Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft
File:                     35B589224D641562D0CFE2019F733A965FC8E0C7.mft (raw, json)
Hash identifier:          8c6scFzFl33Gbipe0CCrnznH1gzahCLD+nqu1ec+Wi0=
Subject key identifier:   BD:D6:72:34:E8:6F:5F:0C:41:10:B8:DF:C6:FE:62:C8:90:9B:65:2F
Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7
Certificate issuer:       /CN=35B589224D641562D0CFE2019F733A965FC8E0C7
Certificate serial:       7F30178478A89847A2946C4CF1847F4C188C3080
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft
Manifest number:          0156
Signing time:             Tue 10 Jun 2025 13:11:07 +0000
Manifest this update:     Tue 10 Jun 2025 13:06:07 +0000
Manifest next update:     Fri 13 Jun 2025 18:48:07 +0000
Files and hashes:         1: 3130332e36392e3130372e302f32342d3234203d3e20313437303837.roa (hash: Zyj+cmEJLF5ueQ1WHGcb/jz6upmbCBDhF01uw2n8mqU=)
                          2: 35B589224D641562D0CFE2019F733A965FC8E0C7.crl (hash: 8CbNAuB81AhCVabgFiqmeXnvTEPXZt9laf74Nw28GWs=)
                          3: 3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (hash: UzX8Svg8RWfpm+6J8R9XONBilrHJl2/jgcv7jngYYIc=)
                          4: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (hash: vX6oIYot0ycD+h0R9asR+LMCFZ+FsK/gdUHsH6J7G3g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl
                          rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 18:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:30:17:84:78:a8:98:47:a2:94:6c:4c:f1:84:7f:4c:18:8c:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7
        Validity
            Not Before: Jun 10 13:06:07 2025 GMT
            Not After : Jun 13 18:48:07 2025 GMT
        Subject: CN=BDD67234E86F5F0C4110B8DFC6FE62C8909B652F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:37:1b:2a:5b:fd:e3:32:ab:69:21:02:b1:
                    59:3a:2a:48:1e:cb:4e:08:84:db:a2:af:5c:13:2c:
                    df:6d:7d:a7:00:ef:ea:aa:54:1f:8e:f8:98:9c:f4:
                    67:8e:87:fa:5c:6a:cb:6b:08:03:1a:4c:73:2a:1d:
                    1c:38:ac:01:3e:92:74:5a:f1:3e:48:e8:d8:32:58:
                    2f:93:d2:54:96:5f:32:8c:fb:d6:69:c6:56:08:01:
                    b8:1e:b5:19:0e:b7:17:16:ed:3b:14:40:f3:c7:40:
                    ba:4e:a0:e5:83:f4:df:93:77:06:28:6c:6a:b2:3c:
                    d0:8c:02:e1:11:44:2e:6d:3a:aa:78:f6:ac:14:9f:
                    39:43:b8:0e:56:aa:2e:b3:dc:1e:67:22:91:2c:82:
                    f8:45:74:9b:6b:7e:09:2d:f0:f2:da:ab:5e:25:d9:
                    ef:e3:41:62:fb:fd:2e:d9:f8:25:8a:c7:74:af:1f:
                    d5:de:47:8c:59:a4:86:70:59:96:32:51:2c:93:f6:
                    96:3f:cf:ac:3f:a3:0d:07:6e:82:81:c1:32:b7:e0:
                    72:0d:fa:99:91:ed:44:ae:9e:7f:a7:31:3d:7a:fa:
                    fd:da:e1:f4:2b:75:91:b2:59:14:d9:e3:d6:86:dd:
                    0c:ad:f9:24:6b:bd:81:99:ae:f6:f7:fe:11:d3:23:
                    a7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D6:72:34:E8:6F:5F:0C:41:10:B8:DF:C6:FE:62:C8:90:9B:65:2F
            X509v3 Authority Key Identifier:
                keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e9:0a:bd:2f:56:b0:b3:9b:ca:6e:5d:55:3a:db:24:3e:b6:
         9f:d0:bb:64:17:9d:12:74:50:3b:16:ff:c9:4b:b6:de:d2:78:
         09:bc:59:f9:99:5b:18:fd:44:7b:4a:a1:0c:37:d3:47:6a:eb:
         18:5d:48:41:7e:68:81:39:85:07:3b:f5:35:0a:97:47:5d:70:
         48:73:69:1b:14:c8:19:95:de:54:bc:1c:db:d8:77:76:51:9d:
         1b:60:62:69:1f:4b:a2:38:b8:dd:d3:6a:24:f9:bc:8a:a1:5b:
         19:d1:a7:4b:56:cd:f7:90:ba:12:ef:a3:ae:71:e2:bf:ea:63:
         3c:b7:91:f4:5d:f3:38:e5:d3:88:5c:f7:6b:cd:de:ed:81:51:
         dd:00:08:60:5b:13:5e:03:6f:70:c6:a4:91:97:91:29:91:56:
         aa:5d:05:a9:7a:0a:c1:f4:a5:3b:12:b4:81:94:08:9a:a0:26:
         f3:07:c7:9e:3d:67:06:b9:a2:b3:ca:f4:fa:42:5d:8a:66:2e:
         83:a0:95:5b:03:98:91:f7:16:d3:38:3f:57:d9:c3:e2:6b:24:
         67:ec:ec:2a:d6:3b:74:48:40:eb:6a:79:2e:3b:68:36:15:c0:
         bb:e1:6e:ac:43:18:19:31:ed:00:d2:a3:88:a0:9d:1d:92:6f:
         88:8b:48:96
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfzAXhHiomEeilGxM8YR/TBiMMIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1
RkM4RTBDNzAeFw0yNTA2MTAxMzA2MDdaFw0yNTA2MTMxODQ4MDdaMDMxMTAvBgNV
BAMTKEJERDY3MjM0RTg2RjVGMEM0MTEwQjhERkM2RkU2MkM4OTA5QjY1MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM3TcbKlv94zKraSECsVk6Kkge
y04IhNuir1wTLN9tfacA7+qqVB+O+Jic9GeOh/pcastrCAMaTHMqHRw4rAE+knRa
8T5I6NgyWC+T0lSWXzKM+9ZpxlYIAbgetRkOtxcW7TsUQPPHQLpOoOWD9N+TdwYo
bGqyPNCMAuERRC5tOqp49qwUnzlDuA5Wqi6z3B5nIpEsgvhFdJtrfgkt8PLaq14l
2e/jQWL7/S7Z+CWKx3SvH9XeR4xZpIZwWZYyUSyT9pY/z6w/ow0HboKBwTK34HIN
+pmR7USunn+nMT16+v3a4fQrdZGyWRTZ49aG3Qyt+SRrvYGZrvb3/hHTI6fHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvdZyNOhvXwxBELjfxv5iyJCbZS8wHwYDVR0j
BBgwFoAUNbWJIk1kFWLQz+IBn3M6ll/I4McwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YWUyZWJkZS02MzExLTQ4OGEtODJiNy05ZDRjMDU1MzA5ODcvMC8zNUI1ODkyMjRE
NjQxNTYyRDBDRkUyMDE5RjczM0E5NjVGQzhFMEM3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1RkM4
RTBDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFlMmViZGUtNjMxMS00ODhhLTgy
YjctOWQ0YzA1NTMwOTg3LzAvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNB
OTY1RkM4RTBDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD7pCr0vVrCzm8puXVU62yQ+tp/Qu2QXnRJ0
UDsW/8lLtt7SeAm8WfmZWxj9RHtKoQw300dq6xhdSEF+aIE5hQc79TUKl0ddcEhz
aRsUyBmV3lS8HNvYd3ZRnRtgYmkfS6I4uN3TaiT5vIqhWxnRp0tWzfeQuhLvo65x
4r/qYzy3kfRd8zjl04hc92vN3u2BUd0ACGBbE14Db3DGpJGXkSmRVqpdBal6CsH0
pTsStIGUCJqgJvMHx549Zwa5orPK9PpCXYpmLoOglVsDmJH3FtM4P1fZw+JrJGfs
7CrWO3RIQOtqeS47aDYVwLvhbqxDGBkx7QDSo4ignR2Sb4iLSJY=
-----END CERTIFICATE-----
Generated at Thu Jun 12 01:39:56 2025 by rpki-client