Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft
File:                     5AE57F3F97F40888F93913350A218863E705CD34.mft (raw, json)
Hash identifier:          pwVCAZgWlZiyI4R7ZlOaABPMJiJJ9fVoIV0rvvrJjEg=
Subject key identifier:   B2:59:0E:1D:B3:B9:8D:56:BC:89:5B:B2:91:19:34:5D:F4:6C:B2:E4
Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34
Certificate issuer:       /CN=5AE57F3F97F40888F93913350A218863E705CD34
Certificate serial:       45A51484B1A2492569287974E88015E70ACB3ED4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft
Manifest number:          0229
Signing time:             Sun 20 Jul 2025 01:51:25 +0000
Manifest this update:     Sun 20 Jul 2025 01:46:25 +0000
Manifest next update:     Wed 23 Jul 2025 09:01:25 +0000
Files and hashes:         1: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: lDreBV2a5k+F2nOzqdVDXyLmxgTFmhT5IbglBwCmDnU=)
                          2: 5AE57F3F97F40888F93913350A218863E705CD34.crl (hash: eJl3mmSQmiiLvLMQnNHwiGISBGM6mO8c5gxf8E0TW7s=)
                          3: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: NfTWOpBX5TEsx2AN4GNz4kZXIBLNbd1V2CGYNCmRu/U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl
                          rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 09:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a5:14:84:b1:a2:49:25:69:28:79:74:e8:80:15:e7:0a:cb:3e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34
        Validity
            Not Before: Jul 20 01:46:25 2025 GMT
            Not After : Jul 23 09:01:25 2025 GMT
        Subject: CN=B2590E1DB3B98D56BC895BB29119345DF46CB2E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2b:82:ca:ef:52:98:a2:aa:c1:23:83:4b:a9:
                    57:02:f3:65:08:4f:cc:47:01:0f:ef:4a:cd:e0:66:
                    48:d6:71:2e:83:95:70:26:33:98:89:e4:30:66:f3:
                    38:07:2a:4e:25:4e:f2:45:09:3e:7d:3f:1b:e9:92:
                    a3:3a:c2:f2:3b:f1:30:c0:85:a4:59:1b:da:fa:54:
                    59:37:c5:66:b2:6c:63:48:6b:0f:02:e5:41:f1:fe:
                    bd:9e:f3:bb:02:11:16:98:42:0a:1f:43:50:07:5a:
                    4f:1d:c8:4c:b0:f7:73:f9:de:dd:48:d8:32:a4:cc:
                    78:1f:e9:9b:3e:8e:26:df:03:11:e0:79:2b:08:bf:
                    8f:ac:43:0d:b1:c8:03:8f:7c:eb:60:b6:89:42:95:
                    ac:88:f5:60:6d:66:9e:9e:24:01:71:31:2a:ba:f3:
                    d4:14:4f:2a:c3:3c:92:1f:fe:82:e4:dd:a3:e8:f4:
                    1a:06:14:b3:52:03:1c:d0:2d:57:3b:00:14:17:49:
                    85:90:31:d5:5d:9e:51:4d:01:6d:94:81:c3:e6:3d:
                    6d:91:bd:b0:58:36:a2:a1:27:a9:e5:49:65:fc:75:
                    40:e9:58:b5:67:8d:6f:d0:d8:a0:79:c6:c5:bc:29:
                    da:a2:94:07:99:9f:0e:fd:de:a6:53:5f:c6:f0:d4:
                    b5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:59:0E:1D:B3:B9:8D:56:BC:89:5B:B2:91:19:34:5D:F4:6C:B2:E4
            X509v3 Authority Key Identifier:
                keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:cb:bc:6e:96:70:9f:15:41:28:dd:7e:a3:11:71:96:9b:b8:
         dd:7f:a7:2e:4e:18:55:e4:e3:43:a7:42:2a:62:a0:7b:28:53:
         ad:d7:de:8a:20:0b:3a:7f:55:4d:ef:d7:7a:e8:7f:24:49:59:
         7f:d7:fd:f9:be:64:0b:54:5f:6f:5a:e3:ee:15:e3:36:3a:6d:
         6e:6d:65:65:8f:d9:98:a3:ce:da:a5:cc:f2:13:fc:99:f9:03:
         2f:85:71:6a:38:74:ab:0d:37:d3:ec:3b:2d:da:33:34:c1:df:
         6c:5b:ae:e9:fc:cd:af:e6:8f:3d:ab:7c:bf:ee:2b:ab:34:cf:
         cb:94:54:8d:37:f2:14:07:cb:56:ce:9c:6e:91:5e:2c:a0:b0:
         16:8d:cf:1a:77:96:9c:84:b4:78:9b:98:10:32:79:ec:19:a9:
         69:d2:d2:ae:e8:71:d3:5b:75:1e:66:50:59:16:14:e6:3d:ed:
         41:26:bc:b0:bf:eb:9b:a5:74:67:e5:58:fc:73:94:cb:43:ca:
         76:3f:c6:68:7e:47:b2:59:3e:21:4f:4f:1c:00:90:33:c6:bb:
         5e:0d:35:f1:82:1b:00:7f:ee:9a:32:88:1f:89:67:b2:4a:c7:
         7f:65:66:26:d6:64:67:78:5e:3f:aa:3a:fe:ef:c9:0f:fb:83:
         2e:f0:7b:7d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURaUUhLGiSSVpKHl06IAV5wrLPtQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF
NzA1Q0QzNDAeFw0yNTA3MjAwMTQ2MjVaFw0yNTA3MjMwOTAxMjVaMDMxMTAvBgNV
BAMTKEIyNTkwRTFEQjNCOThENTZCQzg5NUJCMjkxMTkzNDVERjQ2Q0IyRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtK4LK71KYoqrBI4NLqVcC82UI
T8xHAQ/vSs3gZkjWcS6DlXAmM5iJ5DBm8zgHKk4lTvJFCT59PxvpkqM6wvI78TDA
haRZG9r6VFk3xWaybGNIaw8C5UHx/r2e87sCERaYQgofQ1AHWk8dyEyw93P53t1I
2DKkzHgf6Zs+jibfAxHgeSsIv4+sQw2xyAOPfOtgtolClayI9WBtZp6eJAFxMSq6
89QUTyrDPJIf/oLk3aPo9BoGFLNSAxzQLVc7ABQXSYWQMdVdnlFNAW2UgcPmPW2R
vbBYNqKhJ6nlSWX8dUDpWLVnjW/Q2KB5xsW8KdqilAeZnw793qZTX8bw1LXrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUslkOHbO5jVa8iVuykRk0XfRssuQwHwYDVR0j
BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3
RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1
Q0QzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2
NTMtYzlmZjJhMDAzNzczLzAvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4
NjNFNzA1Q0QzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG7LvG6WcJ8VQSjdfqMRcZabuN1/py5OGFXk
40OnQipioHsoU63X3oogCzp/VU3v13rofyRJWX/X/fm+ZAtUX29a4+4V4zY6bW5t
ZWWP2ZijztqlzPIT/Jn5Ay+FcWo4dKsNN9PsOy3aMzTB32xbrun8za/mjz2rfL/u
K6s0z8uUVI038hQHy1bOnG6RXiygsBaNzxp3lpyEtHibmBAyeewZqWnS0q7ocdNb
dR5mUFkWFOY97UEmvLC/65uldGflWPxzlMtDynY/xmh+R7JZPiFPTxwAkDPGu14N
NfGCGwB/7poyiB+JZ7JKx39lZibWZGd4Xj+qOv7vyQ/7gy7we30=
-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:31 2025 by rpki-client