Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft
File:                     0BB3D1874063172B5374865233070332233FB7B3.mft (raw, json)
Hash identifier:          HJTfTz8oBT4uYPT7QgHpKljCz2GTHDVCuepYYSt5dyU=
Subject key identifier:   23:A2:42:F2:7F:9F:A2:1D:A6:85:9E:E3:05:3B:85:1D:37:75:47:0C
Authority key identifier: 0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3
Certificate issuer:       /CN=0BB3D1874063172B5374865233070332233FB7B3
Certificate serial:       47C9A91D8EBA9C5007271561A081E9C99EFEA432
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft
Manifest number:          04ED
Signing time:             Tue 22 Jul 2025 19:12:04 +0000
Manifest this update:     Tue 22 Jul 2025 19:07:04 +0000
Manifest next update:     Sat 26 Jul 2025 01:42:04 +0000
Files and hashes:         1: 0BB3D1874063172B5374865233070332233FB7B3.crl (hash: /A2XvYnw3ZS3M6S156giGdkV02fk7Ee9mdnowduwXM8=)
                          2: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: 5FOROrvQq+0t+Mk/ACrrEVqg06jInBJCBz0qroNhCeU=)
                          3: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: zCm8uejNjkpY+DjdGXgrEnekcPvtN86UHanFShqlM6g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl
                          rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c9:a9:1d:8e:ba:9c:50:07:27:15:61:a0:81:e9:c9:9e:fe:a4:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BB3D1874063172B5374865233070332233FB7B3
        Validity
            Not Before: Jul 22 19:07:04 2025 GMT
            Not After : Jul 26 01:42:04 2025 GMT
        Subject: CN=23A242F27F9FA21DA6859EE3053B851D3775470C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:e1:a1:d8:40:9e:69:90:90:03:ed:6c:1e:
                    dd:1c:ab:88:ae:f7:1f:7a:c1:7a:95:0a:bf:8f:17:
                    53:5c:f8:9f:c8:a1:4b:c3:8d:a8:cc:6a:66:7b:96:
                    f7:55:95:21:25:e8:53:0e:da:99:79:04:ff:7b:2a:
                    18:3c:dd:83:c6:18:3c:2a:92:1f:46:4a:b4:2d:4c:
                    b2:59:7a:4a:e6:e6:b8:b7:ff:98:13:2c:61:34:ab:
                    6b:11:0d:93:89:0b:da:be:8e:1b:27:b5:8a:6a:4e:
                    32:0b:99:a1:3b:01:01:c0:3f:b3:20:db:7e:db:2c:
                    ad:a4:a4:5d:c1:60:d7:14:0b:be:91:d1:e8:d4:77:
                    3a:ff:0d:62:e6:c5:f3:d6:bb:78:96:4d:c9:36:ab:
                    78:3a:94:e2:6a:3c:16:bf:5c:58:b7:8d:7d:56:29:
                    bd:97:1e:5b:97:35:73:37:64:0c:85:6f:b7:05:33:
                    f0:9e:ba:69:b6:11:3b:4e:57:db:af:00:7c:fb:80:
                    a2:9b:8f:d0:7b:d7:fe:ad:96:99:8f:23:89:81:00:
                    7a:ed:fd:01:01:26:53:58:4d:8f:fa:40:4e:32:33:
                    e1:8e:74:f6:e0:09:e2:cb:e2:af:33:94:ea:70:fc:
                    dd:13:94:9f:c6:0a:7e:9d:ca:ac:42:50:5c:41:ae:
                    7a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A2:42:F2:7F:9F:A2:1D:A6:85:9E:E3:05:3B:85:1D:37:75:47:0C
            X509v3 Authority Key Identifier:
                keyid:0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:87:39:b7:af:cd:af:3d:71:5a:95:ef:ea:0d:fd:f2:16:d5:
         32:dc:dc:87:ba:d5:02:5f:fc:38:2c:fe:ec:51:d3:a6:d5:2f:
         0d:89:57:51:80:04:50:4d:c7:1c:ac:f1:f0:fe:a5:7c:69:bb:
         59:55:a1:c7:f3:57:69:d0:4d:37:4b:39:c2:20:58:55:6f:25:
         99:0a:1f:73:47:70:20:41:61:e4:5c:76:f9:98:a5:c0:9d:a6:
         26:92:f0:2d:3c:9e:ec:bb:6e:c5:eb:6f:ff:56:65:ca:02:9c:
         c0:34:8d:ab:ea:44:08:51:84:4f:b6:af:ea:2b:0b:88:85:0f:
         d6:36:6f:93:09:e7:52:34:54:bb:89:9f:76:44:1d:74:de:9d:
         0f:95:83:87:ba:a1:aa:25:ed:be:ee:04:04:99:7a:c8:21:04:
         04:22:af:a3:a8:8d:81:62:df:06:80:36:11:84:c8:0d:0c:e0:
         52:42:60:dc:b4:b7:ea:d9:47:b7:86:5e:af:2f:8f:94:b9:7f:
         6c:9e:75:07:5a:0a:4e:eb:2a:7a:cf:04:0f:07:88:41:5c:32:
         ef:85:aa:f5:cb:f7:2d:0b:5f:ee:00:c3:8c:a5:a4:2e:d0:60:
         e8:13:b3:03:c7:40:51:18:b4:e8:a3:90:f9:12:23:6e:f5:e8:
         fd:42:57:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:48:00 2025 by rpki-client