Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft
File:                     EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft (raw, json)
Hash identifier:          aVtL87LieADL6nglYXSYhsrhtRFq7hcttXVNB1vwKRM=
Subject key identifier:   5D:3A:5F:2F:E0:0C:04:AB:58:32:7C:2C:ED:4A:5E:DE:40:B0:1D:E7
Authority key identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17
Certificate issuer:       /CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17
Certificate serial:       49123E17DC4FCFD4D51D3D3840AF3FD11746652A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft
Manifest number:          8F
Signing time:             Fri 25 Apr 2025 15:41:46 +0000
Manifest this update:     Fri 25 Apr 2025 15:36:46 +0000
Manifest next update:     Tue 29 Apr 2025 01:59:46 +0000
Files and hashes:         1: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl (hash: KQPmiaqYxKmAWl4x5Aa2ppgYq+woxdz2NjN3TFFLjfo=)
                          2: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: n01B0+QX3ZNWpX+DEnQCCVM6NRztIEbwDneGS8PBh+8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl
                          rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 01:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:12:3e:17:dc:4f:cf:d4:d5:1d:3d:38:40:af:3f:d1:17:46:65:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17
        Validity
            Not Before: Apr 25 15:36:46 2025 GMT
            Not After : Apr 29 01:59:46 2025 GMT
        Subject: CN=5D3A5F2FE00C04AB58327C2CED4A5EDE40B01DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:1f:5c:97:3b:f9:50:ba:d5:ed:2d:0c:9a:
                    30:c8:51:48:a5:32:ed:de:d8:ad:72:08:80:2a:d1:
                    ef:99:a0:47:6b:f7:05:af:cc:34:46:d0:c7:3e:15:
                    da:23:84:4c:81:6d:a6:96:d9:7f:f4:0b:7e:2f:a3:
                    aa:45:c3:58:9d:eb:b9:7b:c2:3e:25:83:4f:7c:83:
                    3a:de:5e:d1:18:72:b0:5d:40:c2:7f:c2:f6:cb:fb:
                    54:1d:da:3f:34:c8:f4:91:8e:68:74:47:2c:1a:24:
                    8a:99:f1:7c:42:56:1a:ef:bc:43:ac:ec:ca:bf:ee:
                    e9:3a:19:d6:8d:57:ae:7a:a7:b0:dd:25:51:5e:bc:
                    73:21:7b:cd:cc:27:73:28:4c:47:fb:95:77:ed:f7:
                    94:a2:bd:20:b6:53:37:fc:98:bf:5f:a3:60:3d:92:
                    fd:bd:1f:8a:f5:a6:fb:5e:7d:74:50:04:c3:50:fc:
                    29:51:95:fc:ba:f4:da:3b:90:78:cb:7f:51:56:85:
                    db:a1:a9:49:91:a7:d1:9a:80:68:5d:5f:5b:58:cd:
                    20:40:ac:d6:62:00:e4:1f:2a:d8:6e:4b:bd:36:96:
                    9a:ac:9d:1a:8b:62:9c:63:e6:bb:08:3f:19:eb:af:
                    89:52:b9:d2:8b:8f:da:0e:2d:ca:fd:0f:6b:9c:1d:
                    3b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3A:5F:2F:E0:0C:04:AB:58:32:7C:2C:ED:4A:5E:DE:40:B0:1D:E7
            X509v3 Authority Key Identifier:
                keyid:EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c1:4e:fd:25:5d:19:1f:3d:8c:a6:2f:b5:c5:9e:1e:15:31:
         06:52:c7:b2:5a:f0:ca:3c:c9:b1:da:6e:98:d5:7a:d2:28:a6:
         14:d0:ba:ec:34:02:39:aa:66:34:af:7d:50:a8:90:8f:77:95:
         74:86:d4:3b:93:a4:47:ca:77:bb:be:4f:ea:30:7a:76:93:92:
         c7:79:ba:5e:1d:4d:7f:3f:06:b6:2f:b6:a3:15:0e:82:e3:7f:
         d3:33:8e:53:46:83:14:82:e6:a9:b8:cb:fe:02:27:9b:9b:7b:
         c4:59:63:35:9a:f3:07:b7:8d:08:2b:1a:46:27:4a:07:24:e1:
         7c:c7:8c:e1:8f:4c:d3:e9:3a:7e:71:b4:d6:5b:9b:96:67:1e:
         82:b3:7d:2b:5b:43:ec:e8:1f:68:b3:ac:9c:cd:33:d8:ac:c5:
         e6:b3:e8:27:a7:58:89:4e:d7:96:bd:fc:33:1a:4a:4e:18:62:
         56:2d:71:29:90:10:bf:48:85:f7:42:8f:86:47:ae:83:5e:bd:
         d1:2c:17:89:74:35:49:d7:e2:b6:f0:42:5a:dc:21:04:04:0f:
         41:42:57:a2:b7:2b:9c:75:fb:a8:1c:aa:e7:99:d4:7d:c4:65:
         8e:4e:09:71:08:a6:5b:bd:fa:27:40:51:aa:e5:f3:0d:cc:35:
         f3:3e:d6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:17:41 2025 by rpki-client