Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft
File:                     20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft (raw, json)
Hash identifier:          w4PEh3eJXnWHFHsD8Q5dOOzwfo07JpAPq+DtYityTx4=
Subject key identifier:   19:1C:BD:53:03:FC:D5:CD:7B:19:66:51:A5:F6:83:C1:D4:07:BE:F3
Authority key identifier: 20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5
Certificate issuer:       /CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5
Certificate serial:       52A45DDE710EC4B583A9025384EEEFCC94387AB8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft
Manifest number:          8E
Signing time:             Thu 24 Jul 2025 12:00:00 +0000
Manifest this update:     Thu 24 Jul 2025 11:55:00 +0000
Manifest next update:     Sun 27 Jul 2025 19:02:00 +0000
Files and hashes:         1: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl (hash: hO82zXGkjB6WdrCpMXdWPKcjeESXyB7kvyKnrSOswhM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl
                          rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 19:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a4:5d:de:71:0e:c4:b5:83:a9:02:53:84:ee:ef:cc:94:38:7a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5
        Validity
            Not Before: Jul 24 11:55:00 2025 GMT
            Not After : Jul 27 19:02:00 2025 GMT
        Subject: CN=191CBD5303FCD5CD7B196651A5F683C1D407BEF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:68:1c:36:bd:4d:ec:16:c5:da:0d:b6:12:38:
                    e7:93:94:15:ec:3b:58:59:dd:86:55:ca:a2:1f:72:
                    46:c3:07:aa:01:78:6b:d1:97:51:b0:e7:e8:1c:75:
                    06:5f:7e:7f:36:b9:e2:7d:6c:19:60:2e:ad:50:ff:
                    36:d6:fb:18:11:4e:aa:7d:24:cd:29:f2:a8:58:a2:
                    ac:b5:57:1e:a6:3b:3d:6b:f2:35:ad:8a:66:65:7e:
                    4d:25:7f:45:93:92:c0:93:0b:23:19:09:56:d4:b7:
                    71:30:73:52:30:8b:dd:96:20:0c:81:6b:9f:41:2b:
                    3e:8e:f5:e7:39:68:94:33:c5:6c:69:b9:f1:7a:5f:
                    e4:ca:9b:22:a0:a0:77:c1:6e:9d:d8:51:7d:7b:a0:
                    6b:5c:06:3c:76:d2:eb:d3:06:5b:85:ee:11:d5:15:
                    04:68:f7:5a:01:ae:e2:fe:a0:34:a2:77:01:41:56:
                    22:43:85:bf:ce:a7:1c:96:8e:1b:c6:d8:43:4f:51:
                    27:20:eb:e3:0e:f1:8f:a0:84:42:70:0e:bf:4f:7e:
                    87:0a:48:15:6c:69:00:6a:b6:b0:25:4d:5e:9d:42:
                    ac:62:f5:36:a6:c6:38:93:ec:57:e8:d0:82:22:10:
                    74:14:53:0b:a1:28:be:67:c4:0f:7f:f7:bb:02:fc:
                    2a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1C:BD:53:03:FC:D5:CD:7B:19:66:51:A5:F6:83:C1:D4:07:BE:F3
            X509v3 Authority Key Identifier:
                keyid:20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:26:90:02:9b:9d:d6:02:23:75:f5:7c:08:84:24:47:8d:7c:
         4c:6d:9c:58:f3:3a:1f:83:a3:10:5a:f7:a8:ce:6f:d9:13:5d:
         63:89:80:6b:11:a7:ca:11:e3:92:49:ac:cc:ae:c2:31:52:3b:
         e5:f1:b8:c9:33:9f:56:fc:70:68:25:6b:0f:e6:da:f5:5f:38:
         a1:4a:83:f9:85:93:7b:07:9a:da:e3:f0:85:93:a9:16:ed:61:
         73:ed:d2:a5:f6:c1:3e:9c:71:cb:1e:3a:34:93:73:51:9d:90:
         28:55:5f:d3:10:a4:4c:5f:84:e3:d1:e8:7c:8c:ba:65:23:81:
         cc:fb:6e:84:c3:7f:93:71:0b:59:08:b6:c2:77:9b:64:92:a9:
         69:e8:49:35:7c:8a:d3:7c:d4:2a:0f:a5:c0:a7:35:f1:93:e3:
         83:a6:ae:6a:86:0c:43:4d:62:45:5a:43:04:5a:88:1e:cd:04:
         fa:4b:4c:17:eb:91:45:8f:7f:36:bd:77:1f:4e:d6:af:5d:e8:
         a7:1f:34:76:64:23:19:0b:5f:6a:af:38:7e:b8:b0:2e:9e:72:
         aa:4e:0f:40:80:4d:0f:29:b1:95:5c:21:49:c9:ad:40:f0:a5:
         03:3b:f8:e8:17:7b:06:77:82:e0:60:a5:2f:f0:24:17:58:c8:
         83:f7:66:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:49:16 2025 by rpki-client