Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft
File:                     2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json)
Hash identifier:          6t/LB1M5SuvxDVH4rxY/BOb4nd3pFwxvA+epFs9tSos=
Subject key identifier:   35:58:58:94:C3:53:F0:B8:8E:4D:EA:B0:88:66:D1:90:57:2A:82:7B
Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9
Certificate issuer:       /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9
Certificate serial:       12AD1C3340E674F576955E58CA414C6ED6EBEEC0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft
Manifest number:          17
Signing time:             Thu 21 Nov 2024 01:50:39 +0000
Manifest this update:     Thu 21 Nov 2024 01:45:39 +0000
Manifest next update:     Sun 24 Nov 2024 09:01:39 +0000
Files and hashes:         1: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: OciTRaV2C31FilczLAWvlWOOLcWTGVmd3g3fetGDN8Y=)
                          2: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: XYd4TM415FZiT+VMqeRn5qiiGs/k8v3hun7rqS4FUgM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl
                          rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ad:1c:33:40:e6:74:f5:76:95:5e:58:ca:41:4c:6e:d6:eb:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9
        Validity
            Not Before: Nov 21 01:45:39 2024 GMT
            Not After : Nov 24 09:01:39 2024 GMT
        Subject: CN=35585894C353F0B88E4DEAB08866D190572A827B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:18:68:a8:db:c5:20:2f:fb:68:d3:8b:d0:f9:
                    31:06:c9:a5:80:e4:c0:93:08:ba:2a:f1:0d:f8:70:
                    75:f5:e3:e9:36:5e:f2:62:6f:89:eb:52:97:52:ce:
                    ea:4c:b4:d3:6f:ec:53:d7:1b:7f:0a:a6:53:cc:dc:
                    56:7d:16:e8:99:14:aa:19:66:5e:df:91:14:cf:ea:
                    26:5a:1b:1c:8c:d7:7f:f1:8d:6d:cf:c1:e7:02:3b:
                    8c:cd:12:b5:d4:13:f3:b8:c0:c0:cc:b2:94:43:cf:
                    d2:05:fe:be:3b:11:cd:3f:5f:1b:a9:5e:81:0a:72:
                    b0:32:0e:1e:4e:de:ff:cb:a8:a2:ae:32:28:27:f3:
                    2b:49:a2:02:e5:7f:04:1a:2c:74:5b:2f:36:51:c3:
                    7e:51:a6:c2:81:20:16:f3:1f:d2:1c:fa:1f:d2:ec:
                    28:10:22:22:96:45:c1:fc:5c:62:00:62:3c:5c:44:
                    f8:84:8b:71:3a:b2:e3:4e:7c:38:75:37:24:11:03:
                    db:a9:a6:6b:d1:a9:f6:a0:c0:f8:f9:44:fd:ef:89:
                    ec:77:48:8a:50:f0:f2:26:90:a2:d7:07:09:a0:d9:
                    cb:1f:65:bc:b3:1d:88:94:4c:83:13:06:c7:8a:04:
                    04:06:81:78:16:f4:2e:2b:76:60:0c:de:3b:5e:b4:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:58:58:94:C3:53:F0:B8:8E:4D:EA:B0:88:66:D1:90:57:2A:82:7B
            X509v3 Authority Key Identifier:
                keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2f:c3:64:a5:c1:33:1d:4e:25:a2:2f:50:14:18:0f:38:38:
         0b:a2:43:4a:ba:89:ff:a5:2f:fa:dd:32:9c:bf:17:60:fa:33:
         da:88:b4:c1:8e:2b:d8:60:4b:ab:44:19:13:34:33:3e:0b:5e:
         07:8e:93:49:51:e5:9f:8c:b0:5e:e2:a9:29:b9:ac:8f:b6:4f:
         56:b9:b7:d5:a6:b2:8f:71:e3:98:07:bb:df:9a:16:dd:61:39:
         d0:8e:ac:cf:f9:68:55:dd:54:b7:01:1a:28:1c:06:99:63:c3:
         b7:f3:f4:30:d8:19:3f:18:50:a9:23:de:a6:43:fe:1b:19:47:
         e5:27:88:1d:ed:39:8a:3e:fc:51:49:14:70:85:85:08:0d:02:
         04:3d:3a:93:ed:31:3b:d9:92:e3:bb:21:1b:12:1e:06:b9:c5:
         83:8b:4c:d8:6b:67:a3:55:b9:fc:f6:f1:c7:b4:99:34:1a:9d:
         00:93:6a:28:eb:1b:24:77:92:b9:22:4c:57:cf:26:01:b3:42:
         0a:3f:0f:d9:8c:c2:d4:20:f2:ee:46:2b:94:2c:3c:c4:9c:45:
         25:ff:9a:5e:45:51:fc:28:15:7b:22:7d:61:81:ea:66:8e:eb:
         2f:45:91:86:96:29:3d:1d:bb:61:45:e9:9e:78:e5:78:71:5d:
         66:b7:6b:9c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEq0cM0DmdPV2lV5YykFMbtbr7sAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB
REREMURFOTAeFw0yNDExMjEwMTQ1MzlaFw0yNDExMjQwOTAxMzlaMDMxMTAvBgNV
BAMTKDM1NTg1ODk0QzM1M0YwQjg4RTRERUFCMDg4NjZEMTkwNTcyQTgyN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGGio28UgL/to04vQ+TEGyaWA
5MCTCLoq8Q34cHX14+k2XvJib4nrUpdSzupMtNNv7FPXG38KplPM3FZ9FuiZFKoZ
Zl7fkRTP6iZaGxyM13/xjW3PwecCO4zNErXUE/O4wMDMspRDz9IF/r47Ec0/Xxup
XoEKcrAyDh5O3v/LqKKuMign8ytJogLlfwQaLHRbLzZRw35RpsKBIBbzH9Ic+h/S
7CgQIiKWRcH8XGIAYjxcRPiEi3E6suNOfDh1NyQRA9uppmvRqfagwPj5RP3viex3
SIpQ8PImkKLXBwmg2csfZbyzHYiUTIMTBseKBAQGgXgW9C4rdmAM3jtetKDfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNVhYlMNT8LiOTeqwiGbRkFcqgnswHwYDVR0j
BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0
NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE
MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx
ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz
M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH0vw2SlwTMdTiWiL1AUGA84OAuiQ0q6if+l
L/rdMpy/F2D6M9qItMGOK9hgS6tEGRM0Mz4LXgeOk0lR5Z+MsF7iqSm5rI+2T1a5
t9Wmso9x45gHu9+aFt1hOdCOrM/5aFXdVLcBGigcBpljw7fz9DDYGT8YUKkj3qZD
/hsZR+UniB3tOYo+/FFJFHCFhQgNAgQ9OpPtMTvZkuO7IRsSHga5xYOLTNhrZ6NV
ufz28ce0mTQanQCTaijrGyR3krkiTFfPJgGzQgo/D9mMwtQg8u5GK5QsPMScRSX/
ml5FUfwoFXsifWGB6maO6y9FkYaWKT0du2FF6Z545XhxXWa3a5w=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:40 2024 by rpki-client on console-fra.rpki-client.org