Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
File:                     104563E8068F3AE19631B1F43A5C9A47466100AC.mft (raw, json)
Hash identifier:          DU20ZVSVC7tmTKyZMs7M76YspIgoSkDz7kIk0cxfBRA=
Subject key identifier:   43:D6:C1:AD:DB:C5:23:6C:90:D2:B1:DC:20:A6:78:C2:92:1C:B9:52
Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
Certificate issuer:       /CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Certificate serial:       5CD9440907A073B3076873FC4160F6F3C4E5FCBA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
Manifest number:          02E7
Signing time:             Sun 06 Apr 2025 09:21:17 +0000
Manifest this update:     Sun 06 Apr 2025 09:16:17 +0000
Manifest next update:     Wed 09 Apr 2025 14:22:17 +0000
Files and hashes:         1: 3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (hash: SlI7AhoOF3We3sIYmVmNNifD2NycJGbtgvQxMW2JHqo=)
                          2: 104563E8068F3AE19631B1F43A5C9A47466100AC.crl (hash: KknC6BJgUIkvhTXJucaAQ6T7PUZ7P6MS1xSm/5ekLjs=)
                          3: 3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (hash: BOFN0GMI61kC/DiDrBY854XkvtU/vjRFMol08vmHoXk=)
                          4: 3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (hash: 8dCWJ4ZQZt5WChh6Narmgjs82k0+OBaAdDRG1XGcKLQ=)
                          5: 3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (hash: E2yYTsCk6Z9EhH3CuGS/JtKeUD/mcVjv2foriJG4teo=)
                          6: 3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (hash: LeUyJ9o4fhoz/H6h0dDJDWn+lC9aUUwyzbGZ89Ocfng=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
                          rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 14:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d9:44:09:07:a0:73:b3:07:68:73:fc:41:60:f6:f3:c4:e5:fc:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC
        Validity
            Not Before: Apr  6 09:16:17 2025 GMT
            Not After : Apr  9 14:22:17 2025 GMT
        Subject: CN=43D6C1ADDBC5236C90D2B1DC20A678C2921CB952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:61:fb:8a:53:16:73:6e:33:e2:33:f6:e3:ac:
                    b6:de:bf:29:a8:f2:0e:0b:a1:b4:15:76:03:dd:eb:
                    ed:b2:47:0a:f6:be:79:66:88:dd:26:d6:72:08:f8:
                    df:36:a2:e7:a4:48:49:58:79:3d:53:95:09:05:c9:
                    ee:24:3b:7b:b5:52:81:6f:b5:70:09:26:74:47:8d:
                    f1:1f:2d:20:5f:ba:28:85:8a:db:60:99:35:25:28:
                    8a:37:3e:d9:db:40:2c:d2:10:7c:f3:0a:29:ce:dd:
                    d6:40:45:41:65:fa:68:34:d8:b0:b5:21:1f:47:24:
                    c2:2f:ef:65:48:3c:4d:7d:8f:78:0c:e9:a9:de:8f:
                    8f:58:06:66:f8:79:7d:ea:6b:82:62:e3:e8:40:be:
                    03:60:b0:17:9b:96:4d:d1:3d:df:42:e6:ba:87:a7:
                    a6:ef:50:ea:b2:36:58:8c:ad:66:18:a9:35:6d:09:
                    89:04:64:dc:b1:f4:34:aa:90:db:60:8b:7a:a3:9c:
                    13:cf:7a:ea:6b:2b:db:0b:89:7b:c8:18:ec:21:32:
                    4c:bb:2b:08:c7:f2:ba:23:e0:6f:b4:2d:21:89:02:
                    27:db:0b:e6:d4:a9:0a:92:23:67:fe:82:58:86:3c:
                    69:24:2c:0f:6b:e7:09:a6:9a:5a:de:1d:aa:0e:d9:
                    9b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D6:C1:AD:DB:C5:23:6C:90:D2:B1:DC:20:A6:78:C2:92:1C:B9:52
            X509v3 Authority Key Identifier:
                keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a2:26:57:5b:bf:fd:6b:0b:6e:3f:07:da:ab:b8:e9:f0:f0:
         a2:ec:a4:5c:7b:9e:cf:da:23:74:02:2e:c8:1e:6e:6b:cf:61:
         de:ca:fc:dc:a5:17:18:77:fa:4a:e2:58:7f:f7:fe:83:f4:8d:
         26:83:c2:7c:03:be:e8:34:8e:bc:90:a2:c1:ea:9d:42:02:12:
         aa:fe:40:4e:9b:d5:94:ea:d5:5e:55:d9:58:09:44:40:ec:26:
         17:a2:55:25:41:61:a9:1b:5b:34:e1:0a:c5:94:e7:f7:70:19:
         d3:dd:9b:28:1f:15:d5:bd:03:c4:eb:0b:d7:06:b1:67:23:a5:
         cd:f3:80:e1:05:a0:a8:df:ea:f6:f0:5a:59:e9:ce:71:ad:d3:
         81:cd:29:3c:f5:31:ad:e7:95:30:d2:cd:b6:64:b1:6b:2f:da:
         1c:4e:d3:1a:34:cf:b1:10:79:a2:49:45:fe:d8:66:c3:f8:29:
         4e:23:96:2a:61:8b:50:ab:6a:cc:31:e5:b5:92:83:5f:56:4c:
         e0:03:83:8d:01:dc:bc:fc:a2:d0:29:95:4f:76:44:f5:39:84:
         80:9a:91:03:80:76:c8:61:3f:e6:06:99:dc:45:fc:2b:b4:29:
         9f:42:ec:1e:ab:95:1f:c1:11:54:75:7a:86:96:be:94:a9:ae:
         46:be:2a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:38:43 2025 by rpki-client