Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft
File:                     20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft (raw, json)
Hash identifier:          4mBcy330WZ/Z0i04OtBfzP7R9pTp8oUkJ1w3VdU6cfs=
Subject key identifier:   56:03:70:98:F2:46:F6:C7:C3:DC:B4:7D:52:2E:0E:92:CA:FA:54:8D
Authority key identifier: 20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5
Certificate issuer:       /CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5
Certificate serial:       6D66F75F5DAF94A3AE7C986383C962D674D324B2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft
Manifest number:          8D
Signing time:             Tue 22 Jul 2025 03:20:00 +0000
Manifest this update:     Tue 22 Jul 2025 03:15:00 +0000
Manifest next update:     Fri 25 Jul 2025 11:55:00 +0000
Files and hashes:         1: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl (hash: 5wrPHcBms85y7ha5qD9cMcz2d85jFPnq2bVuTNayE/0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl
                          rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 11:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:66:f7:5f:5d:af:94:a3:ae:7c:98:63:83:c9:62:d6:74:d3:24:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5
        Validity
            Not Before: Jul 22 03:15:00 2025 GMT
            Not After : Jul 25 11:55:00 2025 GMT
        Subject: CN=56037098F246F6C7C3DCB47D522E0E92CAFA548D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:81:22:e9:da:55:f0:72:21:41:25:18:6e:79:
                    83:26:ed:cc:ec:e5:f0:09:f7:cf:c5:50:4b:86:67:
                    8d:52:15:a0:e3:7d:e2:51:d5:0e:6e:13:48:e8:49:
                    7d:c3:20:f7:e4:09:5e:4f:36:8c:64:89:6c:23:3b:
                    a5:d8:49:92:63:91:e0:ec:51:0e:7f:44:9b:f7:22:
                    91:a1:26:a1:22:35:bf:84:59:cf:ab:bc:16:2f:48:
                    a8:da:4f:3c:ea:23:2d:f6:0f:68:0d:f0:5f:2f:ab:
                    b4:a1:2c:66:b0:b5:a2:14:b9:da:3a:2e:cc:1b:24:
                    ea:c0:0b:7a:07:e6:0c:b3:f7:6a:11:72:c6:2a:ee:
                    66:1a:0e:ea:b4:21:c7:c3:ac:05:0c:ba:12:4d:2c:
                    a7:2b:2b:8a:5d:dd:4e:cc:f5:7c:70:f3:7e:4d:bb:
                    39:2a:03:e9:5d:eb:7f:0a:4b:0b:cd:74:cc:ec:22:
                    1f:9a:3d:fb:70:7f:c2:15:5d:80:17:81:a2:9a:30:
                    9c:33:c3:25:0e:68:c1:32:fd:94:a9:c3:ed:7e:ac:
                    21:a0:62:de:d4:84:4e:5b:dd:12:b7:2a:aa:99:0b:
                    8f:8c:ea:df:bb:a2:d4:89:f7:d0:64:cf:85:5d:ed:
                    33:49:e0:6d:af:0a:3f:36:76:dd:92:32:5f:2e:2d:
                    29:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:03:70:98:F2:46:F6:C7:C3:DC:B4:7D:52:2E:0E:92:CA:FA:54:8D
            X509v3 Authority Key Identifier:
                keyid:20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f0:95:57:9f:9b:5a:19:da:55:95:0a:48:93:c5:9f:e5:38:
         25:b5:7b:6d:ae:84:a5:e1:bb:68:c7:d6:96:48:b0:d3:a1:5a:
         a3:c3:ce:4e:3c:16:b2:9b:55:ea:d6:0c:2a:ac:2a:45:03:e9:
         64:eb:ca:5f:5e:a5:9f:37:f1:52:71:89:38:23:ec:af:43:cf:
         57:18:49:c6:a5:56:d4:4f:49:34:e2:c0:69:fd:ac:a1:dc:f0:
         5b:8f:1f:72:dd:ab:6d:e2:cc:40:fa:d0:a5:71:42:27:4a:32:
         f7:a2:2e:6d:ba:c0:5f:60:29:a7:d9:f1:23:fe:e4:76:7b:ab:
         e6:f3:85:d9:85:28:f4:98:4b:85:37:d4:dd:f4:52:01:ec:74:
         f9:1c:4b:3e:f7:42:07:b1:9b:38:5d:37:11:73:08:d3:9d:96:
         2d:39:bf:20:75:f8:2f:21:28:33:99:37:3e:a5:78:17:d6:ec:
         f6:1b:5a:9e:6e:41:ee:39:d9:d0:ae:1d:62:1c:11:87:79:57:
         c6:63:f4:a5:42:6c:d2:d1:de:df:2b:5e:13:ba:56:3f:47:82:
         37:13:a9:50:29:7b:ce:2b:e9:d3:27:43:1c:ab:f4:e7:e0:46:
         fd:d7:8f:be:08:d5:ae:c7:f9:80:02:c7:be:00:4a:09:e8:61:
         10:d0:a4:77
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbWb3X12vlKOufJhjg8li1nTTJLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1
RDdGMThENTAeFw0yNTA3MjIwMzE1MDBaFw0yNTA3MjUxMTU1MDBaMDMxMTAvBgNV
BAMTKDU2MDM3MDk4RjI0NkY2QzdDM0RDQjQ3RDUyMkUwRTkyQ0FGQTU0OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjgSLp2lXwciFBJRhueYMm7czs
5fAJ98/FUEuGZ41SFaDjfeJR1Q5uE0joSX3DIPfkCV5PNoxkiWwjO6XYSZJjkeDs
UQ5/RJv3IpGhJqEiNb+EWc+rvBYvSKjaTzzqIy32D2gN8F8vq7ShLGawtaIUudo6
LswbJOrAC3oH5gyz92oRcsYq7mYaDuq0IcfDrAUMuhJNLKcrK4pd3U7M9Xxw835N
uzkqA+ld638KSwvNdMzsIh+aPftwf8IVXYAXgaKaMJwzwyUOaMEy/ZSpw+1+rCGg
Yt7UhE5b3RK3KqqZC4+M6t+7otSJ99Bkz4Vd7TNJ4G2vCj82dt2SMl8uLSkJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVgNwmPJG9sfD3LR9Ui4Oksr6VI0wHwYDVR0j
BBgwFoAUIKSizqAJiECvahxb89hOQV1/GNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YzgxZTZlYy1jODdiLTRmZGItYTJmYS1lY2M0NzBjNDFkNTMvMC8yMEE0QTJDRUEw
MDk4ODQwQUY2QTFDNUJGM0Q4NEU0MTVEN0YxOEQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1RDdG
MThENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy
ZmEtZWNjNDcwYzQxZDUzLzAvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRF
NDE1RDdGMThENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFfwlVefm1oZ2lWVCkiTxZ/lOCW1e22uhKXh
u2jH1pZIsNOhWqPDzk48FrKbVerWDCqsKkUD6WTryl9epZ838VJxiTgj7K9Dz1cY
ScalVtRPSTTiwGn9rKHc8FuPH3Ldq23izED60KVxQidKMveiLm26wF9gKafZ8SP+
5HZ7q+bzhdmFKPSYS4U31N30UgHsdPkcSz73QgexmzhdNxFzCNOdli05vyB1+C8h
KDOZNz6leBfW7PYbWp5uQe452dCuHWIcEYd5V8Zj9KVCbNLR3t8rXhO6Vj9HgjcT
qVApe84r6dMnQxyr9OfgRv3Xj74I1a7H+YACx74ASgnoYRDQpHc=
-----END CERTIFICATE-----
Generated at Tue Jul 22 19:29:18 2025 by rpki-client