:bf:35:f0:29:f7:b9:0a:aa:c7:
                    e9:c5:ee:d6:5d:e9:db:13:17:61:8f:2f:14:e4:92:
                    96:81:7c:0d:8f:57:ba:3c:19:1e:b4:26:93:90:08:
                    ab:f1:ae:68:39:d4:5a:be:e5:23:d0:ef:c6:c0:fe:
                    26:66:9e:7a:c1:9c:6c:8d:39:9a:ae:c4:7e:e3:d4:
                    82:a7:81:31:8f:35:55:4b:27:08:a6:d1:0b:9d:e3:
                    87:45:6b:ae:a8:c7:96:98:f3:e3:ee:69:d0:0c:9f:
                    74:af:26:24:6f:66:f5:4f:e5:92:9e:c0:7b:46:b3:
                    89:09:41:b9:27:d9:23:b6:9f:db:d2:ed:21:07:13:
                    bb:fc:fd:f7:04:05:06:71:cb:4a:5d:a9:bf:69:fb:
                    c1:23:53:ad:0b:3d:42:47:fd:0a:3b:6a:ca:18:f4:
                    af:b6:80:ac:d0:28:d1:72:a3:ac:05:ef:74:d8:0b:
                    40:bb:2c:ef:ec:40:63:a1:90:e0:4e:a2:f8:15:ee:
                    1f:84:7f:e1:7f:40:be:9e:c6:20:f6:d3:7a:11:5d:
                    85:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:65:47:A1:D1:57:EC:50:E3:02:76:03:9E:47:00:1D:38:75:B3:01
            X509v3 Authority Key Identifier:
                keyid:7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:98:bf:f3:25:a4:9a:ef:00:e2:fc:9a:14:e0:2c:5a:7f:97:
         c1:3c:11:1c:81:24:3a:d4:6a:9f:90:b1:ef:2b:e6:d4:26:d4:
         ea:bc:f9:d9:2a:44:18:46:0a:59:6c:89:08:61:36:5a:38:51:
         55:d5:ab:b1:55:76:cf:ca:40:56:e6:99:70:0f:58:19:7d:a3:
         9c:10:e9:1e:2a:a1:37:ad:ca:f0:b1:83:92:f5:2a:b7:5f:90:
         5b:f8:fe:41:1c:6b:ee:9e:2c:fa:25:2b:1e:7b:0b:24:29:fa:
         f7:8d:8f:1b:bd:46:39:a9:dc:d5:92:ec:bc:96:74:96:7b:ee:
         1c:ec:7d:b3:3c:f5:c7:96:2f:73:3f:23:26:67:9e:a1:57:9f:
         7f:73:45:75:f1:7f:e6:7b:be:60:47:cb:2b:9f:29:7c:44:11:
         d3:fa:94:62:eb:9a:aa:43:85:12:cf:41:9a:cb:55:03:05:5e:
         ac:c2:c6:65:bb:06:63:c9:a5:5e:ec:a0:b9:78:1b:16:c6:31:
         52:2d:db:c0:80:8e:7c:ed:be:02:4b:2b:82:42:37:9a:2b:11:
         24:c9:55:f8:68:78:dd:35:ab:f5:59:18:65:ad:fa:ca:82:01:
         ff:41:88:41:96:7c:f9:ee:08:7e:86:dd:69:7d:cc:7f:62:d3:
         4e:b3:8a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:00:51 2025 by rpki-client