Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
File:                     47C87696529FAF404AF0E8681AAFA8F224187D59.mft (raw, json)
Hash identifier:          aoOnOiXDwCsaSOVxZ+boIRvm8FhCQPUUn99cGIzlIYQ=
Subject key identifier:   BF:29:CB:3F:07:BB:09:35:D5:38:3D:F1:0D:C0:38:8C:F1:8A:19:E7
Authority key identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59
Certificate issuer:       /CN=47C87696529FAF404AF0E8681AAFA8F224187D59
Certificate serial:       5EB24FC80CFB372F513B5A72B4C7ECC0BAD5049B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
Manifest number:          04A8
Signing time:             Mon 02 Jun 2025 14:11:03 +0000
Manifest this update:     Mon 02 Jun 2025 14:06:03 +0000
Manifest next update:     Thu 05 Jun 2025 15:43:03 +0000
Files and hashes:         1: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: jnhIwx03UauIIk4jQYORMW4E9+8OTi1hP5M4TRVep5Y=)
                          2: 47C87696529FAF404AF0E8681AAFA8F224187D59.crl (hash: DgyumrJCc2l4rlWz/bYf3ve4uVdNSI2F6BCUCEcbFU8=)
                          3: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: RSSKQ80qetxdl3Vs6AqHUHNTYF+l0dFEx0uWms41D5o=)
                          4: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: Z0Nbz1XibnxNyKBNr2zQqXw+MKf+eHjiJCZdkBIGrIo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl
                          rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Jun 2025 15:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b2:4f:c8:0c:fb:37:2f:51:3b:5a:72:b4:c7:ec:c0:ba:d5:04:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47C87696529FAF404AF0E8681AAFA8F224187D59
        Validity
            Not Before: Jun  2 14:06:03 2025 GMT
            Not After : Jun  5 15:43:03 2025 GMT
        Subject: CN=BF29CB3F07BB0935D5383DF10DC0388CF18A19E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:29:50:19:ba:17:05:2b:5d:66:7f:a1:2e:
                    c6:6f:c5:a3:24:6b:7d:f6:c9:89:ea:a3:2c:a0:6e:
                    c5:3b:9d:cd:c3:c4:bf:fb:72:26:8f:45:87:45:98:
                    d8:ec:b2:91:a5:b1:5f:ab:7f:99:98:44:7e:fe:2e:
                    58:20:21:46:73:68:eb:2a:ce:3f:fc:2c:2e:5f:97:
                    43:3f:db:95:92:c3:a6:87:a9:78:90:8e:81:8d:33:
                    00:46:64:63:d4:be:1c:49:d3:3b:55:a7:04:ad:61:
                    90:62:70:c9:5a:a0:08:e3:3e:95:c8:2b:d3:80:c6:
                    6a:78:5b:04:fb:b8:5b:91:1c:c0:bb:9d:bc:32:c5:
                    33:f9:88:eb:6b:2a:92:2d:06:d4:07:f5:cf:ba:4a:
                    94:a1:64:9a:30:0c:55:43:e2:db:64:ac:bb:0b:73:
                    58:45:71:1c:59:16:38:e9:02:b8:eb:d4:99:67:8c:
                    a4:ae:46:be:97:ad:2d:29:52:04:15:e3:d7:be:ec:
                    21:68:41:48:cd:6b:9f:8d:6b:57:c4:91:c6:47:09:
                    ab:a4:82:db:4b:fa:31:0a:2c:bf:a7:7f:00:a1:e9:
                    c8:84:74:20:46:e0:2f:f8:04:15:ab:6c:ab:2e:a4:
                    3b:2a:2e:c2:4c:3c:5a:95:72:af:9c:5c:e9:3c:3e:
                    2e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:29:CB:3F:07:BB:09:35:D5:38:3D:F1:0D:C0:38:8C:F1:8A:19:E7
            X509v3 Authority Key Identifier:
                keyid:47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:99:d6:30:24:de:ef:0e:f6:04:89:fb:17:c1:a9:63:11:c6:
         48:e8:9e:02:f4:2d:d1:97:9c:39:6b:26:cb:a8:6c:39:f7:0a:
         5d:3b:82:66:92:dd:6f:05:f7:d2:e9:66:ee:6a:29:72:08:ef:
         0b:3b:e5:93:8d:2a:05:55:01:36:c5:6c:6b:3d:77:f6:4d:e8:
         6a:78:03:26:8a:94:9f:7f:74:84:1b:26:c5:35:2c:65:16:84:
         85:95:26:2d:e9:d4:21:6f:4e:a4:50:22:8f:e4:cf:3b:f8:d5:
         e5:ca:b6:76:71:47:3d:93:9c:a0:e8:35:e7:72:73:86:c5:78:
         00:1a:26:9d:31:28:6c:07:f1:33:41:b9:b9:ab:24:be:a8:39:
         a1:52:84:8c:0d:83:c1:c8:95:f2:44:39:c2:68:48:8c:29:fd:
         98:0b:79:e9:ea:76:63:0b:63:ed:8d:b9:51:d7:be:7d:d4:1d:
         1d:e2:44:46:51:8e:54:e5:fc:b0:03:03:2f:aa:03:e0:48:b2:
         c6:9c:42:41:09:29:e5:29:54:6c:37:60:1a:64:24:e8:e6:e4:
         ef:2e:d9:8b:42:2d:4a:24:5d:6d:84:40:69:14:1e:71:4c:6c:
         dc:00:b4:bf:12:59:27:7d:62:c9:57:de:d4:5b:93:dc:29:9e:
         aa:3e:12:eb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXrJPyAz7Ny9RO1pytMfswLrVBJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIy
NDE4N0Q1OTAeFw0yNTA2MDIxNDA2MDNaFw0yNTA2MDUxNTQzMDNaMDMxMTAvBgNV
BAMTKEJGMjlDQjNGMDdCQjA5MzVENTM4M0RGMTBEQzAzODhDRjE4QTE5RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSgSlQGboXBStdZn+hLsZvxaMk
a332yYnqoyygbsU7nc3DxL/7ciaPRYdFmNjsspGlsV+rf5mYRH7+LlggIUZzaOsq
zj/8LC5fl0M/25WSw6aHqXiQjoGNMwBGZGPUvhxJ0ztVpwStYZBicMlaoAjjPpXI
K9OAxmp4WwT7uFuRHMC7nbwyxTP5iOtrKpItBtQH9c+6SpShZJowDFVD4ttkrLsL
c1hFcRxZFjjpArjr1JlnjKSuRr6XrS0pUgQV49e+7CFoQUjNa5+Na1fEkcZHCauk
gttL+jEKLL+nfwCh6ciEdCBG4C/4BBWrbKsupDsqLsJMPFqVcq+cXOk8Pi6RAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvynLPwe7CTXVOD3xDcA4jPGKGecwHwYDVR0j
BBgwFoAUR8h2llKfr0BK8OhoGq+o8iQYfVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZjYxZjA0ZC0xOGU3LTQyZmYtYWU4Mi1kNTY1NTRmOTI2NGMvMC80N0M4NzY5NjUy
OUZBRjQwNEFGMEU4NjgxQUFGQThGMjI0MTg3RDU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIyNDE4
N0Q1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl
ODItZDU2NTU0ZjkyNjRjLzAvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4
RjIyNDE4N0Q1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAWZ1jAk3u8O9gSJ+xfBqWMRxkjongL0LdGX
nDlrJsuobDn3Cl07gmaS3W8F99LpZu5qKXII7ws75ZONKgVVATbFbGs9d/ZN6Gp4
AyaKlJ9/dIQbJsU1LGUWhIWVJi3p1CFvTqRQIo/kzzv41eXKtnZxRz2TnKDoNedy
c4bFeAAaJp0xKGwH8TNBubmrJL6oOaFShIwNg8HIlfJEOcJoSIwp/ZgLeenqdmML
Y+2NuVHXvn3UHR3iREZRjlTl/LADAy+qA+BIssacQkEJKeUpVGw3YBpkJOjm5O8u
2YtCLUokXW2EQGkUHnFMbNwAtL8SWSd9YslX3tRbk9wpnqo+Eus=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:12:02 2025 by rpki-client