Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
File:                     5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft (raw, json)
Hash identifier:          u18kWRjdGD3u7rg2IKZEgjE4bo+4PpEN2mqJc0pHfLE=
Subject key identifier:   F1:5E:B6:77:68:CE:85:3E:A1:80:2B:17:D7:0D:47:3E:BB:59:48:BA
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       604543C4D027B1CEDD8A0C79E527DCCCE1464D5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
Manifest number:          04DF
Signing time:             Tue 17 Jun 2025 09:10:01 +0000
Manifest this update:     Tue 17 Jun 2025 09:05:01 +0000
Manifest next update:     Fri 20 Jun 2025 20:41:01 +0000
Files and hashes:         1: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: tUFNikuzZ5Dxu83zUyF9psB1ZAXrbnO+JVBeZVWaO4g=)
                          2: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: dTEDIPJlLGDlRHB30/PzLB90DYFKiiQue74QgGKHEVI=)
                          3: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl (hash: xYNJk/r8BKSL24OQ3UKJmPOK2ode5kBFmtN2EFdqrM8=)
                          4: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: 9KZ9F45elzM13kws/U0IoAzbbI/YdymyAIpoe5+fMUI=)
                          5: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: ghDv+E88LbsHp+yiOmZsjAqDuH4NzWOqybkoMe5BmV8=)
                          6: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: orPkEwdvzbgAdBqwJx5fyoqFz6nU1AjYY7pCrQmrMAU=)
                          7: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: mp213bICEXwH+LqnHma8nvPV6BFgfv4aiHAHQpn9yQs=)
                          8: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: r/svlrZcSr5sJUDVP99x6FJY548aywPcFlNv37DJt2Y=)
                          9: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: oriUzK7mgQPCjaTV1H4IccgCRtyIm4Y5jf+70OM+bhw=)
                          10: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: qGI/gZ+/LHiM5HYO/jSSY227nu7Rlo4VufnCOUnRtK4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:45:43:c4:d0:27:b1:ce:dd:8a:0c:79:e5:27:dc:cc:e1:46:4d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Jun 17 09:05:01 2025 GMT
            Not After : Jun 20 20:41:01 2025 GMT
        Subject: CN=F15EB67768CE853EA1802B17D70D473EBB5948BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:38:16:0e:e3:38:4c:c2:58:82:ac:08:c9:4a:
                    66:a1:31:95:e7:e5:ea:41:0d:bf:1d:c9:c5:93:a4:
                    48:6b:51:ee:95:cf:70:74:57:74:79:86:ea:ac:0b:
                    b6:fb:7e:9f:28:05:65:9c:34:ac:8e:8b:0c:03:79:
                    49:1e:93:e6:60:d7:25:f4:37:84:81:a1:51:a0:1b:
                    8e:fe:e7:23:af:a6:7c:df:b9:ff:6c:81:54:01:41:
                    f6:96:59:db:42:f4:8a:be:14:34:84:b6:77:ad:74:
                    e8:a1:d2:61:c1:7d:40:8b:78:da:c3:8b:8f:7d:46:
                    14:2d:87:c7:35:f0:b4:f1:f6:29:05:51:ba:bc:df:
                    52:04:12:a1:46:60:49:df:75:c8:20:21:54:0e:26:
                    10:dd:e9:1b:bd:3c:b6:30:97:ee:ff:ad:c0:ae:77:
                    84:b2:b3:b7:10:b4:f4:ca:c5:00:67:30:1b:61:d0:
                    97:08:15:97:e2:84:8b:2d:66:2b:1a:2b:b9:0d:18:
                    30:28:d7:c3:6c:ba:b9:f0:3f:53:fb:d6:65:71:de:
                    46:3e:95:07:08:00:13:e0:82:f9:8b:24:04:60:3d:
                    8b:e7:df:e6:b1:30:dc:37:d4:d9:12:cb:16:ab:00:
                    77:03:28:92:ac:fe:b0:22:79:f2:98:7f:cc:1a:9a:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5E:B6:77:68:CE:85:3E:A1:80:2B:17:D7:0D:47:3E:BB:59:48:BA
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:0f:dd:a5:05:85:0b:e3:21:bc:d8:f3:5d:73:9b:72:d0:c4:
         87:b0:c3:f4:ce:cd:11:5a:20:52:f4:14:35:4d:7f:64:a7:d1:
         81:93:79:0b:6c:d9:64:0d:e3:e9:8a:8b:c0:36:ac:56:a7:c8:
         cc:fe:2e:95:40:e7:5c:26:23:e9:dd:2e:cf:5a:40:81:81:9e:
         20:18:1f:e6:b5:08:21:7b:81:b0:b1:69:4a:12:a9:87:0f:8e:
         8a:1c:68:bb:19:a4:fd:63:88:ae:b0:4e:35:34:af:ed:ce:69:
         81:55:64:bd:88:72:e9:ce:28:16:e9:bf:49:f3:3c:b9:f5:3e:
         be:33:5e:02:b3:df:b3:0e:42:e1:27:6b:84:e7:55:8b:33:9a:
         0c:65:29:13:ab:29:c1:99:93:f4:a9:24:5b:e4:42:d0:87:d9:
         af:b0:90:06:ca:d3:27:11:8d:88:bb:31:28:3f:53:16:c8:05:
         3b:55:aa:14:24:8f:3d:ef:19:f1:85:0e:22:fc:0f:3d:e2:2c:
         4f:9c:3f:ee:91:c3:87:1d:94:f6:7d:dc:6b:cd:16:35:ba:86:
         0d:0d:50:6e:4c:35:a3:6f:19:da:d7:ea:5b:cf:f4:61:51:49:
         e3:93:6f:6f:7e:6b:d6:f3:03:41:57:c1:b8:f1:3e:c0:7d:20:
         7e:19:65:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:32:19 2025 by rpki-client