Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft
File:                     BA0937086D03009DB3422C9809596F09C430C76E.mft (raw, json)
Hash identifier:          kO8/OFQqVxM36zZXtlHgNqrHQGWDwFe10h3odBGLyU0=
Subject key identifier:   51:EB:43:0D:BC:63:AB:91:C1:EA:04:42:C7:32:66:89:04:CC:89:E0
Authority key identifier: BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E
Certificate issuer:       /CN=BA0937086D03009DB3422C9809596F09C430C76E
Certificate serial:       5ECF328E85294BA2C478D551123665929AD21A8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft
Manifest number:          0349
Signing time:             Sat 07 Jun 2025 14:40:49 +0000
Manifest this update:     Sat 07 Jun 2025 14:35:49 +0000
Manifest next update:     Tue 10 Jun 2025 21:04:49 +0000
Files and hashes:         1: 3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (hash: 6wVMqMSXA+uPVRX4j6JWzyD8uZnPZJJ0Jsqrz/zO/Ts=)
                          2: BA0937086D03009DB3422C9809596F09C430C76E.crl (hash: c+q3n37RrL4VD0JBZwY9oWG9JkokuMiOpZ20onRfxAo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl
                          rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 21:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:cf:32:8e:85:29:4b:a2:c4:78:d5:51:12:36:65:92:9a:d2:1a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA0937086D03009DB3422C9809596F09C430C76E
        Validity
            Not Before: Jun  7 14:35:49 2025 GMT
            Not After : Jun 10 21:04:49 2025 GMT
        Subject: CN=51EB430DBC63AB91C1EA0442C732668904CC89E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8b:02:f4:2a:21:94:af:e2:08:45:07:70:ca:
                    92:8b:53:d5:b2:2f:35:4e:b0:04:8f:e2:02:16:52:
                    f4:bc:ca:90:a8:2f:0f:e5:5b:2d:1f:c7:ba:9e:34:
                    f6:e0:a0:7d:ac:6b:ae:5b:90:4f:0c:e1:05:a5:0f:
                    67:2e:5a:6d:89:95:d6:56:80:a0:fb:03:7a:55:61:
                    81:a0:b0:e4:57:cd:72:f3:51:8c:43:7b:54:85:af:
                    b8:c6:a2:ec:71:28:21:93:73:38:db:de:4d:20:8e:
                    d7:63:a2:5a:96:e0:bb:70:b2:47:a5:7d:ac:e2:a1:
                    07:67:3b:f1:f0:c7:b6:06:f1:89:4e:d0:2d:c4:12:
                    de:fd:5c:46:a1:3b:f9:7d:29:c4:b7:56:7e:13:6c:
                    36:86:7e:4d:81:72:45:9b:82:b0:dd:9e:d4:7b:e1:
                    b9:b8:95:db:64:20:73:a3:63:31:84:02:28:bd:52:
                    e7:31:21:59:08:1a:7a:22:f4:ae:fa:57:48:46:b0:
                    07:a9:39:a0:0a:ec:96:02:e0:12:9b:01:a2:53:99:
                    79:86:8a:75:e2:c9:20:87:4a:9a:43:bd:c5:6d:7c:
                    39:52:c9:83:68:55:2e:63:70:cd:8f:6d:d4:54:18:
                    f1:a2:f5:22:39:ca:57:30:c1:36:e9:fb:28:78:5b:
                    09:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EB:43:0D:BC:63:AB:91:C1:EA:04:42:C7:32:66:89:04:CC:89:E0
            X509v3 Authority Key Identifier:
                keyid:BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ea:ab:b7:b7:a5:f5:75:3e:01:c1:04:f8:59:ea:2f:b5:5e:
         23:8b:46:20:cf:30:55:72:04:44:2d:31:f8:a1:11:62:24:eb:
         f9:15:fd:d3:5d:cc:c2:ae:c0:4c:55:4e:5e:cc:a4:75:ff:cd:
         4a:62:47:94:f6:8b:ec:9d:73:4a:c7:70:59:b6:9d:52:ca:e4:
         3b:5b:a2:7f:61:e2:0b:85:b7:09:21:59:48:6f:72:ae:46:73:
         dc:10:f6:7e:6b:c8:49:e4:e4:47:63:52:a4:53:4a:d7:5a:ab:
         a8:82:5f:3b:fd:3b:12:7d:44:44:33:28:8d:ac:1a:3e:b7:ac:
         a3:9d:27:c5:68:70:5f:c0:2e:72:3d:eb:f3:5e:92:61:df:dc:
         6e:c2:94:c1:43:e6:99:9e:ad:54:a6:2e:21:9f:b1:2d:ab:a0:
         da:ad:e3:95:15:d8:b5:7c:88:a7:8e:d9:40:c6:8e:6a:47:c1:
         bb:7d:1d:d8:d9:d4:9f:2c:05:3f:8c:74:00:1d:84:87:ff:4b:
         0c:43:59:ad:0f:c9:21:97:75:37:63:3e:b7:38:0f:ee:ea:97:
         83:59:23:86:48:7a:bd:0d:39:39:66:4e:0c:4b:25:df:1a:a5:
         9b:db:bd:e7:a6:e1:b7:61:2c:97:67:20:75:07:cb:55:39:89:
         e6:1c:e4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:40:42 2025 by rpki-client