Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft
File:                     B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft (raw, json)
Hash identifier:          bKQA07dh7BtH7JyUpK7kUpMJ5E3AYfjDvzorypHF3gk=
Subject key identifier:   A8:36:E9:35:96:04:03:E5:35:7A:08:8D:7C:85:FD:54:51:15:F7:1F
Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC
Certificate issuer:       /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC
Certificate serial:       66B97BB7D08C464A3C9A32BF1C473D7358498B87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft
Manifest number:          0152
Signing time:             Wed 23 Jul 2025 05:22:07 +0000
Manifest this update:     Wed 23 Jul 2025 05:17:07 +0000
Manifest next update:     Sat 26 Jul 2025 06:14:07 +0000
Files and hashes:         1: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl (hash: wZafmorkSsXKCWc6/+8YQxHF3aP9vTnQEyErhP+WFZQ=)
                          2: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: SFyP6dQXcZeCfICHfcQqBzkquUF0rSVZjhOo/oTB3lM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl
                          rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 06:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b9:7b:b7:d0:8c:46:4a:3c:9a:32:bf:1c:47:3d:73:58:49:8b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC
        Validity
            Not Before: Jul 23 05:17:07 2025 GMT
            Not After : Jul 26 06:14:07 2025 GMT
        Subject: CN=A836E935960403E5357A088D7C85FD545115F71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:23:71:4e:bf:ce:34:3a:ef:e1:d3:05:d1:
                    cd:07:0b:46:35:1f:fb:9a:08:3e:cc:9d:f5:0f:62:
                    06:ae:cb:dc:79:83:39:7a:58:c5:7c:97:06:33:2d:
                    9f:21:43:b0:79:cf:4b:7b:6e:0e:86:a7:20:c4:0a:
                    17:61:d3:87:80:66:25:78:55:79:67:c8:d7:e5:06:
                    e2:ed:d7:7f:75:20:04:ce:80:a5:51:f0:3d:92:5e:
                    36:05:cc:3e:36:f2:05:3e:b6:2d:ba:be:f8:90:0a:
                    23:5f:e1:bb:c3:f6:7b:38:f9:f0:55:ef:91:47:3e:
                    8c:0d:1d:8f:32:42:7a:da:b4:05:22:09:5e:c8:ea:
                    70:02:0c:b0:b6:fb:79:5f:82:f3:47:98:43:32:c2:
                    b2:5c:4e:a8:51:84:55:60:8e:4b:0c:1a:b1:c7:fc:
                    b1:88:8e:b7:aa:5f:55:f1:68:a8:92:dd:c0:b2:98:
                    1a:e3:8e:cd:6f:4f:10:61:43:62:5d:dd:51:d9:84:
                    69:50:0d:e1:b1:c9:10:63:a5:dd:86:dc:7e:b9:ff:
                    56:52:08:79:5c:58:48:7a:07:44:5d:0c:6a:68:16:
                    f1:1b:6a:a1:3c:8a:42:f1:2f:19:28:d1:1c:a9:63:
                    06:e1:58:be:0c:f5:30:6a:d2:db:6a:0b:ba:65:c4:
                    0c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:36:E9:35:96:04:03:E5:35:7A:08:8D:7C:85:FD:54:51:15:F7:1F
            X509v3 Authority Key Identifier:
                keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:df:f4:90:57:20:82:bc:a8:51:1e:17:fc:a9:9b:c8:19:84:
         a1:bb:59:91:af:74:af:a9:f8:b1:a2:af:b1:8d:90:25:9e:b4:
         1e:a5:67:2d:e8:bb:83:30:98:ba:26:7c:6f:af:b8:73:60:90:
         82:c3:ae:2d:86:8e:9e:5c:8a:ed:d0:9b:9e:05:9b:7e:d2:5b:
         f7:f8:32:be:7a:65:fa:ea:81:3a:ca:94:78:1f:f8:7b:cc:d1:
         58:5a:51:5d:75:e0:e4:a9:c8:7d:95:ca:58:f6:5c:21:94:fb:
         ee:5a:ab:ad:4e:4f:9a:31:72:29:86:ee:b1:df:b1:87:9a:e8:
         6b:49:51:ed:44:66:c7:48:67:4e:95:18:10:f8:0c:3c:8b:f5:
         7f:40:51:d8:f5:c9:54:16:b8:34:73:24:62:ec:03:5c:31:6f:
         1e:b1:b1:eb:d0:64:f2:61:6f:74:a3:07:45:22:8e:84:cb:50:
         a9:49:0d:12:73:00:7e:ca:cb:8d:af:ff:c7:36:06:3d:db:47:
         09:1c:a6:c6:87:00:eb:30:7e:8a:28:79:11:6a:84:00:58:f1:
         0e:ed:46:70:4d:fb:ea:f0:d3:0c:d8:c2:d1:76:34:95:28:3d:
         8d:4d:43:98:d4:51:b3:7f:40:08:f4:e7:de:e2:6f:df:7f:71:
         b5:60:cd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:03:06 2025 by rpki-client