Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft
File:                     34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json)
Hash identifier:          9mWAnawNd2pVz4q40YDShwLlcg8rAhY90JAQIcAUY78=
Subject key identifier:   80:45:FC:9D:CE:7F:F6:7B:C4:0B:46:B0:71:02:4B:AF:3B:E9:E0:18
Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94
Certificate issuer:       /CN=34D90463B7D23555C6F77AA2464E508E3F913994
Certificate serial:       59635694A7380A88C5178BF3AFA27E9ACD0C8CBA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft
Manifest number:          0249
Signing time:             Mon 02 Jun 2025 23:42:20 +0000
Manifest this update:     Mon 02 Jun 2025 23:37:20 +0000
Manifest next update:     Fri 06 Jun 2025 05:00:20 +0000
Files and hashes:         1: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: 5kFi2Zjm0HSxKxfG0nxq+nY/Xj+QjtSf1kqVqzgY+8E=)
                          2: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: GdVfCQn6dQGq1F9ipshJ09p9fq9k0WWYuyFocuMsy5E=)
                          3: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: s3aYQ8LQ0b3amJyDD6i2ZYI2B6oFeKkC+XfwFx/HBQY=)
                          4: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: VJdGax9PyZJJQCAUTxDuJyOOFRSqv0z4IRxwKrBpSds=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl
                          rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 05:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:63:56:94:a7:38:0a:88:c5:17:8b:f3:af:a2:7e:9a:cd:0c:8c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994
        Validity
            Not Before: Jun  2 23:37:20 2025 GMT
            Not After : Jun  6 05:00:20 2025 GMT
        Subject: CN=8045FC9DCE7FF67BC40B46B071024BAF3BE9E018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:e9:f6:cc:bf:66:83:08:c6:9a:ef:3d:85:
                    97:e2:af:3c:8b:ec:81:1d:a2:25:73:a3:0f:d0:de:
                    cd:de:e3:98:f9:87:31:ec:e3:d9:ed:e0:5f:17:f7:
                    85:16:cf:d1:bf:72:83:cf:8d:8c:60:39:b1:db:83:
                    d9:f5:83:84:f8:e6:6b:31:80:47:da:18:b1:68:54:
                    a5:d1:90:64:5c:6d:ec:9a:c3:d9:74:f4:ea:da:a4:
                    24:e9:74:f2:62:51:6d:c9:5e:ad:56:6a:8f:ac:01:
                    17:0c:85:53:23:09:87:86:fc:ce:5d:9f:13:fa:a9:
                    0a:bc:93:3f:3f:d3:09:ff:dd:10:6b:fe:df:e4:b3:
                    a4:13:b6:21:3e:78:ff:25:44:72:50:d3:17:b5:55:
                    3d:a9:56:08:be:b3:26:e9:42:d3:5e:4e:4b:5a:3a:
                    d9:8b:c0:da:a7:f0:18:d6:3a:b3:ce:88:65:d9:12:
                    6e:f6:85:40:48:f2:7c:c5:32:17:3f:30:bb:24:b6:
                    80:43:20:94:a6:f8:15:5b:a7:cf:75:9b:41:49:c8:
                    22:55:d5:ba:a4:e2:f1:86:f2:b5:c3:2b:ca:c8:25:
                    60:a2:d9:a6:d8:cd:81:85:6d:41:60:6a:9d:59:62:
                    b7:7b:26:75:39:fc:a2:70:30:e7:6e:0c:06:41:ef:
                    74:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:45:FC:9D:CE:7F:F6:7B:C4:0B:46:B0:71:02:4B:AF:3B:E9:E0:18
            X509v3 Authority Key Identifier:
                keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:5b:46:80:5c:27:d3:43:4b:c8:72:7e:e3:26:75:93:d0:bb:
         f0:26:cf:90:28:1f:54:bb:1d:de:8d:ba:fc:a5:51:8b:fb:ca:
         ef:fb:7e:de:40:95:34:75:62:9c:b8:72:49:74:ad:0e:66:52:
         12:f9:6d:a6:7b:6f:e5:a3:6a:e1:bf:a2:81:07:de:ca:76:b2:
         74:18:34:d8:ff:a3:e0:35:18:c7:29:e9:94:15:ee:2e:98:75:
         b5:b7:5b:cf:69:05:0f:57:36:86:ea:ea:3a:cd:31:73:d4:1b:
         0c:64:de:f1:5d:c2:e2:b6:45:48:ab:9e:9c:34:da:6e:03:d4:
         2b:3c:01:fc:4d:dd:2f:cf:a5:eb:9e:97:d0:91:2d:4c:24:d4:
         63:22:4b:43:38:74:a6:f9:9d:0e:35:b8:23:86:84:3d:51:e1:
         3c:10:13:be:84:e6:8e:63:2e:53:54:0f:65:c5:ac:01:42:fe:
         a6:a0:34:bf:2b:cf:af:a7:37:1a:0b:9d:23:31:eb:ce:35:6f:
         d2:8f:22:21:92:95:a5:3f:eb:b2:79:b8:b0:43:c9:10:67:39:
         cf:6b:d4:32:ac:d9:db:9c:0b:15:20:5f:4d:56:a1:f2:7b:8e:
         25:da:57:89:64:db:30:63:ba:68:41:e1:ab:29:a2:63:2a:14:
         44:83:67:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:43:21 2025 by rpki-client