Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft
File:                     41071AAF0C0E6BD84877680334B4F604B4B4E786.mft (raw, json)
Hash identifier:          nsfQQATl5RWk91BuazTFplczPB5Lb4TXlbnmYaaEMN8=
Subject key identifier:   DC:34:37:13:1B:1E:F7:DF:A5:2C:DF:1D:1A:A8:FE:35:17:17:34:1B
Authority key identifier: 41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86
Certificate issuer:       /CN=41071AAF0C0E6BD84877680334B4F604B4B4E786
Certificate serial:       3DE48E4796FE7D29EBF0EB334C42353900C15187
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft
Manifest number:          01E7
Signing time:             Mon 21 Jul 2025 20:42:22 +0000
Manifest this update:     Mon 21 Jul 2025 20:37:22 +0000
Manifest next update:     Fri 25 Jul 2025 00:42:22 +0000
Files and hashes:         1: 3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (hash: S3FgE0+gcaLyx6nH2zsRG+Hi0BgVRkLf/ndGC4F7z/0=)
                          2: 41071AAF0C0E6BD84877680334B4F604B4B4E786.crl (hash: rOAF+Xmimm1wpHwTT5xb5GN771pLf/3Ipe1/1h9oX6Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl
                          rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 00:42:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e4:8e:47:96:fe:7d:29:eb:f0:eb:33:4c:42:35:39:00:c1:51:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41071AAF0C0E6BD84877680334B4F604B4B4E786
        Validity
            Not Before: Jul 21 20:37:22 2025 GMT
            Not After : Jul 25 00:42:22 2025 GMT
        Subject: CN=DC3437131B1EF7DFA52CDF1D1AA8FE351717341B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:75:0b:55:4b:ba:e7:fa:7c:72:50:70:fa:
                    4c:b9:10:d4:f3:d5:31:6e:da:b8:95:f1:be:dd:a4:
                    26:59:38:4a:a7:18:45:ba:87:45:10:5f:a1:40:d9:
                    8f:0f:c7:f9:fa:14:52:66:29:ce:12:d4:c5:b7:c5:
                    9d:8b:e2:6f:b0:e0:a1:2d:e3:a3:35:96:7e:fa:93:
                    30:61:e5:b8:10:e0:53:cc:0b:93:91:02:27:00:a4:
                    78:45:8a:31:c1:89:8a:1f:b2:af:26:fe:bb:e1:b7:
                    8a:38:06:92:9b:bb:1a:f2:dd:9e:c6:9a:e9:fc:55:
                    0e:b8:a6:56:a0:a4:a3:82:0d:21:88:fb:de:ee:ab:
                    18:da:03:f8:7d:d6:d8:ec:1b:00:cb:fd:c3:93:3b:
                    a0:03:9c:87:82:b0:04:b6:fc:41:7c:86:c9:87:59:
                    fa:5f:c5:2a:44:5e:6d:c4:96:a6:16:43:c4:58:1b:
                    03:c1:be:51:66:0a:13:42:2c:23:75:f3:43:80:b5:
                    4f:27:5d:f4:85:56:10:e3:af:ce:dc:3f:84:dd:a3:
                    5e:b0:69:8b:fb:f7:1a:f3:ad:9c:f7:ba:4d:9b:d4:
                    99:a8:35:10:e0:6b:75:83:00:82:ec:97:87:87:3d:
                    1e:fe:96:2f:43:5b:9b:75:73:63:17:fb:97:fb:b6:
                    ee:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:34:37:13:1B:1E:F7:DF:A5:2C:DF:1D:1A:A8:FE:35:17:17:34:1B
            X509v3 Authority Key Identifier:
                keyid:41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:eb:0e:e3:c8:17:2a:2d:a8:7e:a1:71:ef:9f:85:f1:44:e7:
         9d:65:6c:48:31:55:db:b6:71:c1:61:b2:bd:78:6e:23:79:0d:
         65:16:1a:8a:4f:ce:c0:e0:ba:c3:73:ec:63:53:6d:c7:d1:59:
         3e:5a:da:31:d4:6a:c2:c4:22:d7:0a:d6:0b:0e:58:29:07:e0:
         51:78:cf:ce:82:ec:4e:18:59:cd:b2:53:d2:52:b7:91:43:ec:
         b9:12:be:09:69:63:de:70:84:30:cc:4d:85:1e:68:4a:26:a5:
         e5:1e:bb:3f:c7:d7:6a:09:74:ea:c6:d4:6a:e2:80:e8:ab:5b:
         03:ec:8f:14:98:4d:d3:2f:93:36:15:df:8a:25:ba:82:10:64:
         54:1b:05:00:96:7c:a7:89:29:e4:d9:b8:22:73:c7:51:39:d5:
         87:53:92:c5:37:f2:4b:41:69:14:3f:15:82:c9:2e:ea:88:fe:
         f3:dd:2b:73:b4:8b:f6:77:cd:09:53:82:0a:b9:2f:fe:e5:bd:
         e4:27:68:89:c6:90:b4:5b:41:80:d1:d7:76:38:db:3b:2f:23:
         0d:76:f2:fe:b6:38:0e:b0:5b:1f:c7:72:41:92:61:0a:fe:8d:
         11:11:27:9a:48:50:45:ba:b1:a9:e6:57:85:e6:fa:2d:ba:88:
         f3:98:c4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:11:41 2025 by rpki-client