Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft
File:                     20B00D67B048DAE581FE60A498995A27878149A7.mft (raw, json)
Hash identifier:          oTQ5G/CaqzE6R0WXPjSY0JgG9I+W1cP85EXicUMNoJ4=
Subject key identifier:   96:F0:15:70:CE:51:73:E2:FC:33:F4:F9:CF:CC:A7:82:61:24:D2:81
Authority key identifier: 20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7
Certificate issuer:       /CN=20B00D67B048DAE581FE60A498995A27878149A7
Certificate serial:       02DE6DD5B5313A2F3B39F3D688BAEE2EE070C10F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft
Manifest number:          01AA
Signing time:             Mon 21 Jul 2025 11:11:01 +0000
Manifest this update:     Mon 21 Jul 2025 11:06:01 +0000
Manifest next update:     Thu 24 Jul 2025 14:02:01 +0000
Files and hashes:         1: 20B00D67B048DAE581FE60A498995A27878149A7.crl (hash: tPpzvqx/Xr2dFdHfIfDNu64RbAiWZu7mBrGQt5ImT9Q=)
                          2: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: vRq65LfzwGz4j+oEbqBPQ82wtT1KDumkC2L75cgO4WQ=)
                          3: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: FKopsjmhu2ZpwkHZKTS2a2cSATg1lZ109SObjsmNTcI=)
                          4: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: C3Y5TVjlMMx3bj7loYa7CuUDY/TXp19dghaSZKbxk0g=)
                          5: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: SDDT76sB5fD/qwKD2c7jZ56T2/zb4XIJfGohnMvEips=)
                          6: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: LQahwQ72kro/LJH779tBFmRDGBJ/aQ/cw7AFn3KwUxg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl
                          rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 14:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:de:6d:d5:b5:31:3a:2f:3b:39:f3:d6:88:ba:ee:2e:e0:70:c1:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20B00D67B048DAE581FE60A498995A27878149A7
        Validity
            Not Before: Jul 21 11:06:01 2025 GMT
            Not After : Jul 24 14:02:01 2025 GMT
        Subject: CN=96F01570CE5173E2FC33F4F9CFCCA7826124D281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1a:34:95:49:05:ab:f0:8c:4e:43:2c:31:fa:
                    bc:bb:f9:65:32:3c:36:5e:8a:71:20:7a:89:35:72:
                    59:19:94:55:98:1e:8f:1f:31:20:2b:d1:d3:86:dc:
                    db:28:df:3f:a1:85:20:f0:1d:a2:62:d8:0c:28:b7:
                    d2:c6:aa:04:7a:93:f0:4e:ce:da:c8:56:2c:f5:9f:
                    33:25:47:f0:9d:05:4b:89:8d:a7:59:c7:e4:24:7c:
                    97:f2:1a:7b:29:ab:0e:2f:dd:57:6f:2b:6d:cb:b5:
                    d2:38:78:56:8d:3b:39:65:4c:a1:b5:c0:41:6c:52:
                    65:8c:4a:67:5d:f8:9a:38:22:e1:21:8a:ca:24:a6:
                    4e:a4:ff:5d:10:5f:06:a7:6a:fb:b2:c4:34:31:0d:
                    12:f8:c6:7b:0e:4c:e9:a5:1c:a2:11:2f:17:35:cf:
                    6a:7f:d7:08:b2:68:53:e5:76:7f:1b:8f:a7:5f:35:
                    5e:42:4b:3b:0b:75:50:3c:0a:6c:d3:66:ca:b0:d6:
                    36:2f:c8:cc:c8:25:bf:85:95:10:64:94:d2:95:36:
                    ac:eb:fb:85:b0:b1:4d:b3:a9:ed:cf:81:98:6a:ef:
                    3c:e4:14:e9:14:2e:8b:29:9a:70:9b:db:30:1e:85:
                    a0:c4:90:dc:59:e4:de:0f:38:00:08:3e:54:0e:cd:
                    44:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F0:15:70:CE:51:73:E2:FC:33:F4:F9:CF:CC:A7:82:61:24:D2:81
            X509v3 Authority Key Identifier:
                keyid:20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:88:31:46:b8:14:fb:04:89:23:f6:16:9e:f6:47:15:da:02:
         45:35:e6:dd:1a:d1:1a:12:42:57:3e:e1:71:ee:ec:8b:41:ca:
         c2:e9:f1:b8:ea:99:d0:09:63:bf:20:4c:25:a2:31:ad:0f:9f:
         0f:8c:29:ff:5b:59:43:b2:29:8e:3a:30:1f:2e:dd:76:2b:3f:
         64:59:53:33:d2:5f:59:53:41:ae:db:bd:5e:59:a7:81:17:59:
         06:29:43:0f:e6:13:fa:92:a0:c5:22:ac:aa:ae:60:f3:6a:e4:
         b8:4b:f8:bf:98:78:b4:a9:85:c6:db:e0:48:aa:4b:c7:65:55:
         a2:25:cb:25:fc:db:e9:8f:a2:fc:9f:fb:b2:8c:fa:af:38:a3:
         9a:13:a3:f3:ac:83:a2:17:a9:f5:02:01:33:e7:b8:ea:a7:38:
         80:00:52:d9:13:a1:83:a3:d6:6c:49:ca:22:1f:24:e7:57:a7:
         32:29:e0:ce:e2:40:5e:9e:b3:2b:47:4e:15:01:59:77:48:98:
         14:e5:85:b4:30:57:49:73:30:2e:71:19:11:cd:1a:be:dc:42:
         72:48:78:92:ed:b3:e1:28:7a:f9:e9:e8:96:f6:b8:a0:88:0c:
         36:24:bd:fe:68:00:84:37:99:92:d0:fb:42:2b:80:65:05:4e:
         fa:c1:70:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:24:49 2025 by rpki-client