Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
File:                     3703AC4154F05B1E642F31DEF71A238407E82D59.mft (raw, json)
Hash identifier:          L4nfcjJ6PtRXnNCj+8exux/qmY/N57GwEXrG75Jb6IE=
Subject key identifier:   CC:B3:13:81:4D:91:AF:71:B5:FE:FC:E0:19:9D:01:8C:C7:ED:CA:3E
Authority key identifier: 37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59
Certificate issuer:       /CN=3703AC4154F05B1E642F31DEF71A238407E82D59
Certificate serial:       74E972E6985103C02C0648B00410202FD3CAF6A0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
Manifest number:          0482
Signing time:             Thu 05 Jun 2025 10:50:50 +0000
Manifest this update:     Thu 05 Jun 2025 10:45:50 +0000
Manifest next update:     Sun 08 Jun 2025 14:44:50 +0000
Files and hashes:         1: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: 2wmGpgdLLad+yQRBpECeWO5okHIOK5XLuX+ZtyFeGtw=)
                          2: 3703AC4154F05B1E642F31DEF71A238407E82D59.crl (hash: WU3hzcghKI5goeDtoaZa2otBDdSlx187F0YjUFV3ik4=)
                          3: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: +Sh30nDK5FN0F+rgaXdcf8t+v+X9RkFfwm8Ti8cbstU=)
                          4: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: b4KiMwiJASyBICznuxWYSVpBPiU9qpEIZ1f+n3s+3IM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl
                          rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 14:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e9:72:e6:98:51:03:c0:2c:06:48:b0:04:10:20:2f:d3:ca:f6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3703AC4154F05B1E642F31DEF71A238407E82D59
        Validity
            Not Before: Jun  5 10:45:50 2025 GMT
            Not After : Jun  8 14:44:50 2025 GMT
        Subject: CN=CCB313814D91AF71B5FEFCE0199D018CC7EDCA3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:bf:4a:6b:94:b3:0f:98:67:24:61:45:07:
                    4d:1c:0d:9c:23:a0:10:e0:ce:7a:6f:07:e1:16:58:
                    c8:0e:ec:d3:52:80:11:62:9e:fe:cf:20:2d:eb:b2:
                    fc:3d:97:3b:c8:e7:56:70:7d:1d:6b:cc:8f:5f:ff:
                    84:56:b5:f3:ff:dd:71:a5:7e:d3:0c:18:26:b7:3c:
                    48:33:6e:9f:0c:50:e0:e8:6f:6c:c6:86:9c:2f:23:
                    83:c4:77:92:12:da:67:9d:30:2b:c6:8f:2b:b6:50:
                    6f:ae:8b:f7:59:bc:82:0c:9b:8a:ef:a9:4d:bc:ba:
                    57:3d:2e:a8:41:ca:20:1b:d3:d7:f1:07:ef:b3:b4:
                    76:e2:e8:c1:e6:51:58:8b:8e:28:a3:03:26:3d:8a:
                    09:6d:04:4c:36:29:24:02:12:ca:69:2c:8e:9e:aa:
                    c6:34:51:5b:e4:b4:1e:bd:33:ad:18:04:a8:ab:cb:
                    bb:1e:a8:b1:96:18:32:3b:67:87:57:12:27:05:ab:
                    3e:73:42:9b:e3:3a:8a:df:b3:27:02:2c:30:c6:a6:
                    24:8d:0b:db:c8:00:a6:7b:6d:14:7d:c4:0b:78:17:
                    32:c5:13:cd:a9:3f:ea:df:ca:3b:87:13:60:61:4c:
                    51:9c:a5:c3:d1:31:28:4c:b0:c4:64:6b:45:09:cc:
                    2f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B3:13:81:4D:91:AF:71:B5:FE:FC:E0:19:9D:01:8C:C7:ED:CA:3E
            X509v3 Authority Key Identifier:
                keyid:37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:09:5c:a7:08:a7:87:14:97:33:41:9e:bc:6a:cd:b8:0d:5f:
         60:28:c0:d1:fa:4d:57:fb:cf:c4:43:40:cf:6b:fa:ae:30:da:
         58:e6:e8:65:c9:b6:64:48:0e:63:0f:fe:44:c9:a5:0c:99:55:
         53:4c:fb:0c:ee:a5:dc:4d:0f:89:98:04:b2:22:a4:f6:17:17:
         78:2e:15:f3:ee:e2:d2:4f:8f:8d:04:b2:6d:60:02:8d:d9:07:
         fc:c5:05:2f:d0:16:af:a1:15:61:4b:b4:bd:c2:8b:f0:45:96:
         9e:4c:46:38:a1:94:70:ce:14:d5:c1:8a:40:8c:f8:4b:16:15:
         44:45:9d:89:6a:e8:ac:07:cb:0d:d1:73:c3:2c:90:19:70:0b:
         88:44:08:32:e3:a4:e5:ba:d5:cc:d8:a9:f5:eb:f5:fc:4f:a8:
         64:ff:46:d9:56:55:74:05:b4:73:ea:01:ae:d8:fb:5a:c1:44:
         31:0a:4a:2f:4b:bb:f2:db:ca:61:86:26:98:59:cb:03:21:a7:
         ca:e6:f6:bb:cb:0f:c6:7d:4b:45:a4:86:fe:12:a8:f3:10:70:
         c8:32:5f:2e:02:56:97:87:ab:3f:80:ae:55:75:eb:d1:c6:74:
         8e:79:96:7e:9c:0e:5a:66:c8:6a:ae:74:ec:d5:32:47:be:35:
         4a:b7:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:45:35 2025 by rpki-client