Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft
File:                     0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft (raw, json)
Hash identifier:          0N9BtDugBizkFp70N49x6G6zZseIuG2xjN7vqk6smPY=
Subject key identifier:   43:57:9D:27:93:6A:60:14:D0:C2:A1:A5:38:DB:51:28:6C:25:C2:BE
Authority key identifier: 0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51
Certificate issuer:       /CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151
Certificate serial:       52905275FDAB0DA090BA8732B0D9398ED5C5F610
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft
Manifest number:          0291
Signing time:             Tue 22 Jul 2025 05:32:17 +0000
Manifest this update:     Tue 22 Jul 2025 05:27:17 +0000
Manifest next update:     Fri 25 Jul 2025 07:19:17 +0000
Files and hashes:         1: 0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl (hash: zxy18An7w/KIMS3mYNQrforyeazQ50gSG64088S5yQ8=)
                          2: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: tNCrkyzG4AciCmgimqvIw2bQeulAylk5FoXAJrDEuic=)
                          3: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: HpSArK9wKsGD/4QjsHQDEChpbO5zQMtEgV2WhSH9EBo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl
                          rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 07:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:90:52:75:fd:ab:0d:a0:90:ba:87:32:b0:d9:39:8e:d5:c5:f6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C3C113F980D800FAD5FC467EE7F10806CEF7151
        Validity
            Not Before: Jul 22 05:27:17 2025 GMT
            Not After : Jul 25 07:19:17 2025 GMT
        Subject: CN=43579D27936A6014D0C2A1A538DB51286C25C2BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dd:61:dc:9b:b0:3a:be:f0:f4:4f:c9:ef:27:
                    6d:9d:95:27:d0:ec:86:cc:ba:ed:55:38:24:de:26:
                    06:1c:18:d9:d1:8f:b4:fb:ac:b4:16:6e:43:df:c4:
                    e6:fa:56:15:64:e4:67:e0:c4:f4:8c:1b:7e:71:32:
                    7a:d0:7f:86:17:7c:78:95:57:ef:be:b4:88:de:5f:
                    f7:d9:b0:59:b9:57:a9:99:19:f0:01:88:3f:e8:af:
                    0d:16:c5:d5:c4:44:f3:86:79:f8:af:9d:78:55:9c:
                    7d:c7:f9:c0:3f:50:41:e2:c9:70:98:47:aa:86:34:
                    4f:a0:21:e1:1e:f4:da:f8:63:3d:eb:b1:6b:1c:80:
                    c4:02:59:49:c9:da:15:8e:e2:d0:b9:64:47:39:a0:
                    ae:78:0b:c5:07:f6:25:fd:dc:4c:84:52:2f:26:6d:
                    c6:94:eb:31:17:3b:63:62:d2:24:f6:9f:df:b2:ab:
                    8b:68:78:37:1f:e3:53:07:35:c4:c2:3f:24:87:5a:
                    bf:c1:c9:e7:d4:08:55:41:24:27:c7:09:b4:2e:26:
                    ad:e3:79:49:e9:76:9f:3a:c2:74:67:b8:32:f6:89:
                    43:2c:a7:58:19:82:24:f8:f4:bc:d1:17:a0:c7:29:
                    9c:af:ed:1e:c3:3b:b3:cc:3d:b8:f7:61:02:93:9e:
                    b3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:57:9D:27:93:6A:60:14:D0:C2:A1:A5:38:DB:51:28:6C:25:C2:BE
            X509v3 Authority Key Identifier:
                keyid:0C:3C:11:3F:98:0D:80:0F:AD:5F:C4:67:EE:7F:10:80:6C:EF:71:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C3C113F980D800FAD5FC467EE7F10806CEF7151.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/0C3C113F980D800FAD5FC467EE7F10806CEF7151.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6d:ec:49:63:52:a8:fb:d7:50:a2:96:78:5b:17:ef:0f:7a:
         bc:77:fa:b6:67:da:6b:e0:dc:5a:fd:a2:a1:c4:90:6a:fa:0d:
         15:81:a9:bb:dd:fd:37:cd:3f:9c:f2:7c:f9:b4:54:f7:2c:5e:
         b9:f5:f1:81:5a:9d:0e:a8:6d:05:a6:cd:bf:4c:40:3b:bb:52:
         50:26:ce:50:60:28:9b:62:bd:b3:d8:2b:86:f3:62:cf:d7:7f:
         e6:5d:4f:33:9b:02:9f:1b:36:33:89:8c:40:e8:c1:30:d5:bb:
         b1:76:81:38:ac:ab:0c:50:18:35:37:38:b9:e4:42:d9:ef:24:
         89:0a:ad:79:b4:f0:7b:55:b6:23:53:66:e4:68:ce:25:a6:36:
         7f:1d:30:72:93:f6:11:5c:f8:8a:9a:a2:6d:e1:b1:9f:2e:1e:
         44:43:67:30:4d:80:47:59:4f:dd:0c:72:98:37:18:39:4a:fd:
         37:9c:a7:c5:9f:fb:3c:43:df:7c:5f:5f:5e:d1:74:b3:d7:a8:
         e1:40:0a:4e:73:5c:71:65:9b:3b:f6:d2:af:1f:e8:60:e8:58:
         55:be:6c:b3:db:f3:57:f6:5f:f9:d0:e9:4a:41:28:84:d7:5a:
         19:a2:f4:aa:f8:4d:76:2f:c8:af:47:34:77:8f:89:c0:da:de:
         91:4e:6e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:00:32 2025 by rpki-client