Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
File:                     C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json)
Hash identifier:          rmAqNl6qZSjWsgVwsrqG8c9RjuYm8rJvj0UaHP/UhaQ=
Subject key identifier:   23:DB:0A:BD:72:88:5F:CD:BF:5B:D2:7D:1E:F0:29:60:E3:DA:72:38
Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90
Certificate issuer:       /CN=C710954C7B301C60B82BA6372CACEB81DA08F190
Certificate serial:       63D3FA62DBB2F315BD4B16DAF0E2CAD951AA3013
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
Manifest number:          0486
Signing time:             Fri 04 Apr 2025 02:10:04 +0000
Manifest this update:     Fri 04 Apr 2025 02:05:04 +0000
Manifest next update:     Mon 07 Apr 2025 05:14:04 +0000
Files and hashes:         1: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: YO37Y3eimIDdIo7K6UBGoqei0FiSorzSwQwRwyZtXq8=)
                          2: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: Yj0BNO99plyx2bDjW2f3tBF1NSElh9aB7Woj2vWIxjQ=)
                          3: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: UlAh8zKWIPZHwNHmAImvacovNeaS9Y+qOJYX1Qlb9uc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl
                          rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 05:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d3:fa:62:db:b2:f3:15:bd:4b:16:da:f0:e2:ca:d9:51:aa:30:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190
        Validity
            Not Before: Apr  4 02:05:04 2025 GMT
            Not After : Apr  7 05:14:04 2025 GMT
        Subject: CN=23DB0ABD72885FCDBF5BD27D1EF02960E3DA7238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:67:46:36:61:c8:21:27:44:67:42:a5:9e:de:
                    71:ca:6e:23:e9:51:46:63:32:1a:10:5a:68:97:f3:
                    a0:11:ef:44:29:d5:2c:cd:4b:8e:9e:e8:3c:e5:4c:
                    1a:e8:a1:29:e3:50:6d:36:2d:5e:61:1c:52:51:e7:
                    31:bf:9e:42:e6:7c:95:b0:db:96:1d:18:8a:fa:f0:
                    2a:4b:0d:65:a4:d1:33:ae:f6:21:98:9a:7a:40:38:
                    9b:15:47:76:6b:d4:b3:a4:4e:2d:f9:24:4c:19:91:
                    71:a0:55:a9:c6:5c:ed:74:f3:25:a1:3a:10:8e:1f:
                    e8:74:ca:d3:2d:19:8e:49:f2:d1:ac:0e:7e:3d:9d:
                    1d:65:ec:87:fb:55:c9:51:1b:c8:f0:b3:51:db:7c:
                    96:4a:84:d3:15:62:cf:fb:21:bd:6d:a1:84:b1:ad:
                    4d:2a:dc:2b:a7:50:8e:11:cb:ee:68:a4:d6:28:0b:
                    64:59:9b:cb:af:70:ca:00:b5:c4:5f:9f:2a:00:2c:
                    74:2f:c6:b8:ac:ed:3c:80:81:39:24:38:1c:06:68:
                    f6:89:47:6b:76:78:49:15:fa:a0:25:dd:9c:81:f7:
                    09:54:a0:22:58:59:fb:f2:e3:f2:ac:59:ee:14:c9:
                    9e:9b:81:e6:7c:1a:8e:cb:78:58:b9:04:c5:42:5b:
                    72:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DB:0A:BD:72:88:5F:CD:BF:5B:D2:7D:1E:F0:29:60:E3:DA:72:38
            X509v3 Authority Key Identifier:
                keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:9a:b0:50:33:02:13:a2:bb:ad:bd:3e:79:3d:35:7c:3a:77:
         9c:f8:7e:2a:d4:98:5f:7e:1f:40:97:7e:51:ae:be:72:2e:d2:
         93:3f:1c:c2:ca:62:bd:3d:23:4e:ce:d0:1c:82:6a:e1:3d:e4:
         7c:4d:0c:99:db:86:86:c1:2d:00:2b:bc:8a:23:b3:fa:ac:14:
         d6:fc:39:d6:00:a1:af:e5:04:e2:b3:49:75:72:35:8d:8a:65:
         5f:ea:99:a0:6b:42:b7:4a:34:e0:14:8e:95:1d:42:fa:30:46:
         ce:0e:c1:49:a6:2d:5b:65:7b:32:8b:3b:24:70:06:1e:1b:20:
         dd:d0:0a:40:59:59:4a:3c:eb:ee:81:00:e0:6b:d3:48:d2:2f:
         ba:88:d1:b8:7a:b8:fc:d0:f7:dd:a2:e5:98:ff:ba:b8:40:37:
         86:81:c7:05:ad:62:c4:ae:35:a3:68:1c:01:31:cf:55:96:73:
         20:96:31:8d:7f:cc:27:7f:97:c1:be:dd:a9:fd:90:4f:6a:ac:
         53:78:12:8e:0e:5c:d6:77:8b:17:00:41:0f:5a:0c:b8:93:77:
         13:30:44:b5:c8:7e:1d:b1:69:f4:5e:45:a0:14:2f:3f:0a:37:
         53:a6:e4:45:b9:85:fd:1b:cf:0b:31:9a:9a:9f:c7:fa:aa:f3:
         64:c8:78:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:48 2025 by rpki-client