Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft
File:                     BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft (raw, json)
Hash identifier:          PoGOaerrNc/EeJbR319WRgbWi7CeWUGueDbvlCrucOs=
Subject key identifier:   90:1C:D4:B7:A6:5F:7E:7F:C1:86:5E:5B:49:56:12:F0:06:0B:04:64
Authority key identifier: BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B
Certificate issuer:       /CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B
Certificate serial:       483649B33716397DE5A87065952271AE7A26B391
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft
Manifest number:          0166
Signing time:             Fri 04 Apr 2025 19:31:13 +0000
Manifest this update:     Fri 04 Apr 2025 19:26:13 +0000
Manifest next update:     Mon 07 Apr 2025 23:57:13 +0000
Files and hashes:         1: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: CydGhUn3p1u4xZfx9Zchiu6R6+AqYD6N5mTo135Iu7E=)
                          2: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: 7k9VB041/h48tvLV9+2dfEpOlnSTzjrAAE0UGdiG0sw=)
                          3: BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl (hash: hGAEAHkj0+qgwpaeIUmvof0XyC7tcF1qMJ/gawY2xBc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl
                          rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:36:49:b3:37:16:39:7d:e5:a8:70:65:95:22:71:ae:7a:26:b3:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B
        Validity
            Not Before: Apr  4 19:26:13 2025 GMT
            Not After : Apr  7 23:57:13 2025 GMT
        Subject: CN=901CD4B7A65F7E7FC1865E5B495612F0060B0464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:07:af:7d:23:d4:7d:69:58:0f:bf:b8:7f:
                    48:29:88:5f:82:b6:2d:ac:a7:98:ce:ce:ef:de:a6:
                    f5:94:84:66:2a:39:61:73:d6:4d:48:af:82:dd:65:
                    5c:8e:65:99:67:0c:91:d5:22:3f:53:cf:32:00:fa:
                    a7:62:58:6c:e1:8a:be:f6:40:7d:9a:bd:88:39:81:
                    36:31:57:7f:25:89:f7:d5:72:67:eb:57:70:74:40:
                    da:49:0e:9d:4c:27:72:50:ea:9e:89:ab:07:66:9c:
                    d6:02:03:af:66:e7:6f:9e:dd:9e:48:f6:8c:4c:d8:
                    02:55:b7:18:91:e3:cc:8f:82:42:3e:55:4f:bf:17:
                    8f:24:63:66:72:68:4d:ad:00:cb:e9:81:d2:23:44:
                    93:40:d5:36:eb:20:fd:f1:76:50:73:81:53:78:13:
                    69:05:c0:a5:5a:cf:2e:51:29:63:10:65:e4:3c:a2:
                    d3:0e:bc:4f:f5:42:4c:24:7c:cc:3f:0b:ac:ed:04:
                    16:fe:2a:f8:ea:e3:38:61:72:f0:d8:86:84:a7:76:
                    70:72:f7:8d:05:6d:e2:f6:24:29:8b:71:fd:22:e2:
                    eb:3b:c4:98:14:d9:5e:f7:f0:59:0f:14:ae:5b:9a:
                    a4:a9:c9:3e:47:cc:74:cb:62:0b:15:99:2e:8f:65:
                    60:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1C:D4:B7:A6:5F:7E:7F:C1:86:5E:5B:49:56:12:F0:06:0B:04:64
            X509v3 Authority Key Identifier:
                keyid:BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e8:c7:8d:54:13:9b:ce:1b:4d:ba:f3:3b:fb:82:dd:e9:c5:
         88:db:5a:9f:d4:4e:84:96:4e:ce:2f:19:47:4c:7f:ea:54:74:
         6c:4f:d4:ba:1b:51:de:a9:ea:9c:50:51:e3:5e:82:ba:bc:7f:
         fd:01:0e:72:f8:a2:57:65:cd:3e:42:06:5f:69:a1:52:fc:82:
         f5:c4:a9:94:fe:cf:6c:08:5f:f5:f9:f1:fe:b2:3c:5f:d2:58:
         0c:a5:66:71:1f:c9:24:bb:e7:64:77:bd:ee:c8:1f:a5:1a:db:
         ed:0d:12:11:84:63:04:b8:a7:c2:5f:53:ac:f4:90:b4:d4:4d:
         c4:d1:7c:38:01:05:ad:88:9a:6a:d5:90:eb:9a:c0:5e:b9:4e:
         05:a2:6a:d4:b8:bd:9f:c2:0b:77:7f:79:64:fe:64:7e:17:39:
         e2:c3:b5:78:32:f8:14:d7:8e:21:85:8b:f4:38:d0:82:d4:6d:
         ec:98:97:38:cb:32:31:03:0a:17:c1:c9:11:1e:52:d2:26:cb:
         64:fa:7c:8b:b9:2f:fc:f4:5a:da:57:03:50:28:c3:e7:90:32:
         d0:ed:8c:c2:75:59:06:0d:68:39:d4:7a:c9:ff:6c:3e:a5:f0:
         38:74:c6:82:3c:81:e9:19:47:5b:4c:45:69:81:47:8b:23:25:
         aa:65:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:17 2025 by rpki-client