Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft
File:                     2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json)
Hash identifier:          4q8XlmVpyLmvC4mc/RCJCAOY8OwZnRLpHa4Ckfz+b34=
Subject key identifier:   96:9B:45:AE:0E:8B:C0:78:27:81:0C:83:19:03:B1:5B:16:FF:36:FA
Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA
Certificate issuer:       /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA
Certificate serial:       66C89AB9621587231D72DF90C488E52C71247D6B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft
Manifest number:          DD
Signing time:             Wed 04 Jun 2025 20:31:27 +0000
Manifest this update:     Wed 04 Jun 2025 20:26:27 +0000
Manifest next update:     Sun 08 Jun 2025 05:06:27 +0000
Files and hashes:         1: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: w0DavnkQwGzXsqVFiqjD0W9D+D/G2QfwPlnaof56nfI=)
                          2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: X5jcqVTllqsiihg+7l6qTb+EAVnsgGJI9/U4b928wFE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl
                          rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 05:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c8:9a:b9:62:15:87:23:1d:72:df:90:c4:88:e5:2c:71:24:7d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA
        Validity
            Not Before: Jun  4 20:26:27 2025 GMT
            Not After : Jun  8 05:06:27 2025 GMT
        Subject: CN=969B45AE0E8BC07827810C831903B15B16FF36FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:95:06:6e:0c:05:a4:61:fe:14:88:c1:3c:8a:
                    a6:95:64:5c:2f:5d:17:d3:4c:03:25:91:f4:17:96:
                    34:0b:48:d7:1d:0d:3d:3b:58:16:7f:f8:08:77:ee:
                    53:d2:53:5d:a9:9d:39:4e:6c:98:c3:07:52:20:ab:
                    74:bd:31:ac:41:66:eb:23:8c:79:1b:56:49:ee:6e:
                    c4:b9:43:62:fc:9d:27:69:d2:38:b5:51:28:8b:8b:
                    6d:ef:35:8a:58:39:45:d2:d2:b4:4a:b1:df:50:2b:
                    a2:e5:2f:a3:a1:48:c9:5a:30:24:f3:94:ac:46:3b:
                    04:1f:5b:4f:70:7e:09:14:76:93:ba:88:06:80:22:
                    dc:ba:d3:0e:1e:92:ce:42:ef:dd:8f:82:eb:09:e2:
                    f6:69:42:fa:66:b9:cd:6b:a6:9d:1b:9f:8b:cc:7d:
                    77:c2:36:bf:9b:b9:41:60:d1:f4:a4:a6:bc:95:d3:
                    c5:f8:86:ea:08:44:7f:71:16:89:44:fe:c4:4d:46:
                    49:fd:5c:bb:5c:ab:f7:ca:35:cd:56:de:d7:aa:2c:
                    30:76:11:2a:52:39:ab:fe:98:9d:50:5d:94:0c:fe:
                    72:32:1b:98:b3:d4:7a:94:b7:fc:53:f3:e4:85:df:
                    66:e6:60:f4:40:6e:1d:aa:34:a4:9a:df:a0:39:56:
                    42:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9B:45:AE:0E:8B:C0:78:27:81:0C:83:19:03:B1:5B:16:FF:36:FA
            X509v3 Authority Key Identifier:
                keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:89:5a:fe:1f:d8:16:bb:bf:3d:56:27:98:18:a4:f6:dc:4f:
         5c:31:44:0a:a1:ee:88:3a:0d:3d:1f:4e:53:2e:7f:bb:e2:58:
         e5:a6:05:0e:c4:a4:16:74:0c:83:f5:27:02:6e:98:0c:75:6e:
         3e:ab:67:13:0f:f8:ab:8f:a9:6e:63:bb:ac:0d:b0:a2:cc:00:
         f1:4f:6b:14:6e:26:4b:6d:94:f7:aa:24:43:ac:8f:a9:31:87:
         7f:e0:e2:ae:15:42:c2:b5:52:b5:9a:f6:fe:f5:df:71:c9:c8:
         c4:13:88:6e:2b:e5:c7:bb:4f:f5:23:44:df:a8:b7:be:c2:f9:
         40:71:ae:47:ee:70:f4:48:c4:7e:ca:e9:e4:d7:2f:a6:54:c1:
         74:d8:58:a4:41:66:c0:5d:3b:6f:36:6c:2d:51:eb:5d:9b:80:
         5b:42:f5:cf:c6:89:08:bc:20:aa:29:0a:b8:90:27:37:e7:4c:
         06:91:37:ac:47:85:8a:69:6c:07:5d:9e:57:bc:05:de:66:a7:
         a0:be:ec:d6:f0:6e:cb:20:f8:98:03:d7:11:66:cc:35:79:d4:
         71:95:33:22:5c:f7:d9:3e:0a:50:71:ed:5c:36:d2:5c:04:07:
         02:8d:e2:7a:2d:71:4d:6b:08:13:2d:ea:13:89:da:d5:dc:34:
         63:b5:7b:b6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZsiauWIVhyMdct+QxIjlLHEkfWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz
OTQxQjdCQTAeFw0yNTA2MDQyMDI2MjdaFw0yNTA2MDgwNTA2MjdaMDMxMTAvBgNV
BAMTKDk2OUI0NUFFMEU4QkMwNzgyNzgxMEM4MzE5MDNCMTVCMTZGRjM2RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDllQZuDAWkYf4UiME8iqaVZFwv
XRfTTAMlkfQXljQLSNcdDT07WBZ/+Ah37lPSU12pnTlObJjDB1Igq3S9MaxBZusj
jHkbVknubsS5Q2L8nSdp0ji1USiLi23vNYpYOUXS0rRKsd9QK6LlL6OhSMlaMCTz
lKxGOwQfW09wfgkUdpO6iAaAIty60w4eks5C792PgusJ4vZpQvpmuc1rpp0bn4vM
fXfCNr+buUFg0fSkpryV08X4huoIRH9xFolE/sRNRkn9XLtcq/fKNc1W3teqLDB2
ESpSOav+mJ1QXZQM/nIyG5iz1HqUt/xT8+SF32bmYPRAbh2qNKSa36A5VkJRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlptFrg6LwHgngQyDGQOxWxb/NvowHwYDVR0j
BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4
MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx
QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz
YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG
RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEeJWv4f2Ba7vz1WJ5gYpPbcT1wxRAqh7og6
DT0fTlMuf7viWOWmBQ7EpBZ0DIP1JwJumAx1bj6rZxMP+KuPqW5ju6wNsKLMAPFP
axRuJkttlPeqJEOsj6kxh3/g4q4VQsK1UrWa9v7133HJyMQTiG4r5ce7T/UjRN+o
t77C+UBxrkfucPRIxH7K6eTXL6ZUwXTYWKRBZsBdO282bC1R612bgFtC9c/GiQi8
IKopCriQJzfnTAaRN6xHhYppbAddnle8Bd5mp6C+7Nbwbssg+JgD1xFmzDV51HGV
MyJc99k+ClBx7Vw20lwEBwKN4notcU1rCBMt6hOJ2tXcNGO1e7Y=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:01:39 2025 by rpki-client