Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft
File:                     C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft (raw, json)
Hash identifier:          JqhFkQuche4z47UysFbDAKbJjmcm3d9BBIKSe9bNciQ=
Subject key identifier:   EE:C4:8D:D9:AC:DB:61:5B:9E:35:49:04:90:9D:D8:EF:21:72:62:41
Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A
Certificate issuer:       /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A
Certificate serial:       31D034FE5CC1A5A3F57F64F1E6D13B29DDE51087
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft
Manifest number:          0472
Signing time:             Tue 03 Jun 2025 02:01:36 +0000
Manifest this update:     Tue 03 Jun 2025 01:56:36 +0000
Manifest next update:     Fri 06 Jun 2025 05:38:36 +0000
Files and hashes:         1: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: 3T8MbbOtG2+ZgU9C1xgwAYx2HlDNUDW4JXH7L0pvZ80=)
                          2: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: cfaaVl5RivAI5aEsFEpR96b1yzNXPD55gNZl0+j6JoI=)
                          3: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: c6fpSUbyQdt1ZsHYs9eWhZI0zdnm3cArV6v/GBThWWc=)
                          4: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: g8UPVDpb1m/IFnDlcUZIzOXR04b/PAWmv165hevmi70=)
                          5: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: IQxqj9PY3nbC6wwPV82C6ExLe7/jv0UMpi+DEeQSqxQ=)
                          6: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: N7dD/FSi3TZ7eLd1FkTH81UWI+fs0udUhwSc1vTMSUU=)
                          7: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: CnkVTPyXoN81CXoMBzW6erzeaYjqRdKYOHnGAhWhsKo=)
                          8: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (hash: g0FFTgDxa4Hez+HwVNQ7bFyBpeqsTBamtra1C6gMee0=)
                          9: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (hash: HyCE+wb3o9CDjWwDlbm/esNR5nByEQvKGtR35PJURy0=)
                          10: C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl (hash: cGZy4yUaXsdUcGvJiHCXBvytPhobe+LjDXzQBPjtwmE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl
                          rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 05:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d0:34:fe:5c:c1:a5:a3:f5:7f:64:f1:e6:d1:3b:29:dd:e5:10:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A
        Validity
            Not Before: Jun  3 01:56:36 2025 GMT
            Not After : Jun  6 05:38:36 2025 GMT
        Subject: CN=EEC48DD9ACDB615B9E354904909DD8EF21726241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:05:1d:6e:2f:76:fe:0b:3e:65:c8:10:d1:8f:
                    38:96:52:96:8c:44:4a:e9:51:01:1e:f6:25:e8:7a:
                    13:af:a2:68:01:b6:27:d2:ff:28:3c:af:0a:48:61:
                    70:7a:ea:51:7f:54:aa:2b:4e:d9:45:25:c3:14:2b:
                    1b:b6:4e:01:d1:df:78:a1:8d:36:df:8e:bb:dd:ae:
                    01:12:d6:4e:78:12:b2:cc:ae:06:39:c0:f5:0f:ae:
                    b1:fd:c7:e0:b1:56:3d:32:54:79:2a:f5:8a:31:92:
                    e7:30:11:17:fc:ff:bf:5a:a0:f6:1f:ea:07:96:1e:
                    43:fd:16:57:89:00:23:1c:32:c8:98:cf:fc:66:6b:
                    77:d4:5d:ae:c4:e7:e6:22:6a:2d:51:f0:8a:6c:b0:
                    2d:07:a0:92:3a:f9:65:43:09:60:d6:cf:a9:9f:4e:
                    3f:30:10:10:c4:f4:8f:1c:e2:7a:af:63:38:70:62:
                    94:f3:46:8f:13:26:41:28:da:ed:6e:63:35:60:2b:
                    ec:e5:38:55:58:7c:91:6d:cd:05:06:15:bf:e4:ee:
                    56:bc:cf:93:a0:ae:28:a6:b7:f3:7d:46:40:b6:94:
                    c6:2d:24:45:82:3f:68:1e:b1:ad:8e:08:86:83:40:
                    fb:7b:bb:10:04:48:dd:36:04:c8:87:55:57:bb:aa:
                    e2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C4:8D:D9:AC:DB:61:5B:9E:35:49:04:90:9D:D8:EF:21:72:62:41
            X509v3 Authority Key Identifier:
                keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:61:8b:70:89:f0:93:98:98:5c:e5:2b:33:8e:2a:c3:2f:6d:
         d5:aa:e9:3d:40:af:cb:53:29:4f:d1:ef:9d:b6:17:5e:e1:3d:
         4c:92:48:9b:c5:b2:09:82:51:36:f6:a8:a8:50:06:d2:82:6f:
         a9:7f:82:1f:b2:5a:f5:0c:f2:40:60:fd:da:7f:ac:4b:1c:44:
         09:37:57:d4:7d:08:62:bc:ec:87:ad:d7:5f:8c:3f:8c:e0:e4:
         8e:6a:34:a1:08:03:c0:2d:dc:05:19:28:63:ce:dc:ee:83:77:
         70:77:07:44:19:bb:8f:62:51:a1:eb:0e:7d:92:8e:d1:23:2c:
         98:af:24:f9:79:13:66:6c:f6:2c:1f:87:51:b7:2b:83:a2:b6:
         ea:76:9d:f6:57:92:1a:4f:18:bc:74:ad:80:69:62:76:5e:09:
         89:64:51:b4:2e:a4:89:af:29:7c:4b:66:7f:d6:39:67:f0:2f:
         3f:74:bb:eb:42:3e:b4:af:14:b4:52:a6:ba:8c:9e:de:79:18:
         bf:ab:62:74:be:eb:7a:a5:9a:aa:d6:36:c8:c7:54:66:be:3f:
         c7:44:14:fe:d2:13:8f:89:e2:95:ab:e6:cb:0b:f5:e6:cc:da:
         9d:43:94:62:85:ad:d2:b4:55:78:0a:fa:c8:c7:41:0f:a7:ff:
         50:dc:b5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:42:00 2025 by rpki-client