Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft
File:                     C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json)
Hash identifier:          kaAKlUrImAom5y5Naj/5paxkb8IUIYlGAHQk31je8/g=
Subject key identifier:   FF:70:D9:A4:56:98:54:FF:71:B1:72:2F:C7:11:4C:35:EA:BB:9D:1A
Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7
Certificate issuer:       /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7
Certificate serial:       5DE7D98B26AD16DA6777142CCB42FC45F1A8F8E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft
Manifest number:          0376
Signing time:             Thu 24 Jul 2025 02:30:59 +0000
Manifest this update:     Thu 24 Jul 2025 02:25:59 +0000
Manifest next update:     Sun 27 Jul 2025 05:39:59 +0000
Files and hashes:         1: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: sUwIU/syNQqaGfCRd1Mc+bLlJ+3fWphud3QYA/6SdaE=)
                          2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: hAifdy6n3EEv/s/U7m2QFZ7o/goV8EGLrnmjZEec078=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl
                          rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 05:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e7:d9:8b:26:ad:16:da:67:77:14:2c:cb:42:fc:45:f1:a8:f8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7
        Validity
            Not Before: Jul 24 02:25:59 2025 GMT
            Not After : Jul 27 05:39:59 2025 GMT
        Subject: CN=FF70D9A4569854FF71B1722FC7114C35EABB9D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:98:72:1a:c5:06:6b:ce:9b:a3:97:8f:73:c6:
                    cc:bf:de:30:73:8a:86:ad:df:6e:66:cc:b0:92:f3:
                    27:b8:48:2f:88:ae:87:e0:87:c7:3f:1e:db:d0:59:
                    80:b1:4d:7d:9d:03:00:eb:36:2f:84:87:37:fd:bf:
                    1b:47:cc:f7:0f:97:79:0a:50:ae:a3:1c:c9:35:d5:
                    54:34:bf:54:50:35:fe:c8:db:71:4a:c0:08:4a:3e:
                    15:38:75:2b:4e:47:ba:ae:64:ee:5b:2f:bf:d8:f7:
                    f6:76:f4:c1:4f:15:cd:64:e8:a7:df:c6:ce:36:31:
                    c1:a6:ce:34:5e:42:69:51:ee:40:4c:3c:b3:41:d2:
                    14:14:bd:ab:b0:3d:11:cc:dd:58:6d:dd:f4:da:27:
                    e7:c3:96:6f:3d:6b:da:fd:d5:04:07:52:2c:59:a3:
                    a0:90:f9:be:87:cb:09:70:10:1d:d8:85:2c:40:72:
                    75:37:d6:c9:e8:1d:a9:6b:ef:73:fe:8b:b5:1a:53:
                    21:75:f0:23:c7:67:08:fb:ff:54:1f:21:8f:f6:5c:
                    7b:d2:d4:dc:b9:a8:52:e9:bc:c9:4a:fc:cd:57:d0:
                    f9:22:d4:f9:4d:ec:a3:94:53:a6:0b:65:60:52:6e:
                    f1:71:b5:3f:db:d6:62:39:73:79:b5:b4:ae:33:92:
                    19:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:70:D9:A4:56:98:54:FF:71:B1:72:2F:C7:11:4C:35:EA:BB:9D:1A
            X509v3 Authority Key Identifier:
                keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:aa:9c:b3:61:33:08:d8:cc:86:7d:4a:b0:65:47:1c:cf:2a:
         b5:bc:aa:73:75:ed:c3:13:61:c9:02:80:4a:3a:65:34:dc:d3:
         4b:7d:60:f0:9b:00:04:2e:f8:68:60:be:58:2d:82:a4:a5:c0:
         51:85:eb:fd:1d:9e:03:2f:53:8c:10:9c:c6:be:b2:fd:9e:21:
         65:b3:e8:61:cd:5c:77:fd:18:e9:f4:c9:e7:02:68:c5:40:a1:
         e5:09:4f:f3:2e:15:47:28:43:1a:f5:0f:60:4f:be:8e:ea:d6:
         23:6a:2c:b3:2d:8e:05:67:0a:a6:5b:d4:6b:77:b3:cd:1c:18:
         fd:de:b8:a1:02:35:41:4f:64:ec:08:56:5c:c9:83:60:09:f6:
         88:5c:92:c4:12:c1:a8:02:a7:0b:d5:79:63:e4:21:38:10:69:
         3b:56:7a:4c:8f:a8:95:f9:25:58:f4:81:bb:0e:02:ee:08:28:
         f2:62:84:0c:fb:5f:44:5f:7b:b1:a4:33:fd:fa:3c:72:d4:50:
         9a:2b:66:7a:1e:97:bc:f9:f5:8c:ed:a9:9a:db:64:11:75:26:
         4b:e0:9b:3a:b5:2f:1e:08:ac:50:18:7f:dd:3a:9d:a4:0d:0a:
         e4:8f:fc:ad:00:d1:0e:33:a7:0e:1f:58:86:86:2e:d7:02:f0:
         e4:76:1a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:06:41 2025 by rpki-client