Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft
File:                     82EE517606C76902159E8886F875EF96B0327C72.mft (raw, json)
Hash identifier:          PdVRB3z+yx2dHtDJvV81kde/Q6UfS+BIr3JJ4rvhoKw=
Subject key identifier:   E3:4D:B4:BA:54:C3:E5:CD:71:14:03:3D:3C:E9:0B:02:01:D7:A9:CE
Authority key identifier: 82:EE:51:76:06:C7:69:02:15:9E:88:86:F8:75:EF:96:B0:32:7C:72
Certificate issuer:       /CN=82EE517606C76902159E8886F875EF96B0327C72
Certificate serial:       4C4286B22587306900B1B883D74F876E96C4E5A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft
Manifest number:          045D
Signing time:             Wed 23 Jul 2025 16:32:08 +0000
Manifest this update:     Wed 23 Jul 2025 16:27:08 +0000
Manifest next update:     Sat 26 Jul 2025 21:10:08 +0000
Files and hashes:         1: 3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa (hash: PvGUACm4ijzIPaxD0+PAB/B/JCQ56MWhw9C11hrAztM=)
                          2: 82EE517606C76902159E8886F875EF96B0327C72.crl (hash: 9ubiIqoSyMYHcXG0EiGN7iz4phBNmPpwHxzhQiGwhqA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.crl
                          rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 21:10:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:42:86:b2:25:87:30:69:00:b1:b8:83:d7:4f:87:6e:96:c4:e5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82EE517606C76902159E8886F875EF96B0327C72
        Validity
            Not Before: Jul 23 16:27:08 2025 GMT
            Not After : Jul 26 21:10:08 2025 GMT
        Subject: CN=E34DB4BA54C3E5CD7114033D3CE90B0201D7A9CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:7b:cf:64:74:2c:a0:c0:0d:be:c9:81:18:
                    a9:24:ce:da:2f:23:bf:2d:46:e9:f2:d9:3d:41:af:
                    0d:27:eb:cb:6d:01:f3:1b:64:25:f1:b1:af:97:1e:
                    0f:f0:de:c1:c2:f0:a6:17:c7:99:f6:a8:72:2d:b6:
                    89:8c:f9:3e:52:a6:72:8c:2a:61:b2:b1:5b:f1:36:
                    cf:7f:66:b2:00:9e:83:36:b3:b8:be:27:8c:fe:df:
                    37:88:3b:6d:9c:fb:62:62:80:67:b5:0f:74:a0:e1:
                    f4:9d:9c:ef:38:ee:09:1e:9e:e4:32:12:c2:6b:6c:
                    55:0e:67:a7:25:f8:ab:7c:e3:8f:77:5a:9b:5f:13:
                    dd:7e:cc:dc:c8:74:0b:8c:5f:79:35:12:f2:44:78:
                    c5:66:e7:15:72:48:6f:15:11:3a:ad:26:bb:be:82:
                    51:45:cb:c4:bf:59:16:77:02:ee:3f:4a:af:03:81:
                    c8:9e:f7:1f:27:80:61:1f:aa:f6:ce:09:1c:a6:62:
                    ba:3c:3e:a0:93:91:64:92:64:63:00:4a:ea:ed:4b:
                    97:89:60:7c:9a:fa:8f:66:03:3e:2d:a6:7f:cd:8a:
                    cc:b9:67:ea:34:a6:6f:f5:d7:08:30:53:33:dc:27:
                    c1:1d:15:05:a0:df:4a:92:fe:73:44:b8:0c:ca:08:
                    65:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4D:B4:BA:54:C3:E5:CD:71:14:03:3D:3C:E9:0B:02:01:D7:A9:CE
            X509v3 Authority Key Identifier:
                keyid:82:EE:51:76:06:C7:69:02:15:9E:88:86:F8:75:EF:96:B0:32:7C:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:be:ad:a4:8f:74:03:4d:66:67:90:71:80:be:30:dc:d9:49:
         ac:1b:cb:30:a3:04:e3:6e:9c:16:f6:e4:8a:00:c0:2c:1f:45:
         05:3e:6c:cf:2f:78:1c:46:3b:06:a4:53:c1:11:3b:ba:81:3b:
         7c:54:f4:bd:4a:66:de:ee:e3:19:7e:44:02:13:56:05:97:2d:
         ce:e8:30:1e:b5:a3:5b:62:53:0e:30:56:0d:26:15:15:1c:a5:
         39:45:4c:68:0b:90:6d:d6:08:21:e1:eb:4b:78:73:74:c9:d0:
         0d:66:c5:00:1b:03:6c:f3:c6:18:bb:36:be:5f:85:f2:79:8a:
         31:d9:ae:df:3c:b4:cc:f2:bb:b8:b6:e1:ca:fb:f7:27:33:e7:
         67:ca:3f:f0:bd:54:2c:5e:9c:db:7b:c6:89:a0:85:16:e3:17:
         54:cc:b0:5c:56:c6:a7:84:37:cd:b9:a6:8e:d9:4f:90:98:ea:
         3e:0c:8e:ac:fb:e4:76:3f:9f:a8:f1:d1:7d:40:93:6d:d9:e5:
         05:21:23:f9:09:d0:e5:59:67:71:f9:86:5c:a8:04:aa:b5:0d:
         3e:c7:bc:d9:9a:9e:fa:57:0c:19:83:43:aa:9a:58:5b:e2:6f:
         3c:a0:ba:23:16:c4:33:d7:cf:7b:11:f5:62:c1:24:a0:1f:df:
         20:af:25:f7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTEKGsiWHMGkAsbiD10+HbpbE5aUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJFRTUxNzYwNkM3NjkwMjE1OUU4ODg2Rjg3NUVGOTZC
MDMyN0M3MjAeFw0yNTA3MjMxNjI3MDhaFw0yNTA3MjYyMTEwMDhaMDMxMTAvBgNV
BAMTKEUzNERCNEJBNTRDM0U1Q0Q3MTE0MDMzRDNDRTkwQjAyMDFEN0E5Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7UnvPZHQsoMANvsmBGKkkztov
I78tRuny2T1Brw0n68ttAfMbZCXxsa+XHg/w3sHC8KYXx5n2qHIttomM+T5SpnKM
KmGysVvxNs9/ZrIAnoM2s7i+J4z+3zeIO22c+2JigGe1D3Sg4fSdnO847gkenuQy
EsJrbFUOZ6cl+Kt84493WptfE91+zNzIdAuMX3k1EvJEeMVm5xVySG8VETqtJru+
glFFy8S/WRZ3Au4/Sq8Dgcie9x8ngGEfqvbOCRymYro8PqCTkWSSZGMASurtS5eJ
YHya+o9mAz4tpn/Nisy5Z+o0pm/11wgwUzPcJ8EdFQWg30qS/nNEuAzKCGVXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4020ulTD5c1xFAM9POkLAgHXqc4wHwYDVR0j
BBgwFoAUgu5RdgbHaQIVnoiG+HXvlrAyfHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
YmM2NWI4Yy0zOWU5LTQ3OGQtODc0Mi1jNTM1YjYxYmFlNTkvMC84MkVFNTE3NjA2
Qzc2OTAyMTU5RTg4ODZGODc1RUY5NkIwMzI3QzcyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODJFRTUxNzYwNkM3NjkwMjE1OUU4ODg2Rjg3NUVGOTZCMDMy
N0M3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJjNjViOGMtMzllOS00NzhkLTg3
NDItYzUzNWI2MWJhZTU5LzAvODJFRTUxNzYwNkM3NjkwMjE1OUU4ODg2Rjg3NUVG
OTZCMDMyN0M3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJq+raSPdANNZmeQcYC+MNzZSawbyzCjBONu
nBb25IoAwCwfRQU+bM8veBxGOwakU8ERO7qBO3xU9L1KZt7u4xl+RAITVgWXLc7o
MB61o1tiUw4wVg0mFRUcpTlFTGgLkG3WCCHh60t4c3TJ0A1mxQAbA2zzxhi7Nr5f
hfJ5ijHZrt88tMzyu7i24cr79ycz52fKP/C9VCxenNt7xomghRbjF1TMsFxWxqeE
N825po7ZT5CY6j4Mjqz75HY/n6jx0X1Ak23Z5QUhI/kJ0OVZZ3H5hlyoBKq1DT7H
vNmanvpXDBmDQ6qaWFvibzyguiMWxDPXz3sR9WLBJKAf3yCvJfc=
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:55:36 2025 by rpki-client