Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
File:                     3E08DEC2AE0EB41653597023376671331769A43E.mft (raw, json)
Hash identifier:          LDIRsj9On6r6wAJlJgPCdQ1KpA/I8yeTLukviIgS6MM=
Subject key identifier:   79:E5:37:01:B8:D9:FF:28:09:3C:5E:D1:E4:F0:57:4A:3E:56:1B:0F
Authority key identifier: 3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E
Certificate issuer:       /CN=3E08DEC2AE0EB41653597023376671331769A43E
Certificate serial:       3354E2D68CA9E9BFBA0DB385D4671DE32C360AB5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
Manifest number:          5A
Signing time:             Sat 14 Jun 2025 04:41:30 +0000
Manifest this update:     Sat 14 Jun 2025 04:36:30 +0000
Manifest next update:     Tue 17 Jun 2025 12:09:30 +0000
Files and hashes:         1: 3E08DEC2AE0EB41653597023376671331769A43E.crl (hash: RYWpkHU2E0Uo06SLIQGD/vP8PC8iXWQUKSvd0F/QC6A=)
                          2: 3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (hash: 0OT1N5Rf9ROOY/Zt+fSYDh8hyIpfNlFvEpZdIjJrZrs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl
                          rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 12:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:54:e2:d6:8c:a9:e9:bf:ba:0d:b3:85:d4:67:1d:e3:2c:36:0a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E08DEC2AE0EB41653597023376671331769A43E
        Validity
            Not Before: Jun 14 04:36:30 2025 GMT
            Not After : Jun 17 12:09:30 2025 GMT
        Subject: CN=79E53701B8D9FF28093C5ED1E4F0574A3E561B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:80:62:4e:2c:20:17:82:f5:b9:3b:25:58:67:
                    e6:69:a8:ff:25:f5:0c:df:9d:64:08:cc:be:79:f9:
                    79:f7:b3:53:cc:cf:3a:75:49:54:0b:2b:ba:b8:37:
                    8e:fc:3d:18:88:0a:48:dc:00:98:2c:34:96:7b:5b:
                    16:4b:1e:3f:2c:4f:15:9b:14:36:37:42:7d:6c:a9:
                    d0:55:9b:bb:4d:e9:d7:72:cb:3b:bf:c0:0c:a2:66:
                    1a:45:e2:67:0d:f2:5d:6c:57:88:8a:e7:36:13:16:
                    f0:a0:44:3e:d2:49:8d:17:20:2d:b8:34:b9:54:6f:
                    41:da:92:34:95:51:57:01:ed:af:2e:2b:37:77:a2:
                    28:1e:da:35:42:97:3c:62:47:27:b4:6f:7b:d0:1d:
                    52:1b:fb:3a:e4:bd:50:0c:91:a2:ce:0b:e5:0a:85:
                    13:d3:8a:23:c6:3b:2b:65:41:48:0f:06:17:27:6c:
                    57:4f:b6:4b:1b:65:cb:db:f6:f0:71:61:17:c3:2b:
                    62:86:4c:ed:8b:b1:65:4c:55:5e:c7:c7:73:cf:9c:
                    32:16:4a:87:07:cb:9c:67:ed:a0:14:cc:5f:d7:f3:
                    06:7f:67:40:25:c3:be:84:8c:71:1f:61:55:60:eb:
                    6b:be:e2:f2:08:aa:3b:2b:c6:11:46:9b:f6:82:dd:
                    84:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E5:37:01:B8:D9:FF:28:09:3C:5E:D1:E4:F0:57:4A:3E:56:1B:0F
            X509v3 Authority Key Identifier:
                keyid:3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:06:f8:c7:a2:3f:73:ef:1c:e2:79:f8:c5:1c:20:bc:b6:79:
         0d:76:88:e1:36:23:69:63:c2:b3:64:96:df:58:44:46:86:50:
         65:e6:31:f7:b2:e9:50:f4:af:3e:9c:69:df:a2:f1:39:21:44:
         a5:6d:9e:2e:b8:a0:0d:41:e2:76:a9:cf:3e:67:e3:21:be:70:
         88:58:d4:cc:96:df:65:34:dc:91:e9:95:f9:2d:82:c5:53:05:
         33:b2:5c:d6:3e:2f:10:8a:1c:7d:6b:68:02:a3:06:d5:55:bc:
         a9:c0:a6:c0:9d:9a:01:d0:d6:4c:aa:26:2e:96:fe:19:a0:d9:
         31:7f:0a:21:1a:f4:9d:0e:1c:9e:6a:42:02:03:4e:ba:c8:4e:
         59:98:dd:30:a6:78:f5:a2:8f:7b:0b:38:8d:d4:cc:f3:eb:62:
         ce:8f:84:24:4a:0c:0e:f9:14:78:97:d5:da:4e:8a:9f:32:9b:
         dd:50:74:5a:48:f9:b6:be:5a:5b:7f:c5:2b:05:b3:57:1c:98:
         93:73:06:c4:80:3c:ff:8b:df:e8:df:9f:b1:60:40:94:60:98:
         95:ca:a6:0f:9d:af:49:77:f4:d4:55:d8:a4:8c:6c:b7:ad:20:
         07:b0:9e:35:74:86:ed:e4:00:ba:b2:ce:af:a4:4b:4c:10:f2:
         b3:06:f3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:17:33 2025 by rpki-client