Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
File:                     FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft (raw, json)
Hash identifier:          6+WED5oSvdQAORpGBhWmhoykUg9q0+C7NMkNn5JPDNY=
Subject key identifier:   09:73:F0:C3:26:7A:13:CE:01:F4:2E:71:DB:FF:1A:CE:F8:24:88:6C
Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26
Certificate issuer:       /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426
Certificate serial:       51315061784671814B7468BACAC55214603914A0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
Manifest number:          AB
Signing time:             Sat 07 Jun 2025 11:20:49 +0000
Manifest this update:     Sat 07 Jun 2025 11:15:49 +0000
Manifest next update:     Tue 10 Jun 2025 17:03:49 +0000
Files and hashes:         1: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: 3ZS5/0NJnXKv4Pk0J4oSOH1r1VKtA3mh1qb3WAlsXUw=)
                          2: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl (hash: uDKcNVfPqp/c6TWoB2GnoBXHI3h0xfTvtKAHW8S+g8E=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl
                          rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 06:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:31:50:61:78:46:71:81:4b:74:68:ba:ca:c5:52:14:60:39:14:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426
        Validity
            Not Before: Jun  7 11:15:49 2025 GMT
            Not After : Jun 10 17:03:49 2025 GMT
        Subject: CN=0973F0C3267A13CE01F42E71DBFF1ACEF824886C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:18:43:8c:46:47:1b:7f:db:4d:38:9c:ee:
                    2c:ec:23:0d:d6:a1:6b:46:4f:b1:ce:28:d4:ab:dd:
                    d9:68:4e:a4:5a:7f:40:c2:e2:37:61:3b:20:15:c2:
                    d2:5c:8b:3e:6b:9d:a5:a0:ce:c6:dc:a5:87:c6:3c:
                    80:b5:17:6f:98:36:81:7a:01:a8:97:e6:1d:86:56:
                    01:bf:4f:37:73:e6:00:56:99:55:e9:fb:d9:4e:46:
                    6e:4c:97:72:33:b8:c3:1f:c2:5e:c0:58:d6:9c:b1:
                    13:df:d1:ea:0e:67:ab:be:83:78:c4:2a:89:64:10:
                    6c:20:78:ad:b3:d4:99:6d:1b:74:aa:7e:5c:e7:3e:
                    4e:84:44:ca:dd:c3:c2:77:03:a3:f9:35:f8:5c:63:
                    78:d5:d8:c9:8d:93:76:fc:07:95:21:78:90:02:ee:
                    92:ec:4f:c2:06:74:b5:f3:50:cf:60:b0:31:19:b0:
                    97:62:04:a4:d7:1a:3c:d0:4b:f5:60:9d:83:8c:a6:
                    fa:0a:ae:be:26:fa:68:a0:29:be:34:30:39:f3:72:
                    d7:1f:19:6a:4a:78:4d:90:be:f5:8a:36:33:90:90:
                    a9:3d:f4:55:2e:1d:8f:bd:59:65:3e:e7:ad:68:e4:
                    9c:f5:aa:e1:9a:39:75:0b:81:5b:0b:59:cd:f7:78:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:73:F0:C3:26:7A:13:CE:01:F4:2E:71:DB:FF:1A:CE:F8:24:88:6C
            X509v3 Authority Key Identifier:
                keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:fc:8f:bc:c9:cb:7a:39:54:08:55:1d:41:f6:68:c6:0c:7d:
         58:a2:df:da:f0:60:ee:ea:32:ac:48:7a:4e:27:d6:b1:35:91:
         a9:48:a4:b6:5c:f7:1a:27:84:e4:06:03:e5:77:fe:01:f1:96:
         ff:35:02:e8:f9:ba:16:99:56:e6:14:46:50:78:79:8f:f3:cf:
         db:6e:d6:bd:a9:9f:50:b6:a1:71:a5:3f:ee:ae:19:36:97:e2:
         71:22:05:23:9a:55:6a:b7:55:11:f6:dd:35:fa:7f:0a:e2:73:
         78:6f:66:01:b8:92:ef:ad:8f:7c:96:d3:1a:40:87:03:76:5f:
         d7:2e:45:7e:6a:a0:ad:ef:24:70:dd:68:be:82:27:f1:58:c2:
         37:26:81:23:ba:c7:c5:92:ce:26:18:a0:f0:f2:04:b3:ff:9c:
         82:0e:4f:06:34:f9:fc:cd:93:1d:f7:5b:bb:d9:67:8b:d4:6a:
         33:5c:70:70:59:98:95:b2:6f:a9:7a:ec:58:f4:bb:d1:f8:35:
         00:70:4c:40:3b:8a:de:4d:0c:1d:8a:a4:cc:d8:7a:9f:2e:ee:
         62:df:9d:0c:e5:3e:7e:27:0e:3e:a5:33:41:a2:40:33:3b:e0:
         c2:08:e1:e3:9d:f1:6a:67:8a:ea:05:7d:18:ff:bd:e1:77:38:
         da:2f:bb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:31:00 2025 by rpki-client