Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft
File:                     CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft (raw, json)
Hash identifier:          Hbs2IwGU6lF8S+gMi9dv3gSpdNtkYM79zjdt/1k5oO8=
Subject key identifier:   28:0A:0C:0F:5A:5E:72:CB:31:F1:02:41:94:BE:D4:53:58:F5:CB:D4
Authority key identifier: CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B
Certificate issuer:       /CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B
Certificate serial:       09A96A3AC83745CD654A8006E7D98BD41974E247
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft
Manifest number:          04F4
Signing time:             Mon 21 Jul 2025 14:31:48 +0000
Manifest this update:     Mon 21 Jul 2025 14:26:48 +0000
Manifest next update:     Thu 24 Jul 2025 15:02:48 +0000
Files and hashes:         1: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: bKZ9Kr5vGdouh2ZI4N+bxQ7MC1/jdvf7JVbCsDM4qhY=)
                          2: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl (hash: fWVraIK0peV5pfUxKou+LybdsOxdUrTK7o8XFGEfc8Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl
                          rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 15:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a9:6a:3a:c8:37:45:cd:65:4a:80:06:e7:d9:8b:d4:19:74:e2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B
        Validity
            Not Before: Jul 21 14:26:48 2025 GMT
            Not After : Jul 24 15:02:48 2025 GMT
        Subject: CN=280A0C0F5A5E72CB31F1024194BED45358F5CBD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:9b:64:8f:d8:94:8a:c7:3b:85:26:29:32:
                    50:7b:f3:0b:72:9a:de:63:b1:33:b4:37:70:4f:8c:
                    8b:56:56:6b:57:9e:18:f3:fa:b2:1a:9b:6c:f3:79:
                    58:d2:9e:6f:3f:74:98:3f:d4:7d:2d:95:75:6f:30:
                    16:4a:d2:a5:c2:e7:a5:8a:cc:d1:f2:67:d1:5b:85:
                    dc:06:32:5e:10:4a:cc:3f:e2:ea:73:b4:75:4d:85:
                    95:8b:f0:98:46:3d:e8:d9:2f:3d:a7:7b:02:c0:50:
                    c6:c6:1c:eb:b3:34:22:36:d6:9d:bd:17:47:25:43:
                    b7:79:3a:ad:cf:d3:d3:73:35:91:45:5f:71:d7:32:
                    54:b1:92:eb:4c:c5:74:60:dc:7d:c7:64:4c:47:85:
                    b0:1d:eb:43:9c:1a:93:9e:14:ac:6d:d5:a2:33:38:
                    2a:33:85:91:10:34:6f:8f:25:37:7e:0e:44:46:d6:
                    4f:a2:08:70:0f:47:69:88:e0:e3:55:4c:5c:51:4a:
                    1a:e8:ae:3e:53:7e:59:a4:e8:ad:31:88:cf:d6:0f:
                    8c:14:59:a7:57:c3:dc:3a:64:10:81:94:65:77:ee:
                    bb:c5:1b:c6:c5:7d:d7:e2:83:27:42:1a:ad:41:d9:
                    70:1d:ee:45:46:9f:93:40:25:e6:59:dc:60:2a:44:
                    63:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0A:0C:0F:5A:5E:72:CB:31:F1:02:41:94:BE:D4:53:58:F5:CB:D4
            X509v3 Authority Key Identifier:
                keyid:CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:62:86:62:8d:40:81:3d:b5:75:33:3e:8e:1f:d0:8c:07:53:
         72:1c:38:c5:9f:90:77:30:f2:9c:40:86:bc:40:22:28:f9:47:
         1b:89:83:ce:09:5c:1f:82:9b:3c:45:5a:34:51:58:13:4d:23:
         37:a7:4a:f4:51:d2:7f:37:13:e7:9d:60:3f:24:8e:aa:28:a1:
         ba:30:bf:93:92:28:f7:c4:0c:53:ee:26:fe:76:95:58:1e:d6:
         11:99:52:6e:ba:e4:93:d5:ff:6e:1d:6c:e4:4e:b6:61:3a:20:
         91:b3:17:84:8f:af:ac:0e:dc:09:77:43:65:4e:f6:fa:65:1b:
         37:69:26:f6:d7:2b:8b:01:f3:3f:96:c0:80:fb:9e:92:e7:ff:
         c6:d0:fd:92:d8:c2:7b:02:99:79:dd:bc:66:0e:76:05:c3:75:
         01:28:e0:d6:ba:ed:2f:ba:b8:ff:7f:bf:73:34:c0:be:da:86:
         75:2c:b7:00:3e:67:87:11:e2:2c:41:a8:6b:75:29:3b:88:ba:
         c0:94:14:e8:2f:1f:e3:bf:a1:9a:dd:8d:f1:0b:46:b4:93:03:
         3d:f7:ce:e1:fb:7a:96:85:82:cd:c3:d6:dc:50:d3:87:90:96:
         dd:88:f4:e5:3a:0d:92:e7:50:d3:72:26:90:a6:aa:8a:5d:46:
         57:35:ba:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:03:34 2025 by rpki-client