Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft
File:                     B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft (raw, json)
Hash identifier:          Yarkxw1VFfXDs231Mpq1kyGAvwY/vWb4NDxlGS+nkA8=
Subject key identifier:   C4:0D:2E:53:F8:8C:3B:88:8A:F8:3D:04:1B:F8:96:D6:F6:86:DD:88
Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9
Certificate issuer:       /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9
Certificate serial:       51C52CCD5DAA654950855376E73B2ED23E16D4DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft
Manifest number:          A5
Signing time:             Mon 09 Jun 2025 18:02:11 +0000
Manifest this update:     Mon 09 Jun 2025 17:57:11 +0000
Manifest next update:     Fri 13 Jun 2025 02:51:11 +0000
Files and hashes:         1: B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl (hash: sn87PoLqP4CqM3pxtdAxeLrFzgZOIiJYyiuUH1K6PnA=)
                          2: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: k1BTnGnPNw0i2wtiBbJt3qzZFQFL5+IIGvpK+mUck6M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl
                          rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 02:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c5:2c:cd:5d:aa:65:49:50:85:53:76:e7:3b:2e:d2:3e:16:d4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9
        Validity
            Not Before: Jun  9 17:57:11 2025 GMT
            Not After : Jun 13 02:51:11 2025 GMT
        Subject: CN=C40D2E53F88C3B888AF83D041BF896D6F686DD88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7b:df:bb:5b:fb:6c:0c:75:b1:4f:84:dd:28:
                    73:57:5d:11:60:31:ab:19:9e:b1:76:aa:fe:18:f5:
                    50:f3:cc:09:8c:39:46:a5:24:51:96:2d:c2:02:b2:
                    b1:09:65:49:fc:11:b6:bd:1e:4a:1b:39:42:b9:b0:
                    a6:34:31:d2:f1:84:47:84:e8:1e:d3:e3:ef:f0:08:
                    92:08:6a:ea:d4:f1:47:1d:aa:e0:56:09:ae:c9:a5:
                    4d:a8:b1:2e:77:d7:61:81:04:01:54:c1:24:a3:2c:
                    83:2b:b7:cc:70:82:44:42:4d:88:2e:ed:5f:15:ed:
                    02:48:8f:1d:d7:6c:fa:87:98:3f:cf:bd:ce:c0:95:
                    f0:a3:e3:2c:6f:b2:57:28:df:39:6a:c4:36:00:97:
                    83:14:77:53:4f:4d:ac:d1:7c:e2:45:23:82:31:6d:
                    a0:f7:86:01:51:8e:36:55:dc:a5:61:ab:06:d4:47:
                    59:49:30:b9:5e:66:7b:19:2a:bb:2c:5e:68:5a:99:
                    4d:4e:1a:ae:0f:de:df:36:6d:1c:2d:a0:59:08:de:
                    4b:ca:95:a0:30:1c:5f:da:19:7e:60:5b:41:8a:97:
                    2d:68:e9:b1:73:20:06:4a:97:94:29:3c:47:a1:d5:
                    c6:99:a7:96:74:76:74:18:71:91:27:63:38:d2:de:
                    33:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0D:2E:53:F8:8C:3B:88:8A:F8:3D:04:1B:F8:96:D6:F6:86:DD:88
            X509v3 Authority Key Identifier:
                keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:de:c0:35:c0:cf:fd:34:4d:71:f2:c1:15:b2:8c:8e:e5:29:
         65:8e:88:58:90:9a:b0:56:28:1a:dc:91:fc:76:49:7c:b4:d3:
         f5:1f:f2:55:71:fb:0d:2c:71:aa:bd:9c:c6:ae:c0:12:43:a3:
         ff:ef:5b:f6:29:aa:74:51:67:db:3b:14:28:62:35:b7:fe:b8:
         80:6e:f4:5a:1d:a8:b4:74:45:61:c7:68:ea:41:9f:59:b5:18:
         95:a9:8f:b1:a8:7d:bd:c2:dd:ac:1f:b9:60:83:d2:f1:b4:fd:
         bd:e6:1c:d1:fd:0e:35:82:02:8d:75:cb:95:41:cf:17:2c:40:
         12:41:fb:89:f1:8c:f0:b2:c3:98:d4:8f:da:e6:e0:c4:7a:db:
         ca:77:8b:1f:eb:40:38:5a:d6:62:3c:81:91:9b:82:ae:f9:ed:
         fa:43:d4:63:8b:35:4b:b1:b9:78:e6:c5:2d:e6:d4:b8:67:46:
         27:89:28:ef:91:ba:58:4b:db:19:36:b4:ca:2b:9e:18:b0:bc:
         3d:e2:9b:da:49:6d:f5:75:8f:13:07:26:4f:5b:26:54:09:83:
         be:78:46:d9:3c:ff:7b:7b:5e:97:76:79:fe:53:1c:0a:43:22:
         ed:68:32:a6:92:43:f9:0f:0e:c9:19:b8:35:e0:7d:27:df:74:
         c3:44:8c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:19:27 2025 by rpki-client