Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
File:                     AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json)
Hash identifier:          BKRXHE2lKi2BBydc9EhfQcLGxod7HgWB09a3DmsDl6A=
Subject key identifier:   D1:E6:43:D9:80:EA:96:4B:B0:62:22:4C:8A:C4:14:98:A5:56:B6:73
Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B
Certificate issuer:       /CN=AA90F6A6378710CD695B4CC742651F235E503C5B
Certificate serial:       18AD4D6443F8BDA7F0209B175E48928D92239360
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
Manifest number:          DF
Signing time:             Sat 05 Apr 2025 14:30:42 +0000
Manifest this update:     Sat 05 Apr 2025 14:25:42 +0000
Manifest next update:     Tue 08 Apr 2025 21:20:42 +0000
Files and hashes:         1: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: YmpzZpg+cWSd+9uJixfrwNPdQ5zM3aLz4TuMuxHWLMU=)
                          2: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: OPDM8RYChk0t8FYQFP/moiyUOkp/lmzahIbcwdlVKZc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl
                          rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ad:4d:64:43:f8:bd:a7:f0:20:9b:17:5e:48:92:8d:92:23:93:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B
        Validity
            Not Before: Apr  5 14:25:42 2025 GMT
            Not After : Apr  8 21:20:42 2025 GMT
        Subject: CN=D1E643D980EA964BB062224C8AC41498A556B673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:88:7b:ab:63:26:56:5a:c2:8a:3a:8f:40:df:
                    74:94:f4:18:b2:dd:dd:c1:5a:81:ac:8c:71:ff:4a:
                    9a:f6:1b:a5:5b:6c:e6:10:15:a3:61:e8:cf:a9:51:
                    c0:02:7e:42:92:ae:e4:7d:82:e5:3d:e8:cd:6c:08:
                    b7:86:3b:dd:04:fd:ed:fb:cf:c7:3b:a1:37:a0:92:
                    96:c5:25:ad:a6:be:a1:f1:f6:95:c7:93:64:ce:cd:
                    07:d0:8a:8d:c8:8e:84:29:f6:d8:5f:eb:23:2a:cb:
                    a1:4c:fb:3b:42:aa:0c:df:67:cf:c7:7b:3a:8d:79:
                    6c:43:2e:06:cf:b8:43:ac:8a:ed:b3:0d:d3:0a:91:
                    8d:f2:7f:cf:41:d0:c7:92:4b:29:33:ec:10:5d:8a:
                    d4:84:27:7c:c2:f5:d6:79:0a:6e:a6:d0:4f:13:fc:
                    b2:f2:51:30:70:b1:72:89:a8:b9:16:1d:27:1c:c7:
                    ac:d9:02:ca:83:96:b9:ed:22:7c:bf:89:98:7d:5b:
                    17:b2:20:ce:83:48:11:78:07:31:60:5d:6c:eb:6c:
                    a4:e4:a6:f0:8e:30:65:8c:73:e5:e0:b6:3f:40:ee:
                    fc:8a:cf:03:ec:85:a5:05:2f:af:42:31:4e:fb:17:
                    23:58:f7:8b:21:a9:5a:f6:88:50:3c:17:a6:8d:09:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E6:43:D9:80:EA:96:4B:B0:62:22:4C:8A:C4:14:98:A5:56:B6:73
            X509v3 Authority Key Identifier:
                keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:79:96:b8:8d:51:c2:c9:ae:10:8b:07:78:db:69:ff:98:f8:
         03:39:50:79:b0:f2:bd:0d:34:59:18:15:3f:fe:3e:ba:e4:1d:
         60:e8:d2:ff:81:f4:bc:f3:07:f4:b6:2a:77:53:01:a3:3a:f8:
         7b:2c:28:b6:65:40:72:3d:00:54:07:06:6e:ec:2b:5d:b3:47:
         63:c9:4f:6e:c8:1e:23:aa:76:ff:f7:ab:a7:bf:bc:72:8f:72:
         78:0b:d0:05:b0:d3:96:e5:d9:d9:aa:55:de:a6:43:02:c7:b9:
         13:e8:9b:18:78:54:99:8c:f7:58:43:fd:ed:dc:56:73:08:3c:
         51:e6:88:35:b0:7f:da:18:94:10:44:44:5b:66:03:74:42:49:
         db:f1:ab:04:43:a4:5c:80:c9:71:6a:53:18:ec:22:a6:30:81:
         3d:e5:33:7e:37:8e:89:7a:e3:b5:1c:86:2a:bb:8f:32:e6:4c:
         08:0a:fa:68:29:53:ca:cd:0d:7f:93:92:d5:cb:a9:8f:35:16:
         cc:65:21:04:69:93:5b:73:61:e3:a4:b5:c3:0e:54:fc:7d:55:
         75:1e:a8:c6:eb:e4:a3:2f:67:0f:53:77:fb:a1:46:64:08:c7:
         d3:be:ca:77:0a:d9:02:45:dd:ad:8d:58:c3:b4:8c:2e:4e:6d:
         5e:a5:ec:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:19 2025 by rpki-client