Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft
File:                     0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft (raw, json)
Hash identifier:          xm7iY+PRoEznJYJN1ECZsO3FrDOW2oMvfIJCRKSF1tA=
Subject key identifier:   74:E1:DD:F8:FF:9B:90:FA:C7:07:9D:C2:FE:D5:B0:6E:FF:FA:63:7D
Authority key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F
Certificate issuer:       /CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F
Certificate serial:       595E6ABFE87013455FF88E1BB8D690ECA5FA9830
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft
Manifest number:          3D
Signing time:             Sat 19 Apr 2025 01:01:10 +0000
Manifest this update:     Sat 19 Apr 2025 00:56:10 +0000
Manifest next update:     Tue 22 Apr 2025 03:06:10 +0000
Files and hashes:         1: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl (hash: zaiIWeUCYBFnv3IhDKdGM38vMwWG9X9ZY9xjIdjVBsQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl
                          rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Apr 2025 03:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5e:6a:bf:e8:70:13:45:5f:f8:8e:1b:b8:d6:90:ec:a5:fa:98:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F
        Validity
            Not Before: Apr 19 00:56:10 2025 GMT
            Not After : Apr 22 03:06:10 2025 GMT
        Subject: CN=74E1DDF8FF9B90FAC7079DC2FED5B06EFFFA637D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:6c:77:cc:ba:ce:3f:06:6f:4e:60:42:8e:49:
                    ef:dc:8d:c4:23:e3:64:27:de:6e:31:dd:ff:c9:c3:
                    97:05:bb:8e:7f:48:a3:04:a8:9e:f6:bd:77:2d:b7:
                    46:fc:b3:fb:d1:b0:d5:ec:04:4d:35:f2:d3:a0:57:
                    19:6d:19:9f:3f:98:ae:09:9f:d6:8b:65:2f:fc:92:
                    fa:78:62:8f:f2:80:0e:55:03:d4:14:ed:9d:29:e2:
                    ca:fc:23:84:f3:f7:83:e7:09:d7:2b:19:09:8c:fd:
                    a3:8e:5a:2e:e0:13:d2:e1:02:67:ce:7f:ef:46:f9:
                    c1:76:f9:09:4d:b8:53:2f:29:56:55:13:4c:14:2b:
                    f9:f1:85:98:bf:5d:22:82:58:2c:a1:5e:09:e8:f1:
                    5b:10:ad:b0:7c:fd:8b:a3:b0:35:6b:88:b7:49:5f:
                    f4:cf:68:59:ed:fa:cb:86:25:4e:a2:36:cc:02:de:
                    c9:72:15:38:4a:da:da:0f:50:38:b9:a0:0b:70:19:
                    5e:fb:2b:00:b7:82:b3:86:6d:e6:25:35:18:a1:6a:
                    fb:ae:1a:18:fc:ff:2a:43:6e:33:76:ba:2a:eb:21:
                    c7:09:43:75:4c:ef:ee:3e:b2:17:a4:5f:0e:e6:f5:
                    90:7f:5c:3d:77:b5:4d:f2:40:0c:3e:06:93:98:34:
                    fe:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E1:DD:F8:FF:9B:90:FA:C7:07:9D:C2:FE:D5:B0:6E:FF:FA:63:7D
            X509v3 Authority Key Identifier:
                keyid:0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:69:43:91:19:98:26:b0:00:e7:06:45:75:21:73:59:dc:b2:
         1a:8c:90:c7:c3:01:74:88:69:fa:6d:57:23:48:8a:45:0e:b7:
         13:92:13:5a:c6:8d:1f:4a:87:89:34:b4:89:80:90:9d:b6:77:
         c2:5f:0e:bf:83:5d:a9:9a:26:49:f1:ab:e6:de:ce:a5:8f:9c:
         ac:7a:b2:21:a1:11:65:c5:cd:cf:d9:5c:d3:bb:7c:13:3a:07:
         7e:ee:88:79:ff:41:33:da:86:90:5e:fa:22:34:48:42:11:db:
         9f:29:fd:07:d4:2e:b1:46:72:28:00:95:e4:eb:8c:a8:21:73:
         25:6d:e0:04:e1:c1:fe:14:38:70:e9:b1:9f:b7:41:c4:02:db:
         21:da:05:07:d5:95:58:06:75:47:e8:f5:59:f2:56:af:e5:b6:
         a3:1d:9f:24:80:5f:87:6a:2c:54:7c:d8:54:29:5e:38:63:ef:
         e9:b2:85:65:33:ad:c8:37:4d:84:6e:7e:af:b3:3e:e2:88:2c:
         38:43:11:9d:0d:40:68:74:b0:fe:ed:76:af:65:41:55:9f:5a:
         45:b0:9c:27:a9:a9:05:3b:ef:27:00:fe:8f:85:dc:92:6a:cf:
         8b:69:37:7c:7c:c1:a7:10:83:0e:b9:91:88:0d:f9:32:32:f6:
         48:f2:1a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:14 2025 by rpki-client