Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft
File:                     88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json)
Hash identifier:          nRJYWJjg+Ek29GF16TsSU7cmUCqFb17pwPh6/AAsVIo=
Subject key identifier:   82:58:7D:30:FE:9F:39:50:A9:23:BC:A0:E9:DD:2A:C2:72:FE:40:CD
Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6
Certificate issuer:       /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6
Certificate serial:       1C0914F226834CEA7C927D638457E2A39F080DD0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft
Manifest number:          E1
Signing time:             Tue 03 Jun 2025 11:25:42 +0000
Manifest this update:     Tue 03 Jun 2025 11:20:42 +0000
Manifest next update:     Fri 06 Jun 2025 12:17:42 +0000
Files and hashes:         1: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d0zP4gpEpMGDqRwrrELVhm3gEjbXDj5VKEiqUue8+NI=)
                          2: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: trDhhOMcGCRtpJzdR088aSo/+A0xOipuKhnFjYcx0HA=)
                          3: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: QJ05e1ZBS2Uj58i1r72MveV/BhCaFNwqieulWbtMxxk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl
                          rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 12:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:09:14:f2:26:83:4c:ea:7c:92:7d:63:84:57:e2:a3:9f:08:0d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6
        Validity
            Not Before: Jun  3 11:20:42 2025 GMT
            Not After : Jun  6 12:17:42 2025 GMT
        Subject: CN=82587D30FE9F3950A923BCA0E9DD2AC272FE40CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:40:19:80:f6:95:ff:ae:69:9d:54:d7:09:da:
                    58:c4:72:e0:46:36:2f:74:0e:49:07:ac:9a:60:33:
                    31:94:cf:cb:0b:8e:b4:4e:1c:45:97:f4:74:5c:71:
                    f4:7f:b8:33:3a:d3:1f:81:d4:14:1c:76:32:1b:e0:
                    16:39:98:7e:bf:85:b1:5e:ae:87:e1:fa:e6:74:08:
                    f7:14:92:5d:20:3f:d2:c1:b8:84:7a:1f:f4:9a:14:
                    8d:54:af:19:29:96:19:a9:6d:0c:a0:d4:8d:8c:e2:
                    67:1b:f9:0b:5e:14:d2:7c:44:b2:a9:a1:ea:6a:12:
                    8e:20:62:ec:9d:af:f7:69:21:1a:42:72:98:9b:8c:
                    f4:88:c0:42:0b:52:fc:5d:14:3b:85:ac:aa:18:40:
                    8e:43:98:dc:e4:2f:25:9f:1c:18:80:83:e1:5c:13:
                    9f:c5:ff:1b:cb:22:06:29:79:a8:a0:ca:1c:8c:96:
                    67:f4:7f:81:3c:be:b5:ee:f7:c7:6f:31:ef:46:c5:
                    3c:93:54:78:6e:5f:1a:c1:91:c0:40:5f:56:eb:25:
                    58:8e:f8:62:71:0b:ba:d1:c6:d1:6a:27:8e:1e:04:
                    8a:7a:a9:95:4b:ac:f6:50:fd:97:3a:0b:4a:54:ad:
                    93:23:48:3f:90:c9:c8:0a:ee:6f:eb:42:e8:42:c0:
                    2f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:58:7D:30:FE:9F:39:50:A9:23:BC:A0:E9:DD:2A:C2:72:FE:40:CD
            X509v3 Authority Key Identifier:
                keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9b:5a:11:e0:38:2d:2f:1c:cb:61:ce:cb:af:38:ed:90:b7:
         67:db:f1:ee:2a:a5:e4:a3:a4:46:51:5e:41:b6:78:e5:30:bb:
         0e:82:4f:e4:2d:97:6c:81:5f:ee:47:ee:e2:a5:7a:97:9d:0d:
         95:cd:28:31:7e:77:1d:e8:c5:13:ef:1a:64:b8:6d:90:28:67:
         c3:16:d7:d6:e0:47:54:05:d7:1f:33:1a:d5:8e:bd:31:5d:a6:
         59:57:9c:1b:eb:14:c9:ac:6b:01:7a:8d:fc:4e:09:2a:95:c9:
         3a:51:d3:44:28:84:de:36:bb:fb:19:d2:26:82:0c:d5:cc:f0:
         89:5c:21:49:fb:2b:b0:f3:f8:1c:a3:70:ba:e5:14:3f:f5:bd:
         e1:63:a2:cc:32:9f:04:b3:cc:bf:42:26:13:e0:4c:2b:f3:77:
         c1:34:31:71:2c:00:19:8f:35:ae:d5:86:62:90:e7:80:45:43:
         a3:f6:d2:a4:13:bd:19:30:19:a3:35:63:9b:58:46:95:1d:22:
         05:ba:67:00:b0:91:6a:42:a1:be:c3:e6:4a:df:31:76:b4:f2:
         a0:9b:a4:6e:23:4a:68:2a:91:2c:83:36:68:88:0c:df:3f:6e:
         38:12:d6:8c:5a:3f:6d:0f:d3:5e:ed:aa:d9:9e:3e:7b:ae:95:
         23:05:08:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:41:52 2025 by rpki-client