Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft
File:                     2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft (raw, json)
Hash identifier:          BiFqTTFi2QWbCKOGl+Z+FnbsK3FjS1/2eBOO86lg74U=
Subject key identifier:   1D:4A:14:0F:B2:12:71:FB:7E:70:17:E3:43:78:D3:14:61:0E:48:09
Authority key identifier: 2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4
Certificate issuer:       /CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4
Certificate serial:       53F585CE93929E59E7498A4671E5F77CAC8C5E0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft
Manifest number:          04C6
Signing time:             Fri 25 Jul 2025 02:41:21 +0000
Manifest this update:     Fri 25 Jul 2025 02:36:21 +0000
Manifest next update:     Mon 28 Jul 2025 08:50:21 +0000
Files and hashes:         1: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (hash: mA/rP0hr8/EieVP2HKsGbfcjdkP2Kd8or4Jc67/Y7I0=)
                          2: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (hash: jd8RzIV4pb6xOSx8M2iJByCvMa7m6mddhFLRaUaFvoI=)
                          3: 323430343a613463303a666163653a3a2f34382d3438203d3e20313338383232.roa (hash: 8BcFapwe+X3BcAcYyUi0aKlB+9OoLNEUNoO57IgvOug=)
                          4: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl (hash: lLM7vZTJpZj+xxjMNI3XXrx8qVL00BsQKjB+OaAp4Cw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl
                          rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 08:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f5:85:ce:93:92:9e:59:e7:49:8a:46:71:e5:f7:7c:ac:8c:5e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4
        Validity
            Not Before: Jul 25 02:36:21 2025 GMT
            Not After : Jul 28 08:50:21 2025 GMT
        Subject: CN=1D4A140FB21271FB7E7017E34378D314610E4809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:4e:f8:5b:d6:37:08:c3:5d:4c:9d:cc:fa:
                    36:f7:a8:37:f3:58:1c:eb:23:c3:b9:30:57:cf:e9:
                    19:30:4c:37:d9:72:84:5f:bc:07:5e:a3:9a:d2:7f:
                    70:a8:5a:0d:5e:67:5f:d9:52:24:9b:48:e8:42:85:
                    7c:5e:f6:e4:f1:d2:a8:7e:7a:53:e4:3c:70:17:cd:
                    4e:49:19:37:7c:61:38:1a:de:4d:5a:9d:7d:c8:6d:
                    c5:f6:c4:3f:99:26:11:8d:85:53:97:6e:4e:b9:4e:
                    c2:61:8f:6a:b2:75:6d:fa:13:97:a5:d0:6d:20:cd:
                    e6:37:4f:f1:1d:dd:04:0d:26:bb:ff:4a:97:e2:d9:
                    59:22:f4:db:23:28:ef:ba:5d:ca:30:31:b3:52:99:
                    51:b6:f0:ac:e3:50:e7:fa:ea:7c:0e:8b:86:44:76:
                    e3:71:4f:27:61:17:1e:c8:a8:18:53:f9:49:4b:09:
                    f2:b4:0f:02:d6:28:05:a8:a1:3e:91:3f:aa:29:36:
                    1f:15:a9:5c:bd:5e:67:98:1f:43:d6:0e:32:25:55:
                    8b:32:d7:79:07:fe:8b:a0:fb:77:d9:5a:ed:ac:53:
                    91:fb:98:7a:fc:56:f4:3b:15:8b:ca:f0:42:dc:cc:
                    a0:0c:29:2f:d4:fc:8c:f5:4b:61:a6:f8:6c:ec:46:
                    96:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4A:14:0F:B2:12:71:FB:7E:70:17:E3:43:78:D3:14:61:0E:48:09
            X509v3 Authority Key Identifier:
                keyid:2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:86:39:ee:f7:cc:a9:d7:da:b2:a3:27:94:2a:ba:62:4e:6a:
         44:e6:b9:5e:08:df:18:47:2a:f3:2c:cf:7a:0f:b5:1d:d2:0a:
         82:e9:51:e0:2e:35:97:e4:2b:0e:55:68:e6:12:2f:51:27:52:
         e6:a8:93:f4:ab:9b:4e:88:06:2d:9c:7c:9e:a9:cb:0f:55:8b:
         fb:73:e7:84:5c:e4:09:1d:fd:c3:1f:9d:c0:27:be:45:14:f9:
         ac:7f:52:1b:6d:7a:66:87:37:99:f7:28:39:5c:6b:05:c1:2d:
         bf:ad:dd:70:4b:46:02:6a:22:41:c8:18:75:78:c8:b7:95:4b:
         43:65:06:c6:e7:09:91:30:49:0a:d9:15:f1:31:71:7c:5e:ca:
         87:40:c3:b5:da:b2:63:e2:6c:17:f4:b9:85:c3:dc:b3:5b:a3:
         26:5e:da:e0:ca:94:c6:f5:37:a5:29:3f:99:82:f3:43:3a:0b:
         40:45:8a:39:08:dd:2a:9b:97:8c:5d:19:7c:55:bf:5c:f3:85:
         c3:db:27:1a:34:a6:7b:a9:fc:9f:d8:e4:81:62:28:6b:97:51:
         8c:06:8d:e4:4a:e0:27:e4:a0:bf:d7:5e:f3:0d:23:a3:43:5b:
         0f:6e:49:9f:cc:58:c6:ad:dd:f6:b3:ea:17:33:66:77:dd:11:
         27:d8:ae:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 18:23:10 2025 by rpki-client