Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
File:                     735D87BA86773AC70137CF53116358A1F3B19766.mft (raw, json)
Hash identifier:          dF+Wtp3z+897N9g+ThDPppYXsV/Hn5eEiJGYWDQTv3I=
Subject key identifier:   6C:B1:C0:CB:8E:3F:62:5B:AF:E4:64:5A:0E:9F:26:F1:16:59:D0:F1
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       0B45CDD784D475DF6ADEE6DE14765FFDDCC469A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
Manifest number:          01F0
Signing time:             Sun 06 Apr 2025 15:11:02 +0000
Manifest this update:     Sun 06 Apr 2025 15:06:02 +0000
Manifest next update:     Thu 10 Apr 2025 00:55:02 +0000
Files and hashes:         1: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: 9AgM/Fc/trfBx80xVB31YmDWKQHoLWDjrj5feQPz0y4=)
                          2: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: zvgnMY8wPSXc3mzVu3a1CGAGczTfjSmy5MA1FfiX5lU=)
                          3: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: ckyPU+dOc2DPyymdMy/gds0ZvQT1LlPymVaytADGQCs=)
                          4: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: OwGVX4uDsFx+BfSDv1qnIHIR7bY2X0pI7Wmkb/eOX/M=)
                          5: 735D87BA86773AC70137CF53116358A1F3B19766.crl (hash: 3LAJqW34OJe8gtG2ZuuSelyNOUuRa1Jn9Yc6Ub4JdXg=)
                          6: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: MzKgSqALIjMd9pw7UwySp3twGwQgGA4Pp2Zp+VNAmFs=)
                          7: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: TRkbIk0+FrV+K3gHGX1NOEP/Zf828r6e2rZtJ22y8NM=)
                          8: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: cotwBZV4fpeK93CI+xCpGvEhPESCOQnDsG0stYfaSUg=)
                          9: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: jq0e805LfMnkdfWLKacSRG7Ij32XtfUPAgDbV/aAs+8=)
                          10: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: eE3XQXL5yxYICxpW4xLR89CNbidQvABOBnQ5o39erVY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 23:13:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:45:cd:d7:84:d4:75:df:6a:de:e6:de:14:76:5f:fd:dc:c4:69:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Apr  6 15:06:02 2025 GMT
            Not After : Apr 10 00:55:02 2025 GMT
        Subject: CN=6CB1C0CB8E3F625BAFE4645A0E9F26F11659D0F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7f:53:c1:07:3b:52:88:82:d1:cb:9f:43:37:
                    5e:b3:fe:93:bc:7e:3f:71:f3:5d:5f:67:5b:95:26:
                    cc:c9:1d:5e:bb:65:4a:ab:3f:70:0a:e3:f3:d0:f0:
                    41:54:a1:46:0a:72:f0:a1:ec:df:37:e6:d5:47:09:
                    8f:5e:74:f2:62:bc:ff:bd:e1:bf:36:f6:34:21:47:
                    3f:bc:af:1f:fc:0d:5d:3e:71:d3:00:50:2e:82:31:
                    d1:f9:0f:bb:94:fb:49:63:a4:c1:38:02:f6:57:17:
                    f7:73:36:7a:e1:95:31:5e:f0:d5:81:a6:b8:e5:4c:
                    d2:c7:c6:42:61:87:af:c5:f9:67:7f:3f:e9:89:42:
                    ff:f8:ad:ea:7a:1a:48:8a:bf:5e:e2:8c:6d:18:a2:
                    17:04:51:a2:81:ee:cb:e0:96:17:75:bb:ce:fe:ff:
                    9a:cc:68:ec:08:c5:4a:67:17:2f:e1:5d:a2:12:70:
                    ef:d2:73:48:e7:09:6f:b2:26:7a:af:ed:c6:cf:8a:
                    3c:4b:e8:65:69:d1:57:f1:c8:29:d4:b9:b9:e1:ff:
                    b1:30:7b:d3:f9:eb:7c:01:a9:f6:4b:17:bc:2d:28:
                    d1:26:18:21:3e:0b:6f:48:20:34:51:d8:2f:57:17:
                    f3:39:92:8c:dd:ca:be:59:3f:91:1a:3d:75:90:52:
                    2a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B1:C0:CB:8E:3F:62:5B:AF:E4:64:5A:0E:9F:26:F1:16:59:D0:F1
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ab:91:87:95:fc:fb:4d:8b:d8:22:bd:21:cf:15:e2:a8:b9:
         60:75:92:fb:96:c9:73:bd:6e:29:87:75:e3:26:c7:24:1d:28:
         eb:90:0f:2c:d6:5a:96:2b:08:3f:4c:64:86:1b:73:31:81:d1:
         8b:2a:39:54:58:12:2a:aa:5c:af:5b:79:2b:8f:76:fd:3a:fb:
         61:85:ee:f5:22:69:03:61:3a:59:02:5a:5c:26:4d:1d:28:f5:
         b3:6d:ad:d4:ae:89:1f:3e:64:75:84:e6:24:27:fb:b2:18:b3:
         90:61:f2:e2:b9:84:e4:bc:24:f8:de:fd:f4:5e:d0:f9:99:19:
         38:80:a8:c3:f3:70:13:4e:30:57:f7:f0:bb:8d:aa:12:54:e3:
         1c:f1:86:5d:3d:89:d8:d0:17:bd:db:84:2e:c0:54:67:a8:00:
         9e:27:af:c9:98:40:ad:e1:b4:f7:26:80:01:47:7f:59:28:ff:
         b0:8b:71:8e:8a:a4:d0:4e:57:87:9b:ed:25:09:22:2a:a9:8d:
         32:98:81:b6:70:c0:bd:4d:d3:90:64:b0:6d:23:35:2e:ba:d9:
         08:d1:a7:98:1a:c0:6f:b5:b7:00:45:bb:d0:40:e6:28:17:44:
         16:a1:c3:56:59:15:59:ab:68:ed:f6:61:17:c5:ba:0f:01:2b:
         44:18:36:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:32:14 2025 by rpki-client